SRM 7.0: Authorisation object? Aliases for services in java portal?

Here's how we did in old SRM 5.0 system (the old and working scenaio):
In SRM 5.0 we employed S_ICF object to determine, whether a particular user who has just logged in to a system via web using a particular alias - is authorised to use this service.
We want external and internal users to use different ways to get into system. We have two aliases:
for internal users: http://srm5.domain.com/srmint
for external users: http://srm5.domain.com/srmext
We make aliases using transaction SICF:
/srmext
/srmint
to service /default_host/sap/bc/gui/sap/its/bbpstart
For alias /srmext we set field SAP Authoriz. = EXT.
For alias /srmint we set field SAP Authoriz. = INT.
We make 2 roles, both containing just a S_ICF auth object with differend values of field ICF_VALUE, an appropriate role to a user. If a particular user logs in to the system using an alias matching to the authorization value set in his role, he gets in, otherwise he gets an error upon logon. So that his logon is only successful if he used the right alias in URL (provided correct login name and password of course).
Question. How do we apply similar scenario in new SRM7?
Is there an authorisation object for java portal in SRM 7.0 - similar to S_ICF object for ABAP portal in SRM 5.0?
Is it possible and how to make an aliases to java portal, or otherwise automatically detrermine at runtime upon logon, which way (which URL or using some parameter in address line) the user has logged in?

This question has been answered by the following blog:
/people/ulli.hoffmann2/blog/2009/10/07/srm-70-running-it-without-the-portal

Similar Messages

Object type for service notification?

Hi guys,
In workflow what is the object type to create service notification (IW51). How can I find it?
thanks in advance.
Regards

The object type for service notifications is BUS2080. You can find it via transaction SWO1 - use the search help on the Object/Interface field. You can also use the Business object repository (Browser) button on SWO1.

Does Java have an object model for the actual .java files?

OK, you know how you can use the Document Object Model (DOM) in JavaScript or PHP to access and modify specific parts of an HTML document? Is there anything similar for .java files? Can I load a .java file into some kind of Java Code Object Model (JCOM?) and then manipulate that code as if it were an object.
Note: I am not asking how to instantiate and use a regular object as defined by the .java file. I am wondering about modifying the actual .java file itself as an object that represents the actual text of the code in the .java file.

GrantSR wrote:
Not the code, per se, but the classes they define... Yessum, most certainly: ASM, among others.
Also Google [java parser|http://www.google.com.au/search?q=java+parser]... one of them might do what you're after.
So, one would parse the Java code into XML using one of these many and
varied parsers, then access that XML via the DOM? Well, I guess a two
step process is good enough.
Thanks for your help.
No wuckers!
But I don't know if I did much. If you do get something working please post back, and outline your approach.
Cheers. Keith.

Using authorisation object in web services

HI ,
I create a WS proxy via ESR and I want to avoid malicious attack ,
do i need to use the Following authorization object ?
AUTHORITY-CHECK OBJECT 'S_ICF'
ID 'ICF_FIELD' FIELD 'PROXY'
ID 'ICF_VALUE' FIELD 'PROXY_NAME'.
Regards
James
Edited by: James Herb on Feb 25, 2010 9:45 AM

S_ICF is to protect the SAP auth. group of the proxy itself from being called (and an impact on admin access in SICF as well), but with ESR you will most likely have to give that to all your users and still you don't know which service they are consuming. So... use S_SERVICE.
As the name of such a URL generally exceeds the length of an authorization field... S_SERVICE uses a "hash" to represent it. Executing the service will generate the hash.
The easy way to collect them is via an ST01 trace on each application server and maintain SU24 manually.
The Rolls-Royce way to collect them is via the "original data" trace of SU22, then process the results carefully in SU25 step 2b... thereby maintaining SU24. Take a closer look at the posts by SAP security guru Frank Buchholz in the thread Secure custom developer programs and transactions for more details.
I assume that you are a developer so if you have not used this before and what I have described above makes only limited sense for you, then I suggest talking to the security person on site to show it to you or going to a training on it the first time.
Anyway, if the checks are "native" in the system, then this is a security job so find the person building the roles for the services. Most likely they are already ontop of this and will take care of it for you.
Cheers,
Julius

Disable an Authorisation object for Multiple roles.

