encoding url in web dynpro

[Former Member]

hi

i have creatend an abap webdynpro which send to an Employee pdf file with his details. In the url i have the a variable which contains the employee pernr and the program in the webdynpro controller calculate his details according to this pernr.

Is there a way to hid or encode this part in the url (cause i dont want that the user will have a way to chabge the pernr no in the url and watch other employee details ) ?

thanks

elad

[Former Member]

Not sure about this one, but it may be easier to send a GUID instead of the pernr in the URL. If it doesn't exist, you can add a field GUID it to the master data table (and use FM GUID_CREATE to create unique GUIDs). You can use the GUID as a secondary index since it can identify the employee.

Hope this helps!

Cheers, Roel

[Former Member]

sorry but what is GUID ?

[Former Member]

GUID = Global Unique IDentifier. It is a generated string of characters and always unique (example: DFEC37D77015D8F19D1B005056995118). Attach it to the masterdata table of your employees and you can identify the employee with this GUID.

Cheers, Roel

[Former Member]

is there a reverse fm GUID - which i send it the uniqe string and get the pernr back ?

because i want it both ways

[Former Member]

Another approach would be to avoid sending any personal data in the URL at all.

The application could check the logon userid and retrieve the personnel number. Then produce the PDF only for the logged on user.

Rob

[Former Member]

You should generate a GUID for every employee in your database and save it in the same table. For instance you have employee 1234. You run FM GUID_CREATE and the GUID is DFEC37D77015D8F19D1B005056995118. Now save this GUID in the table where your employee master data is stored (use an append structure or so). When you generate the URL include this GUID instead of the pernr so something like http://my.system/wdapp/get_details?guid=DFEC37D77015D8F19D1B005056995118. In your application you can select the corresponding employee from the masterdata table as you saved the GUID with his pernr. I can't make it simpler than this

Rob's approach is the best way to go, security-wise! But it requires that all employees have a user ID in the system.

Cheers, Roel

[Former Member]

i am sending the url to the user microsoft inbox there he will press the url link and will get the pdf. he is loging in in a non dialog usr i define in the webdynpro in order to get into the sap

[Former Member]

Is it a single general userid for all users or does each employee have a unique userid?

Rob