Code cleanup tool in business applications
Security can be improved in business application, such as an enterprise resource planning (“ERP”) system, by detecting and automatically cleaning or fixing custom code of systems/applications. In one embodiment, a Cleanup Tool enables the removal of programming errors using automation that can minimize security risks for a business application. The Cleanup Tool may include an automated correction engine that automates code correction. An Access Analyzer analyzes access through various systems/applications within the business application.
1. In a business application, a computer system for correcting custom code, comprising:
a system that includes custom code, wherein the custom code comprises custom changes that are external the system;
a cleanup tool that automates corrections to the custom code with a hardware processor, wherein the cleanup tool further comprises:
an access analyzer that dynamically analyzes access for the system including access or protection on software objects of the custom code and outputs an analysis of access change, wherein the analyzer utilizes analyses cases that are customized for providing a role suggestion that comprises one or more authorization from a user and wherein an authorization list for a set of transactions is generated and compared with roles of users to provide user advice regarding whether the users are overprivileged or underprivileged for the transactions; and
an automated correction engine that provides details on the corrections to the software objects of the custom code based on the access or protection analyzed by the access analyzer.
2. The computer system of claim 1 , wherein the cleanup tool further comprises:
a monitor that monitors changes to code of the system.
3. The computer system of claim 2 , wherein the custom code comprises code that is changed as identified from the monitor.
4. The computer system of claim 1 , wherein the role suggestion further comprises suggestions on how a suited role appears and how results of the authorizations that will be transferred.
5. The computer system of claim 1 , wherein the access analyzer further comprises a machine learning build that provides recommendations for the authorization list.
6. The computer system of claim 1 , wherein the business application comprises a software application.
7. The computer system of claim 6 , wherein the software application comprises at least one of Customer Relationship Management (CRM), Supplier Relationship Management (SRM), Supply Chain Management (SCM), Product Life-cycle Management (PLM), Human Capital Management (HCM), Integration Platforms, Business Warehouse (BW), Business Intelligence (BI), or enterprise resource planning (ERP).
8. In a business application, a computer system for correcting custom code, comprising:
a system that includes custom code;
a cleanup tool that automates corrections to the custom code with a hardware processor, wherein the cleanup tool comprises:
an access analyzer with machine learning that provides an authorization list recommendation based on dynamic analysis of access for the system, wherein the authorization list is for a set of transactions and compared with roles of users to provide user advice regarding whether the users are overprivileged or underprivileged for the transactions; and
an automated correction engine that provides details on the corrections to the custom code based on the authorization list and the user advice from the access analyzer.
9. The computer system of claim 8 , wherein the business application comprises at least one of Customer Relationship Management (CRM), Supplier Relationship Management (SRM), Supply Chain Management (SCM), Product Life-cycle Management (PLM), Human Capital Management (HCM), Integration Platforms, Business Warehouse (BW), Business Intelligence (BI), or enterprise resource planning (ERP).
10. The computer system of claim 8 , wherein the authorization list is for role suggestion for the user.
11. The computer system of claim 10 , wherein the role suggestion comprises suggestions on how a suited role appears and how results of authorizations from the authorization list will be transferred.