Where would I find web service authorization? It would be so helpful if there was a transaction like SU53 to view the authorizations. The question comes fromt the following situation:
1. We have created a web service from the BAPI OrderheadGetList.
2. The web service has been defined and tested in SICF, WSCONFIG, and WSADMIN
3. We can successfully run the web service on clients where we have fairly broad authorization roles.
4. We have been testing running it on both the java stack and from Visual Studio.
5. A user, with what we guess are the appropriate roles for a developer, gets this error when testing the web service from WSADMIN on the java stack:
Authority check failed,
REQUEST
POST /sap/bc/srt/rfc/sap/Z_MAINTENANCEORDERHEADGETLIST?sap-client=300 HTTP/1.1
Host: RPUQECB.RPU.ORG:8002
Content-Type: text/xml; charset=UTF-8
Connection: close
Authorization: <value is hidden>
Content-Length: 5426
SOAPAction: ""
RESPONSE
HTTP/1.1 500 Internal Server Error
Set-Cookie: <value is hidden>
content-type: text/xml; charset=utf-8
content-length: 363
sap-srt_id: 20090210/150545/v1.00_final_6.40/DDF7B694B41EA0F191A3001B78419774
server: SAP Web Application Server (1.0;700)
http://schemas.xmlsoap.org/soap/envelope/"> xmlns:n0=" n0:FailedAuthentication http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">n0:FailedAuthentication xml:lang="e">Authority check failed
Right now we are just trying to get a protype working. But we will need to know authorization for both the developer and end user. So need a tool to determine missing authorization.
Thanks in advance for your help!
Laura Andrews