Situation: When a period export is done with anonymisation, the holding quotas of units (master data) and unit partners (basis data) is included in the export file. But when the checkbox "Delete values" is activated, the holding quotas are set to 0. Furthermore, the label "Werte löschen"/"Delete values" is misleading, as the values are not physically deleted but existing values are set to zero. If an attacker knows the original alphabetical order of units (unitIds), the relation between anonymised unitIds and their origins is deducible. Solution: The label of the checkbox is modified to "Reset values" with description "Amount values in the calculation are reset to 0.00 if necessary". When a period export is done with anonymisation and the checkbox "Reset values" is activated, existing BigDecimal values are set to zero, but holding quotas of units (master data) and unit partners (basis data) are not changed. The assignment of anonymised unitIds is done by random. |