SAP SRM Decoupled Bidding cFolders replication security issue analysis Not ideally security solution but better typical by SAP.

1. Konstantin Khrushchev
SAP SRM Rapid Deployment Solution
S27 Operational Sourcing – Decoupled
Bidding
cFolders replication security issue analysis
January 2016

2. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 2
Decoupled Scenario typical cFolders landscape(1/2)
SAP SRM
Purchaser Side(Intranet) Supplier Side(DMZ)
SAP SRM SUS
SAP PLM
cFolders
SAP Content
Server
RFX
RFX Response
2
A
B
C
D
E

3. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 3
Decoupled Scenario typical cFolders landscape(2/2)
3
Icon Connection type Authorization
RFC connection RFC auth
HTTP connection Public/private key auth
RFC connection RFC auth
SOA service
A
B
C
D E

4. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 4
cFolders replication security issue analysis
4
Typical replication process by SAP doesn`t mean cFolders replication
Replicated RFX in Supplier system has direct link to Collaboration in
Purchaser system
This is unacceptable

5. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 5
Decoupled Scenario cFolders landscape security
solution(1/2)
SAP SRM
Purchaser Side(Intranet) Supplier Side(DMZ)
SAP SRM SUS
SAP PLM
cFolders
SAP Content
Server
RFX, Collaboration Public Area structure
SAP PLM
cFolders
RFX Response, Collaboration Supplier area data
5
A
B
C
D
E
F

6. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 6
Decoupled Scenario cFolders landscape security
solution(2/2)
6
Icon Description Authorization
RFC connection RFC auth
HTTP connection Public/private key auth
SOA service
A
B C
D E
D

7. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 7
cFolders replication security solution details
7
Transfer to Supplier side
Transfer to Purchaser side
Step 1: Modify SOA service RFQRequestSRMReplicationRequest_Out for
transfer cFolders collaboration public area
Step 2: Modify class /SAPSRM/CL_REPLICATE_RFX for create/update
cFolders collaboration public area

8. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 8
cFolders replication security solution details
8
Transfer to Supplier side
Transfer to Purchaser side
Step 1: Modify SOA service SupplierQuoteSRMRequest_Out for transfer
cFolders collaboration supplier area data
Step 2: Modify function module /SAPSRM/REPLICATE_RESP for
create/update cFolders collaboration supplier area

9. © 2014 SAP SE or an SAP affiliate company. All rights reserved. 9
cFolders replication security solution Nota bene!
9
Do not transfer files content! Link new files with existing content SAP
content server
Use TextCollection level in SOA instead modify. Just serialize structure
of data, put to TextCollection with new ID.
Use Enhancement Framework instead modify standard objects
Keep in mind cFolders structure: Collaboration-Area-Topic-Folder-Doc-
File
Folder in Bidder area has link to topic

10. © © 2014 SAP SE or an SAP affiliate company. All rights reserved. / Page 10 10Confidential
About author
Konstantin Khrushchev is an independent SAP ABAP developer/SRM consultant
who has been working with SAP software since 2007. In last time he has focused
on SRM projects. He has been involved in 5 SAP SRM implementations.
10

11. Thank you

12. © © 2014 SAP SE or an SAP affiliate company. All rights reserved. / Page 12 12Confidential
Copyright
© 2016, Konstantin Khrushchev. Licensed under the Creative Commons Attribution
4.0 license, http://creativecommons.org/licenses/by/4.0/
12