+APP.4.6.A6 Complete Execution of Authorisation Checks (S)

APP.4.6.A6 Complete Execution of Authorisation Checks (S)

During an authorisation check in ABAP code (AUTHORITY-CHECK <OBJECT>), it SHOULD be ensured that all fields are checked for the relevant authorisation object. If individual fields are not actually required, they SHOULD be marked as DUMMY. The reason for the exception SHOULD also be documented in the field.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

Requisitos

3. Regulaciones relacionadas

Regulaciones

Incidencias vinculadas

Vínculos
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.46 Loss of Integrity of Sensitive Information