## 13.9.3.1.3  Data Storage Security
## Using Logical Path and File Names to Protect Access to the File System
Extended Warehouse Management (EWM) saves data in files in the file system. Therefore, it is important to explicitly provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal). This is achieved by specifying logical paths and file names in the system that map to the physical paths and file names. This mapping is validated at runtime and if access is requested to a directory that does not match a stored mapping, then an error occurs.
The following lists show the logical file names and paths used by EWM and for which programs these file names and paths apply:
## Logical File Names Used
The following logical file names have been created in order to enable the validation of physical file names:
- EWM\_PI\_DOWNLOAD
- Transactions or programs using this logical file name and parameters used in this context:
- Transaction /SCWM/PI\_DOWNLOAD
- Program /SCWM/R\_PI\_STOCK\_DWNLD
- Parameters used in this context:
- &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- &lt;PARAM2&gt; = Counter (NUM2)
- Logical file path used: EWM\_GLOBAL\_PATH
##  Note
The logical filename is fixed and cannot be changed. The logical file contains a physical filename. The logical file path contains a physical path. The validation and alias definition do not apply for this logical filename.
- EWM\_PI\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/PI\_UPLOAD
- Program /SCWM/R\_PI\_FILEUPLD
- Parameters used in this context:
- &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- &lt;PARAM2&gt; = Creation Date (DATS8)
- &lt;PARAM2&gt; = Counter (NUM2)
- Logical file path used: EWM\_GLOBAL\_PATH
##  Note
The logical filename is fixed and cannot be changed. The logical file contains a physical filename. The logical file path contains a physical path. The validation and alias definition do not apply for this logical filename.
- EWM\_STOCK\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/ISU
- Program /SCWM/R\_INITIALSTOCKUPLOAD
- Parameters used in this context: &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- Logical file path used: EWM\_STOCK\_UPLOAD\_PATH
- EWM\_STOBIN\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/SBUP
- Program /SCWM/TLAGP\_UPLOAD
- Logical file path used: EWM\_STOBIN\_UPLOAD\_PATH
- EWM\_STOBIN\_SORT\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/SRTUP
- Program /SCWM/TLAGPS\_UPLOAD
- Logical file path used: EWM\_STOBIN\_SORT\_UPLOAD\_PATH
- EWM\_MS\_RESULT
- Transactions or programs using this logical file name:
- Transaction /SCWM/MS\_RESULT
- Program /SCWM/R\_MS\_RESULT\_READ
- Parameters used in this context: &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- Logical file path used: EWM\_GLOBAL\_PATH
##  Note
The logical filename is fixed and cannot be changed. The logical file contains a physical filename. The logical file path contains a physical path. The validation and alias definition do not apply for this logical filename.
- EWM\_ELS\_FRML
- EWM\_ELS\_ST
- EWM\_ELS\_STE
- EWM\_ELS\_SEQ
- EWM\_ELS\_ASS
- Transactions or programs using this logical file name:
- Transaction /SCWM/ELS\_UPLOAD
- Program /SCWM/ELS\_UPLOAD
- Logical file path used: EWM\_GLOBAL\_PATH
##  Note
The logical filename is fixed and cannot be changed. The logical file contains a physical filename. The logical file path contains a physical path. The validation and alias definition do not apply for this logical filename.
- EWM\_MS\_RESULT
- Transactions or programs using this logical file name:
- Transaction /SCWM/PI\_SAMP\_UPDATE
- Program /SCWM/PI\_SAMP\_UPDATE\_RESULT
- Parameters used in this context: &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- Logical file path used: EWM\_GLOBAL\_PATH
##  Note
The logical filename is fixed and cannot be changed. The logical file contains a physical filename. The logical file path contains a physical path. The validation and alias definition do not apply for this logical filename.
- EWM\_PRODUCT\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/MIG\_PRODUCT
- Program /SCWM/R\_MIG\_PRODUCT
- Logical file path used: EWM\_PRODUCT\_UPLOAD\_PATH
- EWM\_PACKSPEC\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/MIG\_PRODUCT
- Transaction /SCWM/IPU
- Program /SCWM/R\_MIG\_PRODUCT
- Program /SCWM/R\_PS\_DATA\_LOAD
- Logical file path used: EWM\_PACKSPEC\_UPLOAD\_PATH
- EWM\_PI\_COMPL\_UPLOAD
- Transactions or programs using this logical file name:
- Transaction /SCWM/MIG\_PI\_COMPL
- Program /SCWM/R\_MIG\_PI\_COMPL
- Logical file path used: EWM\_PI\_COMPL\_UPLOAD\_PATH
- EWM\_TDC\_EDGE and EWM\_TDC\_RSRC
- Transactions or programs using this logical file name:
- Transaction /SCWM/TDC\_UPLOAD
- Program /SCWM/TDC\_UPLOAD
- Logical file path used: EWM\_GLOBAL\_PATH
- EWM\_TATT\_UPLOAD ( Logical File for Upload of Time and Attendance Events )
- Transactions or programs using this logical file name:
- Transaction /SCWM/TATT\_UPLOAD
- Program /SCWM/R\_LM\_TATT\_UPLOAD
- Parameters used in this context: &lt;PARAM1&gt; = Warehouse number (CHAR 4)
- Logical file path used: EWM\_GLOBAL\_PATH
## Activating the Validation of Logical Path and File Names
These logical paths and file names are specified in the system for the corresponding programs. For downward compatibility, the validation at runtime is deactivated by default. To activate the validation at runtime, maintain the physical path using the transactions FILE (client-independent) and SF01 (client-specific). T o find out which paths are being used by your system, you can activate the corresponding settings in the Security Audit Log.
For more information about data storage security, see the respective chapter in the ABAP Platform Security Guide.