Interpretation of values in log generated for auth checks(using RSECADMIN)

Hi experts
Could you please help me in reading the error log which is created using transaction RSECADMIN.My question is in particular about the interpretation of the values which occurs in front of the authorization relevant characteristics in the section "main checks" of the error log.
For example if I run a query , assumption(user is configured for auth. logs using rsecadmin and then finally when the query gets completed we see the authorization logs using rsecadmin only). Then in the log it shows what values were checked for the authorizations against authorized values/sets. Lets say there are 2 characteristics char1 and char2 which have hierarchies below them and I run a query with some values(any random nodes from hierarchy below char 1) for Char 1 and some values(any random nodes from hierarchy below char 2) for char2 in the query selection screen and after I run the query and see the log then below values are shown for log:
Authorization Check  
Detail Check for InfoProvider <INFOPROV > 
and then comes the section related to value checks ( MAIN CHECK)
Main Check
Subselection (Technical SUBNR) 1  
Following Set Is Checked                           Comparison with Following Authorized Set 
Characteristic | Contents                           Characteristics |  Contents                                                                               result
Char 1           | Node 0 4 0                           Char 1           | All values of nodes for Char1 for which user is authorized.          Ok/NOK
                     | 121339 1
Char 2          | Node 3 1 98
                   | 121333 1                             Char 2                | All values of nodes for char 2 which user is authorized             Ok/NOK
Could you please help in getting how shall I interperate the values which are being checked.I mean how exactly should i get the characteristic values from the below shown values
Char 1           | Node 0 4 0      
                     | 121339 1
Char 2          | Node 3 1 98
                   | 121333 1   
I know that this might have some sids related to those values which are passed as nodes in the query selections but I am not sure how shall I get the values which are being passed for checks to the authorized set of values using above notification from sap.
Could you please help me so that I can find out what values are passed for checks .
I actually want to know how shall I use the values 0 4 0 121339 1 after the node for char 1 and 3 1 98 121333 after the node for char2.
The values for the authorized set can be knows as they are shown at the end of the log but nothing is said about the node values which are passed for being checked.
Please give me light on above so that i can use above informtion to find out what actually the user is not authorized for.
I hope I explained the requirement to best of levels but still if this is not clear , please let me know.It might be possible that while posting the question some lines get merged (apology for the same but i could not fine the best way to put the same here).
Thanks
Vishal

Hi Chandu
Thanks for reply. But using the transaction RSECPROT and seeing the log from the rsecadmin both are same as the main program related to both of them is RSEC_PROTOCOL_MAIN.
My question was related to this generated log only. I know that is in readable format but in log when you see what values are being checked against the authorized set then the part which is not clear to me is that what does the values in front of characteristic (for the node is selected as input value ( selection filter ) to see the data ) signifies.
Please see example above (as given by me) and please help in interpreation of those generated values in front of charactertistics char1 and char2 (if possible) .
Regards
Vishal

Similar Messages

  • "No sensor values have been generated for this instance." BPELConsole msg.

    I've reworked the GoogleFlowWithSensors demo to use BAM sensors as a prelude to incorporating BAM into a a real BPEL process we have that's much more complicated. I've moved the schema in the GoogleFlowWithSensors.wsdl file to an imported XSD file as directed in literature. I created in BAM Architect a DataObject called ProcessExecutionTimestamp with 5 columns instanceId, receiveInput_TS, invokePartnerLink_TS, receivePartnerLink_TS, and callbackClient_TS. I was able to successfully tie the BAM sensors to this dataobject.
    Everytime I test the BPEL process in BPELConsole, I get the results back but I get nothing but a "No sensor values have been generated for this instance." message in the BPELConsole "sensors" pane. I have found nothing in any BAM or BPEL log that indicates what could be going on.
    Thanks in advance.
    Message was edited by:
    user565339

    Hi,
    BPEL Console does not show data published on BAM Sensors, to see on BPEL console you have use database sensor type.
    Bpel log (default.log) shows any errors encountered on sending data to BAM.
    Thanks

