Access UME in ABAP

Hello experts!
How can i access to the UME database from ABAP program ?
Thanks!

mariano,
well the easiest way would be expose the needed funtions as web services on the java-stack and use them in your abap-programm
kr, achim

Similar Messages

Access UME from Webdynpro Application

Access UME from Webdynpro Application u2013 display the user attributes from Webdynpro iview
How to go for this...??
Edited by: saurav mago on Sep 1, 2008 6:45 PM

Hello Saurav,
Try this:
import com.sap.security.api.IUser;
import com.sap.security.api.IUserAccount;
import com.sap.security.api.UMException;
import com.sap.tc.webdynpro.services.sal.um.api.IWDClientUser;
import com.sap.tc.webdynpro.services.sal.um.api.WDClientUser;
import com.sap.tc.webdynpro.services.sal.um.api.WDUMException;
try {
     IWDClientUser wdClientUser = WDClientUser.getCurrentUser();
     IUser sapUser = wdClientUser.getSAPUser();
     if (sapUser != null) {
          java.util.Iterator parentGroups = sapUser.getParentGroups(false);
          while (parentGroups.hasNext()) {
               String parentGroupName = (String) parentGroups.next();
               if (parentGroupName.equals("GRUP.R3_ROLE_DS.Z:EP_XPTO123")) {
                    return true;
catch (WDUMException e) {
     e.printStackTrace();
OBS.: sapUser can be used to access a lot of info regarding the user.
OBS.: you need to add a reference to "com.sap.security.api.sda", that is in the default SC SAP_JEE, if I well remember.
Regards,
Douglas Frankenberger

Access code for abap

Hi everyone,
Can you please guys post the access code for abap to mscagin at yahoo com
thanks
sri

What do you mean by access code? Is this the same as a developer key?

Create a table and upload data in MS ACCESS from SAP ABAP programming?

Hi All,
How to create a table in MS ACCESS database and Upload SAP database table data into MS ACCESS table using ABAP programming?
Explain: My client requirement is " If he/she runs a ABAP Program, that will create a table and upload data into MS ACCESS Database table in background. "
Could you please give the solution or code? I know the program RIACCESS and I went through the SAP Note 583698.
Is this only solution for this? Or Any other possibilities?
Please give me solution.
Thanks in advance.

Hi,
It is not possible to create tables in a non SAP schema from inside SAP.
The SAP-Oracle license also does not allow you to create the table (see note 581312):
the following actions, among other things, are therefore forbidden at database level:
Creating database users
Creating database segments
Querying/changing/creating data in the database
Using ODBC or other SAP external access methods
Please refer following link,
[Ckick Here|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_erq/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/scn_bosap/notes.do]
You can also do it by LSMW,
If you are using Access 97, you can download directly into an access
database from SAP. See program RIACCESS for details. You have to establish
an RFC destination PS_ACCESS_1 and 2.
There are then a couple of function modules. Go to SE37 and put in
msaccess and hit PF4.
The following is from the readme file: sapgui/ps/readme.sap
For the MS-Access interface SAP delivers 4 files:
WDPSASTR.EXE This is an RFC server program that is called by SAP R/3
(PS module). This program creates a MS Access database. The structure
information of the tables is transferred from R/3. In addition to
these tables a table named DDIC is created. This table contains the
structure information and should in no case be modified or deleted.
WDPSATAB.EXE This is an RFC server program that is called by SAP R/3
after WDPSASTR. This program filles the tables of the database with data.
There must not be made any changes of the structure of
the tables between the calls of WDPSASTR and WDPSATAB.
WDPSAZET.EXE This is an RFC client program that triggers work/time
confirmations in the PS module of SAP R/3 (like transaction CN27 Collectiv
confirm).
WDPSAMAT.EXE This is an RFC client program that triggers material
confirmations in the PS module of SAP R/3 (like transaction MB1A - Goods
Please also refer following links,
[Click here|Upload data from MS Access tables, to SAP tables.;
Before using the program "RIACCESS", you need to install the PS utilities, which are part of SAPGUI install CD.
It is available in the "SAPGUIPS directory".
Then do the followings :
1. Select transaction code SALE -> Systems in network-> Define RFC Destination.
2. You will need two RFC destinations (TCP/IP connections for the front-end workstation).
Setup the two RFC destinations PS_ACCESS_1 and PS_ACCESS_2 and you'll have to get them to point to
wdpsastr.exe and wdpsatab.exe respectively.
3. Then execute RIACCESS and choose PS_ACCESS_1 to generate access tables.
The system must also be able to access the RFC-DLL files (librfc2.dll, librfc3.dll, librfc4.dll, librfc5.dll, librfc6.dll, vrfc.dll).
Please note that Access only supports tables with up to 255 fields.

