Access Controlled Business Object ??

Hello,
Can anyone share few views about Access Controlled Business Object and RBAM Data. I have never used them before and wanted to know more about these like how it affects the security and all.
Please dont point to any reference links or pdf's to see the info abt Access Controlled BO's becoz I have already read enough material and all I had is confusion .
So, kindly share your personal views about this topic here rather than referring a document which is somewhere else.
Thanks in advance.
regards,
vatsav

Hello Vatsav,
I have used an employee association with access context to "1000 - Employee Self Service" and
"1003 - Management". It works very well.
In my case simple business user should see only their own data (1000 - Employee Self Service) and a business user with a management role (1003 - Management) can see all data.
If you want to use a different logic (such as access context code 1000/1003/1007), maybe you have a problem.
Regards,
Kay Kressner

Similar Messages

Report Writer - Converting from MS Access to Business Objects Tools

In 2008, my company migrated to SAP. Security has forced all report writing to use business objects (specifically WEBI); however, WEBI is very very difficult to use. The data in the universe doesn't always match what SAP has and the tool itself doesn't give the robust manipulation that Access does. I have tried to tell the company I need access to the universes through MS Access in order to create the reports automatically and allow interactive databases; however they refuse to give me ODBC access (against policy). Right now I have no alternative but to do daily downloads from SAP in order to feed my robust databases.
Can anyone suggest what business object tool I should use that will replicate what MS Access does for me?
Easy report writing with robust design (including charts)
Easy front-end tool for end users
One to many relationships needed
Efficient/Automatic (no need for daily downloads)
End users can interact with reports (enter data for later analysis)
What about Crystal Reports? What are the limitations and can it do what MS Access does for me today?
Should I be posting this question in another forum?

Hi Amy,
CR 2008 is the complimentary version of CR Designer when connecting to BOE 3.1. You can get an update to Service Pack 3 and then possible SP 4:
https://smpdl.sap-ag.de/~sapidp/012002523100007123572010E/cr2008_sp3.exe
https://smpdl.sap-ag.de/~sapidp/012002523100008782452011E/cr2008sp4.exe
But before you do that check with the BOE admin, SP's should match also but not required.
They should work together, When you use the Report Wizard you'll see an option to connect to Enterprise and then log in using your User account and then the Repository will have the Universes available. Remember this is all set up by the Administrator so you will need the Admin person to grant you access to the Repository as well as anything else you need access to. Once you create the report then you can Publish them to your folder or a common folder and the Admin can then share your reports.
WEBI is what the name implies, it's a WEB interface to allow you to create reports using it's Report Wizard. It does take some getting used to and you should have training available, check with your admin group again. Same as CRD, it tool allows you to create reports but is much more flexible than WEBI is in a few ways but once you understand how WEBI works it has some very powerful tools also.
CR allows you to access any database field you have permission to see, it fully supports database permissions. So if you can't see them again you have to ask your DBA to grant you permissions. You can then link tables including your late entry table if it is separate or simply hitting the refresh button in the viewer will requery the DB for new rows of data. All depends on how it's set up.
As for security, this is a decision your company has made. SAP is just a tool that allows you to be secure. With today's security threats and other privacy laws and hackers abilities to get to and cause personal harm to those affected it's just the way things are these days. Take this up with your Management, it's not something we can decide for you and certainly can't provide you with ways to circumvent the security.....
There is training available for both WEBI and CR as well as third party Help for books available. Downloading the sample reports is a great place to start, you can switch between Design and preview mode and see what happens when you make changes....
Thanks again
Don

Access ECC business object event in CRM

Hi Experts,
We have a requirement in which we need to check whether a business object event is triggered in ECC system and access the related business object details in CRM system.
The ECC and CRM systems are already integrated.
Any help on how to access business object events in the other system would be highly appreciated.
Regards,
Saumya

Closing due to lack of replies

Cannot remove the access control entry object on the object because the ACE isn't present

Hello,
I am very new to using Powershell and Exchange Management Shell, and have no prior experience using either of these tools. However, the software I am installing requires me to use the EMS tool in order to set certain permissions for a user in Exchange, which
will be like the admin account.
The command I am attempting to run follows as:
Get-ExchangeServer | Remove-ADPermission -User $newusername -Deny -ExtendedRights Receive-As -Confirm:$False
This throws me an error saying:
cannot remove the access control entry on the object because the ACE isn't present. I've done some research, and have found that this error is quite common, but the solutions do not apply to what I am specifically trying to accomplish. I am simply trying
to remove the Receive-As permission for the admin user that I just created.
Once again, I am very new to Exchange and Powershell, but if there is any advice anyone has, it would greatly appreciated.

