Hello,
we have the following landscape :
- EP 6.0 SP2 Patch 3 HotFix 2 (portal) / Patch 3 HotFix 1 (CM)
- WAS 6.20 (Support package level 40 for both BASIS / ABA)
In portal, we have implemented iviews (included into pages) for BSP applications located in the WAS.
When we connect to portal with a user allowed to carry out those pages only, we notice (thanks to tool IEWatch)the following :
- at the beginning, the browser is sending http requests to the portal (http://portal_host:port/irj)
- when the portal is opening BSP iviews, the browser is sending http requests directly to the WAS (http://WAS_host:port/sap(...)/bc/bsp/ ...)
According to us, this is not acceptable to have direct request to the WAS from the browser from a security point of view : we would like to have browser <--> portal communication only (URL = http://portal_host:port/...), but we do not know how to achieve it.
Do you know if there is a standard way to achieve it ?
Thank you.
Regards.
FabriceTurboult
2 Answers
-
Former MemberPosted on Jun 02, 2004 at 07:28 AMYou can set the isolation level on the iview to pumped.
(but I know there's been some troubles with this on earlier versions)
See http://help.sap.com/saphelp_ep60sp2/helpdata/en/13/81a673100011d7b84b00047582c9f7/frameset.htm
Add comment
Add comment