roles / rights for a technical ABAP user to access SAP Tables via code

[Former Member]

Hy @all,

does anybody know which roles / rights a technical user must have to acess SAP Tables and read / write from or into it?

Are tey any basic roles?

kind regards

Micha

[Former Member]

Hy,

sry for the possible wrong post. My intension is to connect via an third party connector to a R/3.and i have a user which does not have all roles to connect and run bapis.

Your SAp Note helps a lot. thx

[Former Member]

Fine, then the given note is exactly what you need.

And you are also right here in this forum with this question - speaking of SAP Tables instead of BAPI / RFC module irritated me a bit.

In this context I would like to warn you not to use the function module RFC_READ_TABLE.

[Former Member]

>

> In this context I would like to warn you not to use the function module RFC_READ_TABLE.

Can you discribe it pls?

[Former Member]

Please see note [382318|https://service.sap.com/sap/support/notes/382318] for further information.

Additionally, if you would use it nevertheless at your own risk, be careful with granting read permissions to whole tables as you might easily end up there with disclosing confidential or privacy data.

In general, function modules of this type that read arbitrary SAP tables are regarded as a security threat by a responsible administrator and you might not get the permission for it at all.

In my personal opinion, I would classify most software that require the availability of the function module RFC_READ_TABLE to have a major design bug. At least I would not bet on that the developer for this really understood the difference between a database and an ERP system. It is always the recommended way to use specialized function modules for reading data from and even more for storing data into an ERP. Specialized modules normally do not go around fine-grained authorization checks and/or destroy the consistency of the stored data.

[Former Member]

ABAP user and SAP Tables in the Java programming forum?

If you would like to access SAP Tables directly you won't need an ABAP user and you would access the database via JDBC/ODBC - which is not recommended of course, because of security reasons and possibly destroying the data consistency between SAP Tables when modifying the data.

If you are just speaking about accesing tables from ABAP you are wrong in this forum.

I assume you would like to know more about RFC permissions.

If this is true, note [460089|https://service.sap.com/sap/support/notes/460089] is the one for you - although not dealing with SAP Tables

Hope this helps.