Switchable authorization checks for RFC in LE-WM, SAP security note 2058934

SAP security note 2058934, "Switchable Authorization Checks for RFC in LE-WM", is a note. Below is the SAP recommended solution.

Description

Solution

New authorization scenarios, LE_WMS_DEC_CEN_CHECK and LE_WM_IDOCMON_RFC, have been implemented to provide granular authorization checks for RFC function modules in LE-WM (Warehouse Management). The checks are delivered inactive to maintain compatibility and can be activated manually using transaction SACF.

• Upload the scenario definitions via transaction SACF_TRANSFER and assign them to the development package LVS.
• Convert the scenario definitions into productive authorization scenarios in transaction SACF, setting the initial status to Active or Logging.
• Activate the Security Audit Log via transaction SM19 and configure relevant audit message filters.
• Update user roles to include the new authorization objects; use report RSAU_SELECT_EVENTS to identify users needing additional authorizations.