2241856 - Unnecessary authorization check for transaction SICF

When logging on to an SAP NetWeaver system from a web UI (e.g. /bc/bsp/sap/crm_ui_start), users get the error "500 SAP Internal Server Error" displayed in their browser.

In the ABAP backend, a RAISE_EXCEPTION dump occurs with the short text 'Exception condition "INTERNAL_ERROR" triggered'.

The termination occurs at the below point in coding. The return code is SY-SUBRC = 5 (Exception "no_authority").

CL_ICF_TREE
METHOD IS_SERVICE_ACTIVE

...
28 CALL METHOD cl_icf_tree=>if_icf_tree~service_from_url
29 EXPORTING
30 url = url
31 hostnumber = l_hostnumber
32 IMPORTING
33 urlsuffix = l_suffix
34 icfactive = active
35 EXCEPTIONS
36 wrong_application = 1
37 no_application = 2
38 not_allow_application = 3
39 wrong_url = 4
40 no_authority = 5
41 OTHERS = 6.
42 IF sy-subrc <> 0.
>>>>> RAISE internal_error.
...

Browser based logon to a SAP NetWeaver backend.

AUTHORITY_CHECK_TCODE, IS_JQUERY_ACTIVE, SERVICE_FROM_URL, AUTHORITY_CHECK, ICF, Internet Communication Framework, SICF, Service, Services, ICF service, ICF_GDPR , KBA , internal_error , raise_exception , no_authority , sap internal server error , http 500 , BC-MID-ICF-LGN , ICF System Login , CA-WUI-UI , User Interface , BC-MID-ICF , Internet Communication Framework , Problem