## 13.13.4.1.3.3  Data Storage Security
The security of sensitive data in Loans Management (such as loan contracts, consumer loans, collateral values, credit standing calculations, collateral) is guaranteed by the general authorization concept of Loans Management (FS-CML) .
It is possible to display business partner data from Loans Management . Y ou can use the authorization concept of central SAP Business Partner to protect this data.
For more information about authorizations and security of data storage, see http:/ /help.sap.com under SAP Business Partner Security .
## Using Logical Path and Filenames to Protect Access to the File System
The Loans Management (FS CML) application saves data in files in the file system. Therefore, you must provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal).
You can do this by specifying logical paths and file names in the system that map to the physical paths and file names. The system validates this mapping at runtime and if access is requested to a directory that does not match a defined mapping, then the system issues and error message.
The following lists the logical file names and paths used by Loans Management (FS CML) and the programs for which these file names and paths apply:
## Logical File Names Used in This Application
The following logical file names have been created to enable the validation of physical file names:
- CML\_PAYMENT\_US
- Program using this logical file name:
- RFVD\_AUTODRAFT\_PROCESS
- RFVD\_PAY\_STOP
- Parameters used in this context: None
- CML\_CREDIT\_BUREAU
- Program using this logical file name:
- RFVD\_CBR\_PROCESS
- Parameters used in this context: None
- CML\_MIGRATION\_OBJECTS\_LOGFILE\_IN
- Program using this logical file name:
- RFVOBJ01
- Parameters used in this context: None
- CML\_MIGRATION\_OBJECTS\_LOGFILE\_OUT
- Program using this logical file name:
- RFVOBJ01
- RFVOBJ01\_CREATE\_STRUCTURE
- Parameters used in this context: None
- CML\_MIGRATION\_OBJECTS\_PHYSFILE\_IN
- Program using this logical file name:
- RFVOBJ01
- Parameters used in this context: None
- CML\_MIGRATION\_OBJECTS\_PHYSFILE\_OUT
- Program using this logical file name:
- RFVOBJ01
- RFVOBJ01\_CREATE\_STRUCTURE
- Parameters used in this context: None
- CML\_MIGRATION\_COLLATERALS\_LOGFILE\_IN
- Program using this logical file name:
- RFVSIC01
- Parameters used in this context: None
- CML\_MIGRATION\_COLLATERALS\_LOGFILE\_OUT
- Program using this logical file name:
- RFVSIC01
- RFVSIC01\_CREATE\_STRUCTURE
- Parameters used in this context: None
- CML\_MIGRATION\_COLLATERALS\_PHYSFILE\_IN
- Program using this logical file name:
- RFVSIC01
- Parameters used in this context: None
- CML\_MIGRATION\_COLLATERALS\_PHYSFILE\_OUT
- Program using this logical file name:
- RFVSIC01
- RFVSIC01\_CREATE\_STRUCTURE
- Parameters used in this context: None
## Logical File Paths Used in This Application
- The logical file names CML\_PAYMENT\_US and CML\_CREDIT\_BUREAU use the logical file path CML\_ROOT.
- The logical file names CML\_MIGRATION\_OBJECTS\_LOGFILE\_IN, CML\_MIGRATION\_OBJECTS\_LOGFILE\_OUT, CML\_MIGRATION\_OBJECTS\_PHYSFILE\_IN, CML\_MIGRATION\_OBJECTS\_PHYSFILE\_OUT, CML\_MIGRATION\_COLLATERALS\_LOGFILE\_IN, CML\_MIGRATION\_COLLATERALS\_LOGFILE\_OUT, CML\_MIGRATION\_COLLATERALS\_PHYSFILE\_IN and CML\_MIGRATION\_COLLATERALS\_PHYSFILE\_OUT use the logical file path CML\_MIGRATION
## Activating the Validation of Logical Path and File Names
These logical paths and file names are specified in the system for the corresponding programs. For downward compatibility, the validation at runtime is deactivated by default. To activate the validation at runtime, maintain
the physical path using the transactions FILE (client-independent) and SF01 (client-specific). To find out which paths are being used by your system, you can activate the corresponding settings in the Security Audit Log.