When entering a SAP Fiori catolog into the role menu the Odata Services assigned to the apps contained in the catalog are automatically entered in the role menu. In the case of problems with a SAPUI5 app, use the SAP Fiori Apps Library to determine which OData Services users require PFCG authorization for. Then check in the corresponding catalog in role maintenance for which OData Services an entry exists for. If problems occur, check if the correct proposals are made for the OData services.
Authorization Maintenance for SAPUI5 Fiori Apps OData Authorization Object
When after entering a catalog in the role menu an entry for an OData service is missing you can enter the value for this OData service manually to the role menu. The OData authorization is maintained by the Authorization Default entry from the PFCG Menu.
Therefore proceed the following steps:
- Choose the Insert Node button and select Authorization Default.
- Choose SAP Gateway: Services Groups Metadata in the Authorization Default field to select the IWSG Service on the FES and enter the name of the TADIR Service.
- Choose SAP Gateway Business Suite Enablement - Service in the Authorization Default field to select the IWSV Service on the BES and enter the name of the TADIR Service.
Note
- TADIR IWSG is the Front-End authorization object
- TADIR IWSV the Back-End object
Both entries are generating the same S_SERVICE authorization object with different authorization values. The SRV_NAME value of the S_SERVICE authorization object is the hash value of an OData service, not the name. Therefore it is recommended to not maintain S_SERVICE manually.
Note
An IWSG object is only available when the OData service is completely configured.