I ran this command, and a very long list was displayed, it looks like everything is there.
The weird thing is that I was able to run a previous command which granted Receive-As access to the user I am creating:
Get-ExchangeServer | Add-ADPermission -User $newusername -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin -Confirm:$False
The description for the commands to run read to 'grant permissions and to revoke denies, if present'. I'm not sure what this means, but the second part of this pertains to the second command that I am having trouble with:
Get-ExchangeServer | Remove-ADPermission -User $newusername -Deny -ExtendedRights Receive-As -Confirm:$False

SAPBI data accessing from Business objects and other OLAP tools

Hi,
We already have heavy usage of Business Object, Essbase and are planning to implement SAPBI 7.0
    a) We are planning to connect our existing Business
        Objects infrastructure onto the new SAPBI platform, Did
        You experience any issues such as performance,
        config issues, delays, web issues.. is there any
        document or link with steps involved in integrating
        Business objects and SAPBI
     b) Can Bex analyzer gives simliar functionalities that
        are in Essabse front- end (EXCEL), I know that the
        backend data managament is quite different, but my
        question is around user interface, do you have any
        comparisons between these two tools.
     c) Is it possible to get data from SAPBI using external
        reporting tools (OLAP) such as Oracle Discoverer ...
Regards,
Raman

if the export to XML file is successful, the file will not be deleted if you are creating it from Metadata Exchange.
The file gets deleted in case you are using the create universe option and by default the file is created in %LINK_DIR%\log\MetadataExchange, you will also see ME_errorlog.txt and ME_outputlog.txt if there are any errors, do you see and erros in these files if you are creating the Universe directly from DS Designer ?
to use Metadata Exchange do the following
Open Data Services Desginer
Click on tools Menu -> Metadata Exchange
In the Metadata Exchange window
Select Export Data Services metadata to a file
Select DI CWM as metadata format
enter location for xml file (C:\temp)
Select the datastore you want to create Universe for
Click OK
Check for file named repo_export.xml in the C:\temp folder or the folder that you specified
Open Universe Builder and Select
Data Integrator bridge
and use the xml file as input to create universe

Issue with Teradata access from Business Objects AIX Machine

Hi,
I am using BO XI.31 which is installed on AIX 5.3 machine. I have installed Teradata driver on the machine and I have created the require ODBC.ini entry to point Teradata database. While refreshing the report I am getting below error message.
A database error occured .The database error test is (CS) "DBDriver failed ot load: /BOBJ/xi_3.1...Connectionserver/libdbd_tdodbc.so
0509-022 Cannot load module/BOBJ/xi_3.1....ConnectionServer/libdbd_tdodbc.so
0509-150 Dependent module libodbc.a(odbc.so) Could not be loaded.
0509-022 Cannot load module libodbc.a(odbc.so)
0509-022 System error:A file or directory in the path name does not exist.
Any body know what are the steps require to access teradata database from AIX box

Hi Jacks,
Following information might help you to resolve the issue.
This is caused by a wrong HOME environment variable of the user that starts the BO processes.
Resolution
Check the correct path of your BO 3.1 installation and export it as HOME environment variable:
Example:
BO 3.1 installation path: /home/<bouser>/bo3.1/Enterprise12.0../...
Type in the command line:
export HOME=/home/<bouser>/boversion
You can also change this environment variable permanently if you edit the .profile file of the BO user (home/<username>/.profile), adding the above line into the file, then source it again with:
. .profile
or with a logoff/logon of the session.
Check if the path of your HOME is correct with:
env | grep HOME
Now you can run the installation setup without any error.
Regards,
Sarbhjeet Kaur

Can we access tables created internally for Business objects in CAF

Hi,
     When we create and Deploying Business objects in CAF then internally it creates tables in Oracle/Maxdb database. Can we access those tables through CAF.
          Or is it possible for Oracle to access the Business objects tables which are deployed on SAP Web Application server?
          We can configure the Oracle driver in the SAP Web App Server. But how can we use it?

