Switchable authorization checks for RFC in CRM-Travel&Transportation-Electronic Toll Collection-Business Transaction, SAP security note 2258027

SAP security note 2258027, "Switchable Authorization Checks for RFC in CRM-Travel & Transportation-Electronic Toll Collection", is a note released on October 11, 2016. Below are the SAP recommended solution.

Description

Solution

SAP Security Note 2258027 introduces new switchable authorization checks for RFC (Remote Function Call) function modules within the CRM-Travel & Transportation-Electronic Toll Collection-Business Transaction component. These checks enhance system security by ensuring that only authorized users can execute specific RFC function modules.

New authorization scenario CRM_TC_XIF: Electronic Toll Collection XIF RFC authority used in Electronic Toll Collection XI integration. Affected RFC function modules:

• CRMXIF_TC_CONT_REQ_SAVE – Auth. Object CRM_ORD_PR
• CRMXIF_TC_CONT_CON_SAVE – Auth. Object CRM_ORD_PR

Technical implementation is pre-implemented via support package or correction instructions. Use transaction SACF to activate the checks, following the detailed steps provided in the manual correction instructions within the note.

References

• 2236076 – Architectural change to avoid syntax errors when calling CL_RFC=>CHECK_EXTERNAL and CL_SACF=>AUTH_CHECK_SPEC