ARQ: How to Specify specific system in "System" Field in "Risk Violations" Tab in Access Request???

Hi,
I would like restrict users from selection systems from the drop down in "Risk Violations" Tab. In order to achieve this, I opened  GRAC_OIF_RQUEST_SUBMISSION" application in Admin mode and disabled. As a result, this field is disabled. But this is blank. I am unable to maintain any value in it. I tried to select a value from the drop down and then disabling the field. I saved with the selected value. But later when Access Request application accessed, it is again showed blank.
However, when a user performs risk analysis, application still performs for all the connectors!
user is authorized to perform risk analysis for specific connector (controlled using GRAC_SYS object). But not sure where from application is picking up different connectors?
Secondly, I also noticed that this "System" drop down has multiple entries in it along with "ALL". I dont have any clue where these values are coming from!
Can anybody help me in understanding and addressing this?
Also, may I know how other are tackling this? I mean, is "System" drop down disabled with specific value as default or enabled with ONLY specific value?
Please advise.
Regards,
Faisal

Hi Faishal,
I went through the challenge you have described. On top of mentioned issues - do you know that if a user select a system (has requested a role for it) but you have no sod rule book defined for it - grc will identify no sod risks for request and will mark all roles (even those for other systems for which rulebook is defined) as 'green' on access approver screen. The expected behavior would be only selected role would be marked as green and others would be still red. We have tried also with option 'ALL' however results provided in our case were not accurate (we did recons to single systems)
This strange system behavior (SP14) was reported to SAP. In this case if you have path defined for SoD detour - system will not go on detour as there is no risk defined.
What we did -was we setup a fix value in this field (our production system with rulebook) an put this system as parameter TVARV (system depended) and using the value of this parameter we fixed the system against which the analysis are executed.
Filip

Similar Messages

  • How to specify alias name in system property while making 2way SSL con ?

    Hi All,
    I am tring to run a java client with 2way SSL which uses CAC card as keystore for the client. I have addded the following system property in my client program to make it work and change the java.security file to add pcks11 provider.
    System.setProperty("javax.net.ssl.keyStoreType", "pkcs11");
    System.setProperty("javax.net.debug", "ssl");
    The program works fine and handshake is successfully done . But the problem is when i have more than one trusted certificate in the CAC card, it take a default certificate. I want to specify the certificate that should be used to do the client auth maybe specify the alias name . I didnt find any system property to do so.
    Please let me know how to specify alias name as system property so that the 2way SSL used the specified alias for the client auth or is there any other way to specify the alias name. As in case i acccess the server URL from any browser i get a certificate selection prompt and the connection is established with the selected certificate.
    Thanks in advanced,
    Ruhul

    I didn't find any system property to do so.There isn't one.
    Please let me know how to specify alias name as system propertyYou can't.
    You would have to write a custom KeyManager. See the JSSE Reference Guide.

  • How to specify multiple sequence for multiple fields in a primary key!

    Hi,
    i have a table which has about 15 fields, one of the field is primary key and i am able to specify the sequence for it using toplink and when the object is created through toplink the sequence get generated automatically, which is fine.
    Now i have to add another sequence generated field to the table this field is not nullable and
    i am looking for a way in toplink to specify the sequence for this field too, so that when we create objects through toplink the value for the field is automatically generated instead of us fetching the next value from sequence using a sql statement and then using the set method for the field.
    is there a way i can specify a sequence for another field through toplink, while keeping the sequence settings for the primary field untouched.
    thanks for your help!
    -

    TopLink only supports a single sequence field in its' mappings. There should be an API you can use to get another sequence number from an event, but I could not find an easy one (please log a bug for this on EclipseLink). The following code might work if you define the other sequence in TopLink, but you could also just execute the raw SQL as you are doing.
    i.e. something like,
    preInsert(DescriptorEvent event) {
    MyObject object = (MyObject) event.getObject();
    object.setOtherId(event.getSession().getDatasourcePlatform().getSequence("MY_OTHER_SEQ").getGeneratedValue(event.getSession().getAccessor(), event.getSession()));
    -- James : http://www.eclipselink.org