  • Cannot construct URL for runtime check using entries in SLD

    Hi,
    we are using high availability for PI 7.1 and are facing to the problem to construct the url for Communication channel monitoring etcv. in rwb.
    In the exchange profile it looks good. Is there another place to check parameters for sld?
    Thanks in advance
    Frank
    Message: Cannot construct URL for runtime check using entries in SLD for component af.rbi.s3p1028; correct the entries in SLD
    Stacktrace:
    com.sap.aii.rwb.exceptions.OperationFailedException: Cannot construct URL for runtime check using entries in SLD for component af.rbi.s3p1028; correct the entries in SLD
    at com.sap.aii.rwb.core.XIJavaRTCComponent.getConnector(XIJavaRTCComponent.java:211)
    at com.sap.aii.rwb.core.XIRTCComponent.ping(XIRTCComponent.java:209)
    at com.sap.aii.rwb.web.componentmonitoring.model.CompTestModel.doPing(CompTestModel.java:623)
    at com.sap.aii.rwb.web.componentmonitoring.viewcontroller.CmDynPage.doPing(CmDynPage.java:428)
    at com.sap.aii.rwb.web.componentmonitoring.viewcontroller.CmDynPage.updateTests(CmDynPage.java:528)
    at com.sap.aii.rwb.web.componentmonitoring.viewcontroller.CmDynPage.selectNode(CmDynPage.java:555)
    at com.sap.aii.rwb.web.componentmonitoring.viewcontroller.CmDynPage.process_treeClick(CmDynPage.java:484)

    Hello
    A combination of the notes below should resolve this error:
    #764176 Error in XI due to inconsistent SLD contents                
    #1117249 Incomplete Registration of PI components in SLD            
    #1334053 No automatic PI 7.10 SLD Registration                      
    #1278563 Specification of message server host in Exchange Profile   
    Regards
    Mark

  • No sensor values have been generated for this instance.

    Hi
    We are trying to insert values of a sensor variable into Database using a Sensor Action.
    Sometimes,it is working fine.and sometimes not. We couldn't even find any logs regarding this issue.
    Please help me at the earliest.
    Thank you.

    Hi,
    BPEL Console does not show data published on BAM Sensors, to see on BPEL console you have use database sensor type.
    Bpel log (default.log) shows any errors encountered on sending data to BAM.
    Thanks

  • How to implement MICR Fonts for AP Checks using XML Publisher

    Hello -
    We are upgrading from Oracle 11.5.9 to R12.1.1
    I have created the RTF template for AP checks. Everything works except that now I have ti implement MICR fonts. Our earlier solution was through Optio, which I can not use now.
    Please help me find necessary documentation to find ALL of the steps required to implement MICR fonts in the XMLP/RTF/PDF environment. Also, do we have to buy the fonts files, or are they available for free to download. We are using HP-UX 9000.
    Thanks
    Rajeev Goyal
    Edited by: rajeevgoyal on Sep 17, 2009 10:14 AM

    Using MICR in XMLP is like using any other special font (i.e. barcode). Please see below some link on how to have the fonts(MICR) working on your templates. Also, you could buy fonts but may want to try first on the MICR font shipped with the BI Publisher Desktop (i.e. C:\Program Files\Oracle\BI Publisher\BI Publisher Desktop\Template Builder for Word\fonts).
    http://blogs.oracle.com/xmlpublisher/2006/06/how_to_install_a_font_using_xm.html
    http://blogs.oracle.com/xmlpublisher/2007/05/barcoding_101.html
    regards,..

  • SAS Token failed with 403 error while generating for each request using ARR module

    Hi,
    We are doing an e-Learning application, which plays a course on the browser (inside a div control). The course contains list of static contents such as html, js, css etc., and media files .mp4. We are hosting the static contents (.html, .js, .css etc) into
    Azure blob storage and media files into Media Service and CDN.
    When user triggers to take a course, the browser first request the Web Role with landing page (Ex: FirstPage.html) and with Course Unique Id - Ex:
    https://cloudservice1.cloudapp.net/course/courseid/firstpage.html. We have written a custom ARR Module (http://www.iis.net/learn/extensions/url-rewrite-module/developing-a-custom-rewrite-provider-for-url-rewrite-module),
    which receives the request, parse it and generate blob storage url with SAS token using C# code for each file. Then route to blob storage. (we have already passing storage account details to ARR Module using Web.config)
    For single user, the course plays fine. But we do the load testing with > 400 user load (with 5 instances), we are getting many 403 errors (and not all files). If the load is less than 200, we don’t get such issue.
    Also, we are using REST code to generate the SAS token. When the SAS token expiration time extending more than 60 min, getting error “Access without signed identifier cannot have time window more than 1 hour”. As the code is exist in ARR Module, unable to
    refer the Storage Client assembly. This 60 min time interval is for each file request – so there could not be an issue on expiration, but feeling this might be an issue?
    Can you please point me what could be the issue and how to solve this. Is the ARR Module caching the SAS token and providing the same even after the expiration time?
    Many Thanks, Thirumalai M

    hi,
    There is a similar thread (http://stackoverflow.com/a/17572316 ), I recommend you could refer to it.
    And I'd like to know how to set the expiry time in your code, and you could see this page (http://azure.microsoft.com/en-us/documentation/articles/storage-dotnet-shared-access-signature-part-1/
    Regards,
    Will
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Purchase requisition generate for alternative bom use for finished product

    i hav alternative BOM for finished product in which different raw material component in both BOM of same finished product.But when i RUN MRP that time only one raw material requisition generate another alternative bom raw material requision not generate.
       Is there any option when i RUN MRP that time we select one of the alternative bom component of  raw material for generation purchase requisition.
    Thnaks in Advance

