direct database data access without data level authorization check

jihoon_kim — Fri, 30 Jul 2010 00:44:07 GMT

Hello,

My customer raised issue about direct database data access. Due to the customeru2019s strong security policy, it shouldnu2019t be allowed.

To prevent this kind of illegal data access, customer ask me to list up all the possibilities to display data without data level authorization check.

The things in my mind are

SQL Command Editor (for Oracle based system) : ORASPACE, DB02, ST04

Query Based : SQVI (Quick Viewer), SQ01/SQ02/SQ03 (SAP Query)

Data Browser : SE11, SE12, SE16, SE16N, SE17

Table Maintenance : SM30

Function Module : RFC_READ_TABLE

Function Module : DB_EXECUTE_SQL (DML)

Anyone knows anything which is not listed above?

Thanks

Re: direct database data access without data level authorization check

former_member440650 — Fri, 30 Jul 2010 04:10:30 GMT

HI,

Generally in production user's should not be given all these authorizations.

Ram.