SAP security settings
Dear Experts,
Appreicate your advice.
We are getting below error in SAP "Your current security settings do not allow this file to be downloaded."
This occurs while downloading/opening PDF file from Content Server.
Regards,
Nad
Hi,
you log on to SAP via web browser ?
if yes :
Please apply the following to adjust your security settings.
1. Start Internet Explorer 6 or 7
2. Click Tools, and then click Internet Options.
3. In the Internet Options dialog box, click the Security tab.
4. Click internet, and then click Custom Level.
5. Under Reset Custom Settings, click Medium in the Reset to list.
6. Click OK two times.
hope it help you.
rgds,
Alfonsus Guritno
Similar Messages
-
Do SAP Security Notes contain hacker and/or virus defence?
Dear SCN fellows,
I am new to this community and generally new to asking for SAP help in discussions and blogs.
I need some advice on whether SAP Security Notes contain hacker and/or virus defences?
I am investigating a companies SAP Security settings against its policy and global market standards. I have identified that since our SAP rollout SAP Security notes patches have not been maintained. RSECNOTE provides a large list of missing security notes. I'm writing a report and what to confirm whether these notes offer any advice, support or notification of hacking or viruses. Similar to Internet security software I guess.
Can anyone advise if my thoughts and questioning is heading in the right direction or have I got the concept of SAP Security Notes completely wrong?
Thank you kindly.
PaulHi Paul,
I need some advice on whether SAP Security Notes contain hacker and/or virus defences?
SAP releases respective security notes as per the loophole identification. Once you run RSECNOTE you get the list of all applicable notes to your software release.
Applying these notes will help you to remove the vulnerability SAP identified, So yes it contains solution to remove vulnerability.
I'm writing a report and what to confirm whether these notes offer any advice, support or notification of hacking or viruses. Similar to Internet security software I guess.
Could you please elaborate it is not that clear to me.
BR,
Mangesh -
Potential Risks in Setting SAP Logon Security Settings
In SAP GUI Options - SAP Logon u2013 Security u2013 Security Settings we would like to know the risks pertaining to setting the default Status as Customized and the Default Action to Allow. This would be set in the Registry so that Users would not be able to change it. We do have some security rules set by the administrator, all are directories primarily driven by converting to Excel docs in BW. To reiterate, what are the risks to u201Chard codingu201D the default Status as Customized and the Default Action to Allow?
Thanks,
ChadAhmad,
SOAP adapter supports SSL and Digital Certificates and you need to configure your SSL on the J2EE stack before you can use the same on your SOAP adapter.
Look into this blog to understand what needs to be done.
/people/aparna.chaganti2/blog/2007/01/23/how-xml-encryption-can-be-done-using-web-services-security-in-sap-netweaver-xi
Regards
Bhavesh -
The BEx Analyzer cannot generate VBA code due to the security settings
Hello experts,
when I try to open a query in BEx Analyser I get this error message for each Item of the Query:
Diagnosis
The BEx Analyzer cannot generate VBA code due to the security settings.
System Response
VBA code is not generated.
Procedure
Choose Tools -> Macro -> Security.
On the Trusted Publishers tab page, select Trust access to Visual Basic project.
Choose OK.
Close the BEx Analyzer and continue working as before.
Access to Visual Basic project is only needed when generating VBA code.
This only takes place in design mode or when 3.x workbooks are upgraded.
Of course I did exactly what was recommanded in the "procedure-section" of this error message. But BEx ist still not working!
I use SAP NetWeaver 7.0 together with MS Excel 2007
Thanks
AxelHello experts,
I am an additional person interested in the way this issue was solved.
I confirm that the issue is coming from the SP2 of Microsoft Office (I have another environnement without the SP2 and everything works well), and I am in a situation where I can't remove the update.
Regards
Guillaume P.
EDIT :
Solution found : I applied the bi710sp10p_1001-10004472.exe patch
(downloaded via the download maanger : Support Packages and Patches - Entry by Application Group" SAP Frontend Components" BI ADDON FOR SAP GUI" BI 7.0 ADDON FOR SAP GUI 7.10)
Edited by: GUILLAUME PETIAUX on Apr 13, 2010 10:29 AM -
Java WebDynpro's and IE security settings for file download
We have a EP 7.0 SP13 environment on which we have deployed a number of own developed java webdynpro's. In some of these webdynpro's we provide the file download functionality. The portal and webdynpro's are used by both internal personnel and external customers.
