Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP BP Authorization check with F4 help, SAP security note 545334

Description

You want the system to consider your authorization to maintain and display only certain business partner master records in the dialog with the F4 helps for the business partner as well.
Therefore, you only want to be provided master records in the selection list when you are searching a certain business partner which you may process according to your maintained authorizations.
You want this function to be available with F4 helps for the business partner field as well as with the locator search help in the business partner maintenance (Transaction BP) and in the search for business partners in the CIC (here via BAPI BAPI_BUPA_SEARCH).

Available fix and Supported packages

  • SAP_ABA | 50A | 50A
  • SAP_ABA | 620 | 620
  • SAP_ABA 50A | SAPKA50A24 |
  • SAP_ABA 620 | SAPKA62009 |

Affected component

    AP-MD-BP
    Business Partner

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/545334

TAGS

#BP_DIALOG

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.