Registration

Dear SAP Community Member,
In order to fully benefit from what the SAP Community has to offer, please register at:
http://scn.sap.com
Thank you,
The SAP Community team.
Skip to end of metadata
Go to start of metadata

Purpose

This Wiki clarifies how it is possible to control user's access to tiles with no Semantic or Intent Navigation on Fiori Launchpad

Overview

When configuring tiles to open external links or URLs, Fiori administrators will uncheck the "Use semantic navigation" box and provided the URL link in the Target URL. After tiles are assigned to a Group, all users having access to the same Group will be able to access these tiles or catalogs.  Below you will find step by step scenarios on how to control access to these tiles or catalogs in order to protect private URLs using target mapping.    

Resolution Steps 

These catalogs can be controlled by using the following steps:

  1. Create a "Semantic Object" (e.g -ZInTestLink) using tcode /UI2/SEMOBJ on the front end server

  2. Log into Launchpad Designer
    1. Create a "Catalog" and provide the "Title" (e.g.-Testlink), "ID" (e.g -Testlink) and click save as shown below



    2. Navigate to your catalog Testlink  to create a tile and specify a "Title", "Semantic Object" created in step 1 and choose any "Action", e.g.- "display" as below

    3. Save it and navigate to create a target mapping in a "Catalog" and specify "Semantic Object" and "Action" created in step 1
    4. Select "URL" as "Application Type" and provide the link to open (e.g. http://sap.com) in the "URL" tab. See the figure below

    5. Create another "Catalog" and provide the "Title" (Testlink 2) and the "ID" (Testlink2) and save as below
    6. Navigate to your catalog Testlink 2 and click on plus sign to add a tile
    7.  Give the "Title" (e.g. -google), uncheck the "Use semantic object" in the configuration and provide the link to open in the "Target URL" (e.g.-google.com) 



    8. Create a "Group" and provide the "Title" (e.g.- Group Control External links) and the "ID" (e.g.- Group_Control_External _links) as below and save



    9. Navigate to your group (Group Control External links) and assign both above created tiles 


  3. Log into your front end and issue tcode PFCG to create a single role (e.g. - ZTEST_01) to user
  4. Assign the "Group" (Group Control External links) created to user, i.e. 

     
  5. Log into your Launchpad and navigate to the created group.
  6. Observe that the user is able to see the Google tile from "Catalog" Testlink 2, even though that catalog is not assigned to user. Tile with no "Semantic Object" and "Action" can be accessed once the user is assigned to the same group. 
  7. Let’s assign the "Catalog" Testlink to the "Group". 

  8. Now, observe that the user is able to see External Link tile from Catalog Testlink. Catalog with "Semantic Object" and "Action" (e.g.-Testlink) cannot be visible  to user until the catalog is assigned to him


This is how we can use the target mapping to control access to tiles/apps with no Intent Navigation or no Intent-based navigation

See Also

Creating semantic object

Assigning catalogs/groups to PFCG roles

Related SAP KBA

SAP KBA  2575974:  Tiles visible for unassigned users

__________________________________________________________________________________________________________

  • No labels