Additional server based security options for Scripting, SAP security note 692245

SAP security note 692245, “Additional server based security options for Scripting”, is a program error note released on 10/07/2009. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

The security switch described in SAP Note 480149 allows customers to enable or disable SAP GUI Scripting for an application server using a profile parameter. Many customers have asked for a more refined concept that allows them to enable certain features of SAP GUI Scripting while disabling others.

Solution

In addition to the existing sapgui/user_scripting parameter, two new profile parameters have been introduced to provide more granular control over SAP GUI Scripting features:

• Disable Recording (sapgui/user_scripting_disable_recording): setting this parameter to TRUE allows only script execution. SAP GUI will not send any scripting notifications to other applications, and user interactions cannot be recorded.
• Read Only (sapgui/user_scripting_set_readonly): in Read Only mode, only non-state-changing operations of the Scripting API are allowed. You can read properties and call read-only methods, but you cannot modify properties.

Supported versions:

• SAP GUI 6.20: support introduced in patch 43. 6.40 and following: fully supported.
• SAP Kernel 46D: support introduced in patch 1698, correct RZ11 support requires patch 2098. 620: support introduced in patch 1223, correct RZ11 support requires a 640 kernel. 640 and following: fully supported with correct RZ11 support available.
• R/3 46C: support package required. 620: support package required. 640: fully supported. 700: support package required. 710 and following: fully supported.

Reason and prerequisites

To utilize the enhanced security options for SAP GUI Scripting, the sapgui/user_scripting profile parameter must be enabled as described in SAP Note 480149. This parameter enables all SAP GUI Scripting features at once.

References

Affected components

• BC-FES-GUI: 620
• SAP_BASIS: 46C, 620