SAP GUI Scripting Security parameters

[former_member758955]

Hello all

I have a customer who wants to record SAP GUI applications. I have informed the customer that he needs to enable SAP GUI scripting (server side rz11 transaction). I have also forwarded him the SAP GUI scripting security guide. However, the customer now has security concerns and wants to set the security parameters (Chapter 4 Security Guide)

sapgui/user_scripting_disable_recording

sapgui/user_scripting_set_readonly

Is it still possible to make recordings in SAP GUI by activating these parameters? Thanks in Advance for some guidance here

[KristinaKunad · Accepted solution]

Hi Katharina,

I think we cannot record or play back with this setting enabled, because we depend on scripting: sapgui/user_scripting_disable_recording

This parameter disables all SAP GUI Scripting events for the system on which it is set. It is still possible to run previously recorded or written scripts. However, it is not possible to record new scripts or log any other type of information in response to SAP GUI Scripting events.

I believe it is ok to set the other one: sapgui/user_scripting_set_readonly

In SAP GUI Scripting’s read only mode only a subset of the API can be used from a script. This comprises read access to properties and calling read only functions. This mode is typically used when SAP GUI runs together with a Screenreader Software or for the side panels in SAP Business Client. Please note that the read-only restriction applies to the state of the SAP GUI session on the server. This implies that you may not execute any call which changes the data stream sent to the server, even if no actual database update is attempted.

But please have the customer try them in a test environment first and do some test recordings and playbacks.

If your customer has concerns, please raise an incident and set up a meeting with support to address these concerns. Also it might be an option to limit the recording to a test or development SAP system and turn on scripting there. However, not having the scripting turned on in Production will limit the use case for Desktop Assistant.

If DA is not planned at all, it might be ok to go without scripting. But the recording quality will not be as good.

Hope this helps, please mark the question as answered if it does.

Take care,

Kristina

[thiago_glanzner · Accepted solution]

Link for documentation with full details: https://help.sap.com/docs/sap_gui_for_windows/1f190e2f59db43e192cba638ea29870b/68e329a92e4b454ba74cb...