Removal of Hidden menus and Developer mode in ESR, SAP security note 1711728

SAP security note 1711728, “Removal of Hidden Menus and Developer Mode in ESR”, is a note. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Users could enable Developer mode in ESR or Directory, exposing hidden menus intended for developers within the message mapping editor.

Solution

• Developer mode has been disabled in ESR and Directory swing clients.
• Internal developer features, such as Debug mode, XIItem context menu, F2 Feature, Error log details, and Import/Export options for Mappings, are now inaccessible.
• Various menu options and commands that were previously available to developers are now disabled to enhance security.

Reason and prerequisites

Shipping non-documented features is considered a security violation and does not adhere to best practices.

Affected components

• SAP_XIESR versions 7.10 to 7.31
• SAP_XITOOL versions 7.00 to 7.31
• SAP_XIGUILIB versions 7.20 to 7.31