Managing authorization for IC web client

Where can we find autorization objects used for the IC web client ?
- I cannot find any documentation on this topic.
- There's no transaction code and by the way no SU24 definition.
- Declaring the IC WEB BSP in transaction PFCG, no object are associated to the profil.
Tanguy

Due to our service center geographic organization we want to control acces from the country code of our custumer.
I got more information from the CRM security guide :
http://help.sap.com/saphelp_crm40sr1/helpdata/en/28/797b14a9cf4296b02742f641c18971/frameset.htm
And OSS note 675502 (No authorization for executing a PCUI BSP application)
I will test the following solution :
1- Add the shadow transaction BSP_CRMD_BUS2000116 in PFCG in order to get the BSP_APPL object
2- Add the transaction CRMD_ORDER & BP in order to control document usage from country code

Similar Messages

Authorization for IC Web Client Profile

Dear Guru,
This is the first time I involve in IC Web Client
Project.
I would like to limit IC Web Client Profile. What is authorization object which I have to limit ?
Beside that, if users miss authorization in the web screen, what is user have to do ( in R3 we can order user to run /nsu53 or I run ST01 to trace ) ?
Pls advice.
Thanks,
SUGANDI

You can use SAP delivered roles
SAP_PCC_IC_AGENT
SAP_PCC_IC_MANAGER
SAP_PCC_CAMPAIGN_MANAGER.
Each of these roles have access to Interaction Center BSP application 'CRM_IC' as well as other PCUI applications used in IC Web Client.
Authorization object for BSP applications is 'BSP_APPL'.
Talk to your security person and ask him to assign these roles to the user who are going to use the application.
You can even customize these roles.
Thanks,
Thirumala.

S_DEVELOP authorization needed for CRM Web Client in SAP CRM 7.0?

We implemented an own WebUI component in SAP CRM 2007 and use it in others components (with USAGE).
After we transport the component in SAP CRM 7.0 we always got an error CX_BSP_DLC_CONFIG_GENERAL_ERR at loading the component. But if we set the permission to SAP_ALL all thing work fine.
In SAP Note Nr. 1367944 we read:
"It is not possible to run the CRM Web Client without the S_DEVELOP, activity=03
authorization because it is needed by the Web Client Framework.
The S_DEVELOP authorizatin is part of the SAP_CRM_UIU_FRAMEWORK PFCG role, which must
be assigned to every user."
"This dependency has been removed in CRM 7.0."
Do we need to install some other SAP Notes at SAP CRM 7.0?
Many thanks for advices!
Handri Gunawan

Hi Handri,
I asked my collegue here, who created the note.
The note is correct, in CRM 7.0 you do not need S_DEVELOP anymomre.
The error that you have might occur because of another reason.
Could you track the call stack of this exception?
And send me back the call stack?
Regards,
Steve

Authorization to access Web Client UI - CRM 2007 (v6)

When I create a user in the system, I have to assign it a business role.
Apart from assigning it work centers etc., I also need to assign a PFCG role.
What authorization objects should I include in that PFCG role that will allow the user to access (login and view the homepage) of the Web Client UI?
I assigned the user to a position in the Organization model, to the position I have assigned a business role.
I have tried giving it the authorization object for BSP, but it doesn't help.
After the login screen, I get the message saying "Sorry, Logon is not possible because you have not been assigned to a business role. Contact your system administrator. "
Anybody facing the same problem? Is there any standard Role that I can assign to the user which will give it access to the Web UI?

