I am investigating how to execute ABAP Web Dynpros using a FireFighter user-id (we are still on GRC-AC 5.3). I have seen this question asked by others on SCN, but there doesn't seem to be an answer provided.
Our scenaro is a follows:
1. USER_A logs onto ECC Production.
- We authenticate using X.509 and the ECC system also issues USER_A a SAP Logon ticket for ECC Production.
2. USER_A logs into FireFigter using transaction /VIRSA/VFAT. The FireFighter account is FF_USER_A
3. FF_USER_A now executes an ABAP Web Dynpro from a PFCG role menu.
- This launches a Web Browser window which starts the Web Dynpro.
- However, there is already a SAPLogon ticket available for USER_A, so we are authenticated as USER_A, not FF_USER_A.
- USER_A is not fully autorized to run the Web Dynpro. This is expected because we want the task to be performed as FF_USER_A.
So, how do I get the ABAP Web Dynpro to run as FF_USER_A.
It seems to me it is not possible to run Web Dynpros under a FireFighter user-id, but this seems like a big product gap to me.
What am I missing?
Richard.