Authorization role upload application at R/3 side ?

Hi all,
Which authorization we shall have in R/3 in order to run the role upload application in portal ?
Thanks
Ben.J.

closed

Similar Messages

How to upload authorization role & profile to PFCG

I have downlaod the authorization role & profile from PFCG at client 100.
How to upload the authorization role & profile to SAP client 200?

check with ur basis guys once
generally it will be dont by them check with them once

Authorization -- Roles

Hi All,
We are moving our applicaiton from Oracle Forms to Apex. I am basically a forms developer and I didnt understand the authorization/roles in Apex.
For eg in our database we have 2 roles app_lookup ( privs - insert,update, delete, select) and app_guest( privs select) . And we use the database authentication for forms. If we have 2 end users Super with role app_lookup and operator with role app_guest, and if I want to implement the database role, how can it be done in Apex.
End user Super ( with all privs) need to update/delete/insert/select in apex
End user Operator( with only priv select) need to select particular table/pages in apex.
Could someone throw lights on how this can be done in Apex.
thank you
rajesh

"user596620",
You can go to your control panel and give us your real name, or at least something easier than "user596620".
Why do I think Database Authentication is a dying trend?
- LDAP directories were designed from the ground-up to store information like Authentication and Authorization data.
- Almost every technology out there can use LDAP as an Authentication source.
- There are only a few technologies that can use the DB for an authentication source. What if your users don't want to have a separate username / password for their APEX apps than their email account? You're out of luck.
- Databases were never designed as user repositories. It's a square peg in a round hole.
- Mixing data schemas and user accounts in a database is mess to maintain. It's often difficult to tell them apart. Which ones contain sensitive data, which ones are just users?
- There are only a few attributes that you can store in a database "user". If you want to store phone, email, certificate, etc, you have to create your tables for it.
- If end users have accounts in a database, it's that much easier for them to connect with third-party tools and start poking around.
- There is no concept of delegated administration with a database. How do you give someone the ability to manage all users in a particular group?
- Managing roles and privs for thousands of database user accounts is a nightmare. It's much easier in a web environment to assign select / execute privs to the account used by the web application, vs all of the users accessing the application.
- Onboarding / off-boarding / auditing accounts scattered throughout a bunch of databases is impossible vs creating / deleting / auditing all accounts and groups (roles) in a single LDAP directory.
I'm probably missing a lot of points here, so I may ask someone one the Identity Management side of things to chime-in.
Tyler

Schedule Role Upload in portal

Hi expert,
Just receive a requirment to code an WD application in orde to trigger the Role Upload functionality in portal.
Anyone has some idea's how to do this ? Is this possible ?
An WD calling a HTMLB application? how ? any code snippets are welcome.
you help will certain has point back.
Ben.J.

closed

ERM - MASS ROLE UPLOAD

Hi All,
when using the Mass role upload from SAP backend systems, i expect that all roles will be uploaded to the final stage in the role methodology inthe ERM and that they will be already generated.
After all, those roles already exists in the systems.
well, i see that this is not the case and i have to go through the different stages with every role.
is this indeed the system behavior or did we do somthing wrong ?
thanks

Hi
We did as you suggested but configured the approval stage in the methodology since the role is already approved and is in ECC PROD.
Now we encountered a situation where we need to update the role in ERM as part of continuos maintainance (after upload) but we don't have the authorization option to enter and change it but only the "save" and "change history" push buttons.
We changed bach the methodology to the relevant one with all the stages but still we can't maintain the uploaded role. the change in the methodology did not effect the role already uploaded.
Do you have any suggestions regarding how we can fix this issue?
Thank you

Iviews created upon role upload

Hi all,
When i import the r/3 roles into portal some default iviews are created,but certain properties of Iviews are different for example "SAP GUI" it comes a "web gui" though i need to have "WinGui" . does any body knows how to change this..coz i cannot keep changing in all the iviews
Thanks
Krishna

Hi Krishna,
sorry for the late reply. I was out of office.
As far as I know there is no way to change the SAP Transaction type to WinGUI. But to be absolutely shure from your side, you could read the documentation.
According to your last post: You can of course change the property directly in the portalapp.xml. But the more correct way is to do it in the Portal Content area and edit the following iView: pcd:portal_content/com.sap.portal.migrated/ep_5.0/templates/com.sap.portal.appintegrator.sap.bwc.Transaction
There you can change the property (as mentioned above in one of my last posts) and you have to define this property as "FINAL". That's very important. But currently I see that it is not possible to set a property as final with the Property Editor in the portal. I have to contact the responsible developer in Israel, but they are out of office today. I will contact you again.
Of course, the iViews that were created during the role upload process have webGui defined. But if you launch them, they will be launched using the ..appintegrator.sap.bwc.Transaction launcher iView and this iView has the final property "WinGUI" defined, which is used.
Regards,
Stefan

Authentication/Authorization in an application server independent way

Hello,
I want to implement form based authentication and URL authorization (role based) in JSF(+AJAX+REST) application.
I would like to use container manager authorization in an application server independent way. (e.g. using my code to authenticate against custom user database but using <security-constraint> of web.xml )
How do I do that ?
Else I would have to have implement authenticationAuthorizationFilter which reads URL permissions from custom XML file.
(Filter based security as application uses JSF and AJAX & REST services)
Are there other options ?
How is acegi ? Ease of use ?
Thank You.

