Versions Compared

Old Version 31

changes.mady.by.user Kiuwan Editor User

Saved on

compared with

New Version 32

changes.mady.by.user Kiuwan Editor User

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

Therefore,  the approach to integrate SAP and Kiuwan consists on

  • Run the ABAP code extraction mechanisms
  • Execute the Kiuwan analyses 
    • Baselines for packages
    • Deliveries for transport orders

 

 BaselineDeliveries
ResolvedIn Progress
Remote

From an external machine:

  • Extract source code (sapexCode.xml, sapexMetadata.xml)
  • Execute the analysis (using Kiuwan Local Analyzer)

Visit SAPEX Remote use

N/AN/A
Local

Within SAP System:

  • Extract source code (ZKW_SAPEX_CODE, ZKW_SAPEX_METADATA)
  • Execute the analysis (ZKW_ANALYSIS)

Visit SAPEX Local use

Automatic process:

  • Executed previously to Release a Transport Request or Task

Visit Local use - Automated audit before Release of a Transport Order

Within SAP System:

  • Execute the analysis (ZKW_ANALYSIS_TO)

Visit Local use - On demand analysis for Change Requests in progress

 

 

...

 


How it works

 

When SAPEX components (programs, function modules, support classes, OS commands) are installed on the target SAP system, the user may perform the following operations:

 
  • Extract source code 
    • Either by running a program within SAP server (ZKW_SAPEX_CODE) , or remotely (using the sapexCode.xml script), extracted code can be analyzed with Kiuwan Local Analyzer. 
    • The code elements to extract could be based on transport requests / tasks, packages, and the type and name of the element (programs, function modules, classes, web dynpro components, etc.)
 
  • Extract system information ("metadata")
    • Metadata are used by Kiuwan rules to search for defects and vulnerabilities
    • For example, to ensure that authorization is performed properly, information about authorization objects and authorization groups (extracted from TOBJ and TDDAT tables) is used by many security checks in Kiuwan. 
    • Metadata extraction could be performed either by running a program within SAP Server (ZKW_SAPEX_METADATA) , or remotely (using the sapexMetadata.xml script).
 

  • Perform analysis on extracted source code

    • Within a SAP system with Kiuwan Local Analyzer deployed, by running the ZKW_ANALYSIS program. It offers the possibility for extracting source code before analysis.

 

  • Add automated audits before releasing changes

    • SAP's Change and Transport System (CTS) may register an implementation for the CTS_REQUEST_CHECK 'classic' BAdI. 

    • Source code extraction, analysis and evaluation of audit checkpoints may be performed before accepting (or rejecting) the release of a change request / task, according to organizational quality and security standards.

 

...