Using authorisation object in web services

HI ,
I create a WS proxy via ESR and I want to avoid malicious attack ,
do i need to use the Following authorization object ?
AUTHORITY-CHECK OBJECT 'S_ICF'
        ID 'ICF_FIELD' FIELD 'PROXY'
        ID 'ICF_VALUE' FIELD 'PROXY_NAME'.
Regards
James
Edited by: James Herb on Feb 25, 2010 9:45 AM

S_ICF is to protect the SAP auth. group of the proxy itself from being called (and an impact on admin access in SICF as well), but with ESR you will most likely have to give that to all your users and still you don't know which service they are consuming. So... use S_SERVICE.
As the name of such a URL generally exceeds the length of an authorization field... S_SERVICE uses a "hash" to represent it. Executing the service will generate the hash.
The easy way to collect them is via an ST01 trace on each application server and maintain SU24 manually.
The Rolls-Royce way to collect them is via the "original data" trace of SU22, then process the results carefully in SU25 step 2b... thereby maintaining SU24. Take a closer look at the posts by SAP security guru Frank Buchholz in the thread Secure custom developer programs and transactions for more details.
I assume that you are a developer so if you have not used this before and what I have described above makes only limited sense for you, then I suggest talking to the security person on site to show it to you or going to a training on it the first time.
Anyway, if the checks are "native" in the system, then this is a security job so find the person building the roles for the services. Most likely they are already ontop of this and will take care of it for you.
Cheers,
Julius

Similar Messages

  • Help me!    How to use it as a web service from third party application?

    After using JDeveloper to develop BSSV object e.g. JP550010, how to use it as a web service from third party application?
    TKS！

    Obviously the OP is working on a project for the Bead Society of Southeastern Virginia http://www.bssv.org. Oh, wait, maybe he's researching the Blueberry Shoestring Plant Virus http://abbreviations.yourdictionary.com/bssv
    :D
    John

  • Could not generate stub objects for web service invocation in ColdFusion

    I was able to call the services on the development box - windows server without any problem at all, everything was working fine but the moment i uploaded to a linux box production server I get this error. "Could not generate stub objects for web service invocation in ColdFusion"
    What could be the cause of this problem, i have googled a lot but no solution yet any ideas.

    Let me make it simple:
    1. Server A is our development server.- hosted inhouse with coldfusion installed.
    2. Server B is our production server - a linux server with coldfusion installed hosted on the internet
    3. Server C is a third party server containing the webservice - this is a windows server with .net
    coldfusion is installed on Server A, the code works here and can connect to server C without any problem. It gets the required respone
    but when the code was uploaded to server c it gives the error when we run it.
    now i tried just a simple code which works fine on server A below:
    <cfinvoke webservice="http://www.webservicex.net/CurrencyConvertor.asmx?WSDL" method="ConversionRate" returnvariable="ConversionRateResult">
        <cfinvokeargument name="FromCurrency" value="EUR" />
        <cfinvokeargument name="ToCurrency" value="USD" />
    </cfinvoke>
    <cfdump var="#ConversionRateResult#" />
    But when i uploaded it to server C: it returns the error
    Cannot generate stub objects for web service invocation.
    Name: http://www.webservicex.net/CurrencyConvertor.asmx?WSDL. WSDL: http://www.webservicex.net/CurrencyConvertor.asmx?WSDL. java.io.FileNotFoundException: /opt/coldfusion8/stubs/WS728929035/NET/webserviceX/www/Currency.java (No such file or directory) It is recommended that you use a web browser to retrieve and examine the requested WSDL document to ensure it is correct. If the requested WSDL document cannot be retrieved or is dynamically generated, it is likely that the target web service has programming errors.
    The error occurred in /home/works/public_html/currency.cfm: line 7
    5 :     <cfinvokeargument name="FromCurrency" value="EUR" />
    6 :
    7 :     <cfinvokeargument name="ToCurrency" value="USD" />
    8 :
    9 : </cfinvoke>
    Now if you try the preceeding code on a windows environment  it works fine but the moment you put in the in the linux environment it generates this error
    I feel that the error may actually be :
    java.io.FileNotFoundException: /opt/coldfusion8/stubs/WS728929035/NET/webserviceX/www/Currency.java (No such file or directory)
    but i am clueless as to what to do next
    Ok so I tried the wget command on the linux
    this is what i got
    -bash-3.2# wget http://www.webservicesx.net/CurrencyConvertor.asmx?WDSL
    --2011-07-02 23:23:42--  http://www.webservicesx.net/CurrencyConvertor.asmx?WDSL
    Resolving www.webservicesx.net... 216.8.179.25
    Connecting to www.webservicesx.net|216.8.179.25|:80... connected.
    HTTP request sent, awaiting response... 403 Forbidden
    2011-07-02 23:23:43 ERROR 403: Forbidden.

