roles and profiles

[alejandro_romero2]

Hi gurus i have a little problem i guess

i develop a web service and i want that an extern client use this webservice.

the basis consultan has created an user and he has assigned the sapall and sap new profile and the role.

the client executes the webservice without problem, but i dont want that the user has this profiles, i need to restric the prmissions of the user created by the basis consultant

and when the basis consultant take out the sap all and sap new profile and assing other profile an role the webservice cant be executed, the error is that the user has not permission to execute the function group zsd001.

Does any one knows which roles and profiles does the basis consultant has to assign to the user?

thanks.

[former_member181995]

AR,

open this thread at:

[former_member589029]

The problem is that this is an RFC user. If you want that user to be able to execute function modules (RFC's) in function group ZSD001, you have to specifically assign this function group in that users RFC authorizations.

That should solve it,

Michael

For your role you need to add the function group under:

- Cross Application Authorization Objects

- Authorization Check for RFC Access

- Name of RFC to be protected

Sounds like the function groups are 'protected' from being executed but it is the other way around. If you want the user to have access to your function group, you have to add it in here.

Michael

Edited by: Michael Wackerbauer on Jul 28, 2008 11:12 AM

[Former Member]

hi check this..

ROLES are created in PFCG tcode

Profiles are created in SU02 tcode

[alejandro_romero2]

thanks i solve the problem