The SAP standard provides various protection mechanisms for data. They include client separation, identify management, roles, and authorisations. However, these security mechanisms can be deliberately bypassed or unintentionally omitted in code.