Hi Rohit!
Can we access the tables created internally for BO's without the use of CRUD methods provided by them.?
Or
Can we fire queries on these tables through Oracle.? As the tables are created along with BO's in the database.
Maybe, you can do that, but why do you want to do that?
Based on the Entity Services (i.e., CRUD and find operations) that are generated for your BOs, you can implement Application Services which contain any business operation that you want to perform. Furthermore, you can expose your Application Services as Web Services. That's the designated way to do that.
Manually manipulating the underlying database tables does not sound like a good idea.
Best regards
Alexander

Portal integration with Business Objects

Hi,
I have a customer who is looking for Oracle portal solution. They have an sso in place using Business Objects and they also have Active Directory for storing user information. They just want to login to Portal through SSO and access their Business Objects Application.
Any inputs on how this can be done?

Hi Vinay,
We have done the similar kind of implementation, the scenario was same where client has more than 500 rpeorts and all needs to be shown on Portal.
For this we used the HTML file which is hosted in Portal KM and all the report links were provided in HTML page.
For Security purpose we have created KM Navigation iView using LinkListExplorer template where each report is controled using the KM permissions.
Few reports which needs personalizations are controlled using URL iView where Info view link is used and the page is opened in new window so that the SSO will be taken care and less load on Portal.
All the reports are working absolutely fine.
Thanks.
Sushil

How to Execute the Business objects created in ABAP from webDynpro applicat

Wht is the steps , or where the help documents are available for accessing the Business objects created in ABAP or R/3 systems from webDynpro project.

Hello Vishal,
I couldn't find any useful documents for your purpose.
However i had a similar requirement and had implemented the same using GCP APIs. But before i send you the code help, i would like to know your exact requirement. What are you trying to achieve? Are you just wanting to execute the BO and get the result? Or is your requirement has got something more to do?
Regards,
Sudeep.

Trex search for business object in portal

Hi
I would like to build a KM search iView in portal which enables users to search for business object from backend system.
I have built up the indices for business object in the backend system. In portal->trex monitor->display index details, I can see the indices which are created from backend system. But soemhow, I feel the indices are not usable, as I can not see them in the indexing monitor. And after I created an KM search iview with search component 'search_input_indexes', my index created from backend can also not be shown in the preview of the iview.
I guess there is some step missing. Any help will be appreciated.
Thanks and best regards
Yingzhi

Hi Yingzhi,
with current releases, business objects indexed through the ABAP-based Search Engine Service (SES) or directly from certain SAP solutions to TREX are not by default accessible from KM.
The next release after NW2004s will enable Enterprise Search and provide the meta-search engine for parallel search access to business objects and KM documents.
Please see the following presentation for some explanations on SES and Enterprise Search and note stated time-lines:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/73f3eedf-0501-0010-0aa6-950694c02f99
In some monitors that access TREX directly from the portal, you may see the business object indexes, but they are not actually known to KM.
Regards, Karsten

How to update Business Object, rather than doing a final commit?

Hello experts,
I have the following java web dynpro code:
What I am trying to do is to access a business object through my code. The business object has got a root node and a child node called 'version'. And the association is 1:n. I want to create 1 root node and corresponding to that, I want to create few child nodes. But the code dumps at the place where i do the child node navigation. Here is the code.
IPatternTransaction transaction = IExternalITransaction.WD.cast(patternRtApi.
 getSingleton(IPatternRtApi.TRANSACTION).getInterfaceController()).getApi();
IServiceFacade serviceFacade = (IServiceFacade)transaction.getConnectionFacade();
IESRName esrName2 = ESRNameFactory.createESRName(<boName>,<namespace>);
IBOModel model2 = getMyServiceFacade().getBOModel(esrName2);
IQuery executeQuery2 = model2.createQuery(<node>,<query>);
executeQuery2.execute();
IBONode doNode = executeQuery2.getResultBONode();
IBONodeElement ne1 = doNode.createBONodeElement();
ne1.setAttributeValue(<attributeName>,new CctCode("E",null,null,null,null,null));
IBONode doVer = ne1.getAssociatedBONode("Version");
The last line of the code, I'm getting an error message saying that navigation is not allowed using local key. I know the reason for the error. The reason is when we just create the node element 'ne1', it doesn't create the 'UUID' for the record and record with UUID only allows to navigation to child node, say 'Version' node here. UUID gets generated only when you do an update or save. But I don't want to use the save function since i don't want a final commit on the transcation. But I want the UUID to get generated. Is there any method just to update the record in the backend Business Object and generate the UUID without doing a final commit.
I tried functions like refresh, check, isdirty available on 'ne1' and 'doNode'; but that didn't solve the problem. I even tried flush() function provided by the service facade, which generates only a local IKey and not the UUID. But I want the UUID to be generated somehow not doing a final commit.
Any kind of help is highly appeciated.
NB: Mega bonus points for any helpful answers.
Regards,
Sudeep.

