Different Risk Analysis Results with the same user from 2 different RAR

Hi..
I've loaded the same Risks, Rules, etc, into 2 GRC RAR environments (Sandbox and Quality systems); both of them are connected with the same SAP ECC system. But when I do a User Risk analysis (authorization level), the result from Sandbox is different from Quality system. I donu2019t have users or roles mitigated yet, users are synchronized, rules are exactly the same and I donu2019t know what happen??... Please, help me.
Thanks...

Hi...
If I do a Full Sync of users to the same ECC system from both RAR boxes, I got different number of users loaded (i.e. 18757 vs. 18141), similar case with the full sync of roles. (13100 vs.  13150).
If I load exactly the same set of functions to both RAR systems and I generate the rules, I got the same problem, different number of rules is generated.
I've verified both RAR configuration and they are the same (excluded users, roles mitigated, etc.)
Is it a normal behavior? What could be wrong?
Thanks in advance!!

Similar Messages

  • How do I call methods with the same name from different classes

    I have a user class which needs to make calls to methods with the same name but to ojects of a different type.
    My User class will create an object of type MyDAO or of type RemoteDAO.
    The RemoteDAO class is simply a wrapper class around a MyDAO object type to allow a MyDAO object to be accessed remotely. Note the interface MyInterface which MyDAO must implement cannot throw RemoteExceptions.
    Problem is I have ended up with 2 identical User classes which only differ in the type of object they make calls to, method names and functionality are identical.
    Is there any way I can get around this problem?
    Thanks ... J
    My classes are defined as followes
    interface MyInterface{
         //Does not and CANNOT declare to throw any exceptions
        public String sayHello();
    class MyDAO implements MyInterface{
       public String sayHello(){
              return ("Hello from DAO");
    interface RemoteDAO extends java.rmi.Remote{
         public String sayHello() throws java.rmi.RemoteException;
    class RemoteDAOImpl extends UnicastRemoteObject implements RemoteDAO{
         MyDAO dao = new MyDAO();
        public String sayHello() throws java.rmi.RemoteException{
              return dao.sayHello();
    class User{
       //MyDAO dao = new MyDAO();
       //OR
       RemoteDAO dao = new RemoteDAO();
       public void callDAO(){
              try{
              System.out.println( dao.sayHello() );
              catch( Exception e ){
    }

    >
    That's only a good idea if the semantics of sayHello
    as defined in MyInterface suggest that a
    RemoteException could occur. If not, then you're
    designing the interface to suit the way the
    implementing classes will be written, which smells.
    :-)But in practice you can't make a call which can be handled either remotely or locally without, at some point, dealing with the RemoteException.
    Therefore either RemoteException must be part of the interface or (an this is probably more satisfactory) you don't use the remote interface directly, but MyInterface is implemented by a wrapper class which deals with the exception.

  • Different Risk Analysis Results with 10.0 and 10.1

    Hello,
    I do not understand why I get different results with 10.0 and 10.1. Exactly the same ruleset is applied!
    Definition in 10.0 and 10.1:
    Analyzed Role (which definitely contains the SOD):
    Version GRC 10.0 finds the SOD S_FI14 and displays it. In 10.1 nothing is displayed...Any ideas what's the problem?
    Regards
    Peter

    We had similar issues with 10 and 10.1.
    We applied an SAP Note about logical groups and the ruleset, it did not work.
    What did work:
    When performing Risk Analysis, remove the Ruleset selection criteria (use the minus button).

  • Drawing images gives 2 different results with the same code.

    Im adding my code on here, and its sort of long but ill try to explain it. Most of it you can ignore.
    Anyway i'm making a tree menu with only 1 level of expansion. So you have a TreeMenu object, and this object has some Branch classes. These Branch classes have Leaf classes. That is all. On the menu there is also a little box where you can click to expand and collapse each branch. if a branch is expanded, all of its leaves are shown. if it is collapsed only the branch name is shown.
    So far what I've described above works, there is a small scale compilable working program, that is alright. Theres just a few bugs to fix.
    A little feature of the tree is if a branch or a leaf is selected (has been clicked on in the past) it has a blue background. This sort of works. The branch names seem to work alright, and some of the leaves. However other if you run the example i provided you can click on Leaf 1, and it will be ok, but if you click on Leaf 2 then there blue background is twice as big as it should be. But for the rest, it works ok.
    This is weird to me because the same code handles any of these same situations. So it seems that i get 2 diferent results with the same code. If anyone would like to help heres some stuff you should know:
    You can ignore Leaf class, i dont think theres any errors in there.
    You can ignore just about all of Branch class except the update() method.
    You can ignore all of TreeMenu class except the inner MouseListener class might be useful.
    You can ignore TreeTester. Just the JFrame tester class.
    to run the code:
    javac TreeMenu.java
    java TreeMenu
    http://cs.ucsb.edu/~jsterling/treemenu.zip
    thanks.