  • How to change order of custom metadata fields in the properties tab

    Hello all
    i have added some custom properties in a folder on the km content but i can not arrange the properties in any logical order.
    your help please
    Thanks
    Ronen

    Hi Ronen,
    you can
    If you have defined the properties working now, you know this path: System Administration - System Configuration - KM - Configuration - CM - Global Services - Property Structures.
    There you have the property structure DefaultPropertiesStructure using the property group all_groups.
    all_groups consists of system, custom ... etc. in the order the tab strips come up when using details for a resource. Within each group, under group items the property or the property group to be rendered appears (in the order they get rendered). This holds recursively for all groups.
    If you have defined your properties within group "custom", just arrange them in Group Items in the order you like.
    Hope it helps
    Detlev

  • How to specify specific libraries to be used by OC4J?

    We are using Oracle AS 10.1.2 and are using OracleConnectionCacheImpl as our DataSource implementation. We'd like to do some tracing and logging from within the impl but are informed by the logging output that we need to use libraries set up for tracing & debugging (meaning we need for the application server to use ojdbc14_g.jar). How do make OC4J use this particular library when it creates its cached datasources?

    Create a new SSLContext for every connection; configure it with its own KeyManager that has access to the appropriate private keys and certificates; and create the SSLSocket from that SSLContext.

  • How to specify for a internal table field so that number of digits = 9

    In if condition how can i specify that
    if country = 'US'
    then the account number should be equal to 9 digits only.
    <removed_by_moderator>
    Edited by: Julius Bussche on Aug 6, 2008 1:41 PM

    You can set the internal table field to the biggest length possible, according to your requirements, and then work on something like the following. If the condition is met and you have to shorten the account number... try something similar to this:
    DATA e TYPE string VALUE 'Test string'.
    * I'm using 2 as an example here.
    SHIFT e BY 2 PLACES RIGHT CIRCULAR.
    SHIFT e BY 2 PLACES LEFT.
    WRITE :/, e.
    Avraham

  • How to specify path to read E$ tab records into .xls file using odisqlunlod

    Hi
    Can any one help me how to specify specific path in odisqlunload tools which is useful for both windows and linux.
    I am developing and testing in windows and moving generated scenario into linux box to test for testing people
    If in case any error out records are populated in E$ table then how that records will populated on xls file, later I am sending that attachement for email notification to concern people
    Below code is present in odisqlunload tool
    OdiSqlUnload "-FILE=d:\ODI_Error_Out_Files\Notification_Error_Records.xls" "-DRIVER=oracle.jdbc.OracleDriver" "-URL=jdbc:oracle:thin:@10.75.114.146:1521:POCWCDS" "-USER=wcds" "-PASS=h2yXeih4hFlXXV,QaMeRR2Fy" "-FILE_FORMAT=VARIABLE" "-ROW_SEP=\r\n" "-DATE_FORMAT=yyyy/MM/dd HH:mm:ss" "-CHARSET_ENCODING=ISO8859_1" "-XML_CHARSET_ENCODING=ISO-8859-1"
    select * from E$_notification
    Please help how to make a single code which is useful and work on both windows and linux
    Any sugession willl help me
    Thanks in advance
    Regards,
    Phanikanth

