Parameter t-code for Webdynpro application not working from security perspective

[former_member275658]

Hi Experts,

We have developed a webdynpro application and tied it to a parameter custom t-code then added the parameter t-code to a PFCG role. Problem is when we execute this parameter t-code from SAP GUI it opens Webdynpro application without checking any security authorizations but when we use the URL link of the webdynpro application and paste in a Internet Explorer it checks for authorization S_START.

We do not have portal and also we don't want users to launch URL's from SAP GUI. Proposal is to tie webdynpro application to a custom t-code and roll out to users via PFCG roles so users don't see URL's and able to launch within SAP GUI.

Could anyone please advise how should we build this so Security authorization is checked for S_START object when launched from SAP GUI ?

Regards,

Salman

[Gowtham]

Hi Salman,

You can do the authorization check in WDDOINIT of the component controller & if the user doesn't have any authorization you can block him at that level only.

- Gowtham

[former_member275658]

Hi Gowtham/All,

All Web Dynpro applications has authorization check on S_START by default and authorization check is working when we launch URL but when we launch parameter t-code from SAP GUI (which calls web dynpro application) it doesn't check anything for security.

Am I missing something while building parameter t-code ?

Regards,

Salman