PFO Authority check for business object, SAP security note 1498913

SAP security note 1498913, "PFO : Authority check for business object". Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

Missing authorization check in PFO_RFC_FREE_SELECTION

Solution

Implement the correction instructions provided in SAP Note 1498913.

Reason and prerequisites

Object E_PFO_OBJ, in PFO_RFC_FREE_SELECTION lacks permission checks for an authenticated user’s authorization to access some of its functionality. This may result in undesired system behavior.

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• Financial Services > Commissions Management for Insurance Industry (FS-ICM)