Search This Blog

Monday, April 11, 2011

SAP Note 1356215 - Missing authorization check in EMMACL generation program

Validity: valid since 14.09.2010


Symptom

The customizing activity 'Generate Selection Screen for Clarification List' is used to add customer fields from customer include CI_EMMA_CASE to the selection screen of the clarification case list. It will regenerate the selection screen and the database selection of transaction EMMACL.

There is no authorization check in this activity. So any user with access to the customizing path can start this activity and regenerate the selection screen.



Other terms
EMMA, FP-EMMA, BPEM, Clarification case list, Exception Management


Reason and Prerequisites
Program Error


Solution
If the required Support Package has not yet imported in your system, please apply the attached correction.

The correction will add an authority check. In order to regenerate the selection screen the users profile has to include authorization object S_DEVELOP with authorization for

  • DEVCLASS: FKKMM
  • OBJTYPE: PROG
  • OBJNAME: REMMACL_SELSCRN_GENERATE
  • ACTVT: 02
Affected Releases
Software
Component
Release
From
Release
To
Release
And
subsequent
FI-CA
471
471
471
 
FI-CA
472
472
472
 
FI-CA
600
600
600
 
FI-CA
602
602
602
 
FI-CA
603
603
603
 
FI-CA
604
604
604
 
SAP_ABA
71
710
720
 

Visit https://service.sap.com/sap/support/notes/1356215 for Correction delivered in Support Package & 
Corrections Instructions

No comments:

Post a Comment