Hide the BSP code for the user

HI
we have a requirement, where we need to mask or hide the source code on the BSP pages, or atleast some URLS/hyperlinks within the code.
when a  user views the source code, he must not see it in full or atleast hide the URLS within the code.
we have an external environment and just for security reasons, we need it to be done.
do we have a std way of configuration or something ? this is for the standard BSPs generated for CRM functionality.
This is not for custom BSP apps.
thanks

I would know of no way to do this properly with SAP tools.
One approach is: You could create your own BSP tag and generate the URLs in there. Then put it on the BSP page. Should not be to much effort.
Nevertheless, the complete HTML code is send to the browser for interpretion. This includes your URLs! Thus when a user views the source code of the WebClient page in Internet Explorer he/she will get the URLs.
The only way I can think of right now, to do this halfway secure, is relaying through the WAS. Create an own webservice, write URLs on your BSP that this service handles.
Just an idea, I have not and will hopefully never have to do this.
cheers Carsten

Similar Messages

  • How to secure BSP applications for external users on the internet?

    I posted this question under Enterprise Portal forum but got no response. I am hoping some of you experts in this area can help.
    We have developed BSP applications and set them up as iViews in Enterprise Portal 6. Our portal implementation will be used by external users.
    We have security concerns that the access to the BSPs  allows external users direct access to the R/3 system. We were told that we should use ITS application instead of BSP application for external users.
    Do any of you have any insight into how we could work around the security problem with BSP applications, or BSP applications in EP6? Your help will be greatly appreciated.

    In sense they are correct as to whether it is more secure or not would have to be a call by people who are more of an expert than myself.
    But I can see there point the BSP runs directly on the system and uses the system security where as the ITS is basically just an RFC call. However for us we use a 620 server with BSP's and make RFC calls to our R/3 systems thus keeping people of the R/3 directly - however we are not opened to the Internet.
    If your message is answered please remember to mark it solved so others searching in the future can find the solved ones quicker - just click on the yellow star.

  • Question on how to Hide the User Name, Password, and Domain fields in the MDT Wizard

    MDT 2012 U1
    Deploying Windows 7 via Offline Media (ISO) to MS Virtual PC's
    I am looking on how to Hide the User Name, Password, and Domain fields which are prepopulated in the MDT wizard via the CS.ini (Not so concerned about the Domain field as I am User Name and Password)
    We do need the Computer Name and OU fields to be seen, so skipping the wizard is not a option
    The client just does not want these fields to be seen by the end users, they dont want them to even know the account name used for adding the machine to the domain, of course the password is not displayed but it must not be displayed either.
    But since we use the fields they must still  be fuctional just not seen.
    Thanks.....
    If this post is helpful please click "Mark for answer", thanks! Kind regards

    You shouldn't have to edit DeployWiz_Definition_ENU.xml. You should only need to add "SkipAdminPassword=YES" to the CS.ini file and your authentication information.
    Example:
    [Settings]
    Priority=Default
    Properties=MyCustomProperty
    [Default]
    OSInstall=Y
    SkipCapture=NO
    SkipAdminPassword=YES
    UserID=<MyUserID>
    UserPassword=<MyPassword>
    UserDomain=<MyDomain.com>
    SkipProductKey=NO
    SkipComputerBackup=YES
    SkipBitLocker=NO
    -Nick O.
    Nick,
    SkipAdminPassword=YES is for:
    You can skip the Administrator Password wizard page by using this property in the
    customsettings.ini.
    I am hidding the Username/Password/and domain field in the computer name Wizard pane which is read from the cs.iniDomainAdmin=xxxxx
    DomainAdminPassword=xxxxx
    DomainAdminDomain=xxxxxx
    JoinDomain=xxxxxx
    If this post is helpful please click "Mark for answer", thanks! Kind regards

  • How can I hide the user name and password from the url address?

    Good afternoon every body,
    I have a form running with Oracle9i Developer Suite Release 2 and when I run the form on the web it shows the user name and password of my data base. Can anyone of you please help me to hide the user name and password, if there's any way of course?.
    Thanks a lot!!.

