XI Security for the Java engine (specifically SLD)

[Former Member]

Has anyone encountered and overcome the obstacle where you are maintaining authorizations through the ABAP UME for an XI system but have the requirement to control an item in the java engine with more restrictive controls that what the SAP delivered roles provide?

We are trying to limit our developers access to the SLD. They will be allowed into portions of the SLD, but Basis will control the rest. The SAP role SAP_SLD_DEVELOPER just gives out too much for the developers to have.

There's no documentation on how to develop roles (or groups in the java side) so unless you use SAP delivered roles, you can't do ANYTHING on the java side.

Any help you can give would be greatly appreciated.

Cheers,

Al

[former_member189354 · Accepted solution]

Can you try out SAP_SLD_GUEST. I think this will helpful.

Regards,

Mallikarjun.M

[Former Member · Accepted solution]

Malisetti, Thanks for your feedback. We are using the SAP_SLD_GUEST role as well for non-developers, however we found that it was too restrictive for our developers.

I guess the true questions is "is there a tool that allows you to develop your own java roles/groups so you aren't restricted to the SAP delivered roles"?

Thanks again