  • Error "Deserialisation failed" when trying to use BAPI via a web service

    I created a web service in BW with the help from the wizard WS_WZD_START. The web service contains
    (among others) the RFC BAPI_ODSO_READ_DATA_UC.
    The web service runs OK & can be used from the SAP Web Services Navigator.
    Now when i try to use the web service from Delphi i get
    an error: "Deserialisation failed" (SimpleTransformationFault) "ODSOBJECT erwartet".
    The ODSOBJECT parameter is there to be sure.
    I saw the same error before in this forum but found no real solution there. I am using BW 6.40 & SP 12.
    XML sent:
    <?xml version="1.0" encoding="UTF-8" ?>
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema">
    <SOAP-ENV:Header>
    <sapsess:Session xmlns:sapsess="http://www.sap.com/webas/630/soap/features/session/">
    <enableSession>true</enableSession></sapsess:Session></SOAP-ENV:Header>
    <SOAP-ENV:Body><ns1:BAPI_ODSO_READ_DATA_UC xmlns:ns1='urn:sap-com:document:sap:rfc:functions'>
    <DATALAYOUT></DATALAYOUT><INFOOBJECTLIST><item>
    <INFOOBJECT>/CIVGM/NUM</INFOOBJECT></item></INFOOBJECTLIST>
    <MAXROWS>2</MAXROWS><ODSOBJECT>/CIVGM/BPLO001</ODSOBJECT><ORDERBY></ORDERBY>
    <RESULTDATA></RESULTDATA><SELECTIONCRITERIA></SELECTIONCRITERIA><UNICODE>N</UNICODE>
    </ns1:BAPI_ODSO_READ_DATA_UC></SOAP-ENV:Body></SOAP-ENV:Envelope>
    Answer:
    <soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
    <soap-env:Body><soap-env:Fault><faultcode>soap-env:Client</faultcode>
    <faultstring xml:lang="en">Deserialisation failed</faultstring>
    <detail><n0:SimpleTransformationFault xmlns:n0="http://www.sap.com/transformation-templates">
    <MainName>/1BCDWB/WSS0050825153239449000</MainName>
    <ProgName>/1BCDWB/WSS0050825153239449000</ProgName>
    <Line>73 </Line>
    <Valid>X</Valid>
    <MatchFault>
    <DescriptionText>Element 'ODSOBJECT' erwartet</DescriptionText>
    <TokenType>S</TokenType>
    <TokenName>CODEPAGE</TokenName>
    <TokenNameSpace>urn:sap-com:document:sap:rfc:functions</TokenNameSpace>
    <TokenValue></TokenValue>
    </MatchFault><Caller>
    <Class>CL_SRG_RFC_PROXY_CONTEXT</Class>
    <Method>IF_SXML_PART~DECODE</Method>
    <Positions>1 </Positions>
    </Caller></n0:SimpleTransformationFault>
    </detail></soap-env:Fault>
    </soap-env:Body></soap-env:Envelope>
    The same error occurs when I take the exact XML that was sent from Web Services Navigator (the XML that worked) and send that from Delphi.
    What could be wrong?

    Hi Simon,
       Other thing you can do is compare the HTTP requests (including header) from both Delphi and XMLSPY. I suspect if the SOAP message is same in both case the difference might be in the header. But one thing is certain, WAS can not respond differently for same request, don't you think so ?
    Cheers,
    Sanjeev

  • Migrating a Eclipse Project to JDeveloper and use it as a web service

    Hi Guys,
    I have a problem with migrating a Eclipse Project (EP) to JDeveloper. I know there are several threads about the problem out there but none of these fit my needs.
    So, here is the problem:
    I didn't had any problems migrating EPs to JDev in the past but this project is neither a .jar/.lib nor could I change it to one of those types. The project hase some additional filesto work. These files areare libs and owl-mappings for Jena/Pellet ( [http://jena.sourceforge.net/|http://jena.sourceforge.net/] ).
    My porblem is that I don't know who to migrate the project to JDev and then use it as a web service, while the file structure stays the same plus everything is uploaded to Oracle as a web service. Meaning everything has to be included in one java package. Or am i wrong?
    The file structure looks like this (from the EP):
    src\*.java
    owl\*.owl
    lib\*.lib
    location-mapping.n3
    expdt.props
    The Libraries aren't a problem. They are all .jar-files but could be easily included in the project (JDev) but I don't know how to handle the other files. Especially the much needed owl files :(
    Maybe I'm doing it all wrong. My Goal is to use the EP as a web servies for a business process to enforce rulings and obligations. I'm kinda stumped...
    Greetings,
    Sebastian

