ABAP Keyword Documentation →  ABAP - Release-Specific Changes →  Changes in Release 7.40 →  Changes in Release 7.40, SP05 

Security Checks in Release 7.40, SP05

1. Security tests in the extended program check

2. Documentation of security risks

Other versions: 7.31 | 7.40 | 7.54

Note

These enhancements were introduced in Release 7.40, SP05 and also downported to Release 7.0 EhP2, SP14 and Release 7.3, EhP1 or 7.0, EhP3, SP09.

Modification 1

Security Tests in the Extended Program Check

The new security checks in the extended program check scan ABAP programs for security issues. The checks perform a static analysis of the ABAP source code and report any potential security risks.

The security checks can be executed as follows:

• Directly from the extended program check in ABAP Workbench
• From Code Inspector
• From ABAP Test Cockpit (ATC)
  

If used from ATC, the checks are integrated into the transport release functions and can be executed from the ABAP Development Tools (ADT).

The security checks must be purchased as a separate product. Additional licensing costs are incurred if the security checks are used in customer systems. The program RSLIN_SEC_LICENSE_SETUP can be used to provide the security check option in a system. This requires the authorization modify global check variants in ATC.

Modification 2

Documentation of Security Risks

Potential security risks in ABAP programs are documented in the ABAP security notes.