Lock Role for Changes till the transport is released

Issue : since roles are managed by multiple security administrators, changes are moving against the sequence.
We have multiple security administrators, is there a way to lock a role for changes until the task/ req is released.
Example Scenario :
Security admin 1 : if there is a change request to add SU01 to the role: Z_TESTROLE, Security admin adds it and creates a Change request but does not release it.
Security Admin 2 : the security admin 2 will get a Change req for the same role Z_TESTROLE to add a tcode PFCG to it. Security admin 2 does his job and moves his transport now even though the first transport does not move the change made by the first security admin moves with the transport for the second admin.
We have multiple security administrators, is there a way to lock a role for changes until the task/ req is released.

Hi all,
Thanks for your responses.we follow a change procedure but I guess its just needs to be refined. Everybody figured out that this is a coordination issue but I was asked to research on any technical ability to handle this.
Here is a brief overview of our process :
1) BPO approves the change
2) Role owner support manager approves the change
then the Change request comes to 3)Security Manager for her approval.
I feel from Sox prespective the 3rd approval in not manadatory.
I'm I correct ??? where can I find Sox guide for SAP ?
Recap of the incident:
1)A change ticket is created for the t-code creation and a task is created for the role in which this report is to be added.
State I role Z_TESTROLE  is with ZMMR0025
After adding the new report ZMMR0055 the old report ZMMR0025 is removed.
State II
The role Z_TESTROLE has tcode ZMMR0055
now this is tested in development system by the requestor.
Before this goes into PRD via QA a newsflash is sent to all the endusers (so that they know which t-code to use)
Meanwhile if another security administrator works (suppose adds a new tcode or changes an authorization)  on this while the role is in state II changes made by Admin 1 are transported along with the second change.
State II + new changes = State III
When the role reaches PRD in state III result is the end user losses access to the required functionality ZMMR0025 before ZMMR0055 is made available.
I hope I’m clear , please let me know if I need to be more specific on any part.
I appreciate your help.
regards,
Salman.

Similar Messages

  • How do I listen for change in the global position of a Node

    Hi there,
    I want to create a Wire/Connection node between two scene nodes. I want this Wire node to be updated when one of the nodes is moving. In the common scenario I would listen for change events in the target nodes position and update the Wire :
    targetNode1.translateXProperty().addListener(new ChangeListener<Number>() {
    public void changed(ObservableValue value, Number oldValue, Number newValue) {             
    wire.setStartX(targetNode1.getTranslateX());
    wire.setStartX(targetNode1.getTranslateY());
    wire.setEndX(targetNode2.getTranslateX());
    wire.setEndY(targetNode2.getTranslateY());
    The problem is that the target nodes are children of another container nodes(that are actually moving). So listening for change events in the translate properties of the target nodes does not work(their parent nodes are actually moving)
    Is there way to listent for change in the global position of the target nodes relative to the Scene?

    It sounds very similar to a problem I posted about earlier...
    How to implement a UI similar to a UML Diagram with connections?
    I ended up making my own special bounds property, that updates when the parent's special bounds property changes.
    I also had to listen to the parentProperty change event to add/remove my listener on the parent node.
    All in all, a pain in the butt. There should be an easier way.
    The shortcoming of the solution is that all the nodes in the hierarchy must have my special bounds property implemented (ie. they're all classes under my codebase such that I can implement it), which for the moment is true... I'd like a cleaner solution however.

  • I have a big problem. Every time i lock on for example Facebook, the picture is big in 2 secundes and the it's gets small. Please help me.

    I have a big problem. Every time i lock on for example Facebook, the picture is big in 2 secundes and the it's gets small. Please help me.
    <Email Edited by Host>

    Hi Frank,
    Which Browser, & do you have a screenshot of the problem?

  • User Roles for changing tables?

    Which user roles are there in the environment for changing tables?
    Any help is appreciated.
    Regards,
    Neetu

    Search for roles which have SE11 in their menu as a tcode and take you best pick or create your own.
    The advice from the other is also good in my opinion (he who changes table fields should also change the program.... )....
    Cheers,
    Julius

  • Lock project for changes

    In trans. SOLAR_PROJECT_ADMIN i defined my project with some team members.
    But in trans. SOLAR01 and SOLAR02 everybody can change my project. I would like lock my project for just users team members could change my project. How can i do that?? And i would like that some users in team members could just change some specifics structures in SOLAR02 and not every folders.
    Please help-me!
    Thank´s all!

