Does FIORI require S_DEVELOP object?

[former_member82893]

We have implemented Approve Requistion app. All setup has been done. We are using the standard catalog and group. During testing the standard FIORI roles is insufficient to display the Approve Requisition app, see 1st screenshot.

After adding objec S_DEVELOP with activity 03, we are able to see the Approve Requistion app, see 2nd screenshot

Tags edited by: Michael Appleby

[masa_139]

Hi Ruel,

Could you share the test result when you remove the S_DEVELOP authorization?

You can take authorization trace in the transaction ST01.

Regards, Masa

SAP Customer Experience Group - CEG

[former_member82893]

Hi Masa,

The 1st screenshot shows the result when there is no S_DEVELOP object. Is this object really required? I have asked our Basis to configure system trace as currently it seems that it is not setup correctly in the system. Could not get any logs.

Regards,
Ruel

[former_member82893]

Hi Masa,

Below is the auth trace when S_DEVELOP object is not assigned to the test ID.

[masa_139]

Hi Ruel,

RC=12 means that it is required, right?

Regards, Masa

SAP Customer Experience Group - CEG

[former_member82893]

Hi Masa,

Yes. RC=12 means that the object is required but it does not exist in the role.

My question is, why S_DEVELOP object is required to be assigned to an end user role to be able to see the fiori app from the catalog. Why is the system looking for this object?

Regards,
Ruel

[former_member82893]

Hi Masa,

Do you have a solution to this? I dont think assigning S_DEVELOP to user roles just to let them see the fiori is correct. Im not sure what I am missing here.

Regards,
Ruel

[masa_139]

Hi Ruel,

I think there is no risk because activity 03 is display only.

Those users can not change any developing objects.

Regards, Masa

SAP Customer Experience Group - CEG

[former_member82893]

Yes, there is no risk. But why is it needed? We dont assign technical objects to end user roles in our systems. And we need to provide justification why we need S_DEVELOP. Its not quite right that we are putting something which we dont know about why.

Has anyone reported this issue?

Regards,

Ruel

[former_member82893]

Hi Masa,

I seemed to have solved a workaround (not sure if its a solution). I have added the object /UI2/CHIP with 03 (display) access. And then I was able to see the app from the catalog without the S_DEVELOP. Its very strange!

In any case, what is the object /UI2/CHIP for?

Regards,
Ruel

[kammaje_cis]

Ruel, I remember such failures about S_DEVELOP in our system as well. But we too got away without assigning S_DEVELOP, but I do not remember which object resolved this. So so far S_DEVELOP was not required for any Fiori Apps.

[former_member82893]

Hi Krishna,

Thanks for the feedback.

Interestingly when I ran an authorization trace, the process is looking for three objects. I started testing with S_DEVELOP and it worked. So I thought that was the fix. But then when I tried /UI2/CHIP (without the S_DEVELOP), it worked as well. So I am really not sure why either one will work.

It would be good to understand the code to see why the process is looking for three objects and either one of them will work.

Regards,
Ruel