cancel
Showing results for 
Search instead for 
Did you mean: 

security zones, prtroot-access

Former Member
0 Kudos

Hello,

I'm trying to get familiar with the concept of security zones in the portal. I called some portal components via direct prtroot-access, now I have two questions:

1) When trying to access a component with medium_safety such as com.sap.km.cm.indexlog I get the portal runtime error

Access denied (Object: com.sap.portal.system/security/sap.com/NetWeaver.KMC/medium_safety/com.sap.km.cm/components/indexlog)

<i>immediately</i>, i.e. without any attempt of the system to authenticate me/log me in?! I would understand the display of this message if I was logged in (and lack end-user permission)..

2) Some components appear in more than one safety level (e.g. com.sap.portal.admin.acledtor), why is that?

Regards,

Sebastian

P.S. Yes, my system ist set to "production mode"

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Yes, I have done so. However these documents don't answer my questions. The point is, the access is denied immediately, i.e. even before the user is authenticated. What I was trying to say is, in order for (end-user) permissions to take effect (be it granting or denying access) of course the user has to log in first (right?). So how come the prtroot-access to some portal component is denied even before the system knows who is trying to gain it (and then possibly rejects the request due to lacking permissions)?!

Hope I put it more clearly know Regards,

Sebastian

Former Member
0 Kudos

Hi,

Did u browse through the following links? These will give u a clear idea of security zones.

http://help.sap.com/saphelp_nw04/helpdata/en/ee/acd8403e37762ae10000000a155106/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/25/85de55a94c4b5fa7a2d74e8ed201b0/frameset.htm

Hope it helps.

Regards,

M.Subathra