Question:
Hi,
We have a situation where we want to send workflow work-items to outlook, who then execute the WI using a BSP Page. the issue is:
While we want to avoid having the users to login to the system, we still want to maintain some semblence of traceability of execution in WF logs.
The design we so far have is: to have a generic background user that is used by the BSP to login, and then store the username in the WF container.
One of the ideas somebody suggested, was to have the background user as a Service user, and then SAP Help says:
http://help.sap.com/saphelp_47x200/helpdata/EN/52/671191439b11d1896f0000e8322d00/frameset.htm
We are particularly interested in the part where it says:
"After an individual authentication, an anonymous session begun with a service user can be continued as a person-related session with a dialog user."
1. Does this mean that the SY-UNAME can be changed in the ABAP AFTER the login has been done using a System User?
2. Does this changed Logon Name have to be registered as an SAP user?
3. Can it be configured so that a Dialog login is not possible for the system user?
Answer:
[quote="pradeepkhanna"]1. Does this mean that the SY-UNAME can be changed in the ABAP AFTER the login has been done using a System User?
Yes.
2. Does this changed Logon Name have to be registered as an SAP user?
No.
3. Can it be configured so that a Dialog login is not possible for the system user?
Login, yes. Deactivation of the password (codvn = x) will make it impossible for the system to compare to for dialog or remote rfc login.
The "session" can then only operate in background, but can still do many things there...
Tarr
Answer:
Tarr Tarr Tarr
Sy-uname can never be changed in ABAP. If you find a w ay to do it please let me know and I will broadcast to the work that SAP is totally broken.
Tarr, you really have to stop this off the cuff bizarre advice. I have taken to skipping over most of your responses because they are very unrelaible and this one is just plain wrong!!!
Answer:
please let me know
Considering that there is no way of telling who you are and you would skip over it anyway, how and what use would there be in telling you?
this one is just plain wrong!!!
Saying this anonymously without providing an alternative or reason is very easy and the only information value from it is a warning to be carefull.
Answer:
Do you realize the consequences of allowing sy-uname to be changed programmatically? The SAP products could not possibly be certified to be secure under any circumstances.
If someone says that the moon is an equilateral pyramid I don't have to provide alternatives. Its patently obviously wrong.
I can respond anonymously and with outrage when such outrageous statements are made by someone who represents herself as a security guru. I expect that she won't stop either. She'll just quit signing her already "anonymous" posts.
Answer:
Hi Tarr Tarr,
Notwithstanding the debate, your answers have me really interested:
1. Does this mean that the SY-UNAME can be changed in the ABAP AFTER the login has been done using a System User?
Yes.
2. Does this changed Logon Name have to be registered as an SAP user?No.
Tarr[/quote]
Can you tell me how this can be achieved?
Answer:
represents
Dear pradeepkhanna,
Considering the audience, open a customer message with SAP.
Guest might be adjitating because this could be classed as consulting...
SAP might say the same in some circumstances, depending on who answers your call.
If I post, then I sign my "anonymous" name. I do not have a problem with it and will continue to do so until the moderators ban discussion.
So far, "fishing" still appears permissable in a free country, unless "weapons of mass value destruction" are deemed to be harboured in the bait.
Tarr
Answer:
Consulting, Tarr, is a whole lot different than bloviating.
Answer:
Hi Tarr Tarr,
Notwithstanding the debate, your answers have me really interested:
1. Does this mean that the SY-UNAME can be changed in the ABAP AFTER the login has been done using a System User?
Yes.
2. Does this changed Logon Name have to be registered as an SAP user?No.
Tarr
Can you tell me how this can be achieved?[/quote]
She cannot tell you how this can be done because it cannot be done. There are background processes in workflow (asynchronous processes). Thee are all performed by the communication user WF-BATCH with the authority assigned to that user.
Answer:
Thee are all performed by the communication user WF-BATCH with the authority assigned to that user.
If that does not constitute changing sy-uname, then I have seriously misunderstood the question and what sy-uname means.
Anyway, I am tired and I think I got the message.
Goodbye SAPFANS.
Tarr
Answer:
Nice try Tarr
Answer:
You really need to take your questions to a workflow expert. Workflows are a series of tasks required to accomplish some complete process in SAP. Work items are created by ech task and are either processed in an asynchronous step or synchronously by a dialog user who opens the workitem in his inbox.
If the action is synchronous it is done using the user name of the user who performs it. If it is asynchromous it is performed by WF-BATCH. The programmer doesn't change sy-uname to get a different user name. Instead workflow calls a remote function module at the destination WORKFLOW_LOCAL.
Here is an example of a synchronous task:
A user opens a work item and that requests release of a requisition. He releases the requistion using his authority.
Here is an asynchronous task:
A manager opens a work item asking for approval of a new role assignment to a user. She approves the assignment which is actually performed "asynchronously" by WF-BATCH. She has no system authority for user assignments but the user assignment is performed by the communication user.
At no time is there any ABAP coding to change the user name.
Beyond this please direct questions to the workflow gurus.