CRM HTTP Survey Security

Hi,
We are currently triying to use CRM survey via HTTP.
In order to give access to our customers we want to use SAP Web Dispatcher.
Our Security team has issues about this solution, because they think that is insecure.
I would like to know if anyone has already used this solution, and wich kind of infraestructure was used from the security point of view.
Any information will be helpfull.
Best Regards,
Leandro Ferraiuolo.

Hi Leandro,
perhaps it helps if you have a look at my Weblog: <a href="/people/gregor.wolf3/blog/2005/11/07/setup-sap-web-dispatcher-with-url-filter-on-suse-linux-90">Setup SAP Web Dispatcher with URL Filter on SuSE Linux 9.0</a>. It describes our implementation to provide Surveyes in the Internet for our E-Mail Campaingns.
Regards
Gregor

Similar Messages

CRM 7.0 security model & accessebility of data at table level

Hi CRM Experts,
Firstly i am new to this topic 'CRM 7.0 security model' and i want following information from you, my simple requirement of my on going project.
1. what are different types of roles in CRM 7.0 system and how to define those roles & which table all the role information is stored in CRM 7.0 ABAP & Java stack installled system.
2. How are the ABAP & JAVA roles are different from each other in CRM 7.0 system.
3. How to define portal roles in CRM 7.0 & which table or storage location these portal roles data are stored & is there any way we can extract them from CRM system, if any webservice or any mean this can be achieved?
Basically i am interested in users/roles/authorization data in CRM 7.0 for both ABAP & JAVA stack system. please help me achieving this requirement.
Thanks,
Digamber.

Digamber,
For an overview of the changes in CRM 7.0, visit the following link:
http://www.sap.com/germany/solutions/business-suite/crm/SAP_CRM7_Highlights.pdf
In respect to Security model, CRM 7.0 is a bit different, where a lot of functionality is executed via BSPs that are run on a browser. However, the authorizations should be still need to assign in the the backend.
For CRM specific security guides, I recommend you visit the SAP link - http://service.sap.com/security
In the left pane hierarchy, go to 'Security Guides'. Scroll down to find the CRM section and download the required guides.
Also, further there are new concepts like WEBCLIENT UI (an extra authorization layer, which is UI COMPONENT LEVEL and logical links. (Controlled by object UIU_COMP)). Standard authorization setup in the new WEBUI client is now controlled by both backend authorizations and the UIU_COMP. That means even if the user has SAP_ALL access, he will not able to perform any actions.
Hope this provides some light!!
Rgds,
Raghu

CRM 5.0 Security

Hi
Does anyone has document regarding CRM 5.0 security please mail me at <b><removed_by_moderator></b>
I don't have SAP market place access so please don't forward me the link.If anyone has access please download and mail me the documents.
Any other documents regarding NW CRM5.0 will be helpful
<b><removed_by_moderator></b>
Thanks
Message was edited by:
Jackofalltrades

follow http://help.sap.com/saphelp_crm50/helpdata/en/1a/023d63b8387c4a8dfea6592f3a23a7/frameset.htm
Cheers,
-Sunil

CRM - BW Survey Analytics

Hello Experts - My client is implementing CRM and requested activate Business Content. They had requested to implement Survey Analytics which I am not familiar. Just give some background - Surveys are sent to the customers, feedback is requested into CRM. Data will be will be extracted into BW and do some analysis using APD and send back the data to CRM. I understand the process until getting the data in to BW and not sure what can be done in APD and how to send the info back to CRM. Any information pertaining to this will be helpful. Thanks for your help.
- VN.

Hi Venu,
take a look:
BW Survey Catalogs
SAP Note Number: [938679|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_bw_bct/~form/handler%7b5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d393338363739%7d]
Regards
Andreas

How to create HTTPS or secure Socket objects in JDK 1.4?

I would like to see sample working code that shows creation
of Sockets objects that work with HTTPS using JDK 1.4. I am doing
a POST operation (form submission) on HTTPS URL. I must use Socket
objects and cannot use URLConnection (I know URLConnection solves the problem automatically in JDK 1.4).
Also sample code for POST operation would be appreciated.

