How To Fix ESH_ENG_CDSVAL_ES065 - Sensitive data must not be used in search (&1)

SAP Error Message - Details

• Message type: E = Error

• Message class: ESH_ENG_CDSVAL_ES - ES-CDS/ABAP: Validation of domain @EnterpriseSearch

• Message number: 065

• Message text: Sensitive data must not be used in search (&1)

What causes this issue?

Element &V1& is annotated with
@AccessControl.readAccess.logging.logdomain.domain or with
@AccessControl.readAccess.logging.output. This signifies that the data
is sensitive.

System Response

In order not to risk exposing sensitive data in search - which may
happen either directly as a response attribute, or indirectly as a means
to narrow down the search result - the respective element is not
considered.

How to fix this error?

No action needs to be taken. If you want to have the data in question in
search nevertheless, the annotation has to be removed. It is up to the
customer to weigh the search features against security considerations.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message ESH_ENG_CDSVAL_ES065 - Sensitive data must not be used in search (&1) ?

  The SAP error message ESH_ENG_CDSVAL_ES065 indicates that sensitive data is being used in a search operation, which is not allowed due to security and compliance reasons. This error typically arises in the context of SAP's Enterprise Search or when using Core Data Services (CDS) views that involve sensitive information.
  Cause:
  The error occurs when a search query attempts to access or utilize fields that are classified as sensitive data. Sensitive data can include personal information, financial data, or any other information that is subject to strict data protection regulations (e.g., GDPR, HIPAA). The system is designed to prevent such data from being exposed in search results to protect user privacy and comply with legal requirements.
  Solution:
  To resolve this error, you can take the following steps:
  
  
  Review the Search Query: Check the search query or the parameters being used in the search operation. Identify if any fields that are classified as sensitive data are being included.
  
  
  Modify the Search Criteria: If sensitive fields are included, modify the search criteria to exclude these fields. Ensure that the search only uses non-sensitive data.
  
  
  Adjust CDS Views: If you are using CDS views, review the definitions of these views. Ensure that sensitive fields are not exposed in the view that is being queried for search purposes.
  
  
  Consult Security Policies: Review your organization's data security policies to understand what constitutes sensitive data and ensure compliance with these policies.
  
  
  Use Authorization Checks: Implement proper authorization checks to ensure that only users with the right permissions can access sensitive data, if necessary.
  
  
  Contact SAP Support: If you are unable to resolve the issue, consider reaching out to SAP support for further assistance. They may provide insights specific to your system configuration.
  
  
  Related Information:
  
  Data Protection Regulations: Familiarize yourself with data protection regulations relevant to your organization, such as GDPR, to understand the implications of handling sensitive data.
  SAP Documentation: Refer to SAP's official documentation on Enterprise Search and Core Data Services for best practices and guidelines on handling sensitive data.
  System Configuration: Check your system's configuration settings related to data privacy and security to ensure they align with your organization's policies.
  
  By following these steps, you should be able to address the error and ensure that sensitive data is handled appropriately in your SAP environment.