    Thank you very much, Shay. It helped regaining overview of the project files. Before all additional files were in the AppFolder.
    I got to a point where I (hopefully) only got a problem with the directory matching (which is needed by jena).
    Tanks again.
    Sebastian

  • Use of inheritance in web services

    Hi,
    I'm new to Flex development and have been developing a PPro extension which also uses a couple of web services to obtain information about the media and sequences.
    One of the web services I use gives me information about a project.  This project contans a list of clipmarks (sub-clips) that will become a sequence in PPro.  The problem is that the web service clipmark class is the superclass of either media_clipmark or audio_clipmark, and the items it puts in the list on the server side are of these subclass types.  So you get a list of say 3 media_clipmarks.
    BUT when then appear in the results in Flex they have been reduced to their common superclass clipmark and thus don't contain any of their specialised properties.  Is inheritance of server side class not supported by the proxy generator code in Flash Builder 4?  Is there any way to achieve the result I want - that is a list of clipmarks which are either media_clipmarks or audio_clipmarks and get the specialised properties as appropriate?
    I am assured that the server is correctly adding these to the project and I assume it is the declaration of the project as having List<clipmark> that is causing the problem.
    If this question has already been answered please point me to the relevant answer - couldn't find it by search.
    Thanks
    John

    You can't send the special charater as it is, replce them with their equivalent notation
    "&" with "&amp;"
    "<" with "&lt;"
    ">" with "&gt;"
    "\"" with "&quot;"
    "'" with "&apos;" etc
    Dinesh
    CRMIT

  • What stub code does APEX uses when making a web service call ?

    What stub code does APEX uses when making a web service call (manual web service reference)
    I am using APEX (which was part of the 11g installation).

    Hi Steve,
    Some options for the same issue:
    web service time out
    How to check for Web Srvice Timeout in ABAP Proxy call
    Regards
    Vijaya

  • Example using an SAP RFC (web service)

    Is there a good example out there for using an SAP RFC (web service) with Xcelsius 2008?  I cannot seem to get it to work.  I am trying to use the SAP sample RFC called BAPI_FLIGHT_GETLIST.  If someone can get an example to work using this BAPI, I would love to see it.
    Thanks,
    Kenneth

    hi sap guys.. can ne 1 send me the complete documents on tc- st01.. system trace...  i'll be thankful to you. Iam new to this forums can i dont know how  to posta  queston... just iam posting this queston in one of  the queston's reply. Please help me out abt TC- ST01 and how to post a queston in this forums..
      Thanks in Advance.
      Regards,
      Younus

  • Sending Table data using  RFC as a Web services

    Hi guys,
      I want to send ztable data from CRM system using RFC as a web service , but i want to read records only for a particular date and time , so how can i go about this scenario.
    regards;Keith.

    Hi Keith,
    for that scenario you need two RFC adapter. Of course you can use as well proxies as dicussed before. Forget about webservices.
    You told me above that you have z-table? add a date/time field and if a set will be inserted fill those fields with sy-datum / sy-uzeit.
    Your CRM select can now easy select only the actual data.
    Because of performance i would recommed a asynchron scenario, for example:
    A ABAP programm is selecting the data and is calling a module like
    CALL function 'myFunction'
    DESTINATION 'mySM59'
    IN BACKGROUND TASK
    This function module is build anywhere and imported into Repository and is working a outbound interface. Inbound interface is a second function module, which is imported from R/3. The ABAP source code of that module put the data to SAP system.
    The CRM ABAP programm will be called periodicly by a job.
    But!! I dont know ur requirements. Unfortunately you are one of thesse persons, who are asking without giving details. I'm not the prophet...
    Regards,
    Udo

  • Have the capability that  let Entity Objects from Web Services Datasources?

    Have the capability that let Entity Objects from Web Services Datasources? or
    where can we found the example about implement Entity Objects from Web Services Datasources ?

    I'm not sure what are you asking for. If you are looking to create a data-control based on a web service then this online demo might help:
    http://www.oracle.com/technology/products/jdev/viewlets/1013/WebServicesAndADF_viewlet_swf.html
    Or are you asking how to expose an ADF Business Component as a Web service?

  • Oracle script that was used to confirm the web services working????