Hello experts,
I have the following java web dynpro code:
What I am trying to do is to access a business object through my code. The business object has got a root node and a child node called 'version'. And the association is 1:n. I want to create 1 root node and corresponding to that, I want to create few child nodes. But the code dumps at the place where i do the child node navigation. Here is the code.
IPatternTransaction transaction = IExternalITransaction.WD.cast(patternRtApi.
 getSingleton(IPatternRtApi.TRANSACTION).getInterfaceController()).getApi();
IServiceFacade serviceFacade = (IServiceFacade)transaction.getConnectionFacade();
IESRName esrName2 = ESRNameFactory.createESRName(<boName>,<namespace>);
IBOModel model2 = getMyServiceFacade().getBOModel(esrName2);
IQuery executeQuery2 = model2.createQuery(<node>,<query>);
executeQuery2.execute();
IBONode doNode = executeQuery2.getResultBONode();
IBONodeElement ne1 = doNode.createBONodeElement();
ne1.setAttributeValue(<attributeName>,new CctCode("E",null,null,null,null,null));
IBONode doVer = ne1.getAssociatedBONode("Version");
The last line of the code, I'm getting an error message saying that navigation is not allowed using local key. I know the reason for the error. The reason is when we just create the node element 'ne1', it doesn't create the 'UUID' for the record and record with UUID only allows to navigation to child node, say 'Version' node here. UUID gets generated only when you do an update or save. But I don't want to use the save function since i don't want a final commit on the transcation. But I want the UUID to get generated. Is there any method just to update the record in the backend Business Object and generate the UUID without doing a final commit.
I tried functions like refresh, check, isdirty available on 'ne1' and 'doNode'; but that didn't solve the problem. I even tried flush() function provided by the service facade, which generates only a local IKey and not the UUID. But I want the UUID to be generated somehow not doing a final commit.
Any kind of help is highly appeciated.
NB: Mega bonus points for any helpful answers.
Regards,
Sudeep.

Business Object Repository ( B O R )

Can some one please send me some data or links from where I can get data on Business object repository .

