Dear Experts,
We are interfacing a 3rd party system to our ECC system. The 3rd party system is being used for any number of tasks and will be writing, updating, and deleting records with in the ECC system (or at least this is what the powers that be want). This system is a business process engine that we now using.
Here is the dilemma, we do not want someone writing, updating, or deleting a record unless they have the authority to do it. We are using PI 7.0 SP05 which will be used to communicate between the business process software and the ECC system. The business process system will be using user profiles that are identical to those in the SAP landscape so they can pass me a "valid" user. However when PI sends a message to the ECC system and it is written to a table, the user profile from the communication channel is the profile of record.
Since the business process engine will be sending me a valid user profile, is there a way to use that profile to validate wither the record can be written, updated, deleted instead of using the PI profile?
Any and all help will be appreciated and rewarded.