BRM: What should happen if violations arise while role creation???

Hi,
I have configured the role methodology and it is working fine. But, I would like to know if any violations are arising while performing analysis, what should be done? Should be routed to some one? If yes, then how can we do it?
What should be the standard process?
Please help me understand this.
Regards,
Faisal

Hi Faisal,
If you have conflicts on action level that is not an issue, if on permission level nothing was reported.
From practical perspective I prefer to have one role for one business activity, each time when broad roles where created it was very difficult to resolve SoD issues. Maybe instead of one you will have to assign two / or more to users, but long term it is really easier to maintain environment SoD clean. All other roles could go through FF.
Unless you have some specific situation (like job position roles or sth similar), please share if this kind of approach may be suitable for you environment, or what could be the blocker.
Best regards, Andrzej

Similar Messages

  • SetRollbackOnly and EJBException..what should happen?

    I am wondering what peoples opinions are about what should happen when commiting a transaction in the following scenario.
    I have a transaction started by a stateless session bean method. This method just finds an entity bean and sets one of its attributes. When this stateless session bean method finishes, the transaction is commited by the container. While commiting the transaction, the container calls the ejbStore method of the entity bean. The ejbStore method calls a method on a different stateless session ejb. This stateless session ejb method calls setRollbackOnly and throws an ApplicationException. The entity ejbStore method catches the ApplicationException and throws it nested within an EJBException.
    The ejb2.0 spec says that the container should throw a javax.ejb.TransactionRolledbackLocalException if it can't commit a transaction. This is what I receive, but my question is what would you expect the nested transaction to be?
    I would expect the EJBException that I threw from ejbStore to be the nested exception.
    ie. I would expect this....
    javax.ejb.TransactionRolledbackLocalException: Error committing transaction:; nested exception is: javax.ejb.EJBException: nested exception is: au.com.sparq.test.ApplicationException: ApplicationException a b c...
    But as soon as setRollbackOnly is called, I will only ever receive this exception....
    javax.ejb.TransactionRolledbackLocalException: Error committing transaction:; nested exception is: weblogic.transaction.internal.AppSetRollbackOnlyException
    Why is an AppSetRollbackOnlyException being thrown by the container when I have told the container to rollback the transaction by throwing the EJBException from the ejbStore method of the entity ejb? In this case, the container shouldn't care that setRollbackOnly had been called. It should only be if the ejbStore method doesn't throw an EJBException that the AppSetRollbackOnlyException is thrown.
    The side effect of this behaviour is that I can never get access to the ApplicationException thrown within the ejbStore method, so I can never tell what caused it to fail.

    This is the expected behavior since Windows XP/Windows Server 2003.
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • What will happened in the excise while we sent free goods @ samples

    what will happened in the excise while we sent free goods @ samples

    Dear maha,
    What ever the Transactions(Except Exports)..you have to pay the Excise duty and Cess.
    Regards
    Luckky

  • When i add text to PDFs and work on the file for awhile, my red added text starts to turn into red X's with a box around them. I have OCRs turned off, i have the latest update, and i have registered the product. What is happening to my text while i'm work

    When i add text to PDFs and work on the file for awhile, my red added text starts to turn into red X's with a box around them. I have OCRs turned off, i have the latest update, and i have registered the product. What is happening to my text while i'm working on these files? On top of this, my red arrows get moved around also.

    Hi ,
    Could you please update me with few details like what version of Acrobat are you using?
    What OS do you work on ?
    Do you experience this any particular PDF or happens with all of them?
    Did you try the same with turning on the OCR ?Please check the same and compare the outputs .Does that help you in anyway ?
    If the file is not confidential ,could you please share the file with us so that we can analyse it our end and revert you with the appropriate answer .
    Please share the file on [email protected] and please cc [email protected] as well .
    Regards
    Sukrit Dhingra

  • When i plug in my ipod to computer what should happen?

    I'm trying to download a book off itunes or anything off itunes onto my ipod ( 5th gen 30gb ) when I plug in my ipod all I get is a beep from my computer, what should happen?

    Hey fink51,
    When you first connect your iPod to your computer, it should automatically install the required drivers etc. You then may want to open iTunes (or configure it to open automatically every time you connect).
    If your iPod is not displaying in iTunes, or Windows, we'll need to start troubleshooting. See the following resource:
    Apple - Support - iPod touch - iTunes Troubleshooting Assistant
    http://www.apple.com/support/ipodtouch/assistant/itunes/
    iOS: Device not recognized in iTunes for Windows
    http://support.apple.com/kb/TS1538
    Thanks,
    Matt M.