On the other hand the default Internet security settings for Internet Explorer, disable "Automatic prompting for file downloads".
When a user, with these default security settings active, tries to use our webdynpro's file download functionality, the screen seems to refreshes but no file download starts. When (s)he retries, the session runs for some minutes and gives following error message:
"com.sap.tc.webdynpro.services.session.LockException: Thread SAPEngine_Application_Thread[impl:3]_20 failed to acquire exclusive lock on client session ClientSession".
This behavior is explained in SAPNote 1234847. Webdynpro provides a single-thread module, meaning a user session is blocked for the during of the request. And because the previous file download isn't yet completed the new try can't start.
Issue now, although the users IE settings allow file downloads and don't block pop up's, he can't download the file and even isn't made aware of the cause of the failure.
How can we avoid this issue, without having to communicate the
application requires specific browser settings?Welcome to the Apple Support Communities
See > http://support.apple.com/kb/HT5290
You can install the program using different ways:
1. Right-click the application installer and choose Open.
2. Go to System Preferences > Security and Privacy and select Anywhere in Allow applications downloaded from -
SOAP : Receiver Adapter Security Settings in VA
Hi,
In the RFC to Webservice, synchronus scenario, I am getting HTTP 401 Unauthorized error.
I would like to know, do I need any extra security settings for the receiver SOAP Adapter in the Visual Administartor?
I configured proxy and comm channel, they are fine. Like the sender adapter, if I need any extra security settings please let me know.
Thanks &
Raj.Hi Raj,
Check this SAP note-856597
Verify the userid/password etc..
HTTP_RESP_STATUS_CODE_NOT_OK 401 Unauthorized
Regards,
Moorthy
Message was edited by: Krishna Moorthy P -
I'm trying to call a web service via the SOAP.request object in javascript embedded into my Interactive Form. I've successfully done this with SAP NetWeaver 7.0 trial version however now I'm having this issue on a production setup. The PDF generates fine and I can fill out the form and everything. I checked the properties of both PDF documents (one that works from the trial and one that doesn't from the prod box) and they are the same, expect the one that works is PDF Version 1.6, and the one that doesn't is PDF Version 1.7.
Here's the client-side error:
Acrobat EScript Built-in Functions Version 8.0
Acrobat Annotations / Collaboration Built-in Functions Version 8.0
Acrobat Annotations / Collaboration Built-in Wizard Functions Version 8.0
Acrobat Multimedia Version 8.0
Acrobat SOAP 8.0
NotAllowedError: Security settings prevent access to this property or method.
SOAP.request:31:XFA:data[0]:mainform[0]:btnRelease[0]:click
Here's the snippet of JavaScript code:
var response = SOAP.request();
Here are the security properties of the malfunctioning PDF:
Security Method: No Security
Can be Opened By: All versions of Acrobat
Printing: Allowed
Document Assembly: Not Allowed
Content Copying: Allowed
Content Copying for Accessibility: Allowed
Page Extraction: Not Allowed
Commenting: Allowed
Filling of form fields: Allowed
Signing: Allowed
Creation of Template Pages: Allowed
How do I determine what the culprit is?Michael,
PDF Version 1.6 means Adobe Reader 7.0.x family and PDF version 1.7 means Adobe Reader 8.0.x or 9.0.x if I am not wrong.
Also if you check LiveCycle Designer Help (Using LiveCycle Designer ES > Working with Data Sources > About data sources > Working with data connections) it clearly says that with LiveCycle Designer 8.0 secured web services are not supported and there are additional security settings for Reader 8.0 onwards, that may be causing the issue.
Chintan -
WebDynpro development vs. ports and IE security settings?
Hi!
We have Sapgui running in a Citrix server and its hosted there for multiple developers. The backend they access is SRM where they need to do WebDynpro development work.
Problem is that when going to the WebDynpro editor screen and choosing the layout tab they can see only a blank page!