    You make a good point Stefan but unfortunately I already checked that.  I have even copied the mapping (right click copy) and pasted it from the working Mapping to the bad Map (Paste) to make sure the context values were all the same.
    I also opened all the queues and compared the values in each.  All values match exactly except for the result(out) queue.
    In both tests I am using the same IDOC XML file. 
    These are the only differences I see.
    1.  The IDOC is exactly the same as far as I can tell but they come from two different source SWCV.  SAP APPL 4.7 and Steelcase_Procurement (ECC 6.0). 
    2.  The working map uses a local UDF.  The bad map calls the UDF from a Function Group.  Is there a Java version difference between the two?
    A better sample of the result queues look like this:
    Correct Result:
    Thickness of Glass: 20
    Height: 10
    Width: 5
    Length: 18
    Thickness of Glass: 10
    Height: 15
    Width: 8
    Length: 14
    Bad Result:
    Thickness of Glass: 20
    <null>
    <null>
    <null>
    Width: 5
    <null>
    <null>
    <null>
    I took this chance to redesign my Variant Config output to separate the characteristics/values, but I'm still bothered that I was unable to determine what would cause the differing values.
    Any ideas?
    Thanks,
    Matt

  • HT3130 trying to export a 4 minute video to desktop.  Only 1:08 seconds exports.  I've tried other clips and they all cut at 1:08.  Used different exports like Quicktime with the same results.

    trying to export a 4 minute video to desktop.  Only 1:08 seconds exports.  I've tried other clips and they all cut at 1:08.  Used different exports like Quicktime with the same results.

    Good to hear that you've had some success with the import.
    I tried 3 times to do it before I finally changed it to H.264, and it worked on the first try.  The quality of the compression was terrible with those settings compared to my standard settings, but I'm just glad it worked.
    Rather than Share>Export using QuickTime and then choosing your own settings for H.264, you may get a better result if you simply use the Share>Export Movie option. Alternatively, use the Share>Media Browser option (as I mentioned in my earlier post). You will be presented with a range of sizes to choose from. Depending on your target, it's usually best to select the highest size available, such as Large, HD 720p or HD 1080p. However, for producing a DVD it's best to not go beyond the HD 720p size, as the DVD will be downscaled during encoding to Standard Definition in the appropriate size for either PAL or NTSC.
    In my experience, both these options (Export Movie or Media Browser) produce a video file of excellent quality. The files will be in H.264 format and will have the file extension .mov or .m4v depending on the size of the export. I'm assuming that your camera records HD video in AVCHD format.
    These files work well with iDVD (or other DVD authoring programs). The export process for the presets is optimised by Apple to produce high quality video files at a reasonable file size. So, selecting a preset may give you a much better result. Choosing your own H.264 settings when using the "Export using QuickTime" method could be why "the compression was terrible". You may have selected a data (bit) rate that was too low. There is always a trade-off between quality and file size when compressing video.
    So, to summarise, try one of the Apple presets using either Share>Export Movie or Share>Media Browser.
    John

  • How can I get Firefox to run on a network with multiple users logging on with the same user name and password?

    I am trying to get Firefox running on a large network where I have multiple users that log on with the same user name and password. The problem is that when another user logs on to another computer the message comes up that their is already an instance of firefox running on that computer even though there really isn't. Only one instance can be run on the network at one time. I believe it is because firefox stores a shared profile as it thinks it is actually the same user even though it is being run on another computer. I repeat that each user that logs on uses the same user name and password but on different computers.

    I am trying to get Firefox running on a large network where I have multiple users that log on with the same user name and password. The problem is that when another user logs on to another computer the message comes up that their is already an instance of firefox running on that computer even though there really isn't. Only one instance can be run on the network at one time. I believe it is because firefox stores a shared profile as it thinks it is actually the same user even though it is being run on another computer. I repeat that each user that logs on uses the same user name and password but on different computers.

  • How to conf  in Hyperion, so the system couldn't login with the same user

    Hai.....
    how to configure in Hyperion, so the system couldn't login with the same user id in different machine ? (could you please provide me with detail step by step ? )
    rgds
    uka fp

    fane_j wrote:
    Sally R. wrote:
    Someone gave me a suggestion to go to the terminal and type in the following:
    ls /Users/Shared/.*.so
    This was published on MacWorld's site, and it's not a very good tip. Try this instead
    ls -la /Users/Shared/*.so
    Turns out I was wrong about that. Somebody else suggested something even more complicated and got this reply:
    By bastion
    Fri Feb 24 08:49:05 PST 2012
    PeterSParker said
    Your terminal statement has an extra "." in it that prevents it from working.
    Also, you should add the options -alR to show what is happening, and to search subdirectories.
    The revised command looks like this:
    ls -alR /Users/Shared/*.so
    The above is completely wrong. The command as shown in the article is appropriate.
    The "." is not extra and doesn't prevent the command from working. It's specifying that you're listing files that start with a period and end with ".so" with anything in between being matched.
    Because you're explicitly searching for things that start with "." you don't need the -a flag.
    Because you only care about simple existence and not any metadata you don't need -l.
    Because the files of interest are installed in /Users/Shared directly, and not subfolders thereof, you don't need -R.

  • How do I create a graph with two different y-axis variables with the same x-axis (therefor having two curves)?, How do I create a graph with two different y-axis variables with the same x-axis (therefor having two curves)?

    How do I create a graph with two different y-axis variables with the same x-axis (therefor having two curves)?, How do I create a graph with two different y-axis variables with the same x-axis (therefor having two curves)?

    Hi Libby,
    Select all three columns of data. All three must be 'regular' columns, not Header columns, and the X values must be in the leftmost column.
    Click the Charts button and choose the Scatter chart.
    The resulting chart will initially show only the first and second columns of data, and the selection will have been reduced to show this.
    Click the gear icon at the top left of the selection and choose Share X Values.
    You should see a result similar to this:
    Notes:
    The values on my sample table contain a random element, so they have changed from thhe first image to the second.
    The chart is as created by Numbers, with two edits:
    Data points have been connected with curves, using the Chart nspector.
    The curves were selected and their stroke increased to 2pts, using the stroke formating button in the format bar.
    Regards,
    Barry

  • Logging on with the same user?

    Hi all,
    I know there is some rule that allows a user to log on more than once. A client of mine says they could always log in to the same company twice with the same username, but now they can't. They can only log on to 2 different companies with the same user name.
    Was there a change made or am I missing something? I have tested on a single computer. I open 2 instances of SAP Business One 2007 and log in with the same user into the same company. THe first one logs on fine, the second one says "This user is already connected to this company". If I log on to a different company with that user it logs in.
    I really thought you could log on with the same user to the same company.
    The company has a distributed environment and people run around every now and again logging on at different computers (especially supervisors). This is a critical issue for them.
    Please help
    Thanks,
    Adele

    Adele,
    I am not sure if you might have changed the default layout of SQL Management Studio, so you should
    log on to Management Studio and go to Menu 'Window' -> 'Reset Window Layout'.
    This will restore the default layout, which usually is the very same after a fresh SQL Server 2005 installation.
    Now you should find on the left hand side the so called Object Explorer. In the Object Explorer Window you should see the SQL Server name, below of this should be
    SQL Server name
    +Databases
    +Security
    +Server Objects
    +Replication
    -Management
          +Mantenance Plans
          +SQL Server Logs
              Activity Monitor
    +Notification
    Maybe there are some more entries, depending on the options choosen during installation.
    Kind regards
    Mario Schoenberg
    Senior Support Consultant
    SAP Business One Forums Team

  • I purchased songs from 2 different computers using itunes with the same apple id. I had 1 iPod I used for these but I just recently got an iPhone and I was wondering why it wasn't letting me put my purchased songs on my iPhone?

    I purchased songs from 2 different computers using itunes with the same apple id. I had 1 iPod I used for these but I just recently got an iPhone and I was wondering why it wasn't letting me put my purchased songs on my iPhone?

    You can transfer iTunes content from an iTunes library on a single computer only.
    Since these songs were purchased with the same iTunes account, you can download the song that is not in your iTunes library on the computer you will be syncing your iPhone with. Or you can download the song or songs direct on your iPhone.
    http://support.apple.com/kb/HT2519?viewlocale=en_US&locale=en_US

  • Does anyone have experience with having multiple editors work on the same project from different computers?

    Does anyone have experience with having multiple editors work on the same project from different computers?

    As much as I hate to admit it, YOU ARE RIGHT!
    I will tread lightly on this project.
    Thanks for the sanity check,
    Ben
    Ben Rayner
    I am currently active on.. MainStream Preppers
    Rayner's Ridge is under construction

  • I have purchased a from within an app. I submit my password for the app, and then my Apple ID.  I then get the following messages "Regrant failure _ please log in with the same user that has bought this app"  and that is followed  by "cant conn with IT _

    I have purchased an item from within the app PocketBible on my iPad.  However when I try to download it I am asked for my app User Name and Password and then my Apple ID and password.  I give both of these.  I then get a message which says Regrant failure - Please log in with the same user that has bought the app.  That is then followed by  Pocket Bible Alert - cannot connect to iTunes Store.
    Anybody got any ideas, both what the 1st alert means and how I get round the problem please.

    I had the same problem. My wife had the PocketBible on her Ipad 2 and she transferred ownership to me. I had to delete the app and reinstall it from the App store(logged in with my apple ID) and its working without a problem. I do not get those error messages when I attempt to Buy/Upgrade or Add/Remove books.

  • Query parameters with the same name and different values

    According to HTTP, multiple query or post parameters with the
    same name and different values are permitted. They are transfered
    over the wire in the following format -
    name1=val1&name1=val2&name1=val3
    The problem is that I can't see anyway of assigning multiple
    parameters with the same name and different values to the request
    object of mx.rpc.http.HTTPService. I have tried using the
    flash.utils.Dictionary object as it does strict key comparison but
    that doesn't work too. I have tried setting an array of values to a
    property of the request object but that sends the request to the
    server in the following format -
    name1=val1,val2,val3
    The java servlet engines throw exceptions when they see this.
    Any help would be greatly appreciated.

    If you're not on 8.1.4 move there. 8.1.3 had limitations in the wsrp
    release.
    wrote:
    I have an html select box that contains several values, and multiple
    selection is enabled. When my code runs as a remote portlet, the
    following is showing up in the soap monitor when I select multiple
    values and submit the form:
    <urn:interactionParams>
    <urn:portletStateChange>cloneBeforeWrite</urn:portletStateChange>
    <urn:interactionState>_action=addEmployeesToGroup</urn:interactionState>
    <urn:formParameters
    name="P62005wlw-select_key:{actionForm.selectedEmployees}OldValue">
    <urn:value>true</urn:value>
    </urn:formParameters>
    <urn:formParameters
    name="P62005wlw-select_key:{actionForm.selectedEmployees}">
    <urn:value>beatest1</urn:value>
    </urn:formParameters>
    In this case, I selected beatest1 and beatest2, but only beatest1 comes
    through to the remote portlet. Is this a known bug, and, if so, is
    there a patch or workaround available?
    Thanks in advance,
    Andy

  • Two database with the same sid but different ORACLE_HOME on one host

    two database with the same sid but different
    ORACLE_HOME on one host,and if configure them with
    two differnt lisnter staticaclly,this abosultely work
    because in the lisnter.ora we must provice
    ORACLE_HOME variable,with this ORACLE_HOME the client
    can differentiate which database to connect,but if
    use dynamically register feature,how can the client
    tell which database to connect?

    Also note that this type of configurtion may not be supported.
    Just because a given configuration works in certain given conditions does not mean that it would be supported.
    If this setup is for a configuration that has any value, please also Contact Oracle Support to get their inputs on what you are trying to accomplish.

  • Can I use one Apple TV device on two different HD televisions to view the same info from a mini Mac?

    Can I use one Apple TV device on two different HD televisions to view the same info from a mini Mac?

    Welcome to the Apple Community Lschaef5318.
    You need one Apple TV for each TV.

Maybe you are looking for

  • IDOC import from CRM 7.0 to SAP PI 7.0 fails: unable to read segments

    Hello, We want to import an Idoc from a CRM 7.0 system to SAP PI 7.0. The import fails with the message ""unable to read segments". The issue is related to ALL Idocs, standard and customer defined. The result of any import is that we can see the obje

  • CENVAT amount not reversed - MRKO

    Hi, For a consignment material, Settlement has been done through MRKO. But due to some problem we need to cancel the settlement to vendor, for that i cancelled the Material document and then again executed the transaction MRKO. FI reversal has taken

  • Temp full.. who did it..

    EM sent an alert that temp space was maxed out.. nobody complained.. so how do I see what sql was running and by whom.. <msg time='2010-12-13T14:57:28.424-06:00' org_id='oracle' comp_id='rdbms' client_id='' type='UNKNOWN' level='16' host_id='ORADB' h

  • Is there a way to alphabetize apps in Launchpad?

    The subject says it all.  Is dragging apps around the only option for alphabetizing in Launchpad?

  • Help! I lost my old projects when I upgraded to Yosemite.

    Help! I lost my old projects, and old videos that were stored on imovie when I upgraded to Yosemite. It asked if I wanted to upgrade my projects, etc., but now they are not showing up even after I clicked that option!!! Please help! Thank you!