ARQ: Risk Mitigation Mandatory and Request Forward causing problem???

Hi,
I have a scenario where in, at a certain stage, "Risk Mitigation" is made mandatory and also "Forward Request" option is available at this stage for the same approver.
What is happening is that, when this approver tries to approve the request without mitigating the risks, it gives error message and request can not be approved. This is fine and going as per the configuration.
Now the same approver is trying to forward the request to some other person for some business reasons (with "WITH RETURN" check box checked and disabled). This request is reaching to the desired recipient as expected. But the problem is that, when after providing his comments (a business requirement before mitigating risks, if need be) if he tries to approve (submit) the request, application gives the same error message that: "Request can not be submitted. Mitigate Risk XYZ"!
Due to this, request can not be submitted and sent back to main approver! I noticed that, the request still lies on the same stage and the same stage configuration is being considered for this forwardee too!
This is keeping the request hanging as this forwadee is not authorized to mitigate the risks.
Can any one please help me resolve this?
Regards,
Faisal

Alessandro,
Thanks for your reply.
Now I see (as confirmed) that we have technical limitation or application design that when we forward a request, it DOES NOT change the stage (even I noticed this). So I was thinking that only we have "SUBMIT" button to send it back to the main approver.
But as you said, this forwardee can use the same "Forward Request" option instead of "Submit" button. This looks the option here which suits the situation.
But can you please tell me if we can do something to inform the forwardee that he must select "Forward Request" option and not Submit button?
Because, this submit button is visible and he can click it without knowing! And then this error message of Mandatory risk analysis then appears!
Is there any work around?
Please advise.
Regards,
Faisal

Similar Messages

TS3579 I found this useful because I did not know about the effect of typing in data and that you could only drag to rearrange the data. I had typed in data before and this had caused problems but restoring defaults did not cause correct dates to show up

I found this (TS3579: If the wrong date or time is displayed in some apps on your Mac Learn about If the wrong date or time is displayed in some apps on your Mac) useful because I did not know about the effect of typing in data and that you could only drag to rearrange the data. I had typed in data before and this had caused problems but restoring defaults did not cause correct dates to show up in Finder.

It sounds like there are a couple things going on here. First check if you have a successful install of SQL Server, then we'll figure out the connection issues.
Can you launch SQL Server Configuration Manager and check for SQL Server (MSSQLSERVER) if default instance or SQL Server (other name) if you've configured your instance as a named instance. Once you find this, make sure the service is started.
If not started, try to start it and see if it throws an error. If you get an error, post the error message your hitting. If the service starts, you can then launch SSMS and try to connect. If you have a default instance, you can use the machine
name in the connection dialog. Ex: "COWBOYS" where Cowboys is the machine name. However, if you named the SQL Server instance during install, you'll need to connect using the machine\instance format. Ex: COWBOYS\Romo (where Romo
is the instance name you set during install).
You can also look at the summary.txt file in the SQL Server setup error logs to see what happened on the most recent install. Past install history is archived in the log folder if you need to dig those up to help troubleshoot, but the most
recent one may help get to the bottom of it if there is an issue with setup detecting a prior instance that needs to be repaired.
Thanks,
Sam Lester (MSFT)
http://blogs.msdn.com/b/samlester
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click
"Mark as Answer" and
"Vote as Helpful" on posts that help you. This can be beneficial to other community members reading the thread.

Quotation and Purchasing Requisition causing problem

Dear all,
I need to seek your advise.
It is causing problems in the supply chain that quatations and purchace requisitions is causing production order creation in the workshop at the distribution center and in the SAP factories.
We would really want these two order types/demands isn't valid for the production planning as it is often result in production where orders never are converted.
Questions:
1 - Is it advisable to exclude these two demands (i.e. Quotation/PR) from production point of views? if no, why, what's the reason?
2 - Either Yes or no on question 1, would it be possible to exclude these as demands for production so that only actual orders causes production order creation from the system config?
3 - If question no.1 is "Not advisable", what is the alternative solution to solve our problem (i.e. it is often result in production where orders never are converted).
Thanks.