    Hi Bhabani,
    I have written below code in KM itself and select technology as Java BeanShall
    Code:
    <@
    String OS = System.getProperty("os.name").toLowerCase();
    String v_path="";
    if((OS.indexOf("win") >= 0))
    v_path="D:\Unload_Dir\<%=snpRef.getSession("SESS_NO")%>.xlsx";
    else if (OS.indexOf("mac") >= 0)
    v_path="path details";
    else if (OS.indexOf("nix") >= 0 || OS.indexOf("nux") >= 0 || OS.indexOf("aix") > 0 )
    v_path="/odi_a/Middleware/logs/wcds/odi_logs/<%=snpRef.getSession("SESS_NO")%>.xlsx";
    else if (OS.indexOf("sunos") >= 0)
    v_path="soliaris path";
    @>
    OdiSqlUnload "-FILE=<@=v_path@>" "-DRIVER=<%=odiRef.getInfo("DEST_JAVA_DRIVER")%>" "-URL=<%=odiRef.getInfo("DEST_JAVA_URL")%>" "-USER=<%=odiRef.getInfo("DEST_USER_NAME")%>" "-PASS=<%=odiRef.getInfo("DEST_ENCODED_PASS")%>" "-FILE_FORMAT=VARIABLE" "-ROW_SEP=\r\n" "-DATE_FORMAT=yyyy/MM/dd HH:mm:ss" "-CHARSET_ENCODING=ISO8859_1" "-XML_CHARSET_ENCODING=ISO-8859-1"
    select * from <%=odiRef.getTable("L","ERR_NAME", "W")%>
    It was executed well and below is the Execution code of the above code
    Execution Code:
    <@
    String OS = System.getProperty("os.name").toLowerCase();
    String v_path="";
    if((OS.indexOf("win") >= 0))
    v_path="D:\Unload_Dir\1341360.xlsx";
    else if (OS.indexOf("mac") >= 0)
    v_path="path details";
    else if (OS.indexOf("nix") >= 0 || OS.indexOf("nux") >= 0 || OS.indexOf("aix") > 0 )
    v_path="/odi_a/Middleware/logs/wcds/odi_logs/1341360.xlsx";
    else if (OS.indexOf("sunos") >= 0)
    v_path="soliaris path";
    @>
    OdiSqlUnload "-FILE=<@=v_path@>" "-DRIVER=oracle.jdbc.OracleDriver" "-URL=jdbc:oracle:thin:@10.75.114.146:1521:POCWCDS" "-USER=wcds" "-PASS=<@=snpRef.getInfo("DEST_ENCODED_PASS") @>" "-FILE_FORMAT=VARIABLE" "-ROW_SEP=\r\n" "-DATE_FORMAT=yyyy/MM/dd HH:mm:ss" "-CHARSET_ENCODING=ISO8859_1" "-XML_CHARSET_ENCODING=ISO-8859-1"
    select * from WCDS.E$_CDS_COMPANY
    Please confirm me if the above Code is correct or not, if Not, please correct it and DESC_ENCODE_PASS is not encoding the password
    Regards
    Phanikanth
    Edited by: Phanikanth on Feb 18, 2013 1:09 AM

  • In OPEN DATASET Statement Filenames are platform-specific How to specify MS

    In OPEN DATASET Statement
    Filenames are platform-specific. You must therefore use file- and pathnames that conform to the rules of the operating system under which your R/3 System is running. However, you can also use logical filenames to ensure that your programs are not operating system-specific. For further information, refer to Using Platform-Independent Filenames.
    DATA FNAME(60).
    FNAME = '/tmp/myfile'.
    OPEN DATASET 'myfile'.
    OPEN DATASET FNAME.
    This example works as long as your R/3 System is running under UNIX. The program opens the file "myfile" in the directory in which the R/3 System is running, and also opens the file "myfile" in directory "/tmp".
    FNAME = '[TMP]myfile.BIN'
    OPEN DATASET 'myfile.BIN'.
    question]]  How to specify an MS-file & how to go about?

