2012 May 22 8:44 AM
Hello everyone,
Recently I discovered that you can pull a full credit card numbers through a table CDPOS using SE16N ,
by entering in the "Table Name" field BUT0CC and CCNUM in the "field name" field
Is it posible to restrict access to credit card data without harming usability of the table?
Thanks,
Julia.
2012 May 22 9:15 AM
Hi Julia,
Access to CDPOS can be restricted through authorization group and object S_TABU_DIS. If you are on Basis Rel. 700 or higher, you can also restrict the exact table thru' S_TABU_NAM (refer notes # 1481950 & 1500054).
If you want to restrict just the credit card data field instead of the entire CDPOS table, then you might consider having a custom view created for this table.Your developer will be able to help you in this.
Thanks
Sandipan
2012 May 22 9:44 AM
I do want to restrict just the credit card data,I considered the solution of a view but,
I'm not sure that it's posible to block very specific feeds (BUT0CC, and CCNUM) in the fields
"Table Name" and "field name".
2012 May 22 9:58 AM
For restricting certain feeds to the table fields, field exit might be considered. I haven't used it in such a scenerio but its worth a try.
Just my 2 cents!
Thanks
Sandipan