+APP.4.6.A6 Complete Execution of Authorisation Checks (S)

APP.4.6.A6 Complete Execution of Authorisation Checks (S)

During an authorisation check in ABAP code (AUTHORITY-CHECK <OBJECT>), it SHOULD be ensured that all fields are checked for the relevant authorisation object. If individual fields are not actually required, they SHOULD be marked as DUMMY. The reason for the exception SHOULD also be documented in the field.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.46 Loss of Integrity of Sensitive Information