Skip to Content
0
Former Member
Feb 12, 2009 at 05:32 PM

Web Service Authorization

2442 Views

Where would I find web service authorization? It would be so helpful if there was a transaction like SU53 to view the authorizations. The question comes fromt the following situation:

1. We have created a web service from the BAPI OrderheadGetList.

2. The web service has been defined and tested in SICF, WSCONFIG, and WSADMIN

3. We can successfully run the web service on clients where we have fairly broad authorization roles.

4. We have been testing running it on both the java stack and from Visual Studio.

5. A user, with what we guess are the appropriate roles for a developer, gets this error when testing the web service from WSADMIN on the java stack:

Authority check failed,

REQUEST

POST /sap/bc/srt/rfc/sap/Z_MAINTENANCEORDERHEADGETLIST?sap-client=300 HTTP/1.1

Host: RPUQECB.RPU.ORG:8002

Content-Type: text/xml; charset=UTF-8

Connection: close

Authorization: <value is hidden>

Content-Length: 5426

SOAPAction: ""

RESPONSE

HTTP/1.1 500 Internal Server Error

Set-Cookie: <value is hidden>

content-type: text/xml; charset=utf-8

content-length: 363

sap-srt_id: 20090210/150545/v1.00_final_6.40/DDF7B694B41EA0F191A3001B78419774

server: SAP Web Application Server (1.0;700)

http://schemas.xmlsoap.org/soap/envelope/"> xmlns:n0=" n0:FailedAuthentication http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">n0:FailedAuthentication xml:lang="e">Authority check failed

Right now we are just trying to get a protype working. But we will need to know authorization for both the developer and end user. So need a tool to determine missing authorization.

Thanks in advance for your help!

Laura Andrews