Authorization issues in Portal

[Former Member]

Hi all,

I am on EP 60 SP 16 with erp2004. I have created a custom Portal role for a specialist outside of the ESS and MSS roles delivered in the business package. The users assigned to this role are external and will not be assigned the ESS or MSS role only the custom role.

However, when I assign the role to the user and try to access the WebDynpro Menus, I am given the following error. Can anyone help me resolve this issue?? I will award points!!!

<b>You dont have the authorization to start service sap.com/pcui_gp~xssutils/XssMenu.</b>

com.sap.pcuigp.xssfpm.java.FPMRuntimeException: You dont have the authorization to start service sap.com/pcui_gp~xssutils/XssMenu.

at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:111)

at com.sap.pcuigp.xssfpm.java.MessageManager.raiseException(MessageManager.java:121)

at com.sap.pcuigp.xssfpm.wd.BackendConnections.initBackend(BackendConnections.java:234)

at com.sap.pcuigp.xssfpm.wd.BackendConnections.connectModel(BackendConnections.java:159)

at com.sap.pcuigp.xssfpm.wd.wdp.InternalBackendConnections.connectModel(InternalBackendConnections.java:183)

at com.sap.pcuigp.xssfpm.wd.FPMComponent$FPM.connectModel(FPMComponent.java:699)

at com.sap.pcuigp.xssfpm.wd.BackendConnections.init(BackendConnections.java:138)

at com.sap.pcuigp.xssfpm.wd.wdp.InternalBackendConnections.init(InternalBackendConnections.java:179)

at com.sap.pcuigp.xssfpm.wd.FPMComponent.wdDoInit(FPMComponent.java:170)

at com.sap.pcuigp.xssfpm.wd.wdp.InternalFPMComponent.wdDoInit(InternalFPMComponent.java:110)

at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:95)

at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)

at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)

at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:347)

at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:382)

at com.sap.tc.webdynpro.clientserver.task.WebDynproMainTask.execute(WebDynproMainTask.java:618)

at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:59)

at com.sap.tc.webdynpro.clientserver.cal.ClientManager.doProcessing(ClientManager.java:251)

at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doWebDynproProcessing(DispatcherServlet.java:154)

at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:116)

at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:48)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)

[Former Member · Accepted solution]

Hi Mike

u can assign SAP_EMPLOYEE_ERP role to employee which is composite role.

which contain following role.

SAP_BC_EMPLOYEE

SAP_BC_ENDUSER

SAP_ESSUSER_ERP

SAP_HR_EMPLOYEE_DE_ERP

SAP_HR_EMPLOYEE_US_ERP

SAP_HR_PA_XF_EXPERT

mainitian the authorization for all role using tcode-pfcg, generate the profiles and completet the user comparisation.

if u don't have the full authorization for PFCG ask ur basis person to do this.

(this is usefull to RUN ESS from portal)

or if u used custom role than

make sure your user will need authorization object (S_SERVICE)

add this object in the Role that u used. (PFCG)

if u have any query revert me back.

regards,

kaushal

[Former Member]

kaushal,

Thanks for the rresponse. I have added the S_SERVICE authorization object tp the backend user role and solved my problem. Thanks for helping get this resolved. I have awarded full points.