Skip to Content
Product Information
Author's profile photo Shantanu Sharma

UI Data Protection – How to protect sensitive data displayed in SAP GUI Trees

In this blog, we see how to use SAP UI Data Protection Masking to protect sensitive data represented through Trees.

Several transactions use Tree displays to represent data. A common example is the address usage tree in the BP transaction. In this blog, we use the BP transaction to showcase how sensitive data can be protected using SAP UI Data Protection Masking for SAP S/4HANA. However, the same steps would apply on any transaction / report which represents data through any sort of Tree.

 

 

Use the recording tool to capture the technical details of the fields. For more information of the recording tool, refer this blog

 

 

 

Select the record with the Field ID ‘TEXT’  and assign a logical attribute to it. For more information on logical attributes and configuring data protection, refer this blog.

Once the configuration is made, the entire tree will be masked.

 

Similarly, if the configuration is for data blocking, the entrie tree display will be blocked. Such as in the screenshot below:

 

 

However, to protect (mask/block) selective nodes in the tree through conditional logic, a few extra steps are required. This would require the setting up of a scenario with Attribute based Masking

Furthermore, a helper class: /UISM/CL_DA_HELPER is delivered to provide additional contextual information in tree scenarios. The helper methods can be used to write the logic for derived attributes, which in turn can be used in the Policies. Through configurations, it is possible to protect certain nodes. As in the screenshot below, only certain nodes are protected

 

For more information on node-specific masking, please feel free to reach out to me / raise an OSS incident in the component ‘GRC-UDS-DO’.

 

Assigned Tags

      4 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Jaywant Subramaniam
      Jaywant Subramaniam

      Hi Shantanu - Excellent post !

      Can you please see if the same can be done using SAP GUI UIM?

      I tried with the Recording Tool (/n/UIM/Recording_Tool) but it doesn't register any actions. Perhaps it works only with S/4 HANA?

      Thanks,

      Jaywant

      Author's profile photo Shantanu Sharma
      Shantanu Sharma
      Blog Post Author

      Hi Jaywant,

       

      Masking in Tress is supported in SAP GUI UIM. Please raise a support incident in the component XX-PROJ-CDP-266 and our support team will help you out.

      Regards,

      Shantanu

      Author's profile photo Jaywant Subramaniam
      Jaywant Subramaniam

      Hi Shantanu - there seems some confusion within SAP around this ! When I reached out to the support team and cited your blog, the response states that GUI tree masking is only supported in S4.

      Can you append the UIM tree masking solution to the blog? That will be immensely helpful!

       

      Cheers!

      Jaywant

      Author's profile photo Kulvendra Kumar
      Kulvendra Kumar

      Hi Jaywant,

      GUI tree masking is supported in ECC and S/4 but configuration may be different in both systems based on which UI Masking product is used.

      Our team provided solution in incident. Hope you have no doubt.

       

      Regards

      Kulvendra