SAP GUI - Security Settings

[tobias_ptz]

Hi,

I have a strange problem and I hope some of you can help me out.

If I want to open an attachment, using TAC: ME53N (Display Purchase Requisition) > Service for Object > Attachment List, I get the attached SAP GUI Security notice "The system is trying to execute the program saphttp with the command line /H/SAPSERVER.domain.com sapgw00"

If I allow this action, the attached pdf file opened as it should be. If I use deny, the pdf file opens as well (don't know why, but that's not the problem).

My problem is, that I cannot find out which string I have to use in the SAP GUI Security settings, to say let saphttp open the pdf file without to ask me everytime.

I have set up the Security settings with that string:

Type: Commandline

Object: /H/SAPSERVER.domain.com/*

Action: Granted

But this doesn't help. Does somebody know which string I have to use, so that this popup never comes up anymore?

Thanks

Tobias

[Former Member]

Hi Tobias,

Did you get a solution to this issue?  We recently upgraded to GUI 7.3 patch 7 and face the same.

Thanks,

Chad

[former_member193518]

The security guide here may help: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/002444be-7018-2d10-e18e-a8c537198...

[tobias_ptz]

No, not really.

I've read it, but the problem is, that saphttp is a RFC connection, I don't find a solution for that scenario.

Thanks

Tobias

[former_member193518]

Page 17 ?
Looks like a similar setup.
saphttp is a command line program, it's installed along with the SAP GUI.
That's why you're getting the prompt.

[tobias_ptz]

I've tried different entries: (also upper and lower case)

/H/server.domain.com/S/sapgw00

/H/server.domain.com/S/*

/H/server.domain.com/*

Hmm, I thought that saphttp (RFC) was called, which starts the program saphttp on the frontend.

Because I've also tried:

C:\Program Files (x86)\SAP\FrontEnd\SAPgui\saphttp.exe

But none of this works ..

Thanks

Tobias

[former_member193518]

I had a nice big reply typed out and SCN went wobbly on me.

The context for this security setup is things that SAPGUI wants to do to your PC.

So you could be right about the RFC connection, but in the end, if saphttp.exe is being called, that is why you get the popup.

In the SAP GUI help page (clicking Help on the security configuration popup) it shows a nice example for notepad.exe.

It is set as "File" in the "Type" field, plus you have to use forward slashes instead of back-slashes (it says in the help).

So something like:

C:/Program Files (x86)/SAP/FrontEnd/SAPgui/saphttp.exe

Then, the help says that if you need any form of network interaction for the file, then you should complete the "Network" column with your SAProuter string:

"

Input in field Network is necessary only if you need to use a SAProuter to connect to a certain system. As long as all systems you need to work with are part of your local network, you can ignore this field.

If you need to address a non-local system, you need to declare the respective SAProuter string in the Network field.

"

Give that a go and see what it does for you.

[tobias_ptz]

Yeah this s...., that's why I copy my reply first before I add it ..

Well I tried also this variation, but with the same effect, the pop up still comes up.

C:/Program Files (x86)/SAP/FrontEnd/SAPgui/saphttp.exe

Type: File and Commandline

Also:

saphttp

Type File and Commandline

Are you able to test that scenario on any DEV system? I don't get it 😕

[former_member193518]

When you next get prompted, tick the box "remember my decision" (do you have it?) then go and look how it has been saved in the security settings.

Maybe this will help you define the format.

[tobias_ptz]

I wish there would be one!

Just uploaded the screenshot again ..

[former_member193518]

Hmm, maybe that "ATTENTION" line means that it doesn't have an "OBJECT" that can be recorded in the settings...

[Former Member]

Can you upload screenshot with rules added?

[tobias_ptz]

[tobias_ptz]

Yes, that's maybe the problem ..

[former_member193518]

Take a look at SAP notes:

http://service.sap.com/sap/support/notes/1536580

and

http://service.sap.com/sap/support/notes/1630673

They explain the issue clearly.

Is the program/t-code you're using a custom one?  Someone just needs to be more specific in the coding somewhere.

[tobias_ptz]

Oh, thanks for the notes! I didn't found that ..

.. I know that this notes are for 7.20 and I know we have this problem since we patched the GUI to 7.30 higher then PL4.

We're using SAP standard TAC: ME53N, maybe there is a real problem in the SAP GUI version 7.30 ..

[former_member193518]

There are some updated rules attached to the note: http://service.sap.com/sap/support/notes/1768979

[tobias_ptz]

Sorry for the delay ..

We have these rules installed with the current patch.

I've done some tests on other SAP ERP systems, with strange results. On other systems I don't get a security popup, but I use the same GUI settings and same TAC. Other users, get a popup, but these are still using GUI 7.20.

In the end of the next week, we should be done with the implementation of the EHP, so I can test if it was the old SAP version vs. new SAP GUI version, or if it is just a GUI problem ..

[Former Member]

One more thing to try is to enable SAP GUI security tracing. Recreate the issue and check trace files.