CREATE OPEN SPACES
In addition to internal security requirements, national and international guidelines sometimes require all audit and security-related user actions to be recorded. With the Security Audit Log (SAL) you have the possibility to log all changes, e.g. for users, user master records, but also roles and groups.
The basis of every SAP system is the SAP NetWeaver Application Server. Everything depends on this "SAP Basis" to keep SAP systems running. In the area of SAP Basis Operations, we handle all technical tasks for our customers that arise during the installation, operation and maintenance of SAP systems. We install, administer, configure, troubleshoot and optimize your SAP system.
SE10 Transport Organizer
SAP Basis is the core component of any SAP infrastructure. Both in older versions such as R/3 and the current S/4HANA. It ensures that the necessary services and foundations are provided for the SAP system and all applications. The biggest advantage of an SAP environment over specialized tools - its variability - also makes for great complexity.
Another important example is the reading permission for TemSe objects. The temporary files are often forgotten, because it is often not considered that cached (strictly) sensitive data, which is intended for only one user (owner), can be viewed by another user without permission - and across clients. The examples mentioned show us how important it is to carefully assign permissions for client-independent transactions. Download Transaction tables The transactions that enable the examples above, including certain expressions of the associated permission objects and our recommendations for them, can be found in the file "Critical cross-client permissions" for download. Other client-independent transactions are located in the Cross Clients TCODES file. The criticality of these transactions should be assessed according to the context. I recommend always being careful and keeping these transactions in mind.
Tools such as "Shortcut for SAP Systems" complement missing functions in the SAP basis area.
Do you know of any other solutions for improving ABAP code security or have you already gained experience with the products mentioned above? I look forward to your comments!
SAP Basis refers to the administration of SAP system that includes activities like installation and configuration, load balancing, and performance of SAP applications running on Java stack and SAP ABAP. This includes the maintenance of different services related to database, operating system, application and web servers in SAP system landscape and stopping and starting the system. Here you can find some useful information about SAP Basis: www.sap-corner.de.
In addition, it stores not only operational (user-generated) data, but also system data for controlling application content as well as configuration tables.