## 13.2.1.2.1  Data Storage Security
## Logical Path and File Names
The FI-GL component saves data in files in the file system. Therefore, it is important to explicitly provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal). This is achieved by specifying logical paths and file names in the system that map to the physical paths and file names. This mapping is validated at runtime and if access is requested to a directory that does not match a stored mapping, then an error occurs.
The following lists show the logical file names and paths used by the FI-GL component. They also show the programs for which these file names and paths apply.
## Logical File Names and Paths for FI-GL and FI-SL
## Logical File Names
The following logical file names have been created to enable the validation of physical file names:
- FI\_COPY\_COMPANY\_CODE\_DATA\_FOR\_GENERAL\_LEDGER\_0X
- Programs using this logical file name:
- RFBISA00
- RFBISA01
- RFBISA51
- Parameter used in this context:
- &lt;PARAM\_1&gt; Program Name
- FI\_INFOSYS\_TRANSPORT
- Programs using this logical file name:
- RGRJTE00
- RGRLTE00
- RGRMTE00
- RGRRTE00
- RGRSTE00
- RGRVTE00
- RGRXTE00
- RGSSTE00
- RGSVTE00
- RGRJTI00
- RGRMTI00
- RGSSTI00
- RGSVTI00
- Parameter used in this context:
- &lt;PARAM\_1&gt; Program name
## · FI\_VALUATION
- Programs using this logical file name:
- FAGL\_FCV
- FAGL\_FC\_VALUATION
- SAPF100
- Parameters used in this context:
- &lt;PARAM\_1&gt; Program name
- &lt;PARAM\_2&gt; Key date (from the selection screen)
- &lt;PARAM\_3&gt; Valuation area (from the selection screen) for FAGL\_FCV and FAGL\_FC\_VALUATION valuation method (from the selection screen) for SAPF100
## Logical Path Names
The logical file names listed above all use the logical file path FI\_ROOT .
## Logical File Names and Paths for FI-GL-IS (Information System)
## Logical File Names
The following logical file names have been created to enable the validation of physical file names:
## · FI\_EXTERNAL
Programs using this logical file name and parameters used in this context:
| Program       | <PARAM_1>               | <PARAM_2>                       | <PARAM_3>            |
|---------------|-------------------------|---------------------------------|----------------------|
| RFAWVZ58      | Program name (SY-REPID) | String 'AWV'                    | Parameter 'Key Date' |
| RFAWVZ5A      | Program name (SY-REPID) | String 'AWV'                    | Parameter 'Key Date' |
| RFAWVZ5P      | Program name (SY-REPID) | String 'AWV'                    |                      |
| RFAWVZ5A_NACC | Program name (SY-REPID) | String 'AWV'                    | Parameter 'Key Date' |
| RFAWVZ5P_NACC | Program name (SY-REPID) | String 'AWV'                    |                      |
| RFBIDET0      | Program name (SY-REPID) | Parameter 'Client'              |                      |
| RFBIKRT0      | Program name (SY-REPID) | Parameter 'Client'              |                      |
| RFFR0E84      | Program name (SY-REPID) | Parameter 'Customers/ven- dors' | Parameter 'Key Date' |
| RFFRDDE0      | Program name (SY-REPID) | Parameter 'Company Code'        | Parameter 'Type'     |
| RFFRLIST      | Program name (SY-REPID) |                                 |                      |
| RFFRMOD1      | Program name (SY-REPID) |                                 |                      |
| RFIDPTFO   | Program name (SY-REPID)   | Concatenated parame- ters <Company Code>_<Year>_<Period>   | String 'READ' or 'WRITE'        |
|------------|---------------------------|------------------------------------------------------------|---------------------------------|
| RFLBOX00   | Program name (SY-REPID)   | Parameter 'Procedure'                                      | Parameter 'Input Record Format' |
| RFLBOX80   | Program name (SY-REPID)   | Parameter 'Procedure'                                      | Parameter 'Input Record Format' |
| RFLBOXIN   | Program name (SY-REPID)   | String 'LOCKBOX'                                           | String 'BAI'                    |
| RFSBLIW0   | Program name (SY-REPID)   |                                                            |                                 |
## · FI\_POSTING
Programs using this logical file name and parameters used in this context:
| Program   | <PARAM_1>               | <PARAM_2>                 | <PARAM_3>                |
|-----------|-------------------------|---------------------------|--------------------------|
| RFBIBLT0  | Program name (SY-REPID) |                           |                          |
| RFEBCK00  | Program name (SY-REPID) | Parameter 'Document Type' | Parameter 'Session name' |
| RFEBCKT0  | Program name (SY-REPID) |                           |                          |
| SAPF100A  | Program name (SY-REPID) | Parameter 'Key Date'      |                          |
## · FI\_TAX
Programs using this logical file name and parameters used in this context:
| Program   | <PARAM_1>               | <PARAM_2>                                | <PARAM_3>                               |
|-----------|-------------------------|------------------------------------------|-----------------------------------------|
| RFASLD02  | Program name (SY-REPID) | Parameter year for 'Report- ing Quarter' | Parameter 'Reporting Quar- ter'         |
| RFASLD11  | Program name (SY-REPID) | Parameter year for 'Report- ing Quarter' | Parameter 'Reporting Quar- ter'         |
| RFASLD11B | Program name (SY-REPID) | Parameter year for 'Report- ing Quarter' | Parameter 'Reporting Quar- ter'         |
| RFUMPT00  | Program name (SY-REPID) | Parameter 'Company Code'                 |                                         |
| RFUSVB10  | Program name (SY-REPID) | Parameter 'Posting Date' (lower value)   | Parameter 'Posting Date' (higher value) |
| RFKQSU30  | Program name (SY-REPID) |                                          |                                         |
| RFUMPT00  | Program name (SY-REPID) |                                          |                                         |
| RFUSVS12   | Program name (SY-REPID)   | Parameter 'Entity Responsi- ble'              | See note 1   |
|------------|---------------------------|-----------------------------------------------|--------------|
| RFUSVS14   | Program name (SY-REPID)   | Concatenated parameters <Company Code>_<Year> | See note 1   |
| RFUVPT00   | Program name (SY-REPID)   | Parameter 'Company Code'                      | See note 2   |
## Notes:
## · Note 1
If the file specified in the parameter 'File for Leasing' is accessed, PARAM\_3 contains the value READ; consequently, the file content is read only and added to the output file.
If the file specified in the parameter 'UNIX File for Output' is accessed, PARAM\_3 contains the value 'WRITE' .
## · Note 2
- If the file listed in the parameter 'File Name - Application Server' on the 'Periodic File O' tab page is accessed, PARAM\_3 contains the string PERIOD\_WRITE.
- If the file listed in the parameter 'ECSL File Name (AS)' on the 'Periodic File O' tab page is accessed, PARAM\_3 contains the string PERIOD\_READ.
- If the file listed in the parameter 'XML File App. OP' on the 'Annual File O/P' tab page is accessed, PARAM\_3 contains the string YEAR\_READ.
If the file listed in the parameter 'File Name - Application Server' on the 'Annual File O/P' tab page is accessed, PARAM\_3 contains the string YEAR\_WRITE.
## · FI\_RFASLD12\_FILE
Programs using this logical file name and parameters used in this context:
Program
&lt;PARAM\_1&gt;
RFASLD02
Program name (SY-CPROG)
## Logical Path Names
The logical file names listed above use the following logical file paths:
Logical File Name
Logical File Path
FI\_EXTERNAL
FI\_ROOT
FI\_POSTING
FI\_TAX
FI\_RFASLD12\_FILE
FI\_ERVJAB\_FILE\_PATH