    Dear ,
    MRP will select the BOM based on the MRP4-BOM Explosion tab -Selection Indicator .It can eitehr of these ways :
    1.Maintain Production Version with  different Alternative BOM  and keep Selection Indicator -3 .So sysetm will look into only the Valaidty  and lot size of the Production version and select the correct BOM to explode  and generate PR for depednts based on stock situation
    2.If you maintain Blank -then it will look into order qty and select the BOM according ly
    As in your case , selection methods 3 will fit  and you need to maintain PV with correct validity and lot size in MMR-MRP4-PV option .
    Try in sand box with different lot size and validity with indicator-3 .Create Order and run MRP-MD02-1,,3,3,3,2
    Check and revert
    Regards
    JH

  • How to Check Log File for 'Import Standard Purchase Orders' program?

    Hi,
    When the run the standard program 'Import Standard Purchase Orders' after inserting data to PO interface tables. I am getting the log message as mentioned below.
    Start of log messages from FND_FILE
    To get the log messages for PDOI, please use the following id to query against FND_LOG_MESSAGES table:
    AUDSID = 40499066
    End of log messages from FND_FILE
    When I go and check for the message in mentioned table against the AUDSID,I couldn't find any error listed.
    Even I verified the po_interface_errors table, It returns NO ROWS.
    Help me on this issue.
    Thanks.

    Did you checked the imported PO ? follow step 7-8 from MOS note and check
    Vision Demo - How To Import Standard Purchase Orders Using the Purchase Document Open Interface PDOI [ID 1054004.1]
    You can also check
    How To Diagnose Problems With Importing Standard Purchase Orders [ID 781351.1]
    thanks

  • [ALSB] turning on/off logging/tracing for proxy services

    Hi all,
    do you have any snippet for turning on/off logging/tracing for proxy services using WLST or JMX ?
    I've seen a previous thread about Enable/Disable Proxy Service using JMX and I'm looking for something similar.
    Regards
    ferp

    Thanks, but I mean using WLST or JMX code and not by ALSB console
    regards
    ferp

  • Deselect auth. check for infocubes (Checks for infocubes) in RSSM

    Hi,
    An infocube I installed contains an authorisation relavant object (already exists) in BW3.5 system. By default the infocube is selected for auth. check in RSSM.
    After I transported the cube to target system I realised the auth check in RSSM has also been transported with the cube.
    Hence, I have deselected the auth. check for the infocube "Checks for infocubes" in RSSM and saved it. Then, I created a second transport and only transported the cube. But the changes I made in RSSM hasn't been transported.
    Please can you advise me how to transport the changes I made in "Checks for infocubes" in RSSM?
    Thanks a lot
    Murali

    Hi,
    check this threads:
    Re: RSSM: Checks Authorization Objects for Infoprovider are not activ
    Re: RSSM Transports
    Normally system would check all the authorization relevant objects whenever a new Info cube is imported and in case if you want to transport these changes to Production system manually then follow the below listed steps:
    1) In Development system, check or un-check the authorization relevancy using the transaction RSSM on a given Info provider
    2) These changes are stored in table RSSTOBJDIR
    3) Create a manuall transport request and include these entries covering the required Authorization objects manually.
    R3TR TABU RSSTOBJDIR
    Ex: If Info object 'A' is authorization relevant in Development system but not in Production system and you want to transport this change to Production system then include object 'A' table entries manually.
    Regards
    Andreas

  • Error for COM routine using application program (Return Code 40301)

    Hi Experts,
    Currently we are working on SCM 5.1 version.
    We are facing one issue. When we are trying to save one particular KF the system through below error
    "Error for COM routine using application program (Return Code 40301)"
    But when we save other KFs then data save successfully.
    This may be resolve by running consitancy check but if the inconsistancy is the issue then it should impact all the KFs.
    Can anyone help me to find the correct reason & solution?
    Thanks & Regards
    Sujay