Hi,
SAP's Business Object Repository gives you an improved way to integrate business processes with external partners -- an increasingly necessary ability in the burgeoning e-marketplace economy.
The age of e has had a profound effect on the IT industry. Not only has it changed our way of life, but it has also forced systems such as SAP to embrace a new era of openness. Marketplace demands for flexible automation of inter-business workflow and intelligent data exchange have forced formerly very proprietary ERP systems to begin helping customers integrate with other companies and with e-marketplaces data formats. For the first time, companies must expose their business processes to the outside world.
In order to achieve this openness, SAP provides a technical infrastructure for the R/3 product, the Business Object Repository (BOR), which provides a simple yet powerful mechanism for external systems to trigger core business processes (such as placing an order) without concern for the underlying data structure. This level of abstraction is beneficial because it decouples R/3 from the external system. Either system is therefore free to change its internal business processes without affecting the other. SAP provides this technical infrastructure using a component-based view of its system. Each component or object provides a view of the data and the business processes that interact with that data. External systems can access this data via BAPI methods, which in turn access the underlying data structures of the system. It is the responsibility of the object and the BAPI to ensure the integrity of the data. This encapsulation of the data not only lends itself to external interfaces, but by using objects from within SAP, you can greatly reduce implementation, testing, and maintenance effort via the promotion of code reuse.
Business Objects
A business object is a problem-domain entity that you model in the SAP system, such as SalesOrder, BillingDocument, and Employee. The BOR stores all the objects in the R/3 system. The repository is a group of all the objects in the R/3 system. If the focus of objects is to model atomic business processes then it can be said that the BOR provides an enterprisewide view of business processes. By designing your ABAP code to fit your business processes you increase the ability of that code to flex when those processes are altered or integrated with external systems. This had made the object-oriented approach, which the BOR provides, essential to developing inter-business or e-business functionality.
Attributes
A business object is primarily represented by its attributes. You perform actions, such as create, update, or delete on the attributes by calling the methods of the object.
Attribute NetValue of Object BUS2032 (SalesOrder).
The majority of attributes are data-dictionary fields (for example, the NetValue attribute is defined by VBAK-NETWR). When you access an attribute of an object, you execute a SQL statement that retrieves the corresponding field in the database.
Definition of attribute NetValue.
You can also define attributes that do not exist in the data dictionary. These attributes are called virtual attributes. For example, a business partner has an attribute called BirthDate that is stored in the data dictionary. You can add a virtual attribute to the BusinessPartner object called Age. The age of a business partner is not stored in the database, but you can calculate it using the current date and the birth date of the business partner. If you implement the ABAP code that calculates Age, every time you access the Age attribute, the code executes and returns the business partners age.
Definition of virtual attribute Age.
This is an excellent example of one of the tools that a component-based approach provides. The external system does not need to concern itself with how to gather the data that it requires. The calling program needs only to access the attribute for the data to be returned. This is how business objects decouple the calling program (whether it be in R/3 or external to R/3) from the internals of R/3.
The BOR lets you define multi-line attributes. These attributes define one-to-many relationships between an object and other fields. These objects can be defined in the data dictionary or can also be virtual attributes.
An attribute that uniquely defines an object in the system is called a key attribute. In the case of a SalesOrder, the key attribute is VBAK-VBELN (the TableName and FieldName). It is not uncommon for an object to have several key fields. An example of this is object is the SalesArea (BUS000603) object type which has SalesOrganization (TVTA-VKORG), DistributionChannel (TVTA-VTWEG) and Division (TVTA-SPARTE) as key fields.
Methods
As mentioned earlier, the methods of an object represent the actions you take with objects attributes. An action in this example would include retrieving the status of one or more sales orders based on specific criteria. Methods are analogous to function modules in that they have importing and exporting parameters as well as exceptions, which you view by selecting a method and clicking on the toolbar button. This allows external systems (or internal developments) to pass and accept parameters from these methods just as if they were using function modules -- allowing external systems to call methods.
In Figure 4, the methods shown with the green LED are BAPIs that are called specifically from external systems. They can, however, be called from within the system itself. The method shown with the stop sign is obsolete, but retained for backward compatibility, and should not be used in new developments.
Methods of SalesOrder.
Delegation and Subtyping
One of the most complex concepts in object-oriented development is that of inheritance. This concept lets you extend core functionality by creating a child of the parent object that inherits all of its attributes and methods. For example, a Manager object is a subtype (child) of the Employee object. The Manager object has all the attributes of an Employee object (such as EmployeeID or Name) but also has some extra attributes (such as CompanyCar or ParkingSpace). SAP has not implemented inheritance in the BOR. However, it has provided subtyping and delegation, which offer an alternative way to extend R/3 functionality.
Subtyping
A subtype of an object is another object whose creation is based upon a parent object (see the preceding manager/employee example). The subtype maintains references to all the attributes and methods of its parent object. This means that any methods and attributes defined on the parent can be executed and accessed on the child object. I have often heard less-experienced developers refer to subtyping as copying the parent object. Although the effects can be similar, in order to achieve an understanding of some of the more advanced concepts, such as interface inheritance, it is important to realize that this is not accurate.
