Thursday, September 29, 2011

Comments in ABAP code 1

Here I go with short post belonging into FUN category. I just today found a message in the code passed over by one SAP guy to another one – who was at that time enjoying his parental leave. 

The code can be visible in BW 7.3 - part of BW-IP functionality. On one day if you will debug some planning sequence I’m confident you come across it :-)












Other posts on similar topic:
Comments in ABAP Code 2

Deploying RIG or SDN how to’s document to production use

There are couples of great applications available on SDN provided by SAP’s RIG organization. RIG is abbreviation of SAP NetWeaver Regional Implementation Group (RIG). It is a part of the SAP Development organization. The purpose of RIG is to help SAP customers and partners with implementation of SAP solutions. Usually they are dealing with SAP NetWeaver components as BW/BO/ABAP/NetWeaver/WAS/basis/PI.

RIG’s guys used to contribute to SDN as well by providing step-by-step guides deploying some additional functionality. Just to name some of those how 2 documents; there is a “Load a File into SAP NetWeaver BI Integrated Planning” provided by Marc Bernard. I experienced that this nice piece of webdynpro for ABAP code and BW-IP objects is heavily used within customers. Basically what it does is to enable your business users to easily load e.g. planning data from flat files into your planning application in SAP BW.

However have you ever wondered either application like this is supported by SAP? To tell you the truth they are not. I just came across interesting SAP Note (1588518 - How-to Load a File into BW-Integrated Planning) which is particularly discussing this data uploading application. Here’s quote from the note:

Please note that there is no standard support for how-to papers (see small-print of all SAP NetWeaver How-to Guides). For this specific guide, please ask the customer to post further questions to the corresponding SDN forum or blog… For high priority customers, you may contact the author of the how-to guide (Marc Bernard).

So that’s it. Be careful while asking SAP to help you with that.

PS: I would like to thank to Mark within this post as well for great solution delivered.

Wednesday, September 28, 2011

BWA Fill Level what it is and where to find it?



Speaking of BWA you might heard already about one of its parameters. It is called fill level. Usually BWA guy is asking about that Basis (or even vice versa? J). You may also hear that this parameter should be kept under certain value. 

According its definition taken from note 1517326 - BWA Support Toolkit it is:


Ratio of disk size of all indexes to installed RAM of all master blades, expressed as percentage of the amount of installed RAM of all master blades.

SAP is advising (in the same note quoted as above) to keep this value under 50%. That would be to have BWA in correct sizing.

Coming finally to the point how to find what fill level in your BWA is? All you need is to run BWA Support toolkit (again see note quoted above). Toolkit is basically ABAP report called ZBWA_TOOLKIT. On its main screen choose BWA Summary button:

 













On next screen you get just accept all settings as they are provided and execute the report. Here’s my output - pretty bad. But it is just test system environment :-)











More about this topic:

Another blog from BWA topic:

Usage of SAP standard objects in custom development

Here’s typical situation on upgrade project: After you got upgraded e.g. development system you doing testing of applications running on SAP system. Of course you have some custom application e.g. at least reports or you extended standard functionalities through user exits, BAdIs or enhancements points. Within that kind of development you using SAP’s standard repository objects like function modules, classes, methods or DDIC objects. Suddenly you realize that that call of standard peace of software actually dumps since standard object was removed in new release of SAP software. Why’s that; you may wonder? Why someone at SAP had this strange idea of removing such an object? Hmm the thing is that SAP commits that some object will (maybe never) not be removed and some of them may be removed. How is that? How can I recognize what objects are belonging to witch category? 

In case of function modules you can observe this status in its Attribute tab: 

 










This field so called type of function module release can have 2 values of: 

External release: The function module is released within SAP and for customers. When making changes, you must be careful to ensure upward compatibility. A programmer who has used the function module must be able to rely on the fact that he will never in the future need to change the way he has called it. 

Internal release: The function module is released for internal usage. When making changes, you should be careful to ensure upward compatibility. If an incompatible change is unavoidable then all users of the function module must be informed promptly. 









What about other objects? I’m not aware that any other development objects having such a nice screen with its type of release. However there is a table having this information. It is a table RODIR. You can search for particular object type in its column called OBJECTTYPE (e.g. CLASS stands for classes, FUNC for function modules, etc.). By this way can get information about object release status. 

Therefore within the upgrade project be especially careful in case of you are using objects which are not released for external usage. Be aware that they may disappear within every upgrade. Basically those are the objects really dealing with the data on database level. You should find respective object which is encapsulating such a objects and which is released for usage.