    Luis,
    Then, as inolau's notice, create logon screen (or use the default one) and force the users to logon at runtime. Do not pass username/password as parameters.
    inolau,
    True that if the connection is specified in the config it will be the same for everyone. However, every case is different. For example one of our apps gets S3 credentials (from non-Oracle S3) as session parameters. It uses this common db connection to validate some stuff with the database, read security definitions and then it re-connects the forms using the credentials.

  • I want to add transaction code for one user.

    Hi abapers,
    My requirement is;
    I want to add transaction code for one user.
    EX: zsdf to kanne.
    Can any body tell me the procedure step by step.
    With regards,

    If you want to give authorisation to an user for a particular tcode, you need to first include the transaction code in an authorisation Role and then assign the authorisation role to the user id in the transaction code SUIM.
    A Basis guy will be able to help you to do this and anyway this is not the job of an ABAPer.
    Hope this helps you.
    Reward if this helps you

  • Problem in triggering the code for CO02 User Exit

    Hi,
    I am using the code for the Tcode CO02 (User Exit) and i am facing a problem that when i am using the code as a normal program it is executing fine and displaying the pop up window and showing the data in it.
    But when i am using that code in the USER EXIT code it is not trigerring that pop up window.
    I am using the enhancement:-
    *PPCO0007 * - Exit when saving production order
    And the include in which i am writing the code is :-
    INCLUDE ZXCO1U06
    plzz provide me guidelines for solving this problem.

    hi ,
    i am using the following: -
    Enhancement No.  ->  PPCO0007 (Exit when saving production order)
    When i click on the enhancement the following is displayed:-
    Function exit  ->   *EXIT_SAPLCOZV_001 *
    When i double click the function exit  the code i had written in the following include:-
    INCLUDE ZXCO1U06
    plzz tell me whether i am doing it right or worng?

  • How to authorize a transaction code for a user?

    Hello,
    How can I authorize the user for a specific transaction code and how can I block it?
    I would appreciate if you can give some insight.
    Thank you.
    Hakan

    Hi Hakan,
    We can achieve this by using two T.Code SU01 and SUIM.
    First check in SUIM,the T.Code that you want to block  T.Code is belongs to which role.
    For finding it Click on roles.Click on transaction assignment.Enter your T.code and execute.
    After finding this goto SU01 and unassign that role for that user.
    In this way we can block the user to use one particular T.Code.
    For providing authorisation,add the role to the user id in SU01 T.Code.
    Run SU53 T.Code after running the failure T.Code to know all the errors.
    Please contact your BASIS person for all these.
    Regards,
    Krishna.

  • How to disable a custom designed Tx code for multiple user at a time

    Hii ,
    I have designed a screen in module pool for end user to make entries in the screen and when he saves the data is saving in standard table and ztable. the main field in the screen is Batch number..from that batch  number bag number will be generated. and consumed quantity will be saved in that bag no.Bag number will be generated like first 5 digits of batch number and bag number series of that batch number. for example if batch number is 12345 and already 5 times packing is done for same batch..last bag number in the ztable will be 123450005.so next time when user tries to pack using same batch number the new bag number will be 123450006 for batch 12345.Problem here is when user tries to make enrties in that Tx code and at the same time if another user opens same Tx code to make packing for same batch both of them are getting same bag numbers before saving.
    I have called Enqueue and Dequeue FM's but still at a time for same batch user is able to do the packing.now my issue is i want to restrict 2 user to use same batch while packing in that Tx code.
    I have written following code for enqueue and dequeue technics
    data: B_matnr type mara-matnr,
           B_charg type mchb-charg.
    data : i_temp type TABLE OF zpackhdr WITH HEADER LINE,
           i_temp1 type TABLE OF zpackhdr WITH HEADER LINE.
    move : 1110 to WA_BCH-werks,
           chk_matnr1 to WA_BCH-matnr,
           v_bcharg to WA_BCH-charg,
           vgrade to WA_BCH-grade,
           new_batch to WA_BCH-bagno,
           m_baleno to WA_BCH-baleno,
           b_date to WA_BCH-indat.
    APPEND wa_bch to i_bch.
    clear b_date.
    READ TABLE i_bch INTO wa_bch INDEX 1.
        B_MATNR = WA_BCH-matnr.
        B_CHARG = WA_BCH-bagno.
    concatenate  B_matnr B_charg  into
        WA_BCH-objek respecting blanks .
       modify I_BCH from WA_BCH index sy-tabix.
    CLEAR: B_MATNR,
               B_CHARG.
    call function 'ENQUEUE_EMMCH1E'
    EXPORTING
       MODE_MCH1            = 'E'
       MANDT                = SY-MANDT
       MATNR                = WA_BCH-MATNR
       CHARG                = WA_BCH-BAGNO
    if sy-subrc <> 0.
    endif.
    call function 'DEQUEUE_EMMCH1E'
    EXPORTING
       MODE_MCH1       = 'E'
       MANDT           = SY-MANDT
       MATNR           = WA_BCH-MATNR
       CHARG           = WA_BCH-CHARG