Hi
you wrote "Deactivate the object S_SERVICE via Cross-application Authorization Objects"
if I try with SU25 I get information like this :
You have switched off Basis authorization objects (starting with S_) or
HR authorization objects (starting with P_). However, these
authorization objects must always remain switched on.
The system ignores the fact you switched off these authorization objects
when saving. All other data is saved when you continue.
I always get an error in our system which says:
"XX field value(s) for object S_SERVICE were not entered in the profile"
what can I do with this?
Thank you for all suggestions
regards
RAfal

A Web application + API for non web clients

Hi there,
I am new to the java enterprise world, i have a query regarding the application i am developing currently, I am not sure this is the exact category to ask this question but please help me on this.
In very simple terms my applications job is to give a listing or view of files distributed across network.
For this I need to have a webApp which can provide a view to all web clients. (where view is nothing but listing of files independent of there location)
Because this view tells nothing more than files , and i am as data center administrator cannot tell much about data, so we need to provide APIs so other applications (WebAPP or anything else)
can present the view in more data specific terms.
The webapp part is fine with me, but how do i support API being on an application server like glassfish.
Please help me on this.
Thanks in advance
AP

Dear all,
Anyone can help me to clear this problem ?

Configuration of Incident Management in CRM IC Web Client

Hi,
Can anyone give me the procedure for configuring the incident management in IC Web UI and what are the pre-req for configuration
Thanks,

Hi ,
You can try two things:
1. Find a standard business role(in tx crmc_ui_profile) that has the links as you need
2. Create a custom business role by copying from some standard business roles that has all the links you have mentioned and more, then remove unwanted links from the ui profile
You might need to configure the navigation bar profile using transaction crmc_ui_nblinks.
Regards,
Shiromani

Data Palette not showing Managed Beans for Dynamic Web Project, JSF 2.1

Hello.
I have a problem in OEPE (oepe-juno-distro-win32.zip), where the Data tab in Palette shows no Managed Beans,
even if I created them in the ManagedBeans in faces-config.xml using the Faces Config Editor.
I have created a Dynamic Web Project with these Facets:
Dynamic Web Module 3.0
Java 1.7 (JDK 1.7_21)
Java Annotation Processing Support 5.0
JavaScript 1.0
JavaServer Faces 2.1
JSTL 1.2
Oracle WebLogic Web App Extensions 12.1.1
I am using Oracle WebLogic Server 12c 12.1.1 zip distribution for hosting the application.
For example, I have a UserBean Managed Bean of Session scope, that has 3 String fields
and the respective getters and setters.
I create a "test.jspx" file, and from the Palette -> Tags tab -> JSF HTML I drag a Form into
the new file so I can connect it to UserBean and generate a form to enter its details.
I select the "Generate a form tag and content from data" and in the Choose Bean dialog
there is none of my Beans.
What could be the problem?
Thanks in advance.
Edited by: 997841 on Apr 30, 2013 6:09 PM
I forgot to mention the Oracle WebLogic Web App Extensions version 12.1.1 and that also
for JSF 2.1 the "sub-directory" Faces Configuration below the project in Project Explorer is not
existent, as in projects created with earlier versions of JSF.

Yes, they are both listed under the WebLogic System Libraries.
This is the content of .classpath file when using WebLogic System Library:
<?xml version="1.0" encoding="UTF-8"?>
<classpath>
     <classpathentry kind="src" path="src"/>
     <classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/Oracle WebLogic Server 12c (12.1.1) JRE">
          <attributes>
               <attribute name="owner.project.facets" value="java"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="src" path=".apt_src">
          <attributes>
               <attribute name="optional" value="true"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="con" path="oracle.eclipse.tools.weblogic.lib.system">
          <attributes>
               <attribute name="owner.project.facets" value="jst.web"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="con" path="org.eclipse.jst.j2ee.internal.web.container"/>
     <classpathentry kind="con" path="org.eclipse.jst.j2ee.internal.module.container"/>
     <classpathentry kind="con" path="oracle.eclipse.tools.weblogic.lib.shared/jstl/exact/1.2"/>
     <classpathentry kind="output" path="build/classes"/>
</classpath>
And this is the content when using User Library with Mojarra:
<?xml version="1.0" encoding="UTF-8"?>
<classpath>
     <classpathentry kind="src" path="src"/>
     <classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/Oracle WebLogic Server 12c (12.1.1) JRE">
          <attributes>
               <attribute name="owner.project.facets" value="java"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="src" path=".apt_src">
          <attributes>
               <attribute name="optional" value="true"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="con" path="oracle.eclipse.tools.weblogic.lib.system">
          <attributes>
               <attribute name="owner.project.facets" value="jst.web"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="con" path="org.eclipse.jst.j2ee.internal.web.container"/>
     <classpathentry kind="con" path="org.eclipse.jst.j2ee.internal.module.container"/>
     <classpathentry kind="con" path="oracle.eclipse.tools.weblogic.lib.shared/jstl/exact/1.2"/>
     <classpathentry kind="con" path="org.eclipse.jdt.USER_LIBRARY/JSF 2.1 (Mojarra 2.1.6-FCS)">
          <attributes>
               <attribute name="org.eclipse.jst.component.dependency" value="/WEB-INF/lib"/>
               <attribute name="owner.project.facets" value="jst.jsf"/>
          </attributes>
     </classpathentry>
     <classpathentry kind="output" path="build/classes"/>
</classpath>

