SAP Note 1310174
SAP security note 1310174, “Authority check missing”, is a note. Below are the symptom, SAP recommended solution and reason and prerequisites.
Description
Symptom
In the list of locked appraisal documents or locked offline appraisal documents, the administrator is able to see the lock entries of documents for which they have no authorization.
Solution
To correct this issue, please apply the attached correction instruction or import the relevant support package.
Reason and prerequisites
Program error.
References
- SAP Note 888889 – Automatic checks for security notes using RSECNOTE (outdated)
Full note on SAP: SAP Support Launchpad note 1310174
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].