If a subtype object were merely a copy of its parent, then all the code contained within the parent would be physically copied to the child. This is not the case. The subtype simply maintains references to its parents methods and attributes. The real difference is that the subtype lets you redefine these methods and attributes. You can easily add your own business rules to the parent methods by redefining the subtypes method. In the following example, I will show why this distinction is so important.
Subtyping Case Study
As an ABAP developer at Acme Tyres Pty. Ltd., you have been given the task of implementing some security measures for the companys online store. The requirement is simple: The password must be at least six characters long.
Modifying SAP code leads to costly and complicated upgrades due to the modified code being overwritten by the newly delivered SAP code. Therefore, The challenge is finding a way of implementing the business logic without modifying SAP code.
After some investigation, you realize that the method CHANGEPASSWORD (in BAPI) on the object KNA1 (Customer) is called when customers change their passwords. All you need to do is create a subtype of KNA1 and then redefine the CHANGEPASSWORD method adding the ABAP code to ensure that the password is a minimum of six characters long. It is of course not wise to change SAP code even assuming you have the passwords, which can be provided only be SAP. After the method is redefined, you just need to implement the business rules in ABAP.
FIGURE 5 Redefinition of ChangePassword method.
It is imperative that once you redefine the method it still behaves in a similar manner. You are allowed to add extra business logic, but the method must still change the password rather than do something unexpected, like delete a customer. This is particularly important when SAP is being accessed from external systems. The external system will expect a method to provide certain functionality. The developer should take care to ensure that this expectation is met.
Delegation
Now that you have implemented a new CHANGEPASSWORD method, you need to tell the SAP system to use the redefined version of CHANGEPASSWORD and not the version that was delivered on the KNA1 object. This is similar to object-oriented inheritance but the two concepts do have fundamental differences.
Delegation for objects.
By making an entry in the delegation table, you tell R/3 that before executing a method on KNA1, it should first check if that method has been redefined on the subtype. If it has, then the system executes the redefined method . If it hasn't, then the system executes the original method. Figure 7 illustrates this process.
Execution flow for methods with delegation.
This delegation is powerful because it lets you implement your own business logic without modifying any SAP code. As long as the objects are properly delegated, your method will be executed.
Responsibility
So far I have shown you two major components of an object, its attributes and methods. The difficulty in SAP is that it has traditionally been a data-driven, procedural-development approach. The BOR is not well understood by developers and managers and thus it is shunned by those that stand to gain the most from it. If managers and developers alike would take a formalized approach to development using business objects, significant savings in the development, testing, and maintenance phases would be achieved. This is due to the high level of re-use that business objects encourage.
Having said this, when a powerful tool is put into the hands of an inexperienced person, chaos can (and usually does) ensue. If object-oriented design principals are not adhered to, then the resulting code has poor reusability and maintainability. Although an in-depth discussion of design issues is beyond the scope of this article, I will introduce in the following section one of the more fundamental design aspects of BOR programming: Responsibility.
When you are given the task of creating a method or attribute on an object, one of the most important questions you should ask is, Does this attribute or method belong on this object? This question is fundamental to an object-oriented design and the answer can make a world of difference. Answering this question incorrectly has detrimental effects on the development effort resulting in methods and attributes strewn across myriad objects, with no coherent structure. If the methods and attributes were strewn across several objects, it would be more difficult to provide a uniform interface to external systems. If an external system wants to execute a particular business process in R/3, it may need to access several business objects, thus increasing coupling and reducing the layer of abstraction between R/3 and the external system.
Lets take, for example, the requirement to be able to update a sales order. This is a common requirement and one that SAP usually implements for you. For the sake of the example, lets assume that SAP has not implemented this method. You will need to implement your own UPDATE method on one of the business objects. The question here is: Which object? This question is what I term as defining responsibility. Which object is responsible for having the UPDATE method on it? As shown in Figure 4, the answer in this cases is BUS2032 (SalesOrder). If you put it on any other object then you run the risk of no one else knowing of its existence. Next time there is a requirement to update a sales order, the developer will develop an additional method. You would then have two separate pieces of code that implement the same functionality. This duplication doubles development, testing, and maintenance requirements. On large projects, this can become a real problem and a maintenance and testing nightmare.
SAP recognizes the challenges facing developers in the e-business era. It is aware that if it wants to take R/3 to the next phase, it needs to continue evolving the ABAP language and ensure that powerful development tools are available to SAP developers.
Rising to the challenge, SAP has begun developing extensions to the ABAP language called ABAP objects (see "Introducing ABAP Objects," in the IntelligentERP feature archive for an excellent introductory article to ABAP objects by Jürgen Heymann and Horst Keller). These extensions will provide ABAP developers with a full range of object-oriented tools. Eventually, these new extensions will make BOR obsolete. However, the use of object-oriented development is sure to be an integral part of future SAP developments, regardless of where the world of e takes us.
Reward points
Regards

