SAP权限检查逐步指南:基础设置与实例

需积分: 0 1 下载量 135 浏览量 更新于2024-09-21 收藏 158KB PDF 举报
本文档是一份名为"SAP授权与角色检查步骤指南"的详细教程,适用于SAP NetWeaver 2004s Web Application Server SPS7环境。作者Glen Spalding,来自gingle Ltd,于2006年5月24日创建。该文档旨在为初学者提供一个简单易懂的指导,教他们如何在最基础的情况下创建和使用SAP授权概念。 主要内容包括以下几个部分: 1. **简介**: 介绍了SAP Authorization Object机制的基本原理,该机制用于检查当前用户对特定数据的权限。它在R/3系统中广泛应用,用于确保用户访问和操作的权限控制。 2. **场景描述**: 文档描述了一个实际场景,展示了如何在最简单的授权场景下进行操作,例如数据筛选等。 3. **创建授权字段**: 这一部分指导用户设置和管理用于权限控制的字段,这是授权对象的基础元素。 4. **创建授权类与对象**: 详细解释了如何定义和设计授权类(Authorization Class)和对象(Authorization Object),这些是SAP系统中分配权限的关键组件。 5. **创建角色、配置文件和授权**: 用户将学习如何创建角色来组织相关的权限,以及如何关联配置文件(Profile)和授权对象,从而为特定用户或用户组分配权限。 6. **角色分配给用户**: 对于系统管理员来说,这部分涉及将创建的角色指派给实际的用户,以实现权限的最终应用。 7. **编写授权检查代码**: 提供了如何在程序中实现权限检查的示例,以便在访问关键功能或数据时确保用户具备相应的权限。 8. **测试**: 介绍如何通过测试验证授权机制是否按预期工作,确保系统的安全性。 9. **版权信息**: 文档最后明确了版权归属,强调了2006年SAP AG的版权保护。 此篇指南对于想要了解和实践SAP系统基础授权管理的开发人员、系统管理员或IT入门者来说,是一份实用的参考资源,有助于他们在实际项目中有效地实施和管理用户权限。

SELECT CS.CLAIMS_ID, CE.LONG_NAME CORPORATENAME, CS.PATIENT_NAME, CS.EMPLOYEE_NAME,CS.DEPARTMENT,E.SUBSIDIARY ,E.BRANCH, CS.ADMISSION_DATE, CS.DISCHARGEABLE_DATE , CS.PROVIDER_NAME, CS.PANEL_PROVIDER, TRIM(DS.ICD_CODE)||', '||DS.DESCRIPTION DIAGNOSISNAME, CS.MC_TAKEN_DAY ,CR.DESCRIPTION COVERAGE_DESCRIPTION, SD2.FDESC CLAIMTYPE,CS.REMARKS, CS.DUE_TOTAL, CS.PAID_TO_CLAIMANT, CS.PAID_BY_CLAIMANT, CS.AUTHORIZATION_CODE, CS.SERVICE_DATE,CS.RECORD_NO,CS.SUB_RECORD_NO,CS.PLAN_ID,CS.TRANSMISSION_DATE,CS.CLAIMS_REC_DATE, CS.CLAIMS_STATUS ,CS.APPROVED_BY, CS.HOSP_INVOICE_NO, CS.TERMINAL_ID, CS.TERMINAL_TYPE, CS.DEDUCTIBLE,CS.POLICY_NO,CS.PAYEE_NAME,CS.CARD_NO, CS.DOCRCV_BY, CS.CENTRE_CODE ,CS.DOCUMENT_NO,CS.MRN , NVL((SELECT UPLDT FROM (SELECT UPLDT FROM SYT_ATTACHDOC LD WHERE TO_NUMBER(TRIM(LD.KEY1))=CS.CLAIMS_ID AND LD.MATERIAL_TYPE IN('申诉材料','补充材料','调查材料') AND ROWNUM<2 ORDER BY UPLDT DESC) WHERE ROWNUM<2),CS.SERVICE_DATE) AS LAST_DOCUMENT_RECEIVED_DATE FROM CLAIMS CS, CORPORATE CE, COVERAGE_MASTER CR, SYC_REFCD SD1, SYC_REFCD SD2, DIAGNOSIS DS , EMPLOYEE E WHERE CS.COVERAGE_ID = CR.COVERAGE_CODE AND CS.CORPORATE_CODE = CE.CORP_CODE AND CS.PRIMARY_DIAGNOSIS = DS.ICD_CODE AND CS.CLAIM_TYPE = SD1.REFCD AND CS.CARD_NO = E.CARD_NO AND SD1.VAR1 = SD2.REFCD AND SD1.MODID = 'ES' AND SD1.REFGRP = 'CLAIMTYP' AND SD2.MODID = 'ES' AND SD2.REFGRP = 'CLAIM_APPLICABLE' AND CS.PLAN_ID!='TEST-2023-GLOBAL-PLAN-DEMO' AND (CS.PAYOR_CODE,CS.CENTRE_CODE) IN (SELECT SYFIELD(STNCD,'*',1,1), SYFIELD(STNCD,'*',2,1) FROM SYM_USRSTN WHERE USRID='SYSTEM' AND STNTYP IN ('PC')) AND (CS.CORPORATE_CODE IN (SELECT STNCD FROM SYM_USRSTN WHERE USRID='SYSTEM' AND STNTYP IN ('PY','CO')) OR (CS.PAYOR_CODE,CS.CENTRE_CODE) IN (SELECT SYFIELD(STNCD,'*',1,1), SYFIELD(STNCD,'*',2,1) FROM SYM_USRSTN WHERE USRID='SYSTEM' AND STNTYP IN ('PC'))) AND CS.CLAIMS_REC_DATE>=TO_DATE('1999-01-01','yyyy-MM-dd') AND CS.CLAIMS_REC_DATE<TO_DATE('2099-01-01','yyyy-MM-dd')+1

