Risk
Incorrect path validation or broad privileges can allow files outside the intended scope to be read or changed.
ABAP
Settings and priorities
| Technology / priority | Parameter or mechanism | Setting and purpose |
|---|---|---|
| ABAP Standard | abap/path_normalization | Not off Normalizes paths before file access. |
| ABAP Standard | abap/path_norm_Windows | 0 Windows setting subject to release requirements. |
| ABAP Standard | FILECMCUSTP · UNCONF_PATH_AS_EMPTY | Default ON; do not override with another value Handles unconfigured paths in SFILE. |
| ABAP Extended | S_PATH ; S_DATASET | Minimum required scope Controls file access and authorizations, including SPTH. |
| ABAP Extended | FILECMCUSTP · REJECT_EMPTY_PATH | Default ON or no explicit entry Rejects empty paths. |
| ABAP Extended | SAL · CUQ, CUR, CUS, CUT, DU5, EU4 | Include file access events Provides an audit trail for file operations. |
How to verify
- Check path normalization parameters.
- Review SFILE, FILECMCUSTP and SPTH rules.
- Restrict S_PATH and S_DATASET.
- Confirm that relevant operations are logged.