## 13.2.4.4.1  Data Storage Security
## Using Logical Paths and File Names to Protect Access to the File System
SAP Treasury and Risk Management (FIN-FSCM-TRM) saves data in files in the file system. Therefore, it is important to explicitly provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal). This is achieved by specifying logical paths and file names in the system that map to the physical paths and file names. This mapping is validated at runtime and if access is requested to a directory that does not match a stored mapping, then an error occurs.
The following list shows the logical paths and file names that are used in SAP Treasury and Risk Management (FIN-FSCM-TRM) and the programs for which these file names and paths apply. The logical paths and file names have been created to activate the validation of physical file names:
Logical file names used in SAP Treasury and Risk Management
- FTRM\_FTR\_DEALDATA\_AMORTIZATION\_SCHEDULES\_IMPORT
- Program that uses this logical file name:
- RFTR\_INTF\_MAINFLOWS\_UPLOAD
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_FTR\_DEALDATA\_IMPORT.
- FTRM\_TCR\_MARKETDATA\_DF\_IMPORT
- Program that uses this logical file name:
- RFTBDF06 [function Datafeed: Import External Market Data in Datafeed Notation (transaction TBD5 )]
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_DF\_IMPORT.
- FTRM\_TCR\_MARKETDATA\_DF\_SECURITIES\_IDS\_IMPORT\_FOR\_CUSTOMIZING
- Program that uses this logical file name:
- RFTBDF05 [function Datafeed: Import Security ID Numbers (transaction TBD2 )]
No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_DF\_IMPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_REQUEST\_LIST\_EXPORT
- Program that uses this logical file name:
- RFTBFF01 [function Market Data File Interface: Generate Rates and Prices Request List (transaction TBDN )]
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_EXPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_IMPORT
- Program that uses this logical file name:
- RFTBFF01 [function Market Data File Interface: Import Rates and Prices (transaction TBDM )]
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_IMPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_ERRORLOG\_EXPORT
- Program that uses this logical file name:
- RFTBFF01 [function Market Data File Interface: Import Rates and Prices (transaction TBDM )]
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_EXPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_SECURITIES\_YEAR\_END\_PRICES\_IMPORT
- Program that uses this logical file name:
- RFDWZFF0
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_IMPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_STATISTICS\_IMPORT
- Program that uses this logical file name:
- RFTBFF20 [function Market Data File Interface: Import Statistics Data (transaction TVMD )]
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_IMPORT.
- FTRM\_TCR\_TEMP\_TCURC\_EXPORT ( Treasury: Sequential Output File for TCURC )
- Program that uses this logical file name:
- RZKLAODC
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TCR\_TEMP\_EXPORT.
- FTRM\_TCR\_TEMP\_TCURT\_EXPORT ( Treasury: Sequential Output File for TCURT )
- Program that uses this logical file name:
- RZKLAODT
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_TCR\_TEMP\_EXPORT.
- FTRM\_FTR\_RED\_SCHEDULE ( Treasury: Redemption Schedule Parser )
- Program that uses this logical file name:
- FTBAS\_SCHEDULE\_BATCH\_LOAD
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_FTR\_RED\_SCHEDULE.
- FTRM\_AN\_LIMIT
- Program that uses this logical file name:
- RFTBLBI1 ( Batch Input Report for Creating Limits )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_LIMIT.
- FTRM\_AN\_INT\_LIMIT
- Program that uses this logical file name:
- RFTBLBI1 ( Batch Input Report for Creating Limits )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_INT\_LIMIT.
- FTRM\_TCR\_MARKETDATA\_FF\_DERIVATIVE\_PRICES\_ERRORLOG\_EXPORT
- Program that uses this logical file name:
- RFTBFF30 ( Import DTB Derivative Prices : transaction TVDT )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_EXPORT.
- FTRM\_TCR\_MARKETDATA\_FF\_DERIVATIVE\_PRICES\_IMPORT
- Program that uses this logical file name:
- RFTBFF30 ( Import DTB Derivative Prices : transaction TVDT )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_TCR\_MARKETDATA\_FF\_IMPORT.
- FTRM\_AN\_BATCH\_INPUT\_DER
- Programs using this logical file name:
- RJBDBTC3 ( Batch Input for Derivatives )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_BATCH\_INPUT\_DER.
- FTRM\_AN\_BATCH\_INPUT\_MM
- Programs using this logical file name:
- RJBDBTC2 ( Batch Input for Derivatives )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_BATCH\_INPUT\_MM.
- FTRM\_AN\_BATCH\_INPUT\_FX
- Programs using this logical file name:
- RJBDBTC1 ( Batch Input for FX Transactions )
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_BATCH\_INPUT\_FX.
- FTRM\_AN\_BATCH\_INPUT\_ERR\_FILE
- Programs using this logical file name:
- Include MJBEHF01
- No parameters are used in this context.
- The logical file name uses the logical file path FTRM\_AN\_BATCH\_INPUT\_ERR\_FILE.
- FTRM\_TARO\_SEND
- Programs using this logical file name:
- R\_TLR\_TARO\_SEND
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TARO\_SEND (this is where the send program puts the files to be sent to the repository)
- FTRM\_TARO\_IMPORT
- Programs using this logical file name:
- R\_TLR\_TARO\_IMPORT and R\_TLR\_TARO\_IMPORT\_REPORTS
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TARO\_IMPORT (this is where the system expects files sent by the repository)
- FTRM\_TARO\_ARCHIVE
- Programs using this logical file name:
- R\_TLR\_TARO\_IMPORT and R\_TLR\_TARO\_IMPORT\_REPORTS
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TARO\_ARCHIVE (this is where imported files are stored if they were successfully imported)
- FTRM\_TARO\_ERROR
- Programs using this logical file name:
- R\_TLR\_TARO\_IMPORT and R\_TLR\_TARO\_IMPORT\_REPORTS
- No parameters are used in this context:
- The logical file name uses the logical file path FTRM\_TARO\_ERROR (this is where imported files are stored if they were NOT successfully imported but caused an error)
## Activating the Validation of Logical Path and File Names
These logical paths and file names are specified in the system for the corresponding programs. For downward compatibility, the validation at runtime is deactivated by default. To activate the validation at runtime, maintain the physical path using the transactions FILE (client-independent) and SF01 (client-specific). To find out which paths are being used by your system, you can activate the corresponding settings in the Security Audit Log. For more information, see about data storage security, see the respective chapter in the ABAP Platform Security Guide.
## Related Information
File System Access Security [page 23]