    I do understand what u say...mine is a custom designed screen...when i open that screen i have around 15 input fields in which batch is obligatroy...when i give batch and hit enter all the other fields will be filled automatically picking from the table which are relevant for that batch..for example..material,order etc are picked from table...and bag number field will be generated taking first 5 digits of batch and followed by 0001 if its afirst time entry for that batch....so when a user is opening that screen in 2 different windows and giving details without saving any of the screens...in both screens bag number is generating as 001...and when saving it ..its saving 2 entries with same bag number...so i have created a lock entry for afpo table taking order field...so when a user opens 2 screens with same batch...and giving entries in those 2 screens without saving..he is getting same bag numbers as 001.....now when user saving the first screen and coming to second screen to save...he is gettimg message 'ORDER CURRENTLY BEING PROCESSED'..but after the data gettng saved in first screen,then when he saves the second screen it is getting saved...with same bag numbers as 001.so my issue is here...when he saves first screen and comes to second screen to save it the user should get that error message and should come out of the screen....so that he can make a fresh entry for that batch and bag number will be generated as 002 for that batch...
    Regards,
    venkat.

  • Checking code for SAP USER EXIT

    we have enhanced SAP given data-source 2LIS_XX_XXXXX, there are hard coded user exits for this extractor. How to debug the code for enhancements?
    I know we enhance data-source in CMOD....SAPLRSAP001 (transactional data)....SAPLRSAP002(attributes)

    Hi Monica,
    There are many ways to debug the code if you wish to enhance the DataSource. In RSA3 you can do that by clicking Debug mode option. This is already been suggested by Srini.
    I would like to give you another way to do so.
    If you want to enhance the Transcational data then you need to choose EXIT_SAPLRSAP_001 component of RSAP001 enhancement. It has 4 component for master data( Text, hierarchy...etc).
    This is a function module enhancement. If you goto the source code of the function module, you will find an include program i.e. ZXRSAU01. double click on this program which will take you to the body of the program. This is the place where you need to write code.
    here you need to write the code as follows.
    case i_datasource.
    when '2LIS_XX_XXXXX'.
    Now here you can set a break point. This can be soft or hardcoded break point if you need to debug.
    Better Hardcode it. Write
    BREAK-POINT or BREAK username.
    Now when you execute the DS through RSA3, The program will stop here. The data extracted from DS will be available in an internal table C_T_DATA. Now you can enhance this by writing code. Again you can debug by pressing F5 or F6. This is as usual the way you debug an ABAP program.
    Hope this helps. If you need any further help contact at [email protected]
    Give reward point if you're satisfied.
    Happy debugging....
    cheers,
    Message was edited by: tapan tripathy

  • T.codes for MM User exit

    Hi Alll,
    Could any body tell me the transaction available to check the user exits for PR,PO and so on
    thanks in advance
    regards
    sapmm

    Sapmm,
    I am not sure what you mean by check.  I will assume you want to know which user exits are available.  From here you can discover which ones, if any, are actually being used, and what they actually do, by reviewing the developed code using one of the ABAP editors.
    You can use SMOD to review all enhancements, but I find it a little less confusing to use the following method. Try this:
    SPRO > IMG > Search (binoculars)  for "Enhancements".  In the search results, they will be ordered by functional area (the right hand pane) Scroll down to the functional area of interest (You will get BADIs as well using this technique).  Select the item of interest and go there.
    You will be taken to the config section for that enhancement.  Select the 'IMG actitivy documentation' icon (paper to the left).  It will give a brief description of the standard enhancements.  You can review these in detail using SMOD.
    If any userexits have actually been implemented in your system, it will be via a project.  You can review existing projects using CMOD.  Select any active projects and review to see which enhancements have been assigned to the projects.
    Normally, the above tasks are performed by an ABAPer.  Most functional consultants don't get into the nasty details of Userexits.
    Rgds,
    DB49