  • What will Happen in R3 side while Replicating Datasource

    Hi Friends,
    what will happen in R3 side and BW side while replicating datasource in BW side
    Thanks & Regards,
    Gowri

    Hi Gowri,
    Replication needs to be done only when you change the extract structure which in turn would change your datasource. The simplest way to know when replication needs to be done is each time you save you datasource in R/3. This causes the timestamp of the datasource to be changed and hence the timestamp of the datasource in R/3 and BW are not in sync. Replication would make the timestamp in sync in both R/3 and BW.
    Hence you would notice the error "Timestamp error" when you do not replicate the datasource after changing it.
    Also check this link:
    Re: time stamp
    Bye
    Dinesh

  • What should i put in Schme while creating Data server for XML

    I am new to XML and ODI also.
    I was trying to create a data server for XML technology.
    I don't know what should i specify as a schmea in JDBC URL.
    e.g. jdbc:snps:xml?f=../demo/xml/1/file.xml&ro=false&ldoc=true&case_sens=true&s=LEO_FIZ&dod=true
    here schema is LEO_FIZ, so my doubts is LEO_FIZ is a database schema or what ??
    Please help me out.

    The schema referred to here is going to be used by the XML driver for the instantiation of the temporary schema used for the xml data. It can be any name, I recommend you keep it short, as if you use an external database for the XML data instantiation it is used as a part of the "table" names.

  • Mark a message as junk?   I followed steps 1 and 2 under Manage junk email.   What should happen is not happening.

    Here is what I did based on these exact instructions under Manage junk email in Apple iCloud support:
    Mark message as junk:
    1. in the message list, select the message that you want to mark as junk.
    2. drag the message to the junk folder in the sidebar.
    Subsequent messages from the same sender are automatically marked as junk.
    The above is not happening.   Why?   I really dont want to enter every millionth junk email in the "rules".   Cant I just mark them and they are sorted, like other email accounts  I have?

    Why have I not received a reply?  Come on!  I need help with this and it should be an easy fix.   I see that I am not alone.   Is there no solution?

  • What should be the cpu temp while exporting a 720p movie?

    Today i had my first shoot with iMovie and i exported a 720p movie. My macbook pro has i5 with 13 inch it came with lion pre installed. My  cpu temp was 80~83 and the fan was 3000~4300? Is that normal? what s your results?

    That temp and fan speed is fine.  I get those while playing a game called Zen Bound 2.

  • What should happen during BC4J LOGOUT?

    We have our custom pool, which takes database username, password, and URL from the login page and creates it if its valid. Like that I created 2 pools which will be accessed by all the JSPs.
    We are currently using "RESERVED" mode.
    During the logout process, I want to know what steps do I need to take. Like application module disconnect, pool.remove etc.
    Can someone from Jdev team help us on this issue.
    Virinchi

    The logout page should probably release the reserved application
    module instance to the pool. If you are using the BC4J datatags
    this can be accomplished with the following line in your logout
    jsp:
    <jbo:ReleasePageResourcesTag releasemode="Stateless" />
    This will allow the application pool to properly "reset" the
    application module instance for reuse by other sessions. An
    application module "reset" will include the following:
    1. Rolling back the database session
    2. Clearing the BC4J transaction caches (entity and rowset)
    3. Releasing the application module's JDBC connection to the
    JDBC connection pool for reuse by other application modules.

  • Low battery - when sleeping, what should happen

    When the battery is low, and I put the macbook pro to sleep, when I come back to the machine its dead. Now I can understand that the battery has exhausted, but my trusty Thinkpad would have hibernated so it wouldn't matter. Just mains, and off you go. This doesn't happen with the Mac, it's a start again, and possible corruption. Is this meant to happen?

    Several components, including the RAM, remain powered during sleep - if the battery is low when you sleep, it can run all the way down, forcing a shutdown. No corruption should occur - the MBP uses a "safe sleep" (writes the current state to the hard disk, but this is not saved across a restart). However, a complete shut down will require you to restart.
    Personally, I find a complete boot up on my MBP significantly faster than my HP laptop coming out of hibernation.

  • Opening a zip file from Mail - what should happen?

    I've been using a Mac for a little under a week so bear with me...!
    I receive a zip file in Mail and I want to open it, so naturally I click on it. I get a "may contain an application" warning. I click "Open". A window briefly appears with an "Unarchiving" progress bar, then vanishes. And that's it!
    Is this expected behaviour, or has something messed up here (most likely me!)? I would expect some sort of helper application to open showing the zip contents maybe?
    Thanks!
    Matt

    Hi Matt,
    Welcome to the discussions and to Macs!
    Zip has un-zipped the attachment contents into the place where the zip file was kept. Often that's a clever thing for it to do, but in this case the location is a place Mail chose rather than you!
    You might look in <home>/Library/Mail Downloads. If not, use Spotlight to search for the zip file by name. That directory will also hold the unzipped contents.
    Next time: Drag the zip file from the email to your desktop, then double-click it to unzip. The contents will show right up on the desktop too.
    Good luck,
    John

  • What should happen after removing restricted group GPO settings

    I created and applied restricted group settings in GPO 
    Computer Configuration -> Policies -> Windows Settgins -> Secuirty settings -> Restricted Groups
    which is linked to all production servers OU. I set up members of local administrators group to include only domain admins. This lead to removing all another accounts from local administrators group on all server. I was quite scared about this, I realize my
    mistake. So I remove this restricted groups settings from this GPO. Then on all servers previous configuration came back, all previously configured accounts are back in local administrator group. Is it normal behavior? I thought that these previously configured
    accounts will not back automatically

    This is the expected behavior since Windows XP/Windows Server 2003.
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • While surfing the web, I started receiving pages regarding cleaning my mac.  What's happening?

    While surfing the web, I started receiving pages regarding cleaning my mac.  What's happening?

    Trilogygal wrote:
    While surfing the web, I started receiving pages regarding cleaning my mac.  What's happening?
    They are known as pop-ups. To stop them download and install GlimmerBlocker.

  • Re: Help! Having trouble with what should be a simple v. (0/1)

    Thanks to you and everyone who showed interest.
    These are the files, I put them in both version 5.0 and 5.1 format.
    Sub1 is an attempt to make a sub VI that would be part of a larger
    prog. It works by itself but not when part of the bigger picture.
    The bigger picture is really just 5 possible copies of the sub.
    What should happen is when the operator enters a number into "Input
    Tray Number" and hits enter, the timer starts counting up to 45
    minutes. If it reaches 45 min an alarm goes off. If the "Tray in
    Oven" switch is hit before the alarm state, the timer stops and
    everything is reset to default.
    Again, it works fine in sub1.vi. The problem comes when trying to use
    5 seperate instances
    of that sub in Tray Timer.vi. The timers need to
    operate completely independantly of each other.
    I'm SURE it's a boneheaded mistake I'm making somewhere. I just can't
    see where.
    Thanks for any help provided.
    Steve Crowder
    [email protected]

    Regretfully, and with all due respect, your problems are manifold. The
    While Loop construct you used does not truly monitor for the user entering
    "Input Tray Number" and then start your countdown clock. The countdown
    clock will run only if the appropriate "Tray in Oven" Boolean control is set
    to false.
    If you started Tray Timer.vi using the Run Continuously button, you have the
    VI starting, seeing all of the "Tray in Oven" controls set to true, stopping
    itself, then starting itself again until it sees one of the "Tray in Oven"
    controls set to false. At this point the appropriate While Loop will run
    until the control is reset to true. The other While Loops will have
    finished running long ago because their "Tray in Oven" controls are set to
    true.
    The simplest solution is to enclose each of your While Loops in yet another
    While Loop, the continuation indicators of which are wired within the While
    Loop to either some overall Boolean control or its local or global;
    enclosing all of your While Loops in a single While Loop will have the same
    results as using the Run Continuously button.
    Remember that the Run Continuously button should be used only for debugging
    purposes. When it is time to run your final application, the Run button
    should be used to start it.
    Code well, and prosper!
    Douglas A. Femec, Software Engineer, Viewpoint Software Solutions, Inc.
    2320 Brighton-Henrietta Townline Road, Rochester, NY 14623
    (716) 475-9559, ext. 18 (voice); (716) 475-9645 (fax)
    [email protected]; www.ViewpointUSA.com
    Steve_C wrote in message
    news:[email protected]...
    > Thanks to you and everyone who showed interest.
    >
    > These are the files, I put them in both version 5.0 and 5.1 format.
    >
    > Sub1 is an attempt to make a sub VI that would be part of a larger
    > prog. It works by itself but not when part of the bigger picture.
    > The bigger picture is really just 5 possible copies of the sub.
    >
    > What should happen is when the operator enters a number into "Input
    > Tray Number" and hits enter, the timer starts counting up to 45
    > minutes. If it reaches 45 min an alarm goes off. If the "Tray in
    > Oven" switch is hit before the alarm state, the timer stops and
    > everything is reset to default.
    >
    > Again, it works fine in sub1.vi. The problem comes when trying to use
    > 5 seperate instances of that sub in Tray Timer.vi. The timers need to
    > operate completely independantly of each other.
    >
    > I'm SURE it's a boneheaded mistake I'm making somewhere. I just can't
    > see where.
    >
    > Thanks for any help provided.
    >
    > Steve Crowder
    > [email protected]

Maybe you are looking for