Hi ,
I need to Disable an authorisation object F_BKPF_BUP for about 345 roles.Is there any way by which we can make mass changes.Doing it for individual role would take a lot of time.kindly advice.
Thanks in advance

Hi,
1. Go to SE16 --> table USOBT_C --> put object F_BKPF_BUP in the field "Object" --> execute without restriction. Download the list of TCodes.
Now go to Table AGR_TCODES --> put the list of TCodes (found with above method) in the field "Extended name" as multiple selection --> execute and download the list of roles.
Look up your list of 345 roles with this list. After matching, you need to sort out the TCodes present in this list of roles which is checking the object F_BKPF_BUP.
2. Now go to SU24.. go to option "Authorization Object" and NOT in the Transaction section.
Put the Object and execute.... go to change mode.... check the proposals for the TCodes you sorted at last step of point 1. Make the proposal Do Not Check where ever it is not so.
Move the Workbench Transport through Landscape. Your purpose will be done. But you should also keep in mind if the TCodes are present in other roles besides of your 345, those will become vulnerable.
Regards,
Dipanjan

Mass Change for Service master

Dear Experts,
I've tried to do Mass change for service master.. in transaction MASS, i couldnot able to find the object for service master there..
Is there any possiblity to do mass change for Service Master
thanks

Hi,
I have tried ur scenario. Mass change for service master was possible using the TCode: MASS. But if u go to the Tcode:MASS, system asks object type. object type for service is not available in the match code/input help(F4).
At any time, if u want to know the object type for any transaction , goto the Tcode: SW02.(path: SAP Easy access: SAP Menu->tools-> ABAP work bench->overview->business object overview( SW02).
click on materials mgmt.-> external services mgmt.-> service master ( in the tree list).
Object type for service master: BUS1005
this business object is useful for list display for service master records(get list), read detail data for a service master record, create& change service, display object, check existance of object.
object type for attributes in service master: IFSAP
reference table: ASMD
goto SW02, to find object type for any transaction.
i think this information is very useful to u.
reward me according to ur uasge of this information.

Incompatible object argument for function call exception

I am hoping someone has seen this issue before.
Running CF 7.0.1.116466 with JRun 4.
I have a 3rd party search engine application running on a
separate server. I interface with the engine via their Java API. I
am able to use the search engine when executing using a home grown
Java application. It also worked with CF 6. However, when I try to
implement the same cold in CF, it fails with the exception attached
below. I am able to successfully create the objects. The error
occurs when the objects attempt to connect with the engine.
I have also attached the code that is causing the errors.
"seObj" creates an interface with the search engine. It is
constructed with the server address as a parameter. It does not
attempt to contact the engine when it is first constructed.
"dsObj" allows access to specific content in the engine. This
is where the connection to the engine is attempted and the error
occurs.
Any assistance would be greatly appreciated.
12/13 10:26:12 error (class: org/jacorb/orb/Delegate, method:
getReference signature:
(Lorg/jacorb/poa/POA;)Lorg/omg/CORBA/portable/ObjectImpl;)
Incompatible object argument for function call
java.lang.VerifyError: (class: org/jacorb/orb/Delegate,
method: getReference signature:
(Lorg/jacorb/poa/POA;)Lorg/omg/CORBA/portable/ObjectImpl;)
Incompatible object argument for function call
at org.jacorb.orb.ORB._getObject(Unknown Source)
at org.jacorb.orb.ORB.string_to_object(Unknown Source)
at com.engenium.semetric.Engine.initRef(Engine.java:731)
at com.engenium.semetric.Engine.getDocSet(Engine.java:81)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at
coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:74)
at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:1634)
at cfinsert2ecfm673131553.runPage(C:\Documents and
Settings\Jameso\My Documents\workspace\SemetricCF7\insert.cfm:12)
at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:152)
at
coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:349)
at
coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65)
at
coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:210)
at
coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:51)
at coldfusion.filter.PathFilter.invoke(PathFilter.java:86)
at
coldfusion.filter.LicenseFilter.invoke(LicenseFilter.java:27)
at
coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:69)
at
coldfusion.filter.BrowserDebugFilter.invoke(BrowserDebugFilter.java:52)
at
coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:2 8)
at
coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
at
coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
at
coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
at
coldfusion.filter.RequestThrottleFilter.invoke(RequestThrottleFilter.java:115)
at coldfusion.CfmServlet.service(CfmServlet.java:107)
at
coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:78)
at
jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:91)
at
jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42)
at
jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:257)
at
jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:541)
at
jrun.servlet.http.WebService.invokeRunnable(WebService.java:172)
at
jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:318)
at
jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:426)
at
jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:264)
at
jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)