I wrote this a little while ago to test out Secure Sockets in 1.4. I assume you are doing the client since you are trying talk to a website or something like that, anyway this test class is tested and works, but you will have to clean it up.
Pup
import java.io.*;
import java.security.*;
import javax.net.ssl.*;
public class HelloClientSSL {
    public static void main(String[] args) {
        try {
            int port = 8005;
            int tempport =0;
            if(args.length > 1) {
                try {
                    tempport = Integer.parseInt(args[1]);
                    port = tempport;
                catch (Exception e) {
                    System.out.println("Sorry this is not a valid number " + args[1]);
                    System.out.println("Using Default port 8005");
            Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
            SSLSocketFactory sslFact = (SSLSocketFactory)SSLSocketFactory.getDefault();
            SSLSocket s = (SSLSocket)sslFact.createSocket(args.length == 0 ? "127.0.0.1" : args[0], port);
            s.setEnabledCipherSuites(s.getSupportedCipherSuites());
            java.net.Socket n = (java.net.Socket) s;
            java.io.ObjectOutputStream OOS = new java.io.ObjectOutputStream(n.getOutputStream());
            BufferedReader in = new BufferedReader (new InputStreamReader(n.getInputStream()));
            String response = "";
            String temp = "This is reall cool and stuff\n";
            OOS.writeObject(temp);
            OOS.writeObject("Hello\n");
            while((response =in.readLine()) != null){
                System.out.println("Socket message: " + response);
            in.close();
        } catch (Exception e) {
            System.out.println("Exception" + e);
            e.printStackTrace();
}

CRM / BW SURVEY

Dear friends,
This question is related to CRM survey and i have created a new survey questionire in CRM_SURVEY_SUITE , CALL BACK TO PAI --> CRM_SVY_S_PAI and i have checked the evolution in Business information warehouse.
what is the purpose of that check box? and how can i get those survey data in BW? WHERE i have to create the report?
how to extract those submitted data in to BW?
CRM BW experts pls help me.
thanks,
Anand

HI RAM,
Being a BW consultant i have created a sample survey questionire in CRM development system.
but how do i bring those info to bw?
because no datasource involved... included only functional modules and using BSP
If you have any idea pls let me know

Acknowledgement sent over http on 'secure' channel

Hi,
I have configured a 'secure' eMS 2.0 channel with a https url of my partner: https://partner/eindpunt
When I use this channel for outbound messages it works ok, the message is sent over https.
When I use this channel for inbound messages it sends an ack over http, so http://partner/eindpunt
I suspect this is because we use a proxy that does SSL handling, it receives messages over https and sends these over http to B2B.
Well, we tested without the proxy, so inbound messages arrive over https directly to B2B, same result: ack is sent over http...
Is there a switch to turn on https for the ack?
I use SOA Suite 11.1.1.4.0
Groeten,
HJH
Edited by: HJHorst on Apr 15, 2011 4:02 AM

When you create an inbound ebMS agreement, you have to create a ebMS channel under Remote Trading Partner configuration and select that channel while creating the agreement (in Remote TP channel drop-down list). This channel will be used to post the acknowledgement back to trading partner. You may specify HTTP/HTTPS URL, whatever you want, in that channels configuration.
Regards,
Anuj

How to read values of CRM Activity Survey

Hi Folks
In our CRM 3.1 system, our customizer has customized a Survey when creating af Activity.
And it works fine. Now She need a ABAP report, which among other values, is going to write out the values registered in the SUrvey. As far as I can see there are som tables CRMSVY and Function Modules CRMSVY But which one do I have to use.
I have found the GUID via FM: CRM_SURVEY_GET_LINK. BUt how do I get the saved values?
Have a mery Xmas
Carsten

