Security problem with BEx reports ?
This is my first post on the sdn !
We have, what seems to be, a security problem with our online BW reports. When the user is logged, he could access to an authorized report. Ok ... but, in the url he can replace the technical name of the query (if he knows one of them) and access to an unauthorized report, because I think the authentification phase is just done one time, but I can be mistaken.
How could I solve this problem ? with "Logon Procedure" options in the SICF transaction, when I click on sap > bw > BEx ?
Any help will be appreciated !