Hi, Thanks.
But the problem is still there.
If I put
public class SimpleThread extends Thread
No problem, but if I put
public class SimpleThread implements Runnable
I got java.lang.VerifyError: (class: TestNotify, method: main signature: ([Ljava/lang/String;)V) Incompatible object argument for function call
Exception in thread "main"
Regards,
Youbin
Please refer to the following code:
public class SimpleThread implements Runnable {
    private boolean isWaited = false;
    public void run() {
        synchronized(this) {
            while (true) {
                System.out.println("Hi ------------");
                try {
                    Thread.sleep(5000);
                    System.out.println("Start wait()");
                    isWaited=true;
                    wait();
                    isWaited=false;
catch (Exception e) { }
public class TestNotify {
public static void main(String[] args) {
SimpleThread simpleThread = new SimpleThread();
simpleThread.start();
try {
Thread.sleep(10);
} catch (Exception e) { }
while (simpleThread.getIsWaited()) {
synchronized(simpleThread) {
System.out.println("Start notify()");
simpleThread.notify();
System.out.println("Arrived");
int i=0;
while (!simpleThread.getIsWaited()) {
i++;
System.out.println("Arrived="+i);
synchronized(simpleThread) {
System.out.println("Start notify() again");
simpleThread.notify();
System.out.println("Arrived again");

New authorisation object not working after upgrade

Hello there
We have created a new authorisation object ZCODE for the customized transaction codes ZPA20 and ZPA30. This was all fine until the upgrade. Now we can't even access the data e.g. in ZPA20 with SAP_ALL and SAP_NEW profile. It gives an error that says "You have no authorisation..." The trace shows no errors.
Are there any important steps that we've missed after the upgrade?

You might have excluded custom objects from SAP_ALL (see the PRGN_CUST switch for this), or need to regenerate SAP_ALL again (there us a button for this in SU21).
Another possibility is that a field of your custom object is a data element which is now obsolete or changed with the upgrade.
Please provide more infos about the object, and what you have found so far.
Cheers,
Julius
ps: Are ZPA20 and ZPA30 copies of the original PA20 and PA30? The upgrade would have brought in some changes to the standard codes, which might not be (completely, consistently) included in the copies, depending on how you copied them.
Edited by: Julius Bussche on Nov 4, 2008 10:15 PM

How to consume the Abap web service in Java web-dynpro

Hi Everyone,
I want to consume ABAP web service in java web dynpro.
so when i tried to create model in java web-dynpro, it gave me an error message saying "Invalid WSDL or WSDL not found".
i think this error message is because, to access the WSDL of abap web-service, we need username and password, but the dialog box in java web-dynpro is not programmed to take username and password from us and send it to the server to get the WSDL.
i came to this conclusion because i was able to successfully test my abap web-service in java portal. the java portal asked me the username and password to open the WSDL.
So, please help me to consume the abap web service in java web-dynpro.
Thanks in advance
Regards
Vikas

Hi Vikas ,
while creating a model in web-dynpro try to use the "import web service model" option and if you are using local server choose the local server option so that you can get the available web services which are in server, select one among them and continue you process.I think this is the some what easy way .
If you want use the URL for wsdl better to once test the available service in server and copy that WSDL URL and paste over WSDL textbox.
I think this is pretty help ful to you
Best Regards
Srikatnh

Authorisation object for Supplier field in Shopping Cart

Hi Team,
In Shopping Cart Source of Supply tab field Supplier is not getting displayed as it in hidden for some users, sor those users an authorisation object has to be provided to display the Supplier field.
Can you please Suggest me the authorisation object to be used to display Supplier field in Source of Supply tab of Shopping Cart.
Thanks & Regards,
Goutam Kolluru.