    I am having major problems with the top 2 web servers and top 3 app servers, which would be the cluster facing our external customers. This is how our our web services are deployed. I used an oracle script that was used to confirm the web services worked when I installed this working with the oracle consultant taken from metalink. I simply edited it for our web services.
    Can’t deploy web services. Using a script. 2 work on 2 of the machines. Doesn't always work on third machines. Third web service doesn't work on any of the machines.
    Please help, Thank you

    Please can you provide more information, its really not much to work with when u just my web server is not working. any log files ...error messages ?

  • How to delete meeting through API for Using Adobe Connect 8 Web Services

    Using Adobe Connect 8 Web Services support "Create meetings" API to create a Adobe Connect meeting.
    But I can't find "Delete meeting" API similar to delete meeting,Could you tell me how to delete meeting through API.
    Thanks!

    You must have used sco-create to create meeting. To delete a meeting, use sco-delete API call.
    Find its documentation here.

  • Using SharePoint Lists.AddAttachments web service in LiveCycle

    Hello everyone,
    I have implemented a workflow process that saves data from a PDF form to a SharePoint list, using its Lists.UpdateListItems web service.  This works fine with no issues.  Now, I am trying to take this a step further by also attaching the associated PDF form to the list item, using the AddAttachments web service, but have been unsuccessful.  I keep getting an empty web response back.
    Has anyone been able to use this web service successfully within LiveCycle, particularly with PDF documents?  Please let me know, any help would be appreciated. 
    Thanks,
    cdmh

    Hi rdoe,
    Do you have any update for this issue?
    Whether you checked as Dats said.
    In addition, if you have found a solution for this issue, please share it, it will be beneficial to others in this forum who meet the same issue in the future.
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • [svn] 3822: update the test to use qa-regress axis web service target

    Revision: 3822
    Author: [email protected]
    Date: 2008-10-22 11:53:21 -0700 (Wed, 22 Oct 2008)
    Log Message:
    update the test to use qa-regress axis web service target
    Modified Paths:
    blazeds/branches/3.0.x/qa/apps/qa-manual/ipv6/proxyservice/webService/ipv6_ws_dynamicurl. mxml

    I solved that url problem. But there is still something I need to ask.
    First of all, the solution is the following;
         I have implemented my asp.net web service with visual studio, creating web service application. when I implement the project, it shows how to send requests( soap, http ), and there is http post request.( no get ). then I create and http post service with flash builder, the problem was that I needed to add a submit parameter to that service call since this is a post request to asp.net( Content-Type: application/x-www-form-urlencoded ). when I add this parameter it works well.
         however I want my service to return xml directly. In a different post http://forums.adobe.com/thread/574684?tstart=0 the problem is solved for PHP http requests. but when I try to implement in the same way it gives following error:
    any solution for that? thx

  • Namespace problem when using B1iSN V8.8 web service on B1 8.8 objects

    Dear all
    Investigating web services in B1iSN V8.8, we are trying to run, as a test, the tutorial example (thanks to Maria Trinidad) detailed in:
    Exposing and Hosting WebServices for SAP Business One with B1iSN
    ArticleTrinidad Martinez (Yatsea Li)SAP Contribution29 Sep 2010 PDF2 MB
    When we choose (strictly following to the tutorial) the
    /com.sap.b1i.datasync.repository/ObjectType.xsd/B1.8.8_BusinessPartners.xsd 
    for the of the custom object type,
    then the WSDL generation fails: Prefix 'nspf1' used in attribute 'nspf1:force' is not declared anywhere
    but when we choose for the schema:
    /com.sap.b1i.datasync.repository/ObjectType.xsd/B1.2007_BusinessPartners.xsd
    then the WSDL generation succeeds.
    Any idea ?
    Thanks.
    Christophe

    Dear all
    Investigating web services in B1iSN V8.8, we are trying to run, as a test, the tutorial example (thanks to Maria Trinidad) detailed in:
    Exposing and Hosting WebServices for SAP Business One with B1iSN
    ArticleTrinidad Martinez (Yatsea Li)SAP Contribution29 Sep 2010 PDF2 MB
    When we choose (strictly following to the tutorial) the
    /com.sap.b1i.datasync.repository/ObjectType.xsd/B1.8.8_BusinessPartners.xsd 
    for the of the custom object type,
    then the WSDL generation fails: Prefix 'nspf1' used in attribute 'nspf1:force' is not declared anywhere
    but when we choose for the schema:
    /com.sap.b1i.datasync.repository/ObjectType.xsd/B1.2007_BusinessPartners.xsd
    then the WSDL generation succeeds.
    Any idea ?
    Thanks.
    Christophe

Maybe you are looking for