Badi : security checks

[Former Member]

Hello folks ,

I am working on the badi part . Can anyone please suggest how to provide the security check on a already implemented badi .

If any one can help me out in this . I have passed "abap_true" in the if_check_security .But still i am not getting the expected result.

I have done so by checking out the screenshot attached.

Attached screenshot.

[former_member186338 · Accepted solution]

"But still i am not getting the expected result." - why do you think so?

[Former Member · Accepted solution]

Hi Vadim,

Thanks for the reply .

I have checked it using read only profile but still it is still  running successfully and writting the data with read only profile user (triggering the package).

Is there anything else to be done other than passing "abap_true" in "if_check_security ".

best regards,

Abhishek

[former_member186338 · Accepted solution]

But in the code you are reading data, not writing...

[Former Member · Accepted solution]

Hi Vadim,

Actually that was the document snapshot to refer only .

I am using the below code .

get REFERENCE OF tb_data_new into lr_data.

   TRY.

   CALL METHOD me->WRITE_DATA

     EXPORTING

       I_APPSET_ID              = I_APPSET_ID

       I_APPL_ID                = I_APPL_ID

       IR_DATA                  = lr_data

       IF_CALC_DELTA            = abap_true

       IF_SIGN_TRANS            = abap_false

*      IF_DUPLICATE             =

      IF_BYPASS_SECURITY       = abap_true

*      I_WORKSTATUS_BLOCKACTION =

*    IMPORTING

*      ET_MESSAGE               =

       .

*   CATCH CX_UJR_WRITE_BACK .

*   CATCH CX_UJ_STATIC_CHECK .

   ENDTRY.

[former_member186338 · Accepted solution]

Sorry, but " IF_BYPASS_SECURITY       = abap_true" - Bypass security means - ignore security. And it's True!

[Former Member · Accepted solution]

Okey i was making mistake then .

Will change abap_true to abap_false then will check again .

But still i dont think that keeping abap_false will provide the access to limited no. user to run the package successfully.

I want to restrict the users based on the condition .