Accessing UME data programmatically

Is it possible for me to access UME data on one server when running on another server?
Here's the scenario:
I am building some common code that will get information about a user from various sources and create one object to contain all that data. For example, the code will get some data from an Oracle database, some other data from a Notes database and some data from the UME. I'll then build an object that I will return to the calling program and it can use this information while the application is running to improve the 'user experience'
I know how to read from the UME on the server I'm currently running on but that becomes a problem when the code is running on the local engine. We have all our developers setup with a local engine so they can test their code locally before putting on server.
For accessing Oracle this is no problem because we just use the same datasource name (defined in Visual Admin) as we have on the server. The actual datasource definition on local engine points to the same Oracle server/database as the development server's datasource does. This means that our developers can test their code that accesses Oracle locally without having to deploy to development server.
Problem is that I can't figure out how to do something similar with UME. I don't want to duplicate the UME on every developer's machine and I don't want to have them deploy their code to development server each time they want to test. Obviously, they'll need to deploy to development server eventually but we like to do our testing locally first.
Sorry for the long post but I wanted to give as much info as possible. Please let me know if you have any questions and I'll be glad to clarify/elaborate.
Thanks in advance for any help.
David.

Hi David,
I don't have any documentaion about the Web Service.
However, consuming it is like consuming any other Web Service in Web Dynpro:
Models -> Create Model -> Import Web Service Model
Select WSDL Source -> Local File System or URL
Enter WSDL: <b>http://<portal>:<port>/irj/servlet/prt/soap/UMWebService?style=rpc_enc </b>
This works in EP6 SP16 and I guess will work on other versions as well.
See attached snapshot for methods.
http://img260.imageshack.us/img260/2788/umewebserviceot9.jpg
Hope it helps,
Omri

How to point UME to ABAP..

Hi friends,
I have configured UME to ABAP system....UME has to point to ABAP.
I have done some steps through visual adminsitrator->UME Provider
Under UME provider i have provided certain details like abap hostname, abap client number, sapjsf user.
in ABAP Side, i have created roles SAP_BC_JSF_COMMUNICATION and SAP_J2EE_ADMIN for sapjsf user and profiles SAP_ALL and SAP_NEW.
Apart from these what else has to be done in both java and abap side? I have gone through many forums but i dint find exact stuff that i needed.
If everything is done, how to check whether UME has pointed to ABAP?
please suggest.
Thanks,
KK

Hello,
My advice is to first check for the documentation instead search in forums:
http://help.sap.com/saphelp_nw70/helpdata/en/9e/fdcf3d4f902d10e10000000a114084/frameset.htm
If you've performed the steps as described there, your UME is correctly pointing to the ABAP client.
Cheers,
Diego.

SAPgui access protection for ABAP AP Server

Hello,
I want to disable the SAPGUI access on one ABAP AP Server. I can't find any kernelparameter in (rdisp/* or login/*).
Is there a possibility to configure the dispatcher to allow only load balancing and no direct access?
The story behind is that users don't want to change their wrong saplogon files.
Kind regards
Joerg

I remember that this was done in "The EarlyDays" when OSS1 was accessible via SAPGUI. When you tried to log on you got a popup that you have to use load balancing and you got kicked out.
I guess this is not a parameter settings and must be done during login by a user exit.
For a start you could use
Note 609863 - How to lock out users using GUIs of wrong version
Note 142724 - Prevention of multiple SAPGUI logons
Markus

Access UME information in Web Dynpro for ABAP application

We have an WDA iView deployed in a NW2004 Enterprise Portal. We have mapped the Enterprise Portal UME to our corporate LDAP. How do we access this UME information within the WDA iView ? Besides the user id there are specific security flags that the WDA application needs.
Any help is appreciated!

Hi Venkat ,
Please refer to this link,
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/webdynpro/using knowledge management functionality in web dynpro applications.pdf
Thanks,
Raj.

