Access ABAP Webdynpro's/BSP only via SAP Portal

[Former Member]

Hi,

We are using SAP Portal to access backend ABAP Webdynpro's. Users are first using SAP portal to login and then some of them are using the SAP ITS URL in the same browser. It works becuase they have the SAPLOGONTICKET. Is there any way to prevent this ?

[Former Member]

Let me make it clear... We are already using webdynpro iviews in the portal.

Backend URL is something like: http://host:port/sap/bc/webdynpro/sap/wdt_master_detail?sap-client=320

When users login to the portal and in the same browser enter the backend webdyrpro URL, the user gets direclty logged on. I want to completely block direct access to the webdyrnpro from the browser. Users should only be able to access the backend webdynpro's from the Portal only.

[Former Member]

I will see whether there is any way to achieve this.. but under a normal scenario end users will not be knowing the URL.. other than system administrators. So people will not access it directly.

Thanks

[Former Member]

you are right. Only administrators should know this URL. But in our company we have that URL exposed and many users have known it. I can change the ports, but wanted to find out if there is any other way.

[mahendran_balasubramani3]

Hi,

We cannot avoid this. To communicate between portal and backend thru portal you should have already set the trust between the systems. so If you use the WebGUL URL in the same session it will use the same SAPLOGON Ticket and logs in. If you want to stop this process then the Webdynpro iView will always ask for user name and password whenever you are calling from portal. So this is unavoidable.

Thanks,

Mahendran B.

[Former Member]

Hi,

In my opinion, the only way is to forbid the use of SAP ITS with abap rôles or to deactivate SAP ITS URL from SICF.

Regards,

Olivier

[Former Member]

thanks for the reply. i cannot disable the ITS URL as it is the URL used in the portal to access the webdynpro's.

[Former Member]

Are you not using transaction iviews? Why are you using the browser to paste ITS URL? If you are using SSO, you can very well create transaction iviews, webdynpro iviews etc from portal

Thanks

[Former Member]

Hi,

i cannot disable the ITS URL as it is the URL used in the portal to access the webdynpro's.

/default_host/sap/bc/gui/sap/its/webgui

seems to me very diiferent from

/default_host/sap/bc/webdynpro/sap/xxxxxx

Regards,

Olivier

[Former Member]

Please Ignore.

Double post

[Former Member]

Hi,

I did not understand what you meant by "prevent this". What do you exactly want to do?

Thanks