4/21/2023 0 Comments Sap gui download account![]() IS_LIST_DOWNLOAD - whether the user is downloading a list (Standard list or ALV). ![]() The function module EXIT_SAPLGRAP_001, in which our code runs, provides 2 input parameters: After ticking “Yes”, you can start to implement the code, which will be called during every frontend download. … nice try, but just press Enter and you’ll be prompted, whether you’d like to create the include. ![]() SAP tries to baffle you with a warning message: Since you don’t want to modify the SAP standard function module, double click on the include ZXFILU01. When you’re prompted to save, say “Yes” (← hard decision) and choose a package (“Local object” is fine if you’re just playing around).Īfter that, enter “SGRPDL00” as the enhancement name, click on “Components” and double click on the function exit name: User-exit SGRPDL00: Creationįirst of all, we need to create an add-on project via tcode CMOD to implement the user-exit.Įnter the project name “SGRPDL00”, click on “Create”, enter the project attributes and then go for “Enhancement assignments”. To get started, I decided to inspect SGRPDL00, as this one has the best coverage. for each and every frontend download, while the second one is HCM-specific. The first one is called by the GUI_DOWNLOAD function module – i.e. HRPC0001 - User-exit for HR-specific downloads logical databases: PNP (HR master data) and PAP (recruitment data).SGRPDL00 - User-exit for “normal” SAP GUI downloads.SAP offers 2 user-exits to extend download authorization checks: Anyway, this is not sufficient, as downloaded data may be passed to third-parties easily or analyzed inappropriately. Many authorization admins don’t pay much attention to S_GUI, but rather focus on data access authorization objects. It’s just a client-wide “switch”, which either allows or disallows downloads. ![]() This is a very unspecific check, as it does not take the affected data into account – if you have appropriate authorizations, you can download roles, the SFLIGHT table, or your colleagues’ salary. When downloading data to the frontend, the authorization object S_GUI is checked (with ACTVT 61). Since downloads are always a big security – and data protection topic, I took a closer look. This week, a colleague pointed me to the possibility to hook your own code into SAP GUI downloads via a user-exit. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |