WebDynpro Security

Question

we are upgrading from EP6 to EP7
for security requirements we have developed a custom login module
once we get our custom login module we found this issue
.first time we try to open WebDynpro iview we receive unexpected
behaviours because Webdynpro page builder enters again in our custom
login module we think this is not needed because in that moment we have
MYSAPSSO2 cookie present
we would like Webdynpro Security policy don't include our Custom Login
module in Authentication process We are guessing we only need evaluate
ticket Module in authentication template for webdynpro applications
we test it but issue still unsolved so we don’t know what configuration
is required
what is the policy required to have this configuration?

Answer 1

Hi David,
besides defining roles for web dynpro iviews, you can also check if current user belongs
to the specified role from code and if doesn't, you can then take appropriate actions (hide buttons, controls, display message etc):
For example with this function:
      * Method checks if current user belongs to role.
      * @param roleUniqueID unique role id (eg. "pcd:portal_content/Company_Content/Project/Roles/com.company.project.rolename")
      * @return true if user belongs to role, false if not
     public boolean checkCurrentUserBelongsToRole(String roleUniqueID)
          boolean userMemberOfRole = false;
          IUser sapUser = null;
          try
               //get role from role unique id
               IRole sapRole = UMFactory.getRoleFactory().getRoleByUniqueName(roleUniqueID);
               // get webdynpro user
               IWDClientUser wdcu = WDClientUser.getCurrentUser();
               // get sap WAS user for WD user
               sapUser = wdcu.getSAPUser();
               // check if user is member of role
               userMemberOfRole = sapRole.isUserMember(sapUser.getUniqueID(), true);
          catch (Exception e)
               wdComponentAPI.getMessageManager().reportException(e.getMessage(), false);
          return userMemberOfRole;
Hope this helps,
Ladislav
Message was edited by:
        Armin Reichert