I noticed a project *'SecurityFilter'* (http://www.securityfilter.org/). Anyone using it please share experiences.
I feel filter is the way to go, ensuring that in code that the 'forwards' are to authorized resources only. Direct GET/POST request to a protected resource will be protected by Filter.
All: Please comment.

Error message in the BW role upload

Hello Guys,
When I have uploaded a BW role in the portal in the following path: System administrations -> Transport -> Role Upload, the system has done the following message error: Check system configuration for alias XXXX, system: null failed to retrieve logical system idSEVERE: getObject.
However, when I have gone to the Portal Content, in the following path: SAP Portal Migrated -> SAP Component Systems -> Roles, my BW role was created and it has two folders below that are empty. The reports didnt come to portal.
I have tested the system that link the portal and the BW system, and works fine.
Can you help me please?
Thanks a lot.
Mary

Hi,
Please make sure that the alias of the system is the same as the logical name of the system.
The system alias must match the logical system name of the ABAP system.
Best Regards,
Assaf Klieger
Installed Base Development
NetWeaver Portal Platform
SAP Labs Israel

How to Change Default Iview Properties for Role Upload?

Hello,
We have many roles to upload from R/3 ABAp system to NW2004s EP.
We use the Role Upload tool in the Portal to achieve this.
It works fine, the roles are created in the portal and can be assigned to users.
The fall back is that we have to modify every single transaction iview in the portal after the upload to modify the SAP GuiType from "SAP GUI for HTML" to "SAP GUI For Windows".
How can we change the default model used of SAP GuiType for uploading transaction iviews in uploaded roles?
Also, the uploaded role is not flaged as an "Entry Point", is there a way to set this marker to "Yes" as a default value for all uploaded roles?
Best regards.

This is one of Acrobat's less intuitive areas!
For defaults, right-click on the text box that is as you want it: then select menu item 'Make current properties default'
Use Ctrl-E to bring up the Properties toolbar: its content will change depending on whether you have the box or the text selected, and selecting the box or text can be a bit clunky.
Steve.

Error while Role Upload

Hello,
We have Enterprise Portal connected to the Backend SRM System and while trying to do a Role Upload from SRM to Portal ,I get the following error as below:
com.sap.portal.pcd.rolemigration.RoleMigrationConnectionException: Connection Failed: Nested Exception. Physical connection was not initialized. - message at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(System,en,userid,TWPN_GET_URL,SERVICE_TABLE,{ENABLE_LOGGING= , ROLENAME=<Rolename>OBJECT_ID=00000102}): Connection not available for system ''Connection Failed: Nested Exception. Physical connection was not initialized. at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:114) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1328) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:4974) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4734) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4303) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1497) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:686) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:525) Original exception: com.sapportals.connector.connection.ConnectionFailedException: Connection Failed: Nested Exception. Physical connection was not initialized. at com.sapportals.connectors.SAPCFConnector.SAPConnectorException.getNewConnectionFailedException(SAPConnectorException.java:107) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnectionFactory.createManagedConnection(SAPCFConnectorManagedConnectionFactory.java:133) at com.sap.engine.services.connector.jca.ConnectionHashSet.match(ConnectionHashSet.java:371) at com.sap.engine.services.connector.jca.ConnectionManagerImpl.allocateConnection(ConnectionManagerImpl.java:262) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorConnectionFactory.getConnectionEx(SAPCFConnectorConnectionFactory.java:156) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:295) at com.sap.portal.ivs.internalconnector.ConnectionProvider.getConnection(ConnectionProvider.java:256) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:446) at com.sapportals.portal.ivs.cg.ConnectorService.getConnection(ConnectorService.java:84) at com.sap.portal.pcd.rolemigration.util.Connector.callFunction(Connector.java:79) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1328) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.doDependentObjects(RoleMigrationObject.java:4974) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4734) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.save(RoleMigrationObject.java:4303) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1497) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:686) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:525) Caused by: com.sapportals.connector.connection.ConnectionFailedException: Connection Failed: Nested Exception. Failed in creating the JCO Connection. at com.sapportals.connectors.SAPCFConnector.SAPConnectorException.getNewConnectionFailedException(SAPConnectorException.java:107) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.connectWithJCO(SAPCFConnectorManagedConnection.java:456) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.establishInitialConnection(SAPCFConnectorManagedConnection.java:204) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.init(SAPCFConnectorManagedConnection.java:183) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnectionFactory.createManagedConnection(SAPCFConnectorManagedConnectionFactory.java:129) ... 15 more Caused by: com.sap.mw.jco.JCO$Exception: (101) RFC_ERROR_PROGRAM: 'user' missing at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:518) at com.sap.mw.jco.MiddlewareJRfc$Client.connect(MiddlewareJRfc.java:1086) at com.sap.mw.jco.JCO$Client.connect(JCO.java:3296) at com.sapportals.connectors.SAPCFConnector.connection.SAPCFConnectorManagedConnection.connectWithJCO(SAPCFConnectorManagedConnection.java:429) ... 18 more
Any help would be highly Appreciated.
Thanks

