DBA Cockpit Missing authorizations during administration of jobs and scripts, SAP security note 2067630

SAP security note 2067630, "DBA Cockpit: Missing authorizations during administration of jobs and scripts", is a program error note released on 12.05.2015. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

In the DBA Cockpit infrastructure, there are function modules for processing jobs and scripts that execute no authorization check.

Solution

For the processing functions, a check for the authorization object S_RZL_ADM is implemented. The change is introduced via Support Package.

For an advance correction, implement the correction instructions.

Reason and prerequisites

Missing authorization check.

CVSS

Score 0

References

• SAP Note 1088961 – DBA Cockpit: Incorrect deletion of periodic scheduling
• SAP Note 1088211 – DBACOCKPIT: Error when editing planned actions
• SAP Note 1842625 – DBA Cockpit: Double job scheduling after changes
• SAP Note 1898449 – DBA Cockpit: Job scheduling parameters are lost
• SAP Note 1576094 – DB6: Database error SQL1751N in partitioning wizard
• SAP Note 1615586 – SYB: DB13 jobs disappear after execution
• SAP Note 1861412 – DBA: Deletion of selected job occurrence fails
• SAP Note 1949919 – DBA Cockpit: Error when deleting a job

Affected components

• SAP_BASIS (700 to 740)