Components Required for CIC Web Client

We have a question about CIC installation components for CRM 5.
When we check the "Upgrade Master Guide" for "mySAP Customer
Relationship Management" ( Pages 58 - 61 ) for all CIC components, we
do not find that JAVA components are required for CIC ( Like JCRM).
When we see details from Best Practices Doucment for CRM component matrix, we see that its required.
We are not sure what to do. We were under the impression that Java
components are not mandatory for CIC forCRM 5. All we need is TREX and IPC.
Can someone please clarify/confirm ASAP as system needs to be build
accordingly. If we do need JCRM, what functionalities is this required for?
Thanks for help in advance.

Hi Nikhil,
With 04s all required installations will be completed by default. Just that you have create a domain and the track to make use Webdynpro Components in NWDI.
Following are the SCs that are required.
DI Build Tool 7.00
SAP J2EE Engine 7.00
SAP Java Tech Services 7.00
This u can download from Service Market Place
Support Packages and Patches - SAP NetWeaver - SAP NETWEAVER - SAP NETWEAVER 7.0 (2004S) - Entry by Component - Development Infrastructure
Regards,
Nagarajan.

No authorization for query/Web application assigment in roles

Hi All,
in order to clean/reorganize our roles, I have to clean some query/Web application/Workbook assignment in roles. After I have loged in into BEX Browser I have cleaned/moved some objects from roles. But it seem that I have not all necessary rights to do that.
Which is the relevant authorization object which I need to change query assignemnt in roles?
Is there an other way to add/remove queries/Web applications from roles?
Any help would be great. Thanks in advance.
Best regards,
Stefanos from Munich/germany.

Hi,
try : S_USER_AGR
hope it help's

Session management for a web service

I am building a web service where the user will need to login and the application will need to maintain a persistent session. I am using Apache Axis2 for client/server communication via SOAP/XML. What would the simplest and most common way of doing this? I know I could implement session management from scratch similarly to how a browser does it, using cookies, but I'd rather use standard Java libraries for this. Am I correct in assuming that even though I'm using Axis2, the solution doesn't really have anything to do with Axis2 since Axis2 is basically just a way for the client/server to send messages to each other?
I've read a lot of information online about this, but there's so much information that it's hard to know where to start. Basically I'm just looking for someone to point me in the right direction on what classes to use and so on. I just need a simple username password authentication and session management system for a web service.

Container Managed Authentication. Does everything you need.

Use Enterprise portal theme for Web Client

Hi Experts,
I am new to this topic.
I am working in portal project. We have situation that in portal we have excellent theme but in CRM Web client we donu2019t have fantasy theme like portal.
Is there anyway can I use my portal theme for CRM web client?
If you guide me how to integrate portal theme into CRM Web UIs, that will be great.
Thanks.

Ashok,
There is no easy way to extend your portal theme to the CRM WebClient. Lot of effort is needed for identifying the portal CSS files and updating CRm WebClient theme CSS files with the portal theme attribute values.
Thanks,
Thirumala.

