Skip to Content
Technical Articles
Author's profile photo Olga Dolinskaja

How to create and approve ATC exemptions in SAP BTP ABAP Environment

With SAP BTP ABAP Environment 2105 we delivered the basic scope of ATC exemptions. Now you can create and approve ATC exemptions using ADT in Eclipse and transport them between different SAP BTP ABAP Environment systems.

NOTE: In order to incorporate feedback from early adapters before making this functionality free available for all, it is currently available via the feature toggle. You need to create a customer ticket on the BC-CP-ABA component to turn it on in your SAP BTP ABAP Environment system.

Let’s take a look at the ATC exemption process in detail. The following class contains the hard-corded user name and will be checked with the ABAP Test Cockpit for security violations:

As a result, the following security risk ATC error will be reported in the ATC Problems View:

Now it is possible to request an exemption for this ATC finding using the corresponding context menu:

You probably already know this wizard from applying for exemptions in ADT in your on-premise SAP systems. Currently the scope of the ATC exemption in SAP BTP ABAP Environment is limited to the finding:

After choosing Next on the second page of the wizard, you can enter Reason and add Justification:

Then you can select the transport request on the next page and finish the creation of the ATC exemption, which will then be displayed in the new ADT exemption editor, where you can edit it further (e.g. change the validity date). After saving your changes in the exemption object, you can send the link (Share Link) to your exemption to the approver:

You will notice that the new exemption development object is created in the same package as the object it refers to, and is now visible in your Project Explorer under the ABAP Test Cockpit node:

We created a new development object for the ATC exemption to support CI/CD scenarios in SAP BTP ABAP Environment. This way, ATC exemptions can be transported together with the source code.

After you shared the ADT link to the exemption (e.g. per E-Mail):

the approver can open it in his/her ADT in Eclipse and by clicking on the Class (ABAP Objects) navigate to the class, rerun the ATC over it and e.g. verify that the ATC exemption which he/she gets is the same as requested (by comparing the Checksums), enter Assessment and approve it finally:

After approval and rerun of ATC the finding about the security risk error does not appear anymore in the ATC results since it was exempted:

In order to see the exempted ATC finding again you can use the corresponding menu:

If you now go to the Transport Organizer view, you will see this ATC exemption within a task in your transport request. The transport request can be released, and the ATC exemption will be transported across your SAP BTP ABAP Environment systems:

 

What’s new: navigation to the ATC exemption and the ATC Exemptions View

With SAP BTP ABAP Environment 2108 we improved the general handling of ATC exemptions.

If an ATC exemption exists for an ATC finding, now you can navigate directly to this ATC exemption from the ATC Problems View using the context menu Go to Exemption:

or through the link in the column Exemption Status (Ctrl + Click on In Process):

As a result, the ATC exemption will be opened in the ADT exemption editor:

Beyond this the new ATC Exemptions View is available:

You can use it to find the available ATC exemptions in the system:


Using the context menu Change User Filter… you can search for ATC exemptions of a user.

More information in the SAP Help Portal Documentation Working with the ATC Exemptions View.

As of SAP BTP ABAP Environment 2108, the ATC exemptions are no longer displayed in the Project Explorer, the ATC Exemptions View should be used instead.

 

Assigned tags

      10 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Hi Olga,

      I got ATC activated on our BTP ABAP Environment and tried raising ATC exemption after following instructions from your blog however I am unable to see an option to "Raise Exemption" from Eclipse.

      Please see attached image. Am I missing something here. Appreciate your response.

       

      Regards

      kasi

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Kasi,

      see the NOTE in the beginning of the blog: you need to create a ticket to SAP to enable this functionality for your SAP BTP ABAP environment system.

      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Hi Olga,

      I did raise OSS message and got it activated by SAP and got below response from SAP after which I tried raising exemption. Not sure if I need to apply any patch for Eclipse.

      Response from SAP below

      "I have activated the feature toggle. You should be able to request exemptions now."

      Kind regards,

      Axel Jebens

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Kasi,

      probably you need a newer version of ADT in Eclipse. Please continue to handle your problem via the OSS ticket, this is the best and correct way. You also get answer from the appropriate contact persons at SAP.

      Kind regards,

      Olga.

      Author's profile photo T. KASI SURYANARAYANA MURTHY
      T. KASI SURYANARAYANA MURTHY

      Olga,

      Thanks so much for your earlier response. I finally managed to login to our BPT environment and created ATC exemptions. All went through fine except that the approval fields are greyed out and approver is unable to edit. I have sent ADT exemption link in a email to approver.  The only field I as requestor was able to edit was "Valid Until" field.

      Note that we both got the role to approve/request exemptions (SAP_BR_QUALITY_MNGR_SW_DEV)

      Can you suggest if we are missing anything from your steps. I have also noticed that  I can see this ATC exemption task in Transport Organizer view.

      Appreciate you response.

      Regards

      Kasi

       

      Author's profile photo Thomas Fiedler
      Thomas Fiedler

      Hi Kasi,

      looks like you created a read-only role. Please check if these fields in your role are defined correctly.

      Regards,

      Thomas.

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Thanks for the swift reply Thomas Fiedler.

       

      I work with Kasi and I have now updated the role and can edit and approve the exemption.

       

      Cheers

      Ian

       

       

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Hi Olga/Thomas

      On another note, although I see the exemption objects in the Transport Organiser, I do not see them in the Project Explorer. There is no 'Exemptions' Node under ABAP Test Cockpit

       

      Has the functionality changed recently?

      Thanks

      Ian

      Author's profile photo Olga Dolinskaja
      Olga Dolinskaja
      Blog Post Author

      Hi Ian,

      as of SAP BTP ABAP Environment 2108, the ATC exemptions are no longer displayed in the Project Explorer, the ATC Exemptions View should be used instead (the last sentence in this blog :-).

      Best Regards,

      Olga.

      Author's profile photo Ian Stubbings
      Ian Stubbings

      Thanks Olga. 🙂