SAP Security Note
Low priority
SAP security note 1115700, "CO-OM Tools: SE16N: Authorization logic", is a consulting note released on 08.10.2009. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
You want more information about the authorization checks within transaction SE16N.
Solution
The functions in SE16N are protected with the same authorizations as the relevant functions in SE16.
The special function &SAP_EDIT is protected in the system by the developer authorization, which is the highest authorization to be assigned. In addition, all changes to table contents are updated in separate change document tables to ensure continuous documentation of all changes.
You can also implement Notes 503274 and 597117 to specify a display transaction only, which does not allow any changes to tables.
CVSS
Score 0
References
This note refers to
Affected components
- SAP_APPL 46C
- SAP_APPL 470
- SAP_APPL 500
- SAP_APPL 600
- SAP_APPL 602
- SAP_APPL 603
Full note on SAP: SAP Support Launchpad note 1115700
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].