Hi,
Please check the SRM system object connection in the SAP Portal. GO to system administration > system configuration > system landscape and search for SRM system object and test the connection. If connection test successful then try to upload the roles.
Hope it will helps
Best Regards
Arun Jaiswal

Can I get a list of users who have a specific authorization role?

Hello,
I'm wondering if there is a BAPI or FM that takes as input a single authorization role and gives me back a list of all users who have that role?
Thx.
Andy Jacobs

hi,
please check the below FM
'PRGN_1001_READ_USER_ASSIGNMENT'
jaffer ,
Please reward the helpful answers.

Report on Positions directly linked to Authorization roles

Hello All,
Is there a report in SAP which can tell us which positions are assigned to Authorization roles or which Users are directly assigned to Authorization roles rather than through their Positions?
If not a report is there way we can find it out?
Regards,
Ahmad

No Standard report available to show Positions directly linked to Authorization roles

How to achieve logical operator on [Authorize(Roles = ] in MVC

For example, I need to make a controller accessible a user with two roles; role "Admin" and "Editor". How to achieve it.
[Authorize(Roles = "Admins")]
public class SampleController : BaseController
How to do logical operator, such as AND and OR (maybe || and &&)
Thanks!

Hello klouapple,
Please post your question to ASP.NET forum instead of here.
Best regards,
Barry
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Urgent - create Standard Authorization Roles

Hi experts,
we urgently need to establish some basic roles for our key users and basic users, so they can create/run BeX querys and workbooks as part of the Test User's phase.
Based on several posts in SDN we have seen that a valid role template would be S_RS_RREDE for key users and S_RS_RREPU for normal users.
However, I cannot find those roles neither in tx PFCG nor at the Business Content.
What am I missing? How can I fin those template roles (or any other that can apply)?
Thanks and bets regards,
Enric

have you followed these instructions :
For 3.x authorizations:
Roles in BW (Authorization Objects)
for 7.0 authorizations :
/thread/509708 [original link is broken]
here you find a good Authorization Objects Overview:
http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/frameset.htm
Use TA PFCG to create a new role. http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6866e07211d2acb80000e829fbfe/frameset.htm

Please help me regarding role upload ?

Hi All,
installed CRM business package in portal. took CUA as user base. now assigning of users to roles is a concern for me.
i.e. CRM 4.0 and BW 3.5 already comes with some predefined roles for portal, for ex : PCCCAMPAIGNMANAGER*
I assigned an user X in CRM and BW system and I want the same user assignment to be used in portal. so I used "Role upload". i.e. I uploaded CRM user to role assignments to Portal, so I got that under migrated content --> sap component systems --> name of crm system --> under that my role (PCCCAMPAIGNMANAGER).
Now I added the portal role com.sap.***.CampaignManager (portal specific) to this role by "Add role to role". so now when the user logs in, he will be able to see the worksets assigned.
please note that we didnt do any user to role assignments in portal.
so all the users assigned to this role in crm and doing manual "role upload" can login into portal and view the worksets.
portal role consists of iviews from both crm and bw. but now we just had the users assigned to role in crm mapped to role in portal, but what about bw iviews?
i.e. what happens when i assign user x,y,z for this role in CRM and only users x,y in BW, so in portal x,y,z will be assigned to the respective role as we took only crm-portal user to role assignments. then the user Z will get an error obiviously for bw iviews, so how to ensure that CRM and BW roles are in sync with roles in portal.
is there some concept of role mapping or something like that to solve my problem?
sorry if my question is not clear, but hope that you can help me in this regard
Thank you

could some one please help me regarding this..
I am in very urgent need..
Thank you

Authorization role upload application at R/3 side ?

Similar Messages

Maybe you are looking for