    Pascal wrote:
    > Hi,
    >
    > You can lock down a structure in the project admin section (edit structures) check box.
    >
    > You can also use authorisations to only allow certain people to change a particular node of the project (blueprint - solar01 and customizing - solar02 section).
    >
    > To do this you have to assign the project team members to each and every node. I cannot remember the authorisation object that controls this - I don;t have a system right now, but if you do not find let me know, i;ll check my notes)
    > rgds
    Lock in check box doesn´t work for me because the another users should view the tabs and structures. They should view the documentation and transaction but they can´t change this data. Flagging checkbox, this structures desapear in SOLAR02.
    About authorisation, will i have to assign this object autorization in every user of system? What is this object?

  • What are the Transport Request Release Functionality ?

    Sap Specialist,
                         Kindly tell me, I have following Doubt in <b>Transport Request Release</b> .                        
                         If we Realease any one Transport Request from SE09 in Developement Server,
                         What are the Functionalities Called ?
                         And How is it Export to Production Server ?

    Hi,
    kindly go through the following hints.
    Transport Request within same Server Different Clients
    I have 3 clients under one SID (dev 130,140,150). 
    And we have more than 400+ transport requests in client 130.  How can we transport these requests to other clients of 140 & 150.  If I want to use tcode SCC1, that can be done only one tran. request at one time. 
    Do I need to write a script within unix? 
    Try STMS.
    Click on the "import overview"
    Double click on your target system
    Click "refresh"
    Click on "import all request" or ctrl+F9
    Specify the target client 
    Execute the transport
    Done...
    Thanks,
    Shankar

  • Role for Changing communication Channel parameters

    Hello All,
      I'm looking for a role that gives access to Changing communication Channel parameters in Integration Directory. I know that SAP_XI_ CONFIG_J2ee gives this access but is there a way to assign any security role or any component so that it gives access to  just Changing communication Channel parameters  in Integration Directory instead of giving access to the whole IB:Configuration.
    Thanks in Advance

    Hi
    dont have idea but maybe u can get idea about assigning role from these,
    see if  it helps
    http://help.sap.com/saphelp_nw04/helpdata/en/89/05793c05f0807be10000000a11405a/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/45/0c86aab4d14dece10000000a11466f/frameset.htm
    regards
    Pratibha

  • Watching for changes to the filesystem?

    Hi,
    Is there an automator object that will allow me (through Applescript perhaps) to receive notifications of when something in a certain part of the filesystem changes?
    For example, I would like to be notified when a new document is added to the Documents directory (likewise I'd like to be notified when a document is removed from that directory).
    Thanks,
    BT

    Hi BT
    AppleScript has a mechanism called Folder Actions, which will do exactly what you require. Automator workflows can also be saved as Folder Actions, but they run more slowly for reasons I'll explain later.
    A Folder Action script runs when you make a change to a folder to which the script has previously been attached. The possible changes are: opening the folder window, closing the folder window, moving the folder window, adding items to the folder and removing items from the folder. The last two are what you're looking for.
    Only these five changes will trigger a folder action; folder actions don't run if you edit or update a file within a folder.
    Folder actions aren't recursive: if you add items to a sub-folder of the folder to which the action is attached, the action attached to the parent folder won't run.
    Here's an AppleScript that will do what you want, with the notification in the form of a dialog.
    --begin script
    on adding folder items to this_folder after receiving these_items
    set folder_name to name of (info for this_folder)
    set item_count to (count these_items) as string
    display dialog item_count & " Items were added to " & folder_name & "!" with icon note buttons {"OK"} default button 1
    end adding folder items to
    on removing folder items from this_folder after losing these_items
    set folder_name to name of (info for this_folder)
    set item_count to (count these_items) as string
    display dialog item_count & " items were removed from " & folder_name & "!" with icon caution buttons {"OK"} default button 1
    end removing folder items from
    -- end script
    Copy and paste this script into a new Script Editor document, and save the script into the folder ~/Library/Scripts/Scripting Additions/ (create it if it doesn't already exist).
    Control-click on the folder you want to run the action, and choose Enable Folder Actions if they aren't already enabled. Control-click on the folder again, and choose Attach a Folder Action... Navigate to the folder where you saved your script, and choose the script. Drag items in and out of the folder and see what happens.
    The dialog can be replaced by any AppleScript commands you like: the script could send an email, log the change to a text file, create a new document in a scriptable application, log the user out, play their top-rated iTunes tracks...
    Hope that gets you started. Using Automator would be slower because folder actions created in Automator simply launch a separate Automator workflow application, which then runs the commands which I've scripted directly. This just puts another application in the way of getting the job done.
    Why not post in the AppleScript forum if you want to know more?
    Cheers,
    H