SAP Business Objects Access control with BI4.1 and enterprise authetication

Hi Team,
We are on BI 4.1 with enterprise authentication. We are using IDM (oracle waveset 8) for access management. Currently we receive request from IDM and we manually configure user in BI4.1. We are now planning to automate this process, like as soon as user request place request through IDM , his access wil lget configure in BI 4.1
can we achieve this using SAP Business Objects Access controle or with any other method ? Need your guidance
Thanks,
Nivedita

Hi Andrea,
1. you configure the BOE Server with the SAP authentication for your SAP server
1b you configure trust between the portal server and the SAP system
2. you import the portal iView template as part of the SAP Kit into the portal server
3. you create a new system (or use an existing one) in the portal system landscape and configure the properties of the Crystal Enterprise properties
4. you create a new iView based on the portal iView template
ingo
I have some difficulties to create a new system, I don't know witch option i should choose.
     System (from template)
     +BI JDBC System
     BI ODBO-Compliant OLAP System
     BI SAP Query System
     BI XMLA-Compliant OLAP System
     EP 5.0 System
     HTTP System
     JDBC System
     KM Lotus System
     KM WebDAV System
     KM Windows System
     SAP system using connection string
     SAP system using dedicated application server
     SAP system with load balancing
     Web Service System using WSDL URL+
     System (from PAR)
     com.sap.km.cm.repository.manager
     com.sap.km.common.domino
     com.sap.netweaver.coll.appl.gw
     com.sap.netweaver.coll.appl.sync
     com.sap.portal.httpconnectivity.urlsystem
     com.sap.portal.ivs.sl.connector.helper
     com.sap.portal.runtime.application.soap
     com.sap.portal.systems.bi
     com.sap.portal.systems.datasource
     com.sap.portal.systems.EP5
     com.sap.portal.systems.jdbc
     com.sap.portal.systems.sap
     com.sap.portal.systems.webservices
     com.sap.portal.unification50.template
Thanks a lot
Selvam

SRM 7.0 business object / individual procurement document direct URL access

Hello,
While our Basis team is configuring the Portal integration with our newly upgraded SRM 7.0 system, I am wondering if it's possible to take a sneak peak at the business object on the WebDynpro screen, for example, via SICF webdynpro service, such as
/default_host/sap/bc/webdynpro/sapsrm/wdcc_v_rfq_puchaser
After activating all relevant services (as far as I understand), I tried to access the following URL directly on the browser:
https://<server;domain>:<port>/sap/bc/webdynpro/sapsrm/wdcc_v_rfq_purchaser?sap-client=010&sap-language=EN?
I encountered the "Access via 'NULL' object reference not possible" exception on the web page. I think it's due to the missing object type and object id reference on the HTTP parameters. But what are the parameter name(s) that are required on the URL? Does anybody have the experience in accessing an individual document through direct URL?
Thanks,

This question has been answered by the following blog:
/people/ulli.hoffmann2/blog/2009/10/07/srm-70-running-it-without-the-portal

Access restriction for business objects in same solution

Hi All,
Requirement: I have one single solution with 4 modules. 1 module is common and other 3 are industry specific. When i roll it out to a customer, i what restrictions on Business Objects. So that i can roll out single or combination of modules as per requirement.
Hence the configuration requirement would be as follows:
   We need one core configuration for the entire solution which will have the Common Scope part included in it.
   We need industry wise configuration ( could be business configuration )
   Script level screen restriction.
We tried creating a BAC element with Business Topic and Business Options and tried to link BO's to it. But we are finding a problem with this solution, even a user will be able to change the configuration and get access to a module which he didn't pay for.
Regards,
Rudhra Udayakumar
[email protected]

Hello Rudhra,
If the switches are in the BC every user with access to the BC can switch the modules on and off.
As we do not support the interaction / referenceing between different solutions (at least not in the near future ) you need to put all you need in one solution.
I understand that you want to make a reuse of the Common module somehow.
My suggestion would be
Develop the Common in a Solution Template
Develop each industry specific in an own solution
(Re-)Deploy the Common Solution Template to each of the industry specific solutions
You can then sell the industry specific solution one by one and have only one development source for the Common module.
HTH,
   Horst

Access Controlled Business Object ??

Similar Messages

Maybe you are looking for