    Hi,
    Just get the input file name from the application server through selection screen and keep it in parameter(p_inpfile).
    Then pass the parameter to OPEN DATASET statement.
    OPEN DATASET p_inpfile FOR INPUT IN TEXT MODE ENCODING DEFAULT.
      IF sy-subrc NE 0.
        WRITE :/ text-004.                                   "'No such input file' COLOR 3.
        EXIT.
      ELSE.
        DO.
          CLEAR : wa_string,wa_0001.
    *Reading the file from application server and moving to work area*
          READ DATASET p_inpfile INTO wa_string.
          IF sy-subrc NE 0.
            EXIT.
          ELSE.
            CLEAR wa_0001.
    *Spliting fields in the file-
            REPLACE ALL OCCURRENCES OF '#' IN wa_string WITH ' '.
            SPLIT wa_string AT c_htab INTO wa_0001-pernr
                                           wa_0001-werks       "Personnel Area
                                           wa_0001-persk       "Employee Sub-Group
                                           wa_0001-vdsk1       "Org. Key
                                           wa_0001-abkrs       "Payroll area
                                           wa_0001-ansvh.      "Work contract
            wa_0001-begda = p_efdate.
            wa_0001-endda = '99991231'.
            APPEND wa_0001 TO int_0001.
          ENDIF.
        ENDDO.
        CLOSE DATASET p_inpfile.
    Use like this and pass all those values to internal table.
    Thanks,
    Sakthi C
    *Rewards if useful*

  • How do I take the zoom feature off my MacBook Pro? I have already went to System Preferences and turned "zoom" off in the Universal Access. I saw where someone said to use THREE fingers to double click... ??? Double click what? And 3 fingers?

    Can someone help me?How do I take the zoom feature off my MacBook Pro? I have already went to System Preferences and turned "zoom" off in the Universal Access. I saw where someone said to use THREE fingers to double click... ??? Double click what? And 3 fingers?

    What really cheeses me off here is that Apple isn't allowing users enough customization.  With each update of iTunes (and the OS and iOS) we're forced to give up something that worked well for the way we want to use the app and make do with fewer (and lamer) options.  If Apple keeps this up, they're going to start losing customers fast.  I mean if this isn't fixed soon, I'm pretty sure I'm going to give up on iTunes, and then I'll probably go ahead and get a Galaxy when I need to replace my iPhone.
    What I don't understand about how they won't let users delete the list of available podcasts now is why?  How is this making it a better program?  I can understand that not all users are capable enough to right-click on a feed and select "Show all available episodes", so I can see why they want the complete list to be the default (and, surprise, it already was).  But to not give users the option to delete that list?  It's inconsiderate because it makes navigating feeds with a large back catalogue really frustrating.  I'm flabbergasted that no one at Apple considered all the podcast feeds that keep hundreds of episodes available when they removed this feature.  It smacks of rank incompetence.
    What improvement were they trying to make here anyway?  There was nothing wrong to my mind about how podcasts were managed in previous versions.  Whatever improvement they were trying to make here, they should have realized that many users would at least want the option to keep things the way they were.
    And reverting to a previous version is no solution.  I can't sync my iPhone with the new iOS without this update, and (while I do have some issues--specifically how you can't play podcasts in the Music app anymore) I do like the new iOS.

  • How to use BPM itegrate different system aysnchronously

    for example, 3 enterprise applications need to be integrated together with BPM, which are Bid system, ERP system, Finance system,
    and erery business document should be approved  by persons one by one in the 3 different application system with its workflow respectively, we can't change the workflow in the
    different system, and only when the document is finished approved in the BID system asynchronously, it can enter the ERP system, an so on .
    after the business document is approved in the Bid system, it should be returned in the BPM contexts,and the BPM user will dicide whether it will be enter the next system.
    so how to integrate the 3 application system?
    I draw a[ BPM process|http://www3.picturepush.com/photo/a/2586651/640/Picture-Box/aaa.jpg], but in this process,  the "ERP human activity" activity, this activity how to get data from the "BID system asyn workflow" which is an asynchronized
    wrokflow?

    Gavin,
    For asynchronous cases, you should adopt the "wait and trigger" principle.  In BPM, you can acheive it by using a timer and an automated activity. Set the timer repeat time to say 15 mins (you should change it as per your business scenario), and then execute / trigger an automated activity, which will call your Bid system to check the state (whether the data entry / specific workflow is over). If the state is completed, (you may check using exclusive choice), move to next step. Else, pass back the control to timer which will again make the process wait. This way the objective could be attained.
    Hope this helps.
    Br,
    Bala

  • How to store preferences in file system on Windows?