UME with ABAP AS and LDAP Datasource

Hello SDN´s
We have tried very hard for the last days configuring the ume-xml for the following scenario:
-     LDAP is used to authenticate the user
-     AS ABAP is used to store the roles of the user (because they automatically becomes groups in the portal)
- the portal and the ABAP-system are on different servers
Given facts:
1)     we canu2019t synchronize the roles of the ABAP system to the LDAP
2)     we have to use the open-LDAP for the authentication
3)     DataSources are readonly
4)     User can have similar or different userid´s on the DataSources (Mapping required)
Therefore, we read the user and account information from the LDAP and groups/roles form the ABAP AS.
Result:
a)     user with similar userid on LDAP and ABAP AS: These user were no longer able to log on to the portal
b)     user with different id´s (mapped) on LDAP and ABAP: Can log on
Questions:
-     Is it true that similar userid´s leads to inherent problems of the UME Persistence Manager?
-     Did we set up a wrong config-xml?
-     Is there any other way how we could authenticate to the LDAP and having the Roles of a user read from the ABAP system dynamically?
Thank you very much for your help
Sincerely, A. Hunziker

Hi Andre,
Not sure if my remarks below can help you but I do hope that it can shine you some light.
We have LDAP as our main UME, which is configured in our Portal7.0. This means that security groups created in LDAP are "replicated" into the Portal. We created Portal Roles which are assigned to the security groups created in LDAP. We also use SSO and it was setup via the SPNego Wizard (http://help.sap.com/saphelp_nw70/helpdata/EN/45/40a0de773a7527e10000000a114a6b/frameset.htm). This way, the user only needs to login via Windows and access the Portal without having to login (when users have the same Windows userID as that of their SAP ID). If the users have a different userID between Windows and SAP, then they do a user map under personalization of the Portal.
To connect our Portal to our backend systems, we created a reference system (http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm) and we have our Portal certificates in all backend systems (http://help.sap.com/saphelp_nw70/helpdata/EN/d3/41c8efb31d11d5993800508b6b8b11/frameset.htm).
With the above, users have SSO from Windows to Portal and via the reference system, they can enjoy SSO as well into our backend systems.
Basically we have control what the users can see from the Portal (directly from LDAP security groups with users assigned to that) and what the user can do on backend is still maintain in the backend authorisation setup.
Hope that can help you.
Ray

UME: LDAP + ABAP

Hi,
There are similar threads to this and I have read both thread IDs 187875 and 476229. We have been able to customize the datasource XML file to include LDAP, ABAP and the private UME database. The portal can be started, and we are able to logon with administrator access. On the portal, we can even see users from all three datasources. However, user authentication is not working for us. At the moment, we have a USERA in LDAP and in ABAP.
1. Is it possible that because USERA is NOT UNIQUE in the user datasources, authentication is failing?
2. How do we go about having USERA authenticate using LDAP but gets the ABAP roles assigned to him from ABAP?
I will also post a follow up message with the owner of thread ID 476229. In the meantime, any feedback would be welcomed.
Thank You.

Hi,
Please note that we have verified that USERA is not able to logon because his login ID is not unique on the portal (since USERA exists in both the LDAP and ABAP datasources).
Thank You.

LDAP access in WebDynpro ABAP

Hello,
Could you let me know your views on the following:
Scenario:
Customer has an LDAP and would like to use it for any user authentication
Question
1) How can a webdynpro application connect to LDAP for user authentication? Could you pls. elaborate on the process / configuration.
2) With WebDynpro for Java, I suppose we can configure the UME to use LDAP and also we can map LDAP users to R/3 users. Is there something similar available in ABAP (CUA-LDAP connectivity?)
3) I believe this needs to be configured at the ABAP Web Application Server level and when the settings are done user are authenticated against LDAP. Is my understanding right or do we need to code something within ABAP webdynpro application as well.
Appreciate your inputs.
Best Regards,
Gajendra.

Hi,
I think we get connected to the enterprise portal to have the access to LDAP where the users are mapped as per single sign-on.
Please try to post in the Enterprise portal aslo to get more information.
Regards,
Lekha.

