restrict fun module

[Former Member]

Hi all,

I need to restrict the function module to run only from proxy. It should not be allowed to run independently. Can you guys give some suggestion

[Former Member]

hi,

You can use a "AUTHORITY-CHECK" or you can develope a test code, testing who runs the RFC.

I advice to use SY variables.

[Sandra_Rossi]

who else could call this function module? do you mean external RFC calls? in that case, protect all the other RFC function modules too!

[Former Member]

Hi,

We do not want any one to run the FM independently.

Thnx

[Sandra_Rossi]

in production, nobody can call a program or function module directly (unless you give them the authorizations!)

Nevertheless, you may think of developers who create a program and call this function module in a hidden manner, and transport it to production (like a kind of hacker attack). In that case, yes, add an authority-check, that should work unless the developer is a friend on an administrator. In that case, I suggest that you trace administrator's work. Moreover, you may revoke authorizations via S_DEVELOP authorization object in the development system so that nobody is able to change this function module. If a developer tries to overpass this authorization check by debug, administrators should be able to see that in the SM21 log.