+APP.4.6.A6 Complete Execution of Authorisation Checks (S)

APP.4.6.A6 Complete Execution of Authorisation Checks (S)

During an authorisation check in ABAP code (AUTHORITY-CHECK <OBJECT>), it SHOULD be ensured that all fields are checked for the relevant authorisation object. If individual fields are not actually required, they SHOULD be marked as DUMMY. The reason for the exception SHOULD also be documented in the field.

1. Översikt

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.46 Loss of Integrity of Sensitive Information