UME vs ABAP Security for VIRSA

We installed Virsa Compliance Calibrator & Access Enforcer and trying to configure security in UME to control user access so that besides action level security, we need further restriction on for example, Functional Area, cost center & department access. Does UME have lower level authorization restriction capabilities similar to that of ABAP authorization object level security? If not, how can we utilize ABAP Virsa security objects to control JAVA front end access?
Your advise is much appreciated.
Thanks,

Hi Jessica,
I am not an expert on this, but I am pretty sure you can develop actions that include such restrictions. Start here:
http://help.sap.com/saphelp_nw04s/helpdata/en/21/f8424089ff2571e10000000a155106/frameset.htm
-Michael

Server0 getting restarted when i access UME configuration

Hai experts,
i have changed UME configuration for ABAP , and for testing the sap system I.e ( through system configuration )when i click on UME configuration tab my server0 is getting restarted , before restart it ends with exit code 666 and starts again. i logged in through sap* to access this.
kindly help me where to modify or any changes has to be done.
thanks in advance..
regards
Arun

std_server0
getThreadDump : Thu Aug 27 10:08:54 2009
FATAL: Caught OutOfMemoryError! Node will exit with exit code 666
================================================================================
java.lang.OutOfMemoryError
Full thread dump Java HotSpot(TM) Server VM (1.4.2_11-b06 mixed mode):
"Thread-113" daemon prio=5 tid=0x05ef7118 nid=0x1c4c in Object.wait() [0x5d84f000..0x5d84fd94]
     at java.lang.Object.wait(Native Method)
     - waiting on <0x270dffc8> (a java.lang.ref.ReferenceQueue$Lock)
     at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:111)
     - locked <0x270dffc8> (a java.lang.ref.ReferenceQueue$Lock)
     at java.lang.ref.ReferenceQueue.remove(ReferenceQueue.java:127)
     at com.sap.engine.cache.util.ReferenceQueueRunnable.run(ReferenceQueueRunnable.java:43)
     at java.lang.Thread.run(Thread.java:534
dev_server0
Thu Aug 27 10:13:02 2009
1280 !    com.sapportals.portal.prt.util.AutoClassLoader$ClassPath::_createLocation (290 bytes)
Thu Aug 27 10:13:31 2009
1281 !    com.sapportals.portal.application.applicationrepository.ApplicationRepositoryService::__getTechnicalUser (66 bytes)
1282       com.sap.security.core.srvUser.imp.ServiceUserFactory::checkForServiceUser (243 bytes)
1283 !    com.sap.security.core.util.cache.BaseTechCacheWrapper::get (86 bytes)
1284       java.util.Arrays$ArrayList::size (6 bytes)
1285       java.util.Arrays$ArrayList::get (7 bytes)
Thu Aug 27 10:13:33 2009
1286       EDU.oswego.cs.dl.util.concurrent.ConcurrentReaderHashMap$HashIterator::nextElement (5 bytes)
Thu Aug 27 10:13:41 2009
1287 !    com.sapportals.portal.pcd.pl.PlAttribute::cloneKeepReadOnlyFlag (97 bytes)
1288       com.sapportals.portal.pcd.pl.PlAttribute::clone (12 bytes)
Thu Aug 27 10:13:45 2009
64% !    java.lang.ref.Finalizer$FinalizerThread::run @ 0 (21 bytes)
Thu Aug 27 10:13:50 2009
1289       java.util.HashMap$Values::iterator (8 bytes)
1290 s     oracle.jdbc.driver.OraclePreparedStatement::clearParameters (29 bytes)
Thu Aug 27 10:13:51 2009
1291       com.sap.sql.sqlparser.SQLLexer::makeToken (7 bytes)
1292       com.sap.sql.sqlparser.CheckGroupVisitor$WhereChecker::visitColumnReference (32 bytes)
1293 !    com.sap.engine.services.dbpool.spi.LocalTXManagedConnectionImpl::commonCleanup (84 bytes)
1294       com.sap.engine.services.dbpool.cci.ConnectionHandle::<init> (81 bytes)
1295       com.sapportals.portal.pcd.pl.AttributeValuesTable::readAttributeValue (662 bytes)
1296       oracle.sql.CharacterSet::conv3ByteUTFtoUTF16 (71 bytes)
1297       com.sapportals.portal.pcd.pl.PlFactory::getInteger (72 bytes)
1298       oracle.sql.CharacterSet::conv2ByteUTFtoUTF16 (36 bytes)
1299       oracle.sql.CharacterSet::isHiSurrogate (16 bytes)
1300       oracle.jdbc.driver.T4CClobAccessor::processIndicator (156 bytes)
1301       com.sapportals.portal.pcd.pl.PlAttribute::setInternalNoEmptyLocaleMapping (114 bytes)
1302 s     com.sapportals.portal.pcd.pl.PlBiDirectionalCache::getObject2 (54 bytes)
1303 !    com.sapportals.portal.pcd.pl.PlAttribute::readTextValue (102 bytes)
1304 !    com.sapportals.portal.pcd.pl.AttributeHeadersTable::selectSubtreeObjectsAttributeHeaders (145 bytes)
Thu Aug 27 10:13:52 2009
1305       com.sapportals.portal.pcd.pl.PlFactory::composeAttributeString (96 bytes)
1306       oracle.jdbc.driver.T4C8TTIClob::read (297 bytes)
1307       com.sapportals.portal.pcd.pl.PlAttribute::setInternalNoEmptyLocaleMapping (114 bytes)
1308       com.sapportals.portal.pcd.pl.PlLocaleCache::getLocale (118 bytes)
1309       com.sapportals.portal.pcd.pl.PlFactory::isLazyReadLocale (40 bytes)
1310 !    com.sapportals.portal.pcd.pl.AttributeValuesTable::selectSubtreeObjectsAttributeValues (145 bytes)
1311       java.lang.Long::hashCode (14 bytes)
1312       oracle.jdbc.driver.T4CTTIoer::processError (187 bytes)
Thu Aug 27 10:13:53 2009
1313 !    com.sapportals.portal.pcd.pl.AttributeValuesTable::selectById (91 bytes)
1314 s     java.util.Hashtable::size (5 bytes)
1315       java.lang.Integer::equals (29 bytes)
1316       java.util.Hashtable$Entry::clone (41 bytes)
1317 !    com.sapportals.portal.prt.util.AutoClassLoader::loadClassLocally (127 bytes)
1318       com.sun.naming.internal.ResourceManager::getInitialEnvironment (131 bytes)
Thu Aug 27 10:13:54 2009
1319       com.sap.security.core.srvUser.imp.ServiceUserFactory::getUniqueNameMapping (36 bytes)
Thu Aug 27 10:13:58 2009
1320       com.sapportals.portal.prt.deployment.descriptor.ServiceList::getService (72 bytes)
1321       com.sapportals.portal.prt.deployment.descriptor.PropertyList::load (102 bytes)
1322       com.sapportals.portal.prt.deployment.descriptor.FilteredNodeList::getLength (17 bytes)
Logs at the time of restart....
Edited by: Arun Rajan on Aug 27, 2009 7:17 AM
Edited by: Arun Rajan on Aug 27, 2009 7:19 AM
Edited by: Arun Rajan on Aug 27, 2009 7:20 AM

