Switchable authorization checks for RFC in CRM-MW-MON, SAP security note 2266967

SAP security note 2266967, "Switchable Authorization Checks for RFC in CRM-MW-MON". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Remote Function Calls (RFC) to certain function modules may not have sufficient authorization checks, potentially allowing unauthorized access or actions within the CRM-MW-MON component.

Solution

Implement the new switchable authorization checks as outlined in the note.

• Navigate to transaction SACF; check if the scenario definition CRM_MW_GAS exists, and if not, download and upload the CRM_MW_GAS.TXT file from the attachments
• Create a productive authorization scenario from the scenario definition and choose the appropriate scenario status, Active or Logging, to activate the checks
• Review and update user roles to include the necessary authorizations based on the new checks, using reports such as RSAU_SELECT_EVENTS to identify users requiring additional authorizations
• Refer to SAP Note 1922808 for more details on the switchable authorization check framework (SACF)

References

• SAP Note 2008727 – RFC Security
• SAP Note 2266967 – Switchable Authorization Checks for RFC in CRM-MW-MON

Affected components

• CRM-MW-MON 700, 701, 702, 712, 713, 714