Hello,

I work as an SAP consultant at Engineering ITS, in this blog post, you will learn what you can do if you are rebuilding your SAP S/4HANA system and an elevated security setting has been configured.

As After reinstalling our SAP S/4HANA ‘SAP S/4HANA 1809 fully-activate appliance’ I faced this problem that I could not open the Graphical screen Painter in the dynpro at SE80. The system created the dump  CALLBACK_REJECTED_BY_WHITELIST  as shown below. This happens when the SAP has an increased security setting. Next I will present the solution I found

What happened? An RFC callback was forbidden because no corresponding positive list entry was configured. The original RFC called function modules at some destinations in the target system that were not whitelisted.

A whitelist could be generated via transaction SM59. So first call the TA SM59 and search out the RFC destination EU_SCRP_WN32 in the list “TCP/IP connections”. On the tab “Login and Security” there is a callback positive list. this must first be activated and then still the following parameters must be entered.

Called function module                 |      callback function module
RS_SCRP_GF_PROCESS_640  |  RFC_GET_FUNCTION_INTERFACE
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RBUILDINFO
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RDDICFIELDS
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RDOCU
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RELEMTABLE
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RHELPGETTEXT
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RICONS
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RKEYS
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RKEYTEXTS
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RMESSAGES
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RPROPTABLE
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RPROP_DELETE
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RSHLP
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RSTATUS_40
RS_SCRP_GF_PROCESS_640  |  RS_SCRP_GF_RTEXTS

The Link to the SAP Note in case something changes in the future is 2251931 – Runtime error CALLBACK_REJECTED_BY_WHITELIST)

Here you can see an illustration of how it might look.

After all the parameters were entered, the Graphical Screen Painter could be opened and the interface of the screen could be edited. Different parameters had to be entered, because different calls are executed when the Graphical Screen Painter is started. I hope it is helpful for someone who is facing the same problem.

Regards

Marco