ABAP Query: Access variables in ABAP Program through InfoSet Query.

Hi,
While generating a report using ABAP Query Tool, how can we access the variables in the ABAP Program in the InfoSet Query?
Thanks in Advance!!!

HI,
Dear, it seems that you have changed the query in SQ02 and then just save it and not generated.
or may be after generation again clicked on SAVE button.
So untill unless you will not generate the query, it won't work.
Secondly, by chanegs in the query, i don't think it changes the name of the main program.
Regds,
Anil

Anonymous user Unbale to access an WebDynpro ABAP iView

Hi,
I have developed an application using webdynpro ABAP and integrated that into portal.
For this webdynpro application i have to create an iview, assigned it to a page, assigned this page to a custom role. I also set Authentication to anonymous for the page and iView. Assinged the custom role created to anonymous Group.
But while running it i am getting an error "An exception occurred while processing your request. Send the exception ID to your portal administrator. Exception ID 04:55_25/10/11_0047_14739050"
When I checked the log, it shows the error as "Deprecated scope of type SERVERSESSION_AT_LEAST_ONE_APP_SCOPE is used! Please replace the usage of scopes with new
mechanism based on "Cross application session communication API".
I also checked the note 1031159 and changed the configurations accordingly but getting the same above error.
I am on EP7.3 version.
Please guide me to move further successfully in showing the webdynbpro abap applicaiton to anonymous user.
Thank you.

Hi,
I'm also working on EP7.3 and R3 WD4A integration. But I just can't find any WD for ABAP from whithin EP7.3 wizard.
I tried to create the WD4A iview by right-clicking a PCD folder and then "New"->"iView"->"iView from remote source" to get a search screen. I choose a system alias (point to bk web as), use "*" as application id, and pick "WebDynpro for ABAP" as the application type.
However, I always got "Nothing found. Change your search criteria."
I did do some activation work on backend R3 SICF setting. I'm able to directly access web dynpro via http://mywebas.domain:8000/sap/bc/webdynpro/mywd....
If you're using the same scenario, please let me know anything I missed or any other special setting.
Thanks

Access UME in ABAP

Similar Messages

Maybe you are looking for