Registration

Dear SAP Community Member,
In order to fully benefit from what the SAP Community has to offer, please register at:
http://scn.sap.com
Thank you,
The SAP Community team.
Skip to end of metadata
Go to start of metadata

Issue

This unwanted logoff could happen when you try to display or edit document info records in EasyDMS. The problem is that the logon screen appears suddenly again and the user does not get any warning or explanation for this behavior. However it might be that not all users face this issue.

Reason

By debugging the behavior in EasyDMS I found out that the reason for this behavior is located in the following coding

Function Module SCDC_REMOTE_CONVEXIT  
* Authority Check Note 1597391
AUTHORITY-CHECK OBJECT 'S_TABU_RFC'
      ID 'ACTVT' FIELD '03'.
IF sy-subrc <> 0.
      MESSAGE e035(SCDT_MAP).

This function module is for example called in the EasyDMS related function module 'EASYDMS_DOCUMENT_GETDETAIL2' at

CALL FUNCTION 'SCDC_REMOTE_CONVEXIT' EXPORTING
convexit = 'CONVERSION_EXIT_TPLNR_OUTPUT'
input = lv_int_key
intlen = lv_len " 80 for unicode and 40 for non-u
inttype = 'C'
IMPORTING
output = lv_ext_key.
 
IF lv_ext_key IS NOT INITIAL.
ls_objectlinks_ext-objectkey = lv_ext_key.
ENDIF.

The error is essentially happening because of the introduction of a SAP Security note 1597391  in the function module: SCDC_REMOTE_CONVEXIT. Please note that this is a RFC enabled function module and hence this will be called by various RFC applications (including Easy DMS). As this function module ise used in several interfaces this kind of change cannot be removed anymore. 

To verify the failing authorization check as the reason for the issue in EasyDMS you can use the authorization trace in transaction ST01 as explained at Authorization Trace in transaction ST01. In the result you should then see the failed check on object S_TABU_RFC as shown in the below screenhot. 

Solution

To avoid this issue in EasyDMS the only solution is to add the necessary S_TABU_RFC permission to your users because otherwise this authorization check will fail and the user got logged off from EasyDMS.

Back