Checking Permissions in the Web Dynpro Frontend Client 

Use

You have now checked the permissions for using the Web Dynpro car rental application in the EJB methods in the backend. As the next step in this tutorial, you will also learn how to perform permission checks in the Web Dynpro frontend client.

We recommend performing the permission checks as close to the business logic as possible, in this case, in the EJB methods. However, it may also be desirable to perform checks in the frontend client, for example, to modify screen output based on a user’s permissions.

For this section in the tutorial, we will show how to use the hasPermission() method in the Web Dynpro client. If the user does not have the authorization to create reservations, then you will change the properties for the input fields to read-only.

Prerequisites

The project for the Web Dynpro car rental application is available in the SAP NetWeaver Developer Studio.

Procedure

...

       1.      Include the UME libraries in the Web Dynpro project.

       2.      Create the permission class to use for the Web Dynpro client.

       3.      Check the permission in the Web Dynpro client.

       4.      Define actions in an actions.xml file used by the Web Dynpro.

       5.      Rebuild the project.

       6.      Create the UME archive file used by the Web Dynpro.

       7.      Deploy the Web Dynpro application.

       8.      Modify the users’ UME roles.

       9.      Test the access protection.

Next Step:

Including the UME JAR File in the Web Dynpro Project