Hi,
this code reads a certain survey within an order, change the order guid and survey name as you like.
REPORT zsb_survey                              .
DATA     ls_values_xml         TYPE xstring.
DATA     ls_xml_string         TYPE string..
DATA     values                TYPE REF TO cl_crm_svy_values.
DATA     all_values    TYPE survy_t_all_values.
DATA guid TYPE crmt_object_guid.
guid = '27B1FA473F55E52FE1000000914E2D8C'.                  "18100
DATA survey_ui_tab     TYPE crmt_survey_ui_tab.
DATA survey_ui         TYPE crmt_survey_ui.
DATA it_answers        TYPE zcrm_qa_answers_tb.
DATA l_answer          TYPE zcrm_qa_answers.
DATA texts             TYPE crm_svy_api_survey_text_t.
DATA text              TYPE crm_svy_api_survey_text.
DATA g_cust_data       TYPE crmd_customer_h.
DATA dom_text          TYPE dd07v.
DATA it_status         TYPE crmt_status_wrkt.
DATA     lv_error              TYPE bapiret1.
DATA l_status          TYPE crmt_status_wrk.
DATA it_service_os     TYPE crmt_srv_osset_wrkt.
DATA l_service_os      TYPE crmt_srv_osset_wrk.
DATA lt_osset           TYPE crmt_srv_osset_wrkt1.
DATA l_osset              TYPE crmt_srv_osset_wrk1.
DATA lt_subject TYPE crmt_srv_subject_wrkt.
DATA l_subject TYPE crmt_srv_subject_wrk.
DATA ev_application TYPE wff_application.
DATA ev_service TYPE wff_service.
DATA ev_survey_version TYPE crm_svy_db_svers.
DATA    ls_crm_svy_db_s       TYPE crm_svy_db_s.
DATA    lt_crm_svy_db_s       TYPE TABLE OF crm_svy_db_s.
SELECT SINGLE * FROM crmd_customer_h INTO g_cust_data
WHERE guid = guid.
*get the survey data
CALL FUNCTION 'CRM_SURVEY_DATA_GET'
EXPORTING
    iv_object_kind = 'A'
    iv_object_guid = guid
IMPORTING
    et_survey_ui   = survey_ui_tab
EXCEPTIONS
    error_occurred = 1
    OTHERS         = 2.
READ TABLE survey_ui_tab INTO survey_ui
WITH KEY surveyid = 'Z_ZPRO_2_NOCFORMULIER NIEUW'.
CALL FUNCTION 'CRM_SVY_GET_SURVEY_TEXTS'
EXPORTING
SURVEY                 =
    application_id         = survey_ui-applicationid
    survey_id              = survey_ui-surveyid
   language               = sy-langu
IMPORTING
   survey_texts           = texts
CHANGING
   survey_version         = survey_ui-surveyversion"
EXCEPTIONS
   survey_not_found       = 1
   OTHERS                 = 2
CALL FUNCTION 'CRM_SVY_DB_S_READ'
EXPORTING
    surveyid      = survey_ui-surveyid
    surveyversion = survey_ui-surveyversion
IMPORTING
    error         = lv_error
TABLES
    survey        = lt_crm_svy_db_s.
READ TABLE lt_crm_svy_db_s INTO ls_crm_svy_db_s INDEX 1.
ev_application    = ls_crm_svy_db_s-applicationid.
ev_service        = survey_ui-surveyid.
ev_survey_version = survey_ui-surveyversion.
ls_values_xml = survey_ui-valuexml.
CALL FUNCTION 'CRM_SVY_DB_CONVERT_HEX2STRING'
EXPORTING
    x = ls_values_xml
IMPORTING
    s = ls_xml_string.
CREATE OBJECT values
EXPORTING
    i_internal_values_xml = ls_xml_string.
CALL METHOD values->values_get_all
IMPORTING
    et_all_values = all_values.
BREAK-POINT.
Cheers,
Stefan.

CRM Web Survey

Hello Experts,
I am trying to load Text master data for Web Survey. Zero records are found.
Also in CRM system in TCode RSA3 there are Zero records. But when I load Transaction data in the Cube the data is getting recorded in the cube. But even for Transaction Info Sources when I goto CRM system TCode RSA3 and execute the Data Source Zero records are found.
I am doing Web Survey for the first time is there any setting I am missing out on.
Kindly help. Point will be awarded.
Info Source are:
Answer Option             0WS_ANSWER (Master Data)
Application                  0WS_APPL (Master Data)
Question                     0WS_QUEST (Master Data)
Questionnaire              0WS_QSTNNR (Master Data)
Questionnaire Status    0WS_STATUS (Master Data)
Recipients                   0WS_TAROBJ (Master Data)
Survey                         0WS_SURVEY (Master Data)
                                   0SVY_DATA_1 (Transaction data)
                                   0WS_DATA_1 (Transaction data)
Thanks,
DS

Hi,
Goto the tcode RSO2 and Enter the datasource name and then it will give the table name from which it is extracting data.
*Hope it helps.

