SCM Security Check Missing Authority Check, SAP security note 1429098

SAP security note 1429098, "SCM Security Check: Missing Authority Check", is a note. Below are the symptom and SAP recommended solution.

Description

Symptom

This SAP Note has already been released as a normal SAP Note that is not a Security Note. No further activities are required if you have already implemented this SAP Note.

Unauthorized access to transactions is possible.

Solution

Implement the correction instruction or import the relevant support pack.

Reason and prerequisites

Authorization check is missing before calling transactions. Manual activities are required before applying the correction instruction or support pack.

References

• 1525296 – Missing authorization checks in /SAPAPO/START
• 1515699 – Missing authorization check at call transaction //rrp4/5