1) I would like to ensure that our Quotation (MM/SD)/ PR (SD derived PR example drop ship, and MM derived PR, example STO PR) to be excluded as demand during MRP run. And the best way is to use the BADI - MD_CHANGE_MRP_DATA. Is that correct?
Yes the BADI is provided as the exclusion of these demands in planning is not considered as standard & hence the enhancement.
2) Does this BADI- MD_CHANGE_MRP_DATA work for exclusion of Quotation as demand as well?
I have written code in this BADI to exclude Stock Transfer PR, but not for quotation so cant speak from experience on that. But I am sure one of the methods in that BADI should cover that. Discuss with your abaper & he / she will let you know which method will cover this need
3) Any other way?
To the best of what I know usage of BADI is the only option to prevent planning of demands coming from STO's. But the other way would be, to work with PO - SO kind of concept i.e. the plant which requires a part from another plant will raise a PO, this will then have to manually entered in the other plant as a SO (But note, creating sales order for plants within same company code will violate some norms in Finance, so check with your FI-CO colleagues)

HT204053 I have two apple ID's and it's causing problems in my contacts. It repeats the same address and sometimes displays email address only but not the full contact details? How do I get my contact list the same in all my devices (iMac, iPhone & iPad (

I have two Apple ID's and it's casing problems on my contact list as it repeats the address in somecases and in others it only displays email address for a contact. I want to have the same contact list and details on all my devices (iMac, iPhone 4S & iPad Mini)? Is it possible?

By using 1 of the 2 ID's instead of both, choose one, move everything in the other one to the one you chose and stop using it.

Libx11 and libxfont upgrade causing problem

recent upgrade to libx11-1.1.1-4 and libxfont-1.2.7-2 causes error in opening Opera: The error is as follows:
[shantanu@bluehead ~]$ opera
Qt: Locales not supported on X server
Segmentation fault

sorry guys. forgot to post a fix which i found on the same day of posting.
sudo do this as as root:
pacman --upgrade /var/cache/pacman/pkg/libx11-1.1.1-3
pacman --upgrade /var/cache/pacman/pkg/libxfont-1.2.7-1
libxfont-1.2.7-1 and libx11-1.1.1-3 are older versions which should lie in /var/cache/pacman/pkg.
Does anyone has idea how to get the old versions of packages if one has deleted them from /var/cache/pacman/pkg and the new versions are causing trouble?
I think pacman should have a capability to reverse its last update since many a times updates leave a lot of things not working. Any thought on that.

I have two Apple IDs, and this is causing problems with syncing via iCloud. How do I move everything to one ID? All advice is for setting up, not for after it's already set up.

My problem is that I have been a Mobile Me user for the past couple of years, and because of that a second Apple ID was generated in addition to the one I've been using for years. When iCloud was introduced last fall I did everything I was supposed to in setting it up, but it is evident that the syncing is not working as it should. In checking, I am certain this is because I now have two active Apple IDs. I would assume this is a common issue with all who were/are Mobile Me users.
The online help says you can't merge two IDs. Okay. What I want to do is to get rid of the Moble Me ID and only use my regular Apple ID. But the help on that issue seems to only give instructions for setting up the iCloud account. It seems that when I go into my iCloud accounts, both on my iPhone and my Mac, I can view the ID but there is no way to change them to another ID or to eliminate the account.
Please help. I am a long-time Apple user and this really should be a fairly simple matter to take care of, but this is one issue where the normally user-friendly Apple way of life is giving me fits. Thanks.

I am logged into the same things on both my iPhone and my MacBook Pro, except for mail. I use a gmail IMAP account and everything there already works on both machines. The iCloud account on my iPhone uses one Apple ID and the one on the Mac uses the second Apple ID.