    Dear Sujay Joshi ,
    The COM ERROR 40.301 means that the key figure became negative although this is not permitted.
    You need to check the setting of the key figure in your planning area and ensure that you have setup the respective key figure(s) accordingly (not allow negative values).
    If you believe that the negative value is not correct you have to reinitialize the planning area, after correcting the same. Please do a backup of the planning area before reinitializing.
    Please refer to the following SDN Thread for more information about the COM ERROR 40.301.
    How to allow or not allow negative values in key figures for SNP
    Check Note 944254. Also check the KF for Sales history or Statistical Fcst. where the tick negative values not allowed should be there. Sometimes calulation of the Praportional factors also causes te negative values getting calculated for certain KF. You will have to do thorough research to ascertain where from the negative value are coming into the KF.To start with reading the note that I have mentione above.
    I hope this helps.
    Regards,
    Tibor

  • How To Generate Debug Log Files for ebs jsp?

    hi   How To Generate Debug Log Files for ebs r12 jsp?
    and where i get the log .please help me thanks!

    Please check following MOS Document
    Oracle Application Server Diagnostic Tools and Log Files in Applications Release 12 (Doc ID 454178.1)

  • Can we give more than one value for an Authorization field in Auth-Check.

    Hi all,
    Can we give more than one value for an Authorization field in Auth-Check.
    Ex: AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
    ID 'ACTVT' FIELD '02'
    ID 'CUSTTYPE' FIELD <Value 1> <Value 2> <Value 3>.
    IF SY-SUBRC 0.
    MESSAGE E...
    ENDIF.
    If yes, please help me with exact syntax.
    Think it will be like
    ID 'CUSTTYPE' FIELD: <Value 1>, <Value 2>, <Value 3>.

    Hi,
    yes we can give more than one field.
    program an AUTHORITY-CHECK.
    AUTHORITY-CHECK OBJECT <authorization object> 
       ID <authority field 1> FIELD <field value 1>. 
       ID <authority field 2> FIELD <field value 2>. 
       ID <authority-field n> FIELD <field value n>. 
    The OBJECT parameter specifies the authorization object.
    The ID parameter specifies an authorization field (in the authorization object).
    The FIELD parameter specifies a value for the authorization field.
    The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
    please reward points, if it is useful.
    satish.

  • No processing log generated from the output type for the IDOC

    Dear experts,
    the output type which is triggered with a transmission medium Special Function has not generated any IDOC.
    The question is what is the role of a Special function and EDI transmission.
    In some cases the system has generated an IDOC and some cases not. The output is pickedup automatically, but
    does not always trigger an IDOC, Thats is the issue I am facing.
    Therefore in cases where there was no IDOC created there is no processing log generated.
    KIndly help.

    The status is green, and when I try to show the IDOC it  doesnt show and no processing log.
    The same output is processed for a delivery and it creates a IDOC but sometimes it doesnt.

  • Action log not generating for order

    Gurus
    Please check& tell me on order type which is for inspection is not generating
    Action Log can you please update
    Regards
    CHANDRASHEKHAR INGOLE

    dear all
    action log & material availability also checking not happening
    Even thought the material is in stock it creates message shortage of material
    I have set all controls in OIOI t code same as IDES
    all the settings done in custimizing in availability check for prts & material but still problem is there
    In IDES it is working perfectly
    Regards
    chandrashekhar Ingole

Maybe you are looking for

  • Who can solve iSync problem with Nokia N95? (I use the Nokia plug already)

    Hello Since I bought my new cool Mac:, I sync my N95 with iSync and the Nokia N95 plug-in. Thinking at first that is works flawlessly (as other members here seem to think as well) I later found out, that if I make changes to any calendar or "to do" d

  • JSC can't seem to find classes that are in my jar files.

    Yet when I manually insert the imports and do a build, it all works. So JSC isn't seeing something that ant is seeing. This has happened before, and it's frustrating. What can I do? I've removed and re-added the jar file that the referenced classes a

  • Job RDDEXECL terminated with error.

    Hi! I am facing with hanging SPAM error in phase IMPORT_PROPER (patch of SAPKB70013 - SAPKB70016). The SPAM patch terminates after a few sec. in DDIC activation action. I have looked into log file and founded folllowing: The job RDDEXECL terminated w

  • Problems with End User License Agreement

    In April this year after trialling Acrobat Pro I decided to take out a year's sub to Acrobat Create. Since that time however I have been unable to open any pdf clicking on a web based (e.g. Google) url. Each time the following message appears - "Befo

  • MVP List #2 (August 6th through August 12th)

    The Verizon Community Forums Most Valuable Posting List is where we recognize great work and words happening every day right here on our community. We know the success as a community is based on the continual and lively contributions of our valued me