+APP.4.6.A6 Complete Execution of Authorisation Checks (S)

APP.4.6.A6 Complete Execution of Authorisation Checks (S)

During an authorisation check in ABAP code (AUTHORITY-CHECK <OBJECT>), it SHOULD be ensured that all fields are checked for the relevant authorisation object. If individual fields are not actually required, they SHOULD be marked as DUMMY. The reason for the exception SHOULD also be documented in the field.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

Exigences

3. Réglementations associées

Réglementations

Tickets liés

Liens
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.46 Loss of Integrity of Sensitive Information