  • Hide/show a column for some users in SSAS tabular

    Hi,
    I have a requirement to show one of the columns in a table only to some of the users. I know SSAS tabular only supports row level security. The only solution I came up with yet is to create two different models. Unfortunately this wastes a lot
    of expensive RAM in the server. Is there a better way? Some kind of work-around? ;)
    Best Regards
    Ulf

    One other way is to embed the security level into the table. You can do this by adding a "security_ID" into your structure and join it with a security table and join this to a security table which has a junction of Tablecolumns/User or TableColumns/UserGroups. 
    The next step is to use a Case When in your sql query  and make a decision to show null or real data for any column. 
    Business Intelligence Architect

  • Authentication code for RDBMS users store

    Hi,
    I am using Weblogic portal 8.1. I have configured oracle using RDBMSAuthentication provider. How do I authenticate the user thru code?
    Is there any help in bea?
    Regards,
    Senthil

    Hi Kiran,
    Verify that the User Name Attribute as defined in the Data Source is mapped in OVD to the AD attribute that you are expecting to contain the user name. Maybe it is using usrprincipalname instead of samaccountname, or something like that? The oam_server1-diagnostic.log, or the OVD logs, may give more clues as to what the problem is.
    Regards,
    Colin

  • Hide/mask bo data for a user

    Hi,
    we got a requirement to hide/mask few columns in the reports for the bo production support login. for the end users this data should be visible. is there any such option in BO for this. thanks,

    you can solve that by using variables and the CUrrentUser function in your report
    Instead of displaying the universe objects directly from the database you can define variables wit the following code (this is pseudo code):
    if CurrentUser()="<your BO support login here>" then 0 else [[MyKeyFigure]]
    or
    if CurrentUser()="<your BO support login here>" then " " else [[MyDimension]]
    Hope this helps.
    Regards,
    Stratos

  • Department Code for ALL users?

    I have 2 Toshiba printers, setup to only accept jobs using a department code.
    This works fine on an individual basis, or saving the DC as a PRESET via the print menu, but how do I roll this preset out to 200+ users?
    What I'm experiencing is that the preset is being saved within that users account and NOT on the machine (as I would have expected). When they log out and the next user logs in the preset has to be recreated again.
    I've tried adding it as the localadmin to the machine but this makes no difference
    TIA
    clients 10.4.10
    server 10.4.9

    We use a similar function to our Canon iR C5185 and I found I could copy the plist to other users. Any print preset created by a user will be saved into their ~/Library/Preferences/ folder and is called "com.apple.print.custompresets.plist". If you open this file with OmniOutliner you will see the saved DC preset. Copy this file to the other users and they will have the same option.

  • ASP code for searching users in OID

    Hi,
    Just wanted to know if anyone out there has an Active Server Page code to access and search the Oracle Inetrnet Directory.

    Well, you will need an LDAP component. There are tons of resources on the net for LDAP and COM. Once you get your hands on an LDAP COM component, you will need to get familiar with some basic LDAP concepts:
    - DIT (Directory Information Tree)
    - DN's and RDN's
    - Everything is an entry :0)
    - You 'bind', you don't login
    It's not too hard. I tell ya, Active Directory and NT actually include some LDAP components. Forget the name off the cuff, ...
    Here's some bait:
    http://www.nsoftware.com/products/controls/?ctl=LDAP&prod=ipwasp
    http://www.4guysfromrolla.com/webtech/041800-1.shtml
    http://www.tek-tips.com/viewthread.cfm?qid=356151&page=1
    Cheers!
    -Sean
    (PS.. treat OID as strictly an LDAP server and simplify life! -- Takes "Oracle" out of the picture!)

Maybe you are looking for