## 13.2.6.1.1  Data Storage Security
Contract Accounts Receivable and Payable (FI-CA) saves data in files in the file system. Therefore, it is important to explicitly provide access to the corresponding files in the file system without allowing access to other directories or files (also known as directory traversal). This is achieved by specifying logical paths and file names in the system that map to the physical paths and file names. This mapping is validated at runtime and if access is requested to a directory that does not match a stored mapping, then an error occurs.
The following list shows the logical file names and paths used by Contract Accounts Receivable and Payable (FI-CA) and for which programs these file names and paths apply:
## Logical File Names Used in FI-CA and Logical Path Names
The following logical file names have been created in order to enable the validation of physical file names:
| Program        | Logical File Name Used by the Pro- gram   | Logical Path Name Used by the Pro- gram   |
|----------------|-------------------------------------------|-------------------------------------------|
| RFKIBI_FILE00  | FICA_DATA_TRANSFER_DIR                    | FICA_DATA_TRANSFER_DIR                    |
| RFKIBI_FILEP01 |                                           |                                           |
| RFKKBIBG                 |                       |                       |
|--------------------------|-----------------------|-----------------------|
| RFKKZEDG                 |                       |                       |
| RFKKRLDG                 |                       |                       |
| RFKKCMDG                 |                       |                       |
| RFKKCRDG                 |                       |                       |
| RFKKAVDG                 |                       |                       |
| RFKKBIB0                 |                       |                       |
| RFKKZE00                 |                       |                       |
| RFKKRL00                 |                       |                       |
| RFKKCM00                 |                       |                       |
| RFKKCR00                 |                       |                       |
| RFKKAV00                 |                       |                       |
| RFKKKA00                 |                       |                       |
| RFKKBIT0                 |                       |                       |
| RFKKPCSF                 | FI-CA-CARD-DATA-S     | FI-CA-CARD-DATA-S     |
| RFKKPCDS                 |                       |                       |
| RFKKCVSPAY               | FI-CA-CVS             | FI-CA-CVS             |
| RFKK_CVSPAY_CONFIRM      |                       |                       |
| RFKKCVSCONFIRMDB         |                       |                       |
| RFKK_CVSPAY_CONFIRM_TEST |                       |                       |
| RFKK_DOC_EXTR_EXP        | FI-CA-DOC-EXTRACT-DIR | FI-CA-DOC-EXTRACT-DIR |
| RFKK_DOC_EXTR_AEXP       |                       |                       |
| RFKK_DOC_EXTR_IMP        |                       |                       |
| RFKK_DOC_EXTR_EXTR       |                       |                       |
| RFKK_DOC_EXTR            |                       |                       |
| RFKK_DOC_EXTR_DEL        |                       |                       |
| Class CL_FKK_TEXT_FILE   |                       |                       |
135
| RFKKBIXBITUPLOAD                   | FI-CA-BI-SAMPLE      | FI-CA-BI-SAMPLE-DIR   |
|------------------------------------|----------------------|-----------------------|
| RFKKCOL2                           | FI-CA-COL-SUB        | FI-CA-COL-SUB         |
| RFKKCOLL                           |                      |                       |
| Transaction FP03DM (Mass Activity) |                      |                       |
| Transaction FPCI (Mass Activity)   | FI-CA-COL-INFO       | FI-CA-COL-INFO        |
| RFKKCOPM                           | FI-CA-COL-READ       | FI-CA-COL-READ        |
| READFILE                           |                      |                       |
| RFKKCOPG                           | FI-CA-COL-TEST       | FI-CA-COL-TEST        |
| RFKKRDI_REPORT                     | FI-CA-RDI            | FI-CA-RDI             |
| RFKKRDI_REPORT_DIS                 |                      |                       |
| SAPFKPY3                           | FI-CA-DTA-NAME       | FI-CA-DTA-NAME        |
| RFKKCHK01                          | FI-CA-CHECKS-EXTRACT | FI-CA-CHECKS-EXTRACT  |
| Class CL_FKK_INFCO_SEND            | FI-CA-INFCO          | FI-CA-INFCO           |
| RFKKBE_SAL1                        | FICA_BE_SAL          | FICA_BE_SAL           |
| RFKKBE_SAL2                        | FICA_BE_SAL_XML      | FICA_BE_SAL_XML       |
| RFKK1099                           | FI-CA-1099           | FI-CA-1099            |
| RFKKOP03                           | FICA_OPEN_ITEMS      | FICA_OPEN_ITEMS       |
| RFKKOP04                           |                      |                       |
| RFKKOP07                           |                      |                       |
| RFKKES_SAL1                        | FICA_TAX_REP_GEN     | FICA_TAX_REP_GEN      |
| RFKKES_SAL2                        |                      |                       |
| RFKKRDI_REPORT                     | FI-CA-RDI            | FI-CA-RDI             |
| RFKKRDI_REPORT_DIS                 |                      |                       |
| Transaction EMIGALL                | ISMW_FILE            | ISMW_ROOT             |
## Activating the Validation of Logical Path and File Names
These logical paths and file names are specified in the system for the corresponding programs. For downward compatibility, the validation at runtime is deactivated by default. To activate the validation at runtime, maintain the physical path using the transactions FILE (client-independent) and SF01 (client-specific). T o find out which paths are being used by your system, you can activate the corresponding settings in the Security Audit Log.
For more information about data storage security, see the chapter in the ABAP Platform Security Guide.