Skip to Content
Technical Articles
Author's profile photo Olga Dolinskaja

How to create and approve ATC exemptions in ABAP Development Tools for Eclipse

UPDATE: This functionality is supported and recommended in SAP BTP, ABAP environment and SAP S/4HANA Cloud, public edition 

Now you can create and approve ABAP test cockpit (ATC) exemptions using ABAP development tools for Eclipse and transport them between different cloud systems.

Let’s take a look at the ATC exemption process in detail. The following class contains the hard-corded user name and will be checked with the ABAP test cockpit for security violations:

As a result, the following security risk ATC error will be reported in the ATC Problems View:

Now it is possible to request an exemption for this ATC finding using the corresponding context menu:

You probably already know this wizard from applying for exemptions in ABAP development tools for Eclipse in your on-premise SAP systems. Currently the scope of the ATC exemption in the cloud is limited to the finding:

After choosing Next on the second page of the wizard, you can enter Reason and add Justification:

Then you can select the transport request on the next page and finish the creation of the ATC exemption, which will then be displayed in the new exemption editor, where you can edit it further (e.g. change the validity date). After saving your changes in the exemption object, you can send the link (Share Link) to your exemption to the approver:

We created a new development object for the ATC exemption to support CI/CD scenarios. This way, ATC exemptions can be transported together with the source code.

After you shared the ABAP development tools in Eclipse link to the exemption (e.g. per E-Mail):

the approver can open it in his/her ABAP development tools for Eclipse and by clicking on the Class (ABAP Objects) navigate to the class, rerun the ATC over it and e.g. verify that the ATC exemption which he/she gets is the same as requested (by comparing the Checksums), enter Assessment and approve it finally:

After approval and rerun of ATC the finding about the security risk error does not appear anymore in the ATC results since it was exempted:

In order to see the exempted ATC finding again you can use the corresponding menu:

If you now go to the Transport Organizer view, you will see this ATC exemption within a task in your transport request. The transport request can be released, and the ATC exemption will be transported across your cloud systems:

 

Navigation to the ATC exemption and the ATC Exemptions View

If an ATC exemption exists for an ATC finding, you can navigate directly to this ATC exemption from the ATC Problems View using the context menu Go to Exemption:

or through the link in the column Exemption Status (Ctrl + Click on In Process):

As a result, the ATC exemption will be opened in the ABAP development tools for Eclipse exemption editor:

Beyond this the new ATC Exemptions View is available:

You can use it to find the available ATC exemptions in the system:


Using the context menu Change User Filter… you can search for ATC exemptions of a user.

More information in the SAP Help Portal Documentation Working with the ATC Exemptions View.

 

Assigned Tags

      12 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Hi Olga,

      I got ATC activated on our BTP ABAP Environment and tried raising ATC exemption after following instructions from your blog however I am unable to see an option to "Raise Exemption" from Eclipse.

      Please see attached image. Am I missing something here. Appreciate your response.

       

      Regards

      kasi

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Kasi,

      see the NOTE in the beginning of the blog: you need to create a ticket to SAP to enable this functionality for your SAP BTP ABAP environment system.

      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Hi Olga,

      I did raise OSS message and got it activated by SAP and got below response from SAP after which I tried raising exemption. Not sure if I need to apply any patch for Eclipse.

      Response from SAP below

      "I have activated the feature toggle. You should be able to request exemptions now."

      Kind regards,

      Axel Jebens

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Kasi,

      probably you need a newer version of ADT in Eclipse. Please continue to handle your problem via the OSS ticket, this is the best and correct way. You also get answer from the appropriate contact persons at SAP.

      Kind regards,

      Olga.

      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Olga,

      Thanks so much for your earlier response. I finally managed to login to our BPT environment and created ATC exemptions. All went through fine except that the approval fields are greyed out and approver is unable to edit. I have sent ADT exemption link in a email to approver.  The only field I as requestor was able to edit was "Valid Until" field.

      Note that we both got the role to approve/request exemptions (SAP_BR_QUALITY_MNGR_SW_DEV)

      Can you suggest if we are missing anything from your steps. I have also noticed that  I can see this ATC exemption task in Transport Organizer view.

      Appreciate you response.

      Regards

      Kasi

       

      Author's profile photo Thomas Fiedler
      Thomas Fiedler

      Hi Kasi,

      looks like you created a read-only role. Please check if these fields in your role are defined correctly.

      Regards,

      Thomas.

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Thanks for the swift reply Thomas Fiedler.

       

      I work with Kasi and I have now updated the role and can edit and approve the exemption.

       

      Cheers

      Ian

       

       

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Hi Olga/Thomas

      On another note, although I see the exemption objects in the Transport Organiser, I do not see them in the Project Explorer. There is no 'Exemptions' Node under ABAP Test Cockpit

       

      Has the functionality changed recently?

      Thanks

      Ian

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Ian,

      as of SAP BTP ABAP Environment 2108, the ATC exemptions are no longer displayed in the Project Explorer, the ATC Exemptions View should be used instead (the last sentence in this blog :-).

      Best Regards,

      Olga.

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Thanks Olga. 🙂

       

      Author's profile photo Mario Kopp
      Mario Kopp

      Hello,

      we are using a Central ATC Server and we got the Message in the ADT, that the System doesn't support Object Exemptions,

      P35_100_iokm01_en_1 [CHKE Object Exemptions not supported in system P35_100_iokm01_en_1]

      Exemptions can be applied by the Developers on the connected Development Systems, but the Quality Managers are not able to work on those Exemptions in the ATC System. So we always have to switch to the GUI Version of ATC in the P35 System to apply or reject Exemptions.

      Any Idea what here the Problem can be ?

      Best regards

      Mario

       

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Mario,

      do you work on-premise? We don't support rejection or approval of exemptions in ABAP development tools in Eclipse. SAP GUI ATC must be used.

      Kind Regards,

      Olga.

      P.S. This blog is about how to create exemptions in the cloud-based ABAP system.