    I have 2 questions related to preferences using.
    1. How to store preferences in file system (not in registry) on Windows? I see file system implementation of Preferences (java.util.prefs.FileSystemPreferences). But this implementation is linux-specific (use native methods). Does universal implementation exist?
    2. How to store custom files in preferences? I need to store some user-specific files (XML files, for example) somewhere. These files are naturally user preferences. So my idea is to store it using Preferences. But it seems like there is no such posibility in standard preferences. I believe many peoples have the same problem. Does anyone have solution?
    Please help me!
    Thank you in advance.

    Preferences is supposed to keep all this data
    handling away from you, so you shouldn't bother. If
    you'd like to write a file, just write a file. You
    could create a "Settings" object and serialize it.I understand your reasonings. But unfortunately I have requirements to use file system preferences both on Linux and Windows. My bosses think there are many problems because of registry. Don't ask what problems, they didn't say. I cannot change their requirements. I must to implement it.
    Maybe somebody already solved this proplem. I will very grateful for help.
    Once again: simply write and read a custom file. Why
    do you use Preferences at all costs when they don't
    do what you want to?I have requirements to implement saving of files in the same manner as saving of preferences. It may be different code from Preferences. But it will be the best to have the same code if it possible.
    Any way I believe the need to save user-specific files as preferences is quite widespread.

  • How does the AS3 property flash.system.Capabilities.hasTLS get set?

    There is a setting called "flash.system.Capabilities.hasTLS" that determines whether or not the Flash Player can make native SSL/TLS-based connections.  The definition of this property says " Specifies whether the system supports native SSL sockets through NetConnection (true) or does not (false)." 
    How does Flash determine whether this property is true or false?  Is the value passed to the Flash player by the browser?  Does Flash figure it out from the environment?  If so, how?

    I, too, am trying to work out how to use extractors. The documentation is sparse.
    I have found that if you replace your:
    arrayList.get(0).nameProperty().set("Hi");
    with:
    list.remove(0);
    your Callback is called, but you pretty quickly get a NullPointerException after it returns.

  • How to make an attendance monitoring system

    Hello there, I've just made a system that allows records the time in and time out of the some people. But how do you track people that didn't even check in at all? How do you know if there's a person that was supposed to be present, but didn't come and check in?
    What's the process in doing that when using java as the programming language?

    Let me elaborate on the question further. Bear in mind that this is my first attempt in making an attendance monitoring system and I feel that it has more details and processes than what it seems to be.
    What I'd like to learn are the details, such as the checks and processes that are incorporated in making an attendance monitoring system; processes or methods that allows the system to show valid information. Such as a check to prevent the person from logging in twice instead of logging in and out. Also what is the process that must be done once there is a scenario of when a person is unable to log out or forgets to log out.
    Regarding the helpful answer that it would depend on the company or the user. Thank you for that answer. But it isn't really the answer I was looking for. The attendance monitoring system is said to be an Information system. And just like many information systems it is supposed to give out factual information. What I'd like to know is the generic information that can be computed from the data that the system is able to collect, capabilities that are not only found in specific attendance monitoring systems of a single company but present in most if not all the best attendance monitoring systems. Such as possibly finding the trends for absences, tardiness depending on the season etc.
    This is my first time making such as a system, so if their is anything I haven't understood, I ask for your patience. Thank you for the answers that you people have given.

  • Cut out specified time content of system.log

    Hi, I'd like to to know is that possible some commands can be cut out specified time content of system.log?
    For example,
    A) Today is 2014-10-02 and now I want to cut out the shutdown time after 10:30 PM on 2014-10-01. If found out the shutdown time than 10:30, system will collect and zip the user account information and data (include warning log, user operation log, etc) and then mail to specify email address.
    B) Is that possible to extend preservation system.log file time? I want the log can be save 12 months.

