I'm wondering if anyone has seen a situation where a new web service is created but S_SERVICE is not being checked in order to test or run the web service. A developer and I created a function, exposed it as a web service and activated it but the test ID does NOT have S_SERVICE on it at all but it can still run the web service. It has the rights to pass all the embedded auth checks and we can rely on those but it makes me concerned if S_SERVICE isn't being validated as expected.
I know there is a config setting to enforce S_RFC, is there a similar one for S_SERVICE? I can't seem to locate anything online.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.