Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

FF ID as a service type instead of SAP Note 992200 (Firefighter User Exit)

Former Member

‎10-16-2009 12:48 PM

0 Kudos

Hello,

I have seen the SAP Note 992200 (Firefighter User Exit) restricts the FF ID to connect using the SAPGUI.

I have seen that after the SP 7 of the SAP GRC AC 5.3 I can set the FF ID as a Service type user instead of a Dialog type user.

Do I need to implement this SAP Note if I put the FF ID as a service type?

Best Regards.

Pablo Mortera.

2 REPLIES 2

Former Member

‎10-16-2009 2:05 PM

0 Kudos

HI Pablo,

Since the user type "SERVICE" is also a dialog user type, you need to implement the Note for User exit, which will not allow FF ID login thru SAPGUI. Hope that answers your query

Cheers !!

Zaheer

Former Member
In response to Former Member

‎10-16-2009 3:30 PM

0 Kudos

Pablo,

The user exit needs to be implemented (992200) regardless, as Zaheer says.

I believe the SP07 fix is to prevent the passwords from being decrypted and then being known to users in general.

The solution is that the system performs an automatic password reset in the background once the FFID is used and therefore it is changed each time.

The Security table does not update and so it is no longer possible to decipher the passwords.

Simon

Edited by: Simon Persin on Oct 16, 2009 4:30 PM