Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
Производитель ПО
Наименование ПО
SAP Notes
(1432456-2)
SAP Support Packages
(SAPKW72003)
Описание
The authorizations S_RS_LPOA and S_RS_HYBR are missing from the role templates S_RS_RDEMO and S_RS_ROPOP. After you import the Support Package, these authorization are available.
Как исправить
To correct the symptoms, import the Support Package specified below or make the following manual changes:
Transaction: PFCG
Menu: Utilities -> Templates
Select the template "S_RS_DEMO" and choose "Change".
Choose "Manual input" and insert the authorization objects "S_RS_HYBR" and "S_RS_LPOA".
Choose the full authorization (*) for all fields.
Select the template "S_RS_ROPOP" and repeat these steps.
Select the template "S_RS_RDEAD".
Expand the node "Cross-application Authorization Objects" (AAAB) and select the authorization object "Transaction Code Check at Transaction Start" (S_TCODE).
Delete the full authorization and insert the following values in the "From" (values) column.
LIST*
RSA*
RSBO_EXTRACT
RSD1 (use the "To" (value) RSDIOBCM for this)
RSHIERINT
RSI0
RSIC
RSICUBE
RSMO
RSS*
RSU*
SU53
Transaction: PFCG
Menu: Utilities -> Templates
Select the template "S_RS_DEMO" and choose "Change".
Choose "Manual input" and insert the authorization objects "S_RS_HYBR" and "S_RS_LPOA".
Choose the full authorization (*) for all fields.
Select the template "S_RS_ROPOP" and repeat these steps.
Select the template "S_RS_RDEAD".
Expand the node "Cross-application Authorization Objects" (AAAB) and select the authorization object "Transaction Code Check at Transaction Start" (S_TCODE).
Delete the full authorization and insert the following values in the "From" (values) column.
LIST*
RSA*
RSBO_EXTRACT
RSD1 (use the "To" (value) RSDIOBCM for this)
RSHIERINT
RSI0
RSIC
RSICUBE
RSMO
RSS*
RSU*
SU53
Ссылки
