Qlik Talend Cloud SAP ODP Source Fails with "Unpermitted Caller" Error (RSAR 051)

[Bill_Steinagle]

A Qlik Talend Cloud data task using an SAP ODP source endpoint may fail when connecting to an SAP system where the June 9th SAP Security Patch has been applied.

The task fails during dataset unload with the following error:

Failed to unload dataset with errors:
Return type: E, Return row: 0, ID: RSAR, number: 051, Message: Unpermitted Caller; Call rejected See SAP Note 3635619
; Failed during unload

Resolution

According to SAP Note 3731818, SAP provides a temporary option to allow existing ODP-RFC integrations to continue operating on SAP systems where the security patch from SAP Note 3635619 has been applied.

The SAP program RODPS_REPL_SECUREACCESS_OPTOUT, delivered as part of the SAP security update, can be executed on the SAP system to opt out of the newly introduced ODP-RFC security restrictions.

To enable the temporary compatibility mode:

1. Execute the SAP program:
   
   RODPS_REPL_SECUREACCESS_OPTOUT
   
   
2. Select the Opt-Out of Secure Access to ODP API checkbox.
   
   
   
   
3. Apply the change to disable the new ODP-RFC caller restrictions.

After completing this step, Qlik Talend Cloud SAP ODP data tasks should be able to resume replication without encountering:

ID: RSAR
Number: 051
Message: Unpermitted caller

This opt-out mechanism is a temporary SAP-provided compatibility option. SAP has indicated that this program will be disabled through a future SAP Note planned for release toward the end of 2026 (exact date to be decided). Customers should plan migration to a supported long-term integration approach before the opt-out option is removed.

Cause

After applying the SAP June 9th Security Patch, Qlik Talend Cloud data tasks using the SAP ODP source endpoint may fail because of additional security validation introduced by SAP for incoming ODP-RFC calls.

The security change restricts ODP extraction calls from non-SAP applications, causing Qlik Talend Cloud pipelines using the SAP ODP endpoint to stop replicating and return the following error:

Return type: E; Return row: 0 ID: RSAR Number: 051
Message: Unpermitted caller

SAP provides a temporary compatibility option to allow unrestricted ODP-RFC calls; however, this option is time-limited and is planned to expire in December 2026. SAP explicitly states that enabling this workaround is at the customer's own risk.

Customers should plan migration to the supported alternative integration approach before the temporary option is removed.

Environment

• Qlik Talend Cloud