Safari can't open any https or secure web page

I am running OS 10.3.9 and Safari 1.3.2. Today I can not load any https sites with Safari but able to open these pages with IE. I have try to empty cache without success. Please help.
Imac G5 Mac OS X (10.3.9)

I am having the exact same problem. This is new. All of a sudden I cannot get into any https sites! Has anyone figured this out? Tech support, any suggestions?

CRM Survey in B2C Internet Sales Application

We have CRM 2007 and are live with B2C Internet Sales Application (ISA). Now we want to make Customer Surveys accessible via B2C ISA.
For security reasons, we do not want our B2C Internet Customers to have access to the CRM system. Therefore the BSP option is ruled out. I have seen some blogs on how to enhance security for BSP option but that is also not approved in our organization so BSP option is totally ruled out.
SAP help documenation mentions following:
http://help.sap.com/saphelp_crm70/helpdata/en/ee/eaf995082649c6a594511e1f48672d/frameset.htm
Internet Scenarios
Since Internet users cannot be allowed access to the CRM system for security reasons, surveys have to be made accessible in a different way. You can do this by downloading the required HTML survey to your PC. From here, you can:
Copy the HTML survey into any Web site
Send the HTML survey attached to an e-mail
Internet Scenarios
In Internet scenarios, results can be returned by the following methods:
Mailto
In this case, a mail client, for example, Microsoft Outlook, needs to be set up in advance on the client machine. Survey results are sent to a CRM Server Mail User, that is, a u201Cmachineu201D user. From here, the results are routed to the CRM system for further processing.
http(s)
Note
The http(s) case is recommended, because the user does not have to have a personal e-mail account. Here, the survey results are first sent to a Survey Mailer. The Survey Mailer receives the http request and then mails the results to the CRM Server Mail User, where they can be processed. The Survey Mailer needs to be set up by the administrator at the customer.
For presenting the Survey on ISA, we would like to take the option of Copy the HTML survey into any Web site as suggested in SAP help and would like to get back the results as per SAP help recommendation of https(s) above.
We need guidance on follwing
1. How to download and then copy the HTML surveys into any website (ISA)
2. Detailed steps that are needed for gettting back the survey results.
By the way...we do understand the survey functionality and have been successful in testing the BSP option so we are not looking for general information.
Thanks
Vijay

Hello Vijay,
Could you please share the information on solution steps used as per the requirement??
I'm working on the similar one.
Your earliest response would be greatly appreciated. Thank you Vijay.

Do Mountain Lion and Safari 6.2.2 support SHA-256 Hash algorithms in HTTPS security certificates?

I use SalesForce for my client CRM. I've just received a notice informing me that they are upgrading from SHA-1 hash to SHA-256 for increased HTTPS certificate security. Will my current OS X version (Mountain Lion) and Safari version (6.2.2) support this upgrade?

NEVERMIND! SalesForce provided a test page and I was able to determine that both my Mac and Windows environments and browsers support the upgrade.

CRM Survey Evaluation Data Storage

Hi!
I create, with the CRM_SURVEY_SUITE, some questionnaires, and I enter values for all the questions.
When I work with these activities, I need to take these values,
Does anyone know which tables store this information? And if I need some functions to interpret this information (I need the values and/or percentages)?
Will reward points!
Regards,
Gonzalo Henderson.