    Hi Keith,
    Check this file /etc/default/login..
    # DISABLETIME If present, and greater than zero, the number of seconds
    # login will wait after RETRIES failed attempts or the PAM framework returns
    # PAM_ABORT. Default is 20. Minimum is 0. No maximum is imposed.
    #DISABLETIME=20
    # RETRIES determines the number of failed logins that will be
    # allowed before login exits.
    #RETRIES=5
    # The SYSLOG_FAILED_LOGINS variable is used to determine how many failed
    # login attempts will be allowed by the system before a failed login
    # message is logged, using the syslog(3) LOG_NOTICE facility. For example,
    # if the variable is set to 0, login will log -all- failed login attempts.
    #SYSLOG_FAILED_LOGINS=5
    Senthilkumar

  • An RFC destination could not be specified for the logical system

    Hello Experts,
    I am trying post goods receipt in EWM system in a simple inbound delivery process. It is not getting posted back in ECC. I have my RFC connection setup properly(I assume since I was able to transfer inbound delivery to EWM in first place).It seems some setting related to Outbound queue in EWM is missing.Can anyone tell me in detail what settings are required?Is it something to do with WE20 transaction?I am not sure what settings should be done there.The error log is as below-
    An RFC destination could not be specified for the logical system
    SB3CLNT011
    Message No. B1550
    Diagnosis
    An RFC destination should be specified for the logical system SB3CLNT011.
    This could not be done in this case. SB3CLNT011 is not your local logical system
    and this system is not included in the relevant Customizing tables.
    Procedure
    Check:
    RFC
    destination
    Port
    definitions
    oubound partner profile of
    message type SYNCH for this logical system
    Regards,
    Khushboo

    Hi Oritra and Suraj,
    I have checked remote connection in SM59 for both the logical system.It works fine.I understand this is more of a technical issue,but I don't have A local basis team to help me so reaching out to experts here.Can you guide me what technical settings could be checked for EWM-->ECC connection?When I execute BD82 for SB3CLNT011 it shows me green status with message "No messages have been defined for the selection conditions in the model".
    Although when I do this for EWM logical system SB3CLNT012 it shows me this with all green status-
    System SB3CLNT011 as a partner type already exists
    System SB3CLNT012 as a partner type already exists
    Port A000000018 with RFC destination SB3CLNT011 already exists
    Outbound parameters for message type SHP_IBDLV_CHANGE SHP_IBDLV_CHANGE01 already
    Outbound parameters for message type SHP_IBDLV_SAVE_REPLICA SHP_IBDLV_SAVE_REPLI
    Outbound parameters for message type SYNCH SYNCHRON already exist
    Am I missing something in WE20?
    Regards,
    Khushboo

Maybe you are looking for

  • How to open multiple files in Labview?

    I want to open multiple files in labview by selecting multiple files,then read them? Can I do this in Labview 7.0?

  • Streamed H.264 videos not playing correctly thru IE

    I'm new at web stuff so this is probably the dopiest question yet, but here goes. I'm setting up a web page where my clients can stream a "quick-start" QT movie. My tests have worked perfectly on my own computer (Mac Quicksilver) using Safari and QT7

  • Script Logic using when Condition

    Hi, Im working on BPC 7.5 SP04 MS and I cant figure out how to make this logic work: 1. Cuenta members (account) with the ivaacred property, are multiplied by a certain value  and stored in the account 13010A *WHEN TIEMPO *IS  2009.Jan, etc  etc.....

  • Messages Deleting By Themselves

    My messages are deleting by themselves, slowly but surely. I have my phone set to save them 'forever' and i always have done, so i'm not sure why this is happening. I have a Blackberry Curve 3G. Any ideas?

  • OMS, Repository, Agent Grid upgrade

    Newbie here and will try to explain as best as I can. So I installed Grid 10.2.0.2 on Windows XP system. I have used the patchset 12.0.4.0 to upgrade OMS, repository and agent. I have followed the documentation on how to do this. First I patched OMS