topic Re: Authorization to Webdynpro page in Application Development and Automation Discussions

Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 07:32:01 GMT

Hi,

ABAP team has developed customized webdynpro page which updates project system(PS) tables. When we created testId with no roles/profiles and logged in with the testID, then this page gets executed with updating PS tables. When we took the trace we found all requried objects which are missing. Can anyone help me how to provide authorization to Webdynpro page?

Thanks,

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 07:41:11 GMT

Sounds terrible....

You need to check authority (or use coding techniques which does it for you...), but that is irrelevant because you should not be updating SAP tables like this anyway.

Cheers,

Julius

Re: Authorization to Webdynpro page

sdipanjan — Mon, 15 Jun 2009 08:27:38 GMT

> ABAP team has developed customized webdynpro page which updates project system(PS) tables. When we created testId with no roles/profiles and logged in with the testID, then this page gets executed with updating PS tables.

Why you need to do so??

When we took the trace we found all requried objects which are missing. Can anyone help me how to provide authorization to Webdynpro page?

This is not the way to build a role by searching so blindly.... If you are not using any TCode/report etc. to update the database (which is the best feature of SAP compared to other ERP products) then you should try to study other menu assignment possibilities and make those custom developments Interactive.

Regards,

Dipanjan

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 08:51:47 GMT

Hi Dipanjan,

Thanks for the reply!

ABAP team are calling transaction CJ20N in code for updating PS tables, but when we tried to login to Webdynpro page with no roles/profiles, we are able to update the PS tables. What we(Security team) or ABAP team needs to do so that it checks for authorization at the time of Login?

Thanks,

Re: Authorization to Webdynpro page

sdipanjan — Mon, 15 Jun 2009 09:12:32 GMT

> What we(Security team) or ABAP team needs to do so that it checks for authorization at the time of Login?

There is no checks performed during Login from point of view of AS authorization concept. This need to be fixed by ABAP team why it is happening. If the user has no role then there is no way to update any record. So it is not happening by user interaction I believe.

Regards,

Dipanjan

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 12:10:12 GMT

Hi All,

Check if there is any service (SICF) existing for the same, and if some login details are specified there, it will probably be using authorisations of that particular user, rather than the one who is logged on( with no authorisations at all).

Regards,

Sarita

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 12:13:52 GMT

Yes, that is a good observation!

Also check higher up in the node hierarchy for settings, because they cascade down (lower entries inherit higher node attributes, unless specified specifically).

Cheers,

Julius

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 13:15:37 GMT

Hi All,

Regards,

Sarita

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 17:33:14 GMT

Hi Sarita,

Thts a good point. I checked SICF service for the webdynpro page, but we didnt provide any Logon details here. Still the issue is open

Thanks,

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 17:41:12 GMT

Chech the nodes in the hierarchy. It inherits the credentials...

Cheers,

Julius

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 18:00:21 GMT

Hi Julius,

I checked all the nodes in the hierarchy but nowhere we have maintained user crendentials.

thanks,

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 18:24:15 GMT

I guess you are going to have to post the code of your WDA for us to proceed further...

Cheers,

Julius

Re: Authorization to Webdynpro page

Former Member — Mon, 15 Jun 2009 18:46:50 GMT

Well if there are no user credentials existing in the service, you can maintain login details in the service itself, and the user should only have roles for which you want users to access( change/display) forthe particular application.

Alternatively, If you want to assign different sort of authorisations like change access to a particular group( say the applictaion develor, or super users) and on other hand only the display access to some other group of users you may use the concept of internet users( which in turn refer to refernce users, that can be many).

you may refer to the link for more info:

http://help.sap.com/saphelp_nw70/helpdata/en/02/4b528c2a8d11d5991f00508b6b8b11/content.htm

http://help.sap.com/saphelp_nw04/helpdata/en/9d/ad58397e9d2d06e10000000a114084/content.htm

Hope this will help!!!

Regards,

Sarita