What are the requirements for the WebDynpro development workbench in terms of:
- Ports required open between the Citrix host machine and SAP server? We have already opened ports 32nn and 80nn.
- Internet Explorer settings that should be looked at? Security settings that must be enabled?
- Any other settings in host or client side that needs to be checked?
Thanks in advance!
.OssiHi,
f12>Networking tab, click the start button then refresh the page to view request/response timings.
http://nancyjoart.com/api/art/ThumbImage/fb958270-8c20-46e9-9adf-05ef6990ec85/250
Key Value
Response HTTP/1.1 200 OK
Cache-Control public, max-age=36000, s-maxage=36000
Transfer-Encoding chunked
Content-Type text/html
Server Microsoft-IIS/8.0
X-AspNet-Version 4.0.30319
X-Powered-By ASP.NET
Date Wed, 20 Aug 2014 02:34:12 GMT
you are sending back the wrong mime-type + it appears that you are not using response.close after streaming back the image in your asp.net code behind.
Open a new window in IE... copy and paste
http://nancyjoart.com/api/art/ThumbImage/fb958270-8c20-46e9-9adf-05ef6990ec85/250
in the address bar... the image loads but the document.readyState does not reach loaded. there is no EOF in the response body and it is served as text/html not image/jpg.
ensure Internet Options>Security tab, click "Reset all zones to default"... (IE has security settings for mime types) and also that Tracking Protection is turned off for the site (Tools>Tracking protection)
+ the defer attribute on the <script> tag only applies to script tags with a src attribute... validate and correct your markup errors at validator.w3.org.
Post questions about html, css and scripting to the IE Web Development forum. Include with your question a link to your website or a mashup that shows the issue.
Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions. If you are a consumer looking for answers or to
raise a question, it's highly recommended you head on over to http://answers.microsoft.com
Rob^_^ -
hi..
Being am a beginnner
where do we do the security settings in xi
thanks
gunaHi,
Search on SDN that is the best option which SDn has.
Refer the below link:
HTTP and SSL:
http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
SSL enablement in PI
FTP over SSL connectivity in File Adapter
General guide
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a09f3d8e-d478-2910-9eb8-caa6516dd7d9
Message level security
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d024ca8e-e76e-2910-c183-8ea4ba681c51
regarding security in Xi
chirag -
XL Reporter security settings Excel 2007: com add-in Load Behavior: unloade
I have followed all the posts regarding the security settings in MS Excel (I'm using 2007), and I still get the error. I believe the problem relates to the com add-in. I have the add-in "available" but always unchecked. When I check it, I see the behavior as "unloaded". close the com add-in window and still get the error. Each time I return to the com add-in area the SAP Business One XL Reporter add-in is unchecked again.
Has anyone discovered this behavior?I discovered a solution. Apparently, Excel had disabled the add-in in a prior attempt to start the add-in. I found out how to reenable the add-in at this microsoft note:
http://msdn.microsoft.com/en-us/library/ms268871(VS.80).aspx
That did the trick.
Alan -
XLR - 'Security settings in Microsoft Excel prohibit XL Reporter to run'
Dear All,
Our customer is on SAP2007 and EXCEL 2007. When I import a XLR and run it, I got the error message in the short text. SAP notes 853821 and 924561 are for EXCEL 2003. Can anybody let me know what setting I should check for EXCEL 2007? Thanks a lot.
Regards,
YukaYou may check these threads first:
Security settings Excel 2007
XL Reporter and Excel 2007
Thanks,
Gordon -
Hi All,
Please explain me what is BC SET in SAP Basis which is related to SAP Security.
Can anyone explain in detail...
Thanks Much.
Swapna.DHi
Prerequisites
You want to create a BC Set from a transport request. A transport request containing Customizing data must already exist.
This Customizing request is a change request with which you can copy and transport the changed system settings.
The BC Set is based on the data in the Customizing request. You can copy all the data records in the Customizing request into the BC Set, or select a subset.
You can subsequently edit BC Sets created from transport requests.
Procedure
Enter the Customizing request number and Continue.
You can search for requests with the F4 help. The request type is Workbench/Customizing requests. The request status is changeable or released.
You get an overview of the transport objects in the transport request. To put a transport object in the BC Set, flag the row Copy.