2023-06-11 上传

try { //获取用户载荷 authorizationToken = authorizationToken.substring(7); //检查redis 只要有就继续 Long remainTime = redisUtils.getExpiredTime(BusinessConstant.JWT_REDIS_KEY.getKey() +authorizationToken, TimeUnit.SECONDS); if (remainTime <= 0) { throw new AuthorizationException(BusinessCode.NOT_AUTHORIZED.getCode(), BusinessCode.JWT_SIGNATURE_EXCEPTION.getMsg()); } //检查签名 JwtPayLoad<UserVo> payLoadFromJwt = JwtUtils.getPayLoadFromJwt(authorizationToken, publicKey, UserVo.class, BusinessConstant.SYSTEM_JWT_PAYLOAD_KEY.getKey()); //redis续期时间 min long now = System.currentTimeMillis(); long jwtExpiredTime = payLoadFromJwt.getExpiredTime().getTime(); long reNewTime = Long.parseLong(BusinessConstant.JWT_RENEW_TIME.getKey()) * 60 * 1000; //判断是否需要续期 if (jwtExpiredTime - now <= reNewTime) { //获取旧的用户属性 UserVo user = payLoadFromJwt.getPayLoadData(); //过期时间 int expiredTime = Integer.parseInt(BusinessConstant.JWT_EXPIRED_TIME.getKey()); String jwtTokenWithExpireTimeMinutes = JwtUtils.createJwtTokenWithExpireTimeMinutes(user, rsaProperties.getPrivateKey(), expiredTime, BusinessConstant.SYSTEM_JWT_PAYLOAD_KEY.getKey(), BusinessConstant.SYSTEM_JWT_ISS.getKey()); redisUtils.setNewAndDeleteOldWithExpiredTime(BusinessConstant.JWT_REDIS_KEY.getKey() + jwtTokenWithExpireTimeMinutes, user.getName() + ":" + user.getUserId(),BusinessConstant.JWT_REDIS_KEY.getKey() +authorizationToken, expiredTime, TimeUnit.MINUTES); response.setHeader(BusinessConstant.JWT_REQUEST_HEAD.getKey(), jwtTokenWithExpireTimeMinutes); log.info("====客户端:" + ipAddr + " 用户:" + user.getName() + " -- (" + user.getUserId() + ") token续期成功!!!!"); }

2023-06-05 上传

根据前端传过来的前端传递过来的开始时间和结束时间参数 筛选创建时间在开始时间和结束时间区间的数据 修改后端写法def get_bugs_data(): api_url = "https://api.tapd.cn/bugs" api_headers = {"Authorization": "#", "content-type": "application/json"}iterations_url = "https:/"count_url ="https://at" params_count = {"status": "closed","workspace_id": 41571821, } # 发送请求,获取缺陷总数 response = requests.get(count_url, params=params_count, headers=api_headers) if response.status_code == 200: total_bug = response.json()total_count = total_bug['data']['count'] print(total_count) else: print("Error: Failed to retrieve count. Status code: ", response.status_code) start_time = request.get('start_time') end_time = request.get('end_time') start_time =datetime.strptime(start_time, '%Y-%m-%d %H:%M:%S') end_time = datetime.strptime(end_time, '%Y-%m-%d %H:%M:%S') bug_list = [] for i in range(1,total_count//200): params = {"limit": 200, "status": "closed", "workspace_id": 41571821, "page": i } response = requests.get(api_url, params=params, headers=api_headers) if response.status_code == 200: res = response.json() for bug_item in res['data']: if bug_item['Bug']['fixer'] and bug_item['Bug']['fixer'] in white_name:bug_data_dict = {"bug_title": bug_item['Bug']['title'], "bug_created": bug_item['Bug']['created'], "bug_fixer": bug_item['Bug']['fixer'], "bug_resolved": bug_item['Bug']['resolved'], "bug_url": f"https://www.tapd.cn/41571821/bugtrace/bugs/view?bug_id={bug_item['Bug']['id']}" } params_iteration = {"limit": 200, "workspace_id": 41571821, "id": bug_item['Bug']['iteration_id'] }response =requests.get(iterations_url, params=params_iteration, headers=api_headers)if response.status_code == 200: iterations = response.json() iteration_name = iterations['data'][0]['Iteration']['name'] bug_data_dict['iteration_name'] = iteration_name bug_list.append(bug_data_dict) else: print("Error: Failed to retrieve iterations. Status code: ", response.status_code) return {"code": 200, "msg": "成功", "data": bug_list}

2023-05-18 上传