hi
first of all i would like to explain the standard methodology to store the surevy results in CRM
In SAP Standard when a customer answers a survey, a new activity with transaction type 0000 will be created that automatically triggers the follow-up processes. In our business scenario were not using transaction type 0000 but Y004 instead.
To make the campaign automation survey scenario running for this transaction type as well you have to change a BAdI.
The following procedure describes where and how to adapt the respective changes.
In a real customer scenario this is a very likely procedure.
Transaction Code SE18
1. SAP Menu Architecture and Technology---->ABAP Workbench -
>Utilities -
>Business Add-Ins
2. Enter the name of the respective BAdI CRM_MKTCA_SVY_PAI in the field Definition Name and choose Display first.
3. Go to tab Interface and double-click on the default implementation class CL_DEF_IM_CRM_MKTCA_SVY_PAI.
4. Again, double-click on method IF_EX_CRM_MKTCA_SVY_PAI~PROCESS_SVY_PAI_FOR_CA and confirm the following dialog box with Yes.
5. In the following you see the example implementation for transaction type 0000.
6. Now switch to change mode and search for 0000 with the Find/Replace button.
7. In the following replace the line
iv_process_type = '0000' with the line
iv_process_type = 'Y004'
8. Save your settings and dont forget to activate your coding again.
now just try to understand it
because as soon as customer repond to the survey you get an in bound activity
this activity generation is crucial part of response analysing because this activity contains the info regarding the customer response
you can also see the details of the sales activity automatically triggered in CRM when survey response is filled from customer
in following tables
ECRM_ISU_ACTIVITY_DISPLAY
Displays an activity by taking the Business Transaction Number for the same.
CRM_CLM_CREATE_CALL_LIST
Create call list for activities generated
ET_ACTIVITY_H
Header Details of an activity such as PRIORITY,
OBJECTIVE, Address Details etc.
ET_ACTIVITY_I
Item Details of an activity.
in the similar way you are trying to retrieve the surevy info stored in tables
also This activity also has the response of the customer which can be viewed in the Questionaire Tab of the activity.
You need to maintain a customizing setting for Questionaire Determination.
Customer Relationship Management -> Transactions-> Settings for Activities -> Questionnaires -> Define Determination for Questionnaires: Business Activity.
Maintain an entry here. Put the Determiantion Id, Descr and transaction type (0000), keep the Questionaire Column Blank, and mark the Checkbox in the Active Column.
3. At the database level two tables get updated based on the response.
CRMD_MKTRU_SVY: Assignment Business Partner / Surveys
CRMD_MKTCA_CT_IN: Table for Inbound Entry
Also in transaction CRM_SURVEY_SUITE, select your survey and click on the Evaluation Button. It should also show the response of the customers
and in your case customer is you coz you urself are filling the surveys.
best regards
ashish

Are theCRM training courses which would help me with building CRM security

Hello,
We are implementing CRM and I am totally new to CRM. To build proper security around CRM, I am trying to find courses which gives me an understanding about CRM and the security implementation. In addition to R/3 security courses, there are security specific courses for BW and HR which I am already familiar with.
Can any one suggest me with relevant CRM courses?
Thanks,

Dear Prasanthi,
Check the below thread which gives you some useful documents.
CRM Security
There are several threads with similar query in this forum. So please do a search before posting in the forums that will obviously save your time.
Regards,
Edited by: Lakshmi Venigala on Dec 4, 2009 5:31 PM
Edited by: Lakshmi Venigala on Dec 4, 2009 5:32 PM

Security in CRMD_ORDER by sales org CRM_ORD_OE

CRM 5.0 SP11
Putting in a 2nd sales org, want to limit the agents access by sales org in either creating or displaying a sales document.
In the role we limited CRM_ORD_OE to sales org A. But in CRMD_ORDER the user can see all documents in sales orgs A & B and create orders for sales org B.
This will be for the ICWC but I figure if I can get it to work in CRM online it should work in ICWC same way.
I do not want to explore ACE, can anyone help? this seems simple but am lost. I have been reviewing the 100+ page CRM 5.0 security guide. Copied our role from delivered role SAP_PCC_IC_AGENT

Hi Lalas,
    From that url I could see this page;
http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm
   If I limited the role to CRM_ORD_LP to "A" own sales organization that seem to work better than CRM_ORD_OE
What was interesting was in CRMD_ORDER doing a search on OR orders did bring back all orders (not desired) but only orders in my users sales org did it allow me to display or change.
The example using only CRM_ORD_OE in this url in the help didn't seem to work
1.       A user should receive authorization to process sales transactions with the transaction type TA in sales organization 0001 and for distribution channel 01.
You assign the following authorizations:
CRM_ORD_PR: PR_TYPE u2018TAu2019, ACTVT u2018*u2019
CRM_SAO: ACTVT u2018*u2019
CRM_ORD_OE: SALES_ORG u20180001u2019, DIS_CHANNE u201801u2019, SALES_OFFI u2018u2019, SALES_GROU u2018u2019, ACTVT = u2018*u2019

CRM HTTP Survey Security

Similar Messages

Maybe you are looking for