Following the upgrade to 34.0.5, I can no longer access web pages of our SAN, airco, vSphere Web Clients, etc. How can I correct this?

Following upgrade to 34.05, can no longer access web pages of the SAN management interface, the airco system, the vSphere Web Client, etc. All still work in Chrome.
The airco system gives an error:
Firefox cannot guarantee the safety of your data on 10.32.16.50 because it uses SSLv3, a broken security protocol.
Advanced info: ssl_error_no_cypher_overlap
The SAN management interface and vSphere Web Clients display an empty page. Not sure whether these also have problems due to SSLv3.
I understand you wanting to be cautious, but I seriously doubt I need to face an attack from our SAN. Please, at least give us an option to connect regardless.

hello, ssl 3.0 is disabled in firefox versions 34 & upwards by default - if you want to re-enable it you can do that like this which will make you vulnerable to the recently published poodle attack though:
enter '''about:config''' into the firefox address bar (confirm the info message in case it shows up) & search for the preference named '''security.tls.version.min'''. double-click it, change its value to '''0''' and restart the browser.
https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/

DRM Web Client 500.19 issue on windows 2008(x64) ERROR

Hi,
I installed DRM version 11.1.2 on windows server 2008(x64), according to the documents, I pre-installed .Net 3.5.1 and modified the applicationHost.conf file.
I found this in epm_install_troubleshooting
Web Client Access Failure
Issue: After installing Data Relationship Management on Windows 2008 64-bit platform, you
get this error message when attempting to access the Web client:
HTTP Error 500.19 - Internal Server Error The requested page cannot be
accessed because the related configuration data for the page is invalid.
Solution: In the IIS configuration file (C:/Windows/System32/inetsrv/config/
applicationHost.config), replace the two occurrences of Deny in the following section with
Allow:
<configuration>
<configSections>
<sectionGroup name="system.webServer">
<section name="handlers" overrideModeDefault="Deny" />
<name="modules" allowDefinition="MachineToApplication"
overrideModeDefault="Deny" />
However when I access the web client I got the 500.19 error, can't find C:\inetpub\wwwroot\drm-web-client\web.config, the web.config file do not exist.
Config File \\?\C:\inetpub\wwwroot\drm-web-client\web.config

Might be too late, but the problem is that IIS is pointing to the incorrect path. Should not be pointing to C:\Inetpub\wwwrooot\.... it should be pointing to Oracle\Middleware\EPMSystem11R1\products\DataRelationshipManagement\client\web-client same thing with the migration-client IIS app. To fix use the IIS Manager click the drm-web-client virtual directory and select "Advanced Settings" and update the "Physical Path" property.
Pablo

Finding an EJB object. Web clients vs. Java clients

From what I've read this is the process for a web client to find an EJB object: the client uses JDNI to find a reference to the EJBHome interface and then it uses the create method from this interface which makes the container to begin to work, creating an instance of the implementation class and an instance of the EJBObject interface, and returning a reference to the EJBObject, which will be used by the client to call the methods.
Are there any differences if the client is a java application and not a web client?

The Java Client talk to the server with random ports
not 80. Gives me a headache. _*why?
There's no need to get headaches about it, in fact no need to worry about it at all.
Just have the JNDI services available so you can do the lookup (which might require opening a port (or more than one) on the firewall, but that's it.
And that's no different between a standalone client and a web application client. Both need to do that JNDI lookup.

Display Authorization for webdynpro component

I have a requirement where , the source code has to be hidden . I have seen programs where it hides ABAP report but none for We dynpro. Is there a way to hide web dynpro code . Or is there any way to revoka even display authorization for the web dynpro components ? Please provide any suggestions.
Regards,
Sri

Hi Srivijaya,
Go to application, parameters tab give WDDISABLEUSERPERSONALIZATION give value to 'X'. It will disable user personalization settings, user can't see any help regarding component.
Cheers,
Kris.

Managing authorization for IC web client

Similar Messages

Maybe you are looking for