Communication Channel Security
cProject Suite Communication Channel Security
Communication Channel |
Communication Technology |
Scenario |
Data Transferred |
Comment/Security Recommendation |
cFolders or cProjects front end (browser) to the SAP Web Application Server (SAP Web AS) |
HTTP(S) |
cFolders and cProjects
|
Files, metadata, and user data (passwords, user names) |
|
WebDAV interface |
HTTP(S) with WebDAV extension |
cFolders and cProjects
|
Files and metadata |
WebDAV interface is used to connect the KM repository, and also front-end WebDAV clients |
cFolders or cProjects front end (browser) to content or cache servers |
HTTP(S) |
cFolders and cProjects
|
Files |
|
SAP Web AS to content or cache servers |
HTTP(S) |
cFolders and cProjects
|
Metadata, files |
|
Back-end systems (PLM cFolders Add-On, for example) to cFolders or cProjects front end (browser) |
RFC |
cFolders
|
Metadata, files |
The cFolders back-end integration calls the cFolders system from the back end. Possible back ends are: SAP PLM 4.6C and higher, or the cProjects application. In both cases, the back end always calls cFolders, cFolders never calls back.
|
SAP Web AS to other application servers (for example, SRM, HR, CO) |
RFC |
cFolders and cProjects
|
Metadata, files |
For the SRM scenario, cFolders calls the SRM server using a technical user. If the cFolders system and the SRM system are located in different network segments, a SAP router can be used to secure the communication. cProjects communicates with 3rd party or SAP systems to obtain or create information on object links between cProjects and objects located in the 3rd party/SAP system. Possible SAP systems are: SAP R/3 4.6C and higher. The communication to 3rd party systems has to be implemented at the customer site. The 3rd party/SAP system never calls back. For more information, see the solution management content for cProjects under Organizational Areas → Product Development and Introduction → Business Processes → Project Planning with cProjects → Setting Up Object Links. |
cProjects front end to cFolders front end |
RFC |
cProjects |
Metadata, files |
cProjects calls cFolders, cFolders never calls back. |
cProjects Web AS to SRM via SAP XI |
HTTP(S) |
cProjects |
Metadata |
|
In cFolders, HTTP(S) is also used to communicate with the ECL viewer, which is a front-end installation, and the WebEx meeting service, which is an external third-party system used for online meetings.
In cFolders, new users receive their user IDs and passwords by e-mail. Since e-mails are potentially unsafe, this mechanism can be switched off in cFolders. The user administrator then has to communicate this information to the user by other means. For more information, see the solution management content for cFolders under Solutions → mySAP PLM →Configuration Structures → SAP cProjects 4.00 → Basic Settings for cFolders → System Connections →System Configuration for Accessing cFolders → Enabling E-Mails for cFolders.
For information about security measures when using HTTP(S) in the cProject Suite, see Network Security.
xRPM Communication Channel Security
Communication Channel |
Communication Technology |
Data Transferred |
Comment Security Recommendation |
xRPM core on the Web AS to the SAP Enterprise Portal |
HTTP JCo RFC |
Files, metadata, and user data (passwords, user names) |
|
xRPM core on the Web AS to SAP cProjects |
RFC / HTTP |
Files, metadata |
|
xRPM core on the Web AS to SAP PLM PS |
RFC
|
Files, metadata |
|
xRPM core on the Web AS to SAP HCM |
SAP ALE RFC
|
Files, metadata |
|
xRPM core on the Web AS to SAP BW on the Web AS |
ALE RFC |
Files, metadata |
|
xRPM core on the Web AS to Microsoft Project |
HTTP / SSL |
Files, metadata, and user data (passwords, user names) |
|
xRPM core on the Web AS to SAP Content Management, SAP Workflow, SAP Collaboration Room, |
RFC |
Files, metadata |
|
xRPM core on the Web AS to SAP xApp Product Definition |
RFC / HTTP |
Files, metadata |
|
xRPM core on the Web AS to SAP FI/CO |
RFC / ALE |
Files, metadata |
|
For information about security measures when using RFC communication channels, see the SAP Web AS Security Guide on SAP Service Marketplace at service.sap.com/securityguide → SAP Basis / Web AS → SAP Web Application Server Security Guide (ABAP + JAVA) → SAP Web AS Security Guide for ABAP Technology in the section “Protecting Your Productive System (Change and Transport System)”.