How to create and approve ATC exemptions in ABAP Development Tools for Eclipse

[OlgaDolinskaja]

UPDATE: This functionality is supported and recommended in SAP BTP, ABAP environment and SAP S/4HANA Cloud, public edition 

Now you can create and approve ABAP test cockpit (ATC) exemptions using ABAP development tools for Eclipse and transport them between different cloud systems.

Let’s take a look at the ATC exemption process in detail. The following class contains the hard-coded user name and will be checked with the ABAP test cockpit for security violations:

As a result, the following security risk ATC error will be reported in the ATC Problems View:

Now it is possible to request an exemption for this ATC finding using the corresponding context menu:

You probably already know this wizard from applying for exemptions in ABAP development tools for Eclipse in your on-premise SAP systems. Currently the scope of the ATC exemption in the cloud is limited to the finding:

After choosing Next on the second page of the wizard, you can enter Reason and add Justification:

Then you can select the transport request on the next page and finish the creation of the ATC exemption, which will then be displayed in the new exemption editor, where you can edit it further (e.g. change the validity date). After saving your changes in the exemption object, you can send the link (Share Link) to your exemption to the approver:

We created a new development object for the ATC exemption to support CI/CD scenarios. This way, ATC exemptions can be transported together with the source code.

After you shared the ABAP development tools in Eclipse link to the exemption (e.g. per E-Mail):

the approver can open it in his/her ABAP development tools for Eclipse and by clicking on the Class (ABAP Objects) navigate to the class, rerun the ATC over it and e.g. verify that the ATC exemption which he/she gets is the same as requested (by comparing the Checksums), enter Assessment and approve it finally:

After approval and rerun of ATC the finding about the security risk error does not appear anymore in the ATC results since it was exempted:

In order to see the exempted ATC finding again you can use the corresponding menu:

If you now go to the Transport Organizer view, you will see this ATC exemption within a task in your transport request. The transport request can be released, and the ATC exemption will be transported across your cloud systems:

Navigation to the ATC exemption and the ATC Exemptions View

If an ATC exemption exists for an ATC finding, you can navigate directly to this ATC exemption from the ATC Problems View using the context menu Go to Exemption:

or through the link in the column Exemption Status (Ctrl + Click on In Process)

As a result, the ATC exemption will be opened in the ABAP development tools for Eclipse exemption editor:

Beyond this the new ATC Exemptions View is available:

You can use it to find the available ATC exemptions in the system:

Using the context menu Change User Filter… you can search for ATC exemptions of a user.

More information in the SAP Help Portal Documentation Working with the ATC Exemptions View.