The Status column tells you the BC Set-compatibility of the transport object. It can have the following values:
· green traffic light: The transport object can be put in the BC Set.
· yellow traffic light: BC Set creation or activation problems are possible. Check whether all data records have been put in the BC Set, after you create it.
· red traffic light: Table entries exist, but they cannot be interpreted. They cannot be put in the BC Set.
· Cancel: The transport object cannot be interpreted or put in the BC Set. -
Experts
I would like to configure Security settings for the BEx Applications. Currently when they logged on to BEx Analyzer, it is not disconnecting after a certain amount of time. We need to manually disconnect the connection. So what System profile paramters we need to change to enable secutiy for the BEx.
Regards,
Mahesh ShettyI raised a message with SAP and I have got the following answer.
"As you can see in note 906696 the parameter "rdisp/plugin_auto_logout" is related with HTTP and not with analyzer.
What you want to do is not available in this moment but SAP is working in this area and the note 1297645 which is not yet released will treat this situation.
In Frontend Patch 900 you can set the parameter ANA_IDLE_TIMEOUT in transaction RS_FRONTEND_INIT of the corresponding system and the analyzer will disconnect after 1 minute without taking the setting into
account."
Regards,
Mahesh -
Hi
restoring error - An error has occurred when generating user security settings
JPCHAPARRO is SAP ALL
UJBR >> Execute Restore >> Background
SM37 >> Execute
Jobs Summary >> BPC_BACKUP_PLSOLLA >> SPOOL
Error restore
security loading data ended in error.
An error has occurred when generating user security settings
SGL1
We found a note, but it appli to a previous version to which it is has
1643183 - BUI Roles are not created when copy environment
Best Regards
Juan PabloHi Ridwansyah
Thanks for de reply!!!
Yes, restore the environment on the same system (SBW), but in new environment Backup à (PLSOLLA) Restore à (PLSOLLA_NIIF)
in ST22 shows the same error that is attached to in the original message
security loading data ended in error.
An error has occurred when generating user security settings
Yes, the user JPCHAPARRO this within a team assigned to a task profile.
another test
was conducted environment backup and ENVIRONMENTSHELL I restore in a new environment. This process went successful.
Best Regards
Juan Pablo -
I use Dreamweaver and Adobe Bridge to create slide shows on my website. When 'previewing' the slideshow - in Dreamweaver it opens Firefox - it crashed and the dialogue box opens telling me to change my 'settings' - it doesn't do this if I preview in IE - which I don't understand. I need help in knowing where to go to change the security settings so that this doesn't happen. Incidentally, when I am on the web through Firefox, my website slideshows work perfectly>
You can set the pref dom.ipc.plugins.timeoutSecs to to -1 on the about:config page to disable the timeout.
See also http://kb.mozillazine.org/Plugin-container_and_out-of-process_plugins
To open the <i>about:config</i> page, type <b>about:config</b> in the location (address) bar and press the "<i>Enter</i>" key, just like you type the url of a website to open a website.<br />
If you see a warning then you can confirm that you want to access that page.<br />
Maybe you are looking for
-
Can a Panel title have two different fonts in flex 3?
hi Frenz, I am using flex 3. I have a question related to the Panel title. Is it possible that a Panel can have a title with two different fonts? For example I want the panel title to be like this "HELLO - How are you?". Please help me out with this.
-
Extracting xml from BLOB and display on the Browser on the fly using xslt
HI All, I am storing my xml file in BLOB in oracle database. Now in my java-jsp application, I want to display this xml file, by extracting from BLOB in a formatted/html way...( XSLT/CSS Style) on the fly.. means without storing it as a .xml file. Pl
-
How I can go back to same location on the page without firfox make me go to top. Like open souq.com and navigate to deal and offer page then select any product the go back to deal and offer page it is going up to top of the page and popup the keyboar
-
How do I view videos on face book?
How do I view on face book?
-
Fill / populate customer segments in extension of ARTMAS05
hi, currently looking for a solution to this. 1) I need to add customer segments to an extended version of ARTMAS05. Name to clear yet. But it will e a cimtype of ARTMAS05. 2) system is a retail system. - SAP ECC 6.0 - SAP_APPL 6000 / level 9 I have