  • Are there any free APPS that allow for chang/embellish  the folder icon

    tired of blue folders.
    there must be some kind of app that can change its appearance or change color or whatever.
    can one change the text font of indiv folders?
    wouldnt one expect this from OS X4.6
    im shocked it has to be the same old blue folder

    Hi, Glenn.
    You can assign any icon you want to a file or folder: see "Mac OS X 10.4 Help: Changing the icon of a file or folder.”.
    You can find nice sets of icons (what you need for step 1) at sites like Icon Factory or ResExcellence.
    Some folks really like the inexpensive shareware application FolderBrander for customizing folders. There's a free trial period and it seems very reasonably priced for what it does.
    The freeware application TinkerTool will allow you to change some of the default fonts used in Tiger.
    When looking for new applications, I recommend searching MacUpdate or Version Tracker. The user-submitted reviews accompanying the listings can be helpful in sorting the wheat from the chaff.
    Good luck!
    Dr. Smoke
    Author: Troubleshooting Mac® OS X

  • Log for changes in the SAP table

    Hello All,
    I have a SAP table in which we want to log all the changes being made by the number of users like modifying some record or adding a new record.
    Now What I have done is in the SE11 under technical settings I have checked the checkbox which is "Log data changes", Needless to say I have the developer access key to the system.
    Now I want to test whether changes being made by me in the SAP table are logged somewhere or not I want to know where can we see the changes being logged made by me.
    Is there a tcode to see the changes being made in the table or a SAP table exists for this.
    Thanks,
    Mark

    Hi,
    BAL_OBJECT_SELECT --> To get the LOG for a object
    You can use below Tables/Structures
    DDPRT -->  Structure of ABAP/4 Dictionary logs
    DDPRTXT
    Regards
    Sudheer

  • Uploading .ldt file for changes on the

    Hello all,
    I'm trying to make a change in a Time Sheet, the change I'm trying to make is really simple at the moment (making a field bigger).
    But there where already changes made in the sheet and they need to be kept in tact (added a lov).
    I'm using the next paper as reference.
    Oracle Time and Labor - Configuring The Oracle Time and Labor Timecard User Interface - White Paper
    Normally U need to get the Original template from the location: $HXC_TOP/patch/115/import/US,
    When there are already changes made u need to get the latest version of the template(?)
    The file I needed for time sheet was hxczzhxclayt0019.ldt
    When I upload the original template the LOV who was made in a earlier time did not work.
    This confirmed that tanking the original template was not the way to go.
    I think I need to have the template witch has all the earlier made changes.
    While U upload the .ldt file with FNDLOAD downloading the template is not working for me.
    Even a full download without any parameters does not get the effect I like to see.
    "FNDLOAD apps/pass@DBname O Y DOWNLOAD $HXC_TOP/patch/115/import/hxclaytlayoutsld.lct"
    Does anyone have any advise / idea's on how I can solve this, except building the file from the ground?
    Greetings niels
    Edited by: user12842768 on 10-jun-2011 7:29

    Adding the error message:
    oracle.apps.fnd.framework.OAException: oracle.jbo.SQLStmtException: JBO-27122: SQL error during statement preparation. Statement: SELECT * FROM (select project_number projectnumber, project_name, project_id projectid, start_date, completion_date, carrying_out_organization_id, period
    from xx_pa_online_projects_v where period = trunc(FND_DATE.CANONICAL_TO_DATE(:1))) QRSLT ORDER BY projectnumber
         at oracle.apps.fnd.framework.OAException.wrapperException(OAException.java:891)
         at oracle.apps.fnd.framework.webui.OAPageErrorHandler.prepareException(OAPageErrorHandler.java:1145)
         at oracle.apps.fnd.framework.webui.OAPageErrorHandler.processErrors(OAPageErrorHandler.java:1408)
         at oracle.apps.fnd.framework.webui.OAPageBean.processFormRequest(OAPageBean.java:2680)
         at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:1683)
         at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:509)
         at oracle.apps.fnd.framework.webui.OAPageBean.preparePage(OAPageBean.java:430)
         at oa_html._OA._jspService(_OA.java:84)
         at oracle.jsp.runtime.HttpJsp.service(HttpJsp.java:119)
         at oracle.jsp.app.JspApplication.dispatchRequest(JspApplