This website is not affiliated with, sponsored by, or approved by SAP AG.

R: S_SERVICE and table USOBHASH

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

R: S_SERVICE and table USOBHASH

Postby beached » Tue Sep 01, 2009 4:12 pm

Background: When users execute an external web service via a web-link the system will check S_SERVICE in the SAP backend. The hash value for the service is required in the authorization, not the name of the service itself. Without the hash value, the authorization can not be completed b/c: 1) you must know the hash value to enter it manually or you must select it from a drop down list in the authorization field. This field reads table USOBHASH. My problem: The ABAPer wrote a function module, linked to a web service and then exposed his web service. However, the web service is NOT listed in the USOBHASH table. Therefore, I cannot build an authorization for the service. If you try to add S_SERVICE manually into the authorization tab when you double-click the authorization fields in S_SERVICE and then input the actual service name it simply returns a blank field since the service doesn't exist in the USOBHASH table. If you try to add it in PFCG using the role menu OTHER button and the URL type = Authorization Default Values for Services and then radio button External Services, type = WS and your service name, you get the message that external service does not exist. We finally figured this out!!

Q: So my question originally was: How does the hash value get populated into the USOBHASH table so that it can be added to roles?
A: Once the web service is run/executed then the USOBHASH table is updated with the service and its corresponding hash value.

We discovered this by granting someone full S_SERVICE access and then running the service so we could trace it to determine the value. So the action of running the trace actually allowed us to discover that the service execution adds the service and hash value to the USOBHASH table!!! Happy hashing!!!
E. Kirk Beacham
beached
 
Posts: 39
Joined: Tue May 24, 2005 6:10 pm
Location: Houston

Re: R: S_SERVICE and table USOBHASH

Postby beached » Tue Sep 01, 2009 4:16 pm

Kirk, thanks for that awesome solution. We have really been driving ourselves crazy here today trying to figure out how to get that darn hash value into the USOBHASH table....and to think all we had to do was have the ABAPer run the service!! Yipppeeee!!!
E. Kirk Beacham
beached
 
Posts: 39
Joined: Tue May 24, 2005 6:10 pm
Location: Houston

Re: R: S_SERVICE and table USOBHASH

Postby swright » Wed Sep 02, 2009 2:43 pm

It's not the trace but successfully consuming the service for the first time that generates the hash key.

FYI
Sandi
~~~~

Tuly kiwi. Image

Putting the Chur in Christchurch, bro!
swright
 
Posts: 4466
Joined: Sun Oct 20, 2002 3:08 pm
Location: New Zealand

Re: R: S_SERVICE and table USOBHASH

Postby os » Thu Sep 03, 2009 1:50 pm

I think this is a strategy to make testing development work and using the menu more "intuitive" within it's learning curve... but still giving lazy bones the option of a manual entry... :-)
os
 
Posts: 469
Joined: Wed Dec 21, 2005 10:51 am

Re: R: S_SERVICE and table USOBHASH

Postby samszaf » Thu Jul 13, 2017 7:18 am

Hello,

So, once the web service is consumed, the corresponding hash value is written in USOBHASH.
Is there a way to predict the hashed value ? This would be interesting from an audit point of view, because then we can download the users' authorizations from a system and subject the loaded S_SERVICE per user to a rule set.

Thanks for your input,
Sam Szafranski
samszaf
 
Posts: 1
Joined: Thu Jul 13, 2017 6:51 am


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 1 guest





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.