Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

SAP BP Authorization check with F4 help, SAP security note 545334

Description

You want the system to consider your authorization to maintain and display only certain business partner master records in the dialog with the F4 helps for the business partner as well.
Therefore, you only want to be provided master records in the selection list when you are searching a certain business partner which you may process according to your maintained authorizations.
You want this function to be available with F4 helps for the business partner field as well as with the locator search help in the business partner maintenance (Transaction BP) and in the search for business partners in the CIC (here via BAPI BAPI_BUPA_SEARCH).

Available fix and Supported packages

  • SAP_ABA | 50A | 50A
  • SAP_ABA | 620 | 620
  • SAP_ABA 50A | SAPKA50A24 |
  • SAP_ABA 620 | SAPKA62009 |

Affected component

    AP-MD-BP
    Business Partner

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/545334

TAGS

#BP_DIALOG

More to explorer

SAP Security For All

RedRays Security Platform for Penetration testers and Bug hunters

The product package is specifically created for cyber security experts who have encountered SAP while participating in bug bounty programs.

RedRays Security Platform for SAP Consultants

The product package is designed for SAP consultants conducting security assessments of SAP ERP systems. We provide essential tools and resources to help professionals in this field conduct their work effectively.

RedRays Security Platform for Enterprises

The product package is specifically optimized to cater to the needs of both small/medium and large companies who are seeking to streamline the process of organizing a comprehensive security system for ERP systems.