ITunes and iTunes Match causing problems

I'm using the latest iTunes, 12 something or other, only iMac.
I have over 12,000 songs in my iTunes library.
The majority of them were ripped from my cd collection.
Only several hundred, @400, have been purchased.
When i bring up iTunes, i can/could see them all - no cloud icons.
All the songs are located on my local hard drive.
I'm trying to move them all onto my iPod but that isn't working - i'll worry about that issue after I get the below iTunes issue resolved.....hopefully.
In iTunes, with all my songs accurately displayed, I turned on iTunes match.
After a time delay and messages about info @ my iTunes library being sent to Apple, the UI display came back with a bunch of cloud icons located next to a majority of the songs. Some of the songs were the ones I purchased, some were not. Some of the songs were from the ripped CDs, some were not - I haven't been able to figure out what determined a cloud icon to be placed next to a song.
When i tried to drag-and-drop some of these songs onto my iPod - i got a message saying that none of the songs that have a cloud icon next to them can be copied onto my device, i have to download them first !?!?!?!?! Huh ? Wait a second, all of these songs already exist locally - i checked in Finder and they are all still located locally on my hard drive - why am i being told to download a song that already exists locally ?.
Then I thought I'll just go back to what iTunes was displaying before i turned on Match, i.e., my entire 12,000+ locally existing song library w/no cloud icons.
So I tried going to back to the original display where all of the songs were listed.
I turned off iTunes match and much to my surprise - several of the originally listed songs have disappeared and are no longer displayed in my iTunes song library ? And by several, i mean the majority.
So now, as far as iTunes is concerned, instead of having a 12,100+ song library, i've got several thousand less !?!?!?! Why ?
How can i get iTunes to forget all about its current settings and state of things, start from scratch, and go thru the entire current library of 12,100+ songs that I have on my local hard drive and rebuild its db to accurately represent all the songs I truly have ?
Thanks,
BobZ

One thing I would consider is getting an uninterruptible power supply. I had my iphoto and itunes libraries on an external drive for years. While I was in iphoto one night the power flickered off and on several times. My Powerbook continued to run off of it's battery, but the external went off and on. It damaged my photo library and I had to completely rebuild it. It was a lot of trouble. Not sure what would have happened if itunes would have been open.
Since you're on an imac, a power outage would shut both down at once. Might not hurt anything. Just thought it was worth mentioning.

Periodically the computer screen darkens and requests shutdown

Periodically the computer screen darkens and requests shutdown
this problem inturrupts almost everything and it started happening ever since i installed snow leopard
i want to format the computer and reinstall regular leopard because of this problem
Basically what happens is:
•The System freezes and the screen darkens a few shades.
•A message appears requesting that i hold the power button to shut off and restart.
•When i restart a message appears that says, "You shut your computer down because of a problem"
and it requests i report it
so i reported it its happened at least once a day everyday since i installed leopard on the 28th

This is, what they call a "Kernel Panic" - a unrecoverable error encountered by the Operating System during operation.
I assume, that you did a Upgrade Installation from Leopard or Tiger. There is probably some incompatible KernelExtension or Application remaining, which causes the problem.
Can you open Console.app in Applications > Utilities. Inside Console, you go to Diagnostic Information > System Diagnostic Reports. Here's a list of all recent Application / Kernel Crashes. You are interested in the following files: "kernel_<date and time of the Crash>". Click on a few of these. You will find some Information about the crash inside. If you're lucky, there's something like this inside: "BSD process name corresponding to current thread: <APPLICATION NAME>". This can help identify the faulty App.
Also you might want to try starting in Safe Mode. If the Problem does not appear there, it's most certainly some Issue with old Software.
Message was edited by: FlipChris

@mac vs @me causing problems.