For more information on this topic see SDN’s wiki page and SAP Note: 109533 - Use of SAP function modules. 

Monday, September 19, 2011

New transaction codes in BW 7.3

--- last update 25.01.2012 ---

Here’s a list of new transaction codes as they appeared in BW 7.3. I try to add comment or let say purpose of each transactions soon right after I familiarize with them. 

TCODE
descr.
RSA19
DW Workbench: accessing Data Flows screen
RSA20
DW Workbench: accessing Planning Sequences screen
RSAP_AUDIT_PREVIEW
Preview for System Measurement in BI
RSAUDIT_SYSTEM_ENV
Client and System Settings
RSAUDIT_SYSTEM_ENV_X
Client and System Settings
RSBCT_SREP_SLC
Scalability Level Configuration
RSBUCKET
Fill Bucket
RSB_RELEASE
Release Clients for ETL Tools
RSCNV_MONITOR
DB6 MDC Re-clustering
RSCOPY
Data Flow Copy Processes
RSCUSTV31
RFC Destination for BI Model Gen.
RSCUSTV32
Hide Old DWB Functions
RSCUSTV33
FAE Threshold Value for SID Service
RSCUSTV34
Async. Deletion form Write-Opt. DSOs
RSDDB
BWA Index Maintenance
RSDDG
Demo Data Generation
RSDDTPS
Start Explorer Maintenance, BOBJ Polestar
RSDD_LTIP
Administration of Analytical Indexes
RSDD_LTIP_PUBLISH
Publish a TREX Cube Index
RSDD_MU
Maxwell Export Manager
RSDEMO_DROPDOWN_LIST
Report RSDEMO_DROPDOWN_LISTBO
RSDF
Edit Data Flows
RSDFWIZ
Data Flow Generation Wizard
RSDHYBR
accessing Edit HybridProvider screen
RSDHYBRD
Initial Screen: Edit HybridProvider
RSDHYBRM
Initial Screen: Edit HybridProvider
RSDS_PROPOSE
Find InfoObjects for DataSource
RSECAUTH02
Mass Maintenance - Analysis Auths
RSECSY
Mass Maintenance - Analysis Auths
RSFSI1
Virtual InfoProvider for FastSearch
RSHOWINDEX
Show Index
RSINSP
Inspection Plan
RSLIMO
BW Lean Modeler Test UI
RSLPO_MASS_ACT
Aktivation of BAdI SPOs
RSMIGRATE
Migration Tool/Project
RSOBIXP
Maintenance of Conversion Objects
RSOCOPY
Copy from TLOGO Objects
RSODSO_SQLTRACE
SQL Statements for MPP DataStores
RSOSCSFW5
Configure BI Business Functions
RSOSCSW
BI Switch Overview
RSOS_ES_OBJMAINT
Obj maint. for ES backend navigation
RSPRECALCADMIN
Precalculation Server Administration
RSPSADEL_PATTERN
Maintain Src System Pattern Assignm.
RSQSI
QSI Maintenance
RSRD_RLP
Administration Broadcasting to RLP
RSRTE
Analyzer Test Transaction
RSRTS_ACTIVATE_R3IS
Basic Configuration Operational BI - minimal system configuration so that BW tools can be used to analyze data from classic InfoSets.
RSTCT_INST_BIAC
Installation of BI AC Content
RSTCT_RRI
Display object or process maintenanc
RSTC_XCLS
Xcelsius Dashboard of AdminCockpit
RSTHRT_TEST_CCT
Test CCT Basics
RSUSR_SYS_LIC
Cross-System License Data Info.
RSWEWWDHSOSHOW
Display Work Item Deadline Monitorng
RSWSP
Workspace Individual Processing, fully available only in SP05
RSWSPW
Workspace Mass Processing, fully available only in SP05
RSMIGRHANADB
Converting Standard InfoCubes to SAP HANA-Optimized

More links on BW 7.3 topic:
·         Prerequisites for BW 7.3
·         Features of SAP BW 7.3

Tuesday, September 6, 2011

SAP BW Security Notes - composite post

This blog post has an intention to cover security SAP notes especially related to BW. I plan to keep this blog updated with the newest security notes as they being published by SAP.

Basically you can check those notes by yourself on SAP Service Market place as follows:

service.sap.com/securitynotes -> SAP Security Notes -> Security Notes Search

Here’s the list:


Note
No
App. area
Short text
Pr
io
Released On
BW-BEX-OT-DBIF
Directory traversal in BW
2
09.08.2011
BW-BEX-OT
Unauthorized modification of displayed content in BW
2
09.08.2011
BW-BEX-OT
Potential disclosure of persisted data in BW RFC
2
09.08.2011
BW-PLA-BPS-WIB
Aktualisierung #1 zu Sicherheitshinweis 1482118
2
15.06.2011
BW-BEX-OT
Missing authorization check in BW RFC
1
10.05.2011
BW-BCT-ISR
Nicht autoris. Änderungen und Ausführung bei RSBCT_RFASH_ALI
2
10.05.2011
BW-WHM-AWB
Missing authorization check in RFC with call transaction
2
08.03.2011
BW-BEX-ET-WJR-AD
Potential remote code execution in BW WAD
2
08.03.2011
BW-BEX
Update #1 to Security Note 1493268
3
03.02.2011
BW-BEX-OT
Missing authority check in SAP_RSADMIN_MAINTAIN
2
11.01.2011
BW-BEX-ET-WEB
Unauthorized modification of displayed content in 3.x BEX
2
14.12.2010
BW-BCT-CMS
Generic dataloader missing authority check for BW Objects
2
14.12.2010
BW-BCT-BBP
Unauthorized modification of displayed content - Vendor Eval
2
14.12.2010
BW-BCT-ISR-PIP
Potential disclosure of persisted data in BW-BCT-ISR-PIP
2
14.12.2010
BW-BEX-OT
Unauthorized modification of displayed content in BW
2
14.12.2010
BW-BCT-ISR-RSL
RMA Berechtigungsprüfung im Check Report BW
3
14.12.2010
BW-BCT-GEN
Potential disclosure of data in RS_BCT_CONTTOOLS_ABAP
2
14.12.2010
BW-BCT-EPM
Directory traversal/SQL injection in SPM1.0
2
14.12.2010
BW-BEX-OT-OLAP
Directory Traversel in BW OLAP RFC
2
14.12.2010
BW-PLA-BPS
Unautorisierte Änderung von angezeigten Inhalten in PLA-BPS
2
09.11.2010
BW-BCT-ISR
Versenden von Abverkaufsdaten an SAP DM
2
09.11.2010
BW-PLA-BPS
Unauthorized modification of displayed content in CRM-BPS
2
12.10.2010
BW-BCT-ISR
Location of the "SAP for Retail - Security Guide"
6
12.10.2010
BW-BCT-ISR-RSL
Fehlende Autorisierungsprüfung in RMA-Workbench
3
14.09.2010
SRM-BW
Vulnerability during dynamic function call without validatio
2
14.09.2010
BW-BEX
Unauthorized modification of displayed content in BW
3
14.09.2010
BW-BEX-OT-OLAP-AUT
Fehlende Autorisierungsprüfung in RSUDO beim "Ausführen als"
3
10.08.2010
BW
Directory Traversal in BW Statistik
3
10.08.2010
BW-BEX-OT-OLAP
code injection vulnerability in a BW function module
3
10.08.2010
BW-BEX-OT-OLAP
Reflected Cross-site Scripting (BW Document Browser)
3
08.06.2010
BW-WHM-DST-AUT
Anpassung Rollenvorlagen: S_RS_HYBR, S_RS_LPOA hinzugefügt
3
11.05.2010
BW-BCT-ISR-PIP
Potential disclosure of authentication information
2
11.05.2010
BW-BEX-ET-WEB
Missing Input Validation in Business-Explorer
1
09.02.2010
BW-BEX-ET
Sicherheitslücke in BEx Tools
1
03.02.2010
BW-BEX-OT-DBIF
Fehlende Berechtigungsprüfung in einem BW Report
2
07.12.2009
BW-BEX-ET-WEB
Bei Ausführung 3.X Web Template nur unverständliche Zeichen
1
23.11.2009
BW-BEX-OT-DBIF
Editor ohne Berechtigungsprüfung
2
19.10.2009
BW-BEX-ET-WJR-RT
BEx Web 7.0: Display Support Information in Error Pages
2
08.10.2009
BW-BEX-ET-WEB
Sicherheitshinweis: Cross Site Scripting
1
08.10.2009
BW-BEX-OT-MDX
Sicherheitshinweis: Buffer Overflow in ODBO Providers
1
08.10.2009
BW-WHM
P18:Security Note:RSSM_EXEC_COMMAND auf RSBDCOS0 umstellen
3
08.10.2009
BW-BEX-ET-WJR
Display Stack Trace in Error Pages
6
08.10.2009




Legend:
Note priorities (prio):
1 - HotNews
2 - Correction with high priority
3 - Correction with medium priority
4 - Correction with low priority
6 - Recommendations/additional info