Authorization to Webdynpro page

[Former Member]

Hi,

ABAP team has developed customized webdynpro page which updates project system(PS) tables. When we created testId with no roles/profiles and logged in with the testID, then this page gets executed with updating PS tables. When we took the trace we found all requried objects which are missing. Can anyone help me how to provide authorization to Webdynpro page?

Thanks,

SM

[Former Member]

Sounds terrible....

You need to check authority (or use coding techniques which does it for you...), but that is irrelevant because you should not be updating SAP tables like this anyway.

Cheers,

Julius

[Former Member]

Sounds terrible....

You need to check authority (or use coding techniques which does it for you...), but that is irrelevant because you should not be updating SAP tables like this anyway.

Cheers,

Julius

[sdipanjan]

>

> ABAP team has developed customized webdynpro page which updates project system(PS) tables. When we created testId with no roles/profiles and logged in with the testID, then this page gets executed with updating PS tables.

Why you need to do so??

When we took the trace we found all requried objects which are missing. Can anyone help me how to provide authorization to Webdynpro page?

>

This is not the way to build a role by searching so blindly.... If you are not using any TCode/report etc. to update the database (which is the best feature of SAP compared to other ERP products) then you should try to study other menu assignment possibilities and make those custom developments Interactive.

Regards,

Dipanjan

[Former Member]

Hi Dipanjan,

Thanks for the reply!

ABAP team are calling transaction CJ20N in code for updating PS tables, but when we tried to login to Webdynpro page with no roles/profiles, we are able to update the PS tables. What we(Security team) or ABAP team needs to do so that it checks for authorization at the time of Login?

Thanks,

SM

[sdipanjan]

>

> What we(Security team) or ABAP team needs to do so that it checks for authorization at the time of Login?

>

There is no checks performed during Login from point of view of AS authorization concept. This need to be fixed by ABAP team why it is happening. If the user has no role then there is no way to update any record. So it is not happening by user interaction I believe.

Regards,

Dipanjan

[Former Member]

Hi All,

Check if there is any service (SICF) existing for the same, and if some login details are specified there, it will probably be using authorisations of that particular user, rather than the one who is logged on( with no authorisations at all).

Regards,

Sarita

[Former Member]

Yes, that is a good observation!

Also check higher up in the node hierarchy for settings, because they cascade down (lower entries inherit higher node attributes, unless specified specifically).

Cheers,

Julius

[Former Member]

Hi All,

Check if there is any service (SICF) existing for the same, and if some login details are specified there, it will probably be using authorisations of that particular user, rather than the one who is logged on( with no authorisations at all).

Regards,

Sarita

[Former Member]

Hi Sarita,

Thts a good point. I checked SICF service for the webdynpro page, but we didnt provide any Logon details here. Still the issue is open

Thanks,

SM

[Former Member]

Chech the nodes in the hierarchy. It inherits the credentials...

Cheers,

Julius

[Former Member]

Hi Julius,

I checked all the nodes in the hierarchy but nowhere we have maintained user crendentials.

thanks,

SM

[Former Member]

I guess you are going to have to post the code of your WDA for us to proceed further...

Cheers,

Julius

[Former Member]

Well if there are no user credentials existing in the service, you can maintain login details in the service itself, and the user should only have roles for which you want users to access( change/display) forthe particular application.

Alternatively, If you want to assign different sort of authorisations like change access to a particular group( say the applictaion develor, or super users) and on other hand only the display access to some other group of users you may use the concept of internet users( which in turn refer to refernce users, that can be many).

you may refer to the link for more info:

http://help.sap.com/saphelp_nw70/helpdata/en/02/4b528c2a8d11d5991f00508b6b8b11/content.htm

http://help.sap.com/saphelp_nw04/helpdata/en/9d/ad58397e9d2d06e10000000a114084/content.htm

Hope this will help!!!

Regards,

Sarita