I have been using a @mac address for my apple ID for about 9 years or so, when mobile me came into existance i got @me address as well. Both adresses are the same (or supposed to be) but its has caused a few problems. Is there anyway to delete my @mac one and just use the @me address. If i sign into itunes with @me it appears as @mac. So in some apps it use one address and in others i use the other and this has caused problems in the "find my friends' app. This app will not accept @mac and tells me that address is not associatied with my ID despite my ID being an @mac address! I cannot add friends with the @mac address and i have to switch to @me.

You're experiencing kernal panics, which are typically due to memory problems, often with memory that, while meeting Apple specs, just doesn't work well with the Apple architecture. Crucial, Kingston (not their valueram), and Samsung are 3 brands that are pretty consistent in working, and if you scan the discussions you'll find some other brands that work in the mini. I used Crucial when I upgraded to 1GB, and have had no issues.
Other reasons that can cause kernal panics are discussed in http://www.thexlab.com/faqs/kernelpanics.htmld

ARQ: Problem with Mitigation of a Risk and Request Rejection at the same time???

Hi All,
I have configured my workflow in such a way that, when a request reaches a certain approver (who is authorized to mitigate), he has following options available (we have configured this way):
1. Submit the Request: This will simply approve the request. But I would NOT want him to approve the request if it has violations. First he should mitigate the risks and then approve the request.
May I know how I can do it? Is this the correct process?
2. Reject the Request: If he is not ok, he can reject the request. I am ok with this and no action is required.
3. Forward the Request: If he needs any business clarifications, he can forward the request to the user's manager before mitigating and approving the request. This is also ok for me.
4. Mitigate the risk: If a request has risk violations, he can mitigate the risks by clicking on "Mitigate" button on "Risk Analysis" tab.
Here is the problem I see. The straight forward what he can do is, mitigate the risks and then approve the request (Submit). However, there is one more option with him and that is, he can mitigate the risks and then changes his mind to reject the request!
If he rejects the request (after mitigating the risks), the mitigation which was done before, is not "UNDONE". Meaning, that user is mitigated though the request is rejected!
This is very confusing and this way users are simply mitigated for no reason!
May I know below things:
1. What is the best way or practice to mitigate risks in a request?
2. How above explained problem (for point#4) can be addressed?
3. How I can stop approving a request if it has violations?
Please advise on this.
Regards,
Faisal

Hi Faisal,
I try to answer your question (as always ).
You can configure that at a specifc stage the approver cannot approve if there are risks. Therefore modify the task settings for all the stages and allow/disallow "approve despite risk". For all stages where approval can be given (like role owner stage) you can activate the button so that it is possible to approve even though risks are coming up.
To make this setting workable you have also to set parameter 1072 (Mitigation of critical risk required before approving the request) to YES.
Regarding the mitigation which was set but is obsolet after rejection. There is actually a simple way to remove invalid controls. Run the risk analysis and gather information for "Invalid Mitigating Controls".
In the result you have the option to change or delete the mitigation.
Does this answer the question(s)?
Regards,
Alessandro

Risk Analysis Mandatory while rejecting a request

Hi experts,
We are using GRC 5.30 CUP SP 8
I have made risk analysis mandatory in the final stage. This is to prompt the risk analysis message when the user is trying to approve the request without running risk analysis to check for SOD conflicts.
However, the system promptsfor risk analysis even when I am rejecting the request. How can this be avoided?
It is causing the request to be on an endless loop and I am unable to reject the request unless the risk analysis settting is turned off in this stage..
Is this a bug in 5.3 or has anyone got this issue so far?
Appreciate your response..
Thanks
Siri

Hi Siri,
As Alpesh has said this is fixed in SP10. Prior to that, the risk analysis is either on or off regardless of the decision being made at the approval stage.
Simon

ARQ: No Notification mail sent for request forward???

Hi,
I have customized notification settings at manager stage in MSMP to send notification mail for request forwarding. However, the notification mail is not sent.
I have learnt that there was some problem in earlier SPs and was supposed to be implement on BADI. However, I am @ SP#14 and expect that it should work.
Can anybody advise me?
Below are the settings at MSMS and Notification Messages:
Regards,
Faisal

Dear Andrzej,
Thanks for your reply.
I could find "Z_GRAC_MSMP_AR_FORWARD" in SE61 and maintained properly and activated. Also maintained this in second screen above. in MSMP also, I could see this document mapped. Please see the attachment.
Can you please advise?
Regards,
Faisal

CC 5.1 - Is Transport or move mitigated users and controls possible?

Hi Guys,
We are using CC 5.1 in QA box and completed risk analysis and mitigation controls for production users. How we can move Mitigated users and controls from system to another system?
Would appreciate your expertise comments.
Regards
Vikas

Hi,
Every firm has a change control system [ie] specify how the solutions should be moved to the production.
Many firms have a custom Y/ Z programmes,T/codes for this purpose.
Before moving,the documentation is a crucial preliminery-generally there would be a share point,Be spoke etc files to be updated with the new specifications -roles etc,the programme that was amended etc.These are in effect the change control procedures.Ensure you follow them.
The actual movement to production is generally done by IT dept / an authorization group.Request them to move in to production [after getting the approval of the changes from the relevant user].
hope this helps.
Regards,
Ramesh

SSGD 4.31.905 and Native Client with HTTPS and firewall forwarding

Hi everyone.
I've just installed SSGD 4.31.905 on a SLES9/SP3 box and configured it as to use HTTPS connections only and firewall forwarding.
I managed to handle X509 certs as to avoid having confirmation requests on the screen on every access and everything is working fine.
Just a question: when I fire up a browser and try to connect to https://IP/sgd, the browser informs me about a potential security risk since I accessed a web server using its IP address instead of using its FQDN.
If I confirm the dialog box, access is granted and everything else works fine (and this is expected).
If I use the Native Client and try to access https://IP/tarantella, I got a "connection refused" message; if I change the URL as to read https://FQDN/tarantella, everything is fine.
So it seems the Native Client cannot connect to a secured SSGD server by using an IP/hostname differente from the one recored into the X509 cert.
Is it expected or what?
Thanks,
Rob

Looks like the native client is less forgiving when it comes to certificates. Obviously, the best way to "resolve" this is to make sure that your client devices can resolve the FQDN of the SGD server.

Forms applet does not load when request forwarded from custom servlet

I have an existing forms app that I wish to call from a newly-developed servlet. The servlet determines which form to call and then forwards the request to the forms servlet using RequestDispatcher.forward().
The request is forwarded correctly but when it is done all I see is a blank browser (IE7) window. When I View Source I see all the correct HTML code (from basejpi.htm) but it seems my browser does not attempt to load the forms applet. No messages are displayed in the Java Console. This is the same HTML that comes back if I run the forms app directly, e.g. click a link that goes straight to the forms servlet URL, only in that case the forms app starts up fine.
Anyone know why this does not work?

Figured out what is going on:
In basejpi.htm there is "<SCRIPT LANGUAGE=JavaScript SRC=java/forms_ie.js>" that creates an OBJECT tag to load the forms applet. I believe since the context of my custom servlet is different than that of the forms servlet, forms_ie.js is not found when the request is forwarded from my servlet.
One question answered raises another. There is also an OBJECT tag inside a NOSCRIPT tag for machines where scripting has been disabled:

<NOSCRIPT>
<OBJECT name=FormsApplet
type="application/x-java-applet"
...>
</NOSCRIPT>
<SCRIPT LANGUAGE="JavaScript" SRC="java/forms_ie.js"></SCRIPT>
My thinking is to remove the NOSCRIPT tag, and also the SCRIPT tag mentioned above, so all machines will simply see the OBJECT tag, like so:

<OBJECT name=FormsApplet
type="application/x-java-applet"
...>
This makes me wonder why the SCRIPT option is there to begin with. Anyone see a downside to this approach?
Kevin

ARQ: Risk Mitigation Mandatory and Request Forward causing problem???

Similar Messages

Maybe you are looking for