SAP Basis Permissions for an app's business logic - SAP Corner

Direkt zum Seiteninhalt
Permissions for an app's business logic
Migration of an SAP system to other server landscapes
A first important step was the introduction of playbooks to professionalize our work. Back then, SAP installation manuals were real tomes with hundreds of pages that often went around in circles and were anything but easy to understand....

The SAP basis as an organisational unit within a growing IT organisation is facing far-reaching changes. The growing number of technologies and the growing need for integration and collaboration with upstream and downstream IT departments means that the SAP basis is constantly growing. Examples of organisational concepts and further information can be found in chapters 7.6 and 9.4 of the Master's thesis.
Collaboration and management of (sub-)projects in the SAP Basis environment, if necessary also cross-departmentally
Ten years ago, there wasn't much more for SAP Basis experts than SAP Solution Manager. And most Basis administrators only used it at all because SAP virtually forced them to use SolMan to download updates.

For example, many customer ABAP programs work by uploading or downloading data. There are potentially large security gaps here that allow access to server data. In addition, the widespread direct invocation of operating system commands that are not covered by a self-programmed authorization check is a major problem. Even though classic SQL injection, i.e., the entry of extended SQL commands, is a potential security vulnerability, it occurs rather rarely in SAP systems. More widespread is the unintentional dynamization of SQL calls because input parameters are not sufficiently checked. The need to check all in-house developments internally for such security vulnerabilities before they are delivered in SAP's own code has led to the development of the SAP Code Vulnerability Analyzer tool.

"Shortcut for SAP Systems" makes many tasks in the area of the SAP basis much easier.

Only the organisational levels have to be maintained in the roles derived from them.

The website www.sap-corner.de offers many useful information about SAP basis.


Both have advantages and disadvantages, which I would like to explain in the following.
SAP Corner
Zurück zum Seiteninhalt