SAP security note 2184221, "Switchable Authorization Checks for Year-End Closing Transactions". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
This SAP Security Note introduces new switchable authorization checks for year-end closing transactions within the Funds Management (FM) module. These enhancements aim to provide finer authorization controls, ensuring that individual end users with concurrent responsibilities have appropriate access without compromising centralized processes.
Solution
New switchable authorization checks have been implemented to enhance security during year-end closing transactions. These checks are initially inactive to maintain compatibility with existing processes and can be activated manually via transaction SACF. The activation process requires creating a new customizable message and following specific steps outlined below.
References
Affected components
- Software Component: PSM-FM-CL (Public Sector Management > Funds Management > Closing Operations)
- Applicable Releases: EA-PS versions 600 through 617
Full note on SAP: SAP Support Launchpad note 2184221
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