Question is solved.
Answer can be find in bellow link
Field Supplier is not displaying in Shopping Cart with Std Roles SRM 7.0

Authorisation Object in Order & Notification for Partner

Dear All,
Does Maintenance Order or Notification has an Authorisation Object which has Partner as an Authorisation field?
My requirement is to restrict the view & Change Authorisation based on the Partner assigned in the Notification & Order.
Regards,
MLN Prasad

Hi Prasad
One suggetion, Why you are not using the field user responsible for that? Are you give SAP login ID to each service provider to access the SAP from SAP netware? Then Provide him access to IW38 & IW28 & make the partner function USer responsible & make the field requirred field.
While access the report , system will ask the user responsible field to service provid er & service provider will give his user ID & he will get the data for his id only.
I hope this may help you.
regards

In ID object Communication Channel - Enter a value for Service Number?

Hi,
I have completed all the steps of this link upto 4.5 > 11,
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/40574601-ec97-2910-3cba-a0fdc10f4dce
but when i activate my messge interfarence from senario tab list or change object tab list, <b>it is showing error that :
Check Result for Object Communication Channel(GeneratedReceiverChannel_XI ) Enter a value for Service Number</b>
address type: URL Adress
target host: my bi server aibid
Service Number: ?????????
Path: /sap/xi/engine?type=entry
What is the Service NO.
Best Regards,
Dushyant.

Hi,
>>>>The serice number is ur port number. In your XI system URL http://host:port/rep/start/index.jsp
this is the j2ee port and he should put http port
as his path is: /sap/xi/engine?type=entry
on WAS ABAP I guess..
Regards,
michal

Authorisation object for "PO text in the material master"

Hi,
My requirement is as below:
"All users can see the Purchase Order Text as usual, but only a few users should be allowed to create / change the PO Long Text.
For other users, the same should appear in display mode only (both in creation & in change mode, MM01 & MM02)."
Please let me know, How to map this.
As per my knowledge thsi is possible only thru authorisation. But I want to know what is the authorisation object for "PO text in the material master" (Pl note that only for PO text in the material master field). we want control on "PO text of material master"
Regards.
Chinna

Hi,
The authorisation object is "M_MATE_MAT", pl check
Regards
Merwyn

Determination of Source for services in SRM rel 4.0

Hi
We have requirement to have list of vendors determine automatically in shopping carts for services.
In this release 4.0 if you have contracts in R/3 this determining of vendors works for non-service/material items but not for service.
I log a call with OSS and they say this is not included in SRM4.0 due to different backend structure for services.
If we don't upgrade to SRM 5.0, how could we get SRM to give users list of vendors which have contracts for selected shopping cart services in R/3?
I will give points for answers
ty, Z.

Hi Zuzanna Breda,
You can replicate your contract created in the backend R/3 system as a Vendor list.
If you click on Source of Supply and go into preffered vendor you will be able to see the option vendor list over there which is nothing but the contract and the items.
You can create vendor list in the SRM system or can replicate the contracts for services/material as a vendorlist.
You can also define an output type for the contracts so that any changes or while creating a new contract in the backend system it gets automatically replicated into SRM
There are standard function modules to create the vendor list.
Cheers
Sandy

Authorisation Object for Payment Block Filed(ZLSPR) in FB02

Hi,
I want to restrict the authorisation to modify the field Payment Block to some of the users only in FB02 Tcode.
How can i achieve it.
My basis team said it can help me if i can give the authorisation Object for the same they can restrict the authorisation object to limited users.
regards
Jaya

Hi Mallikarjun,
The authorisation Object given is related to Excise invoice ? So, please let me know how this would help in restricting modification of payment block filed in FB02?
regards
jaya

SRM 7.0: Authorisation object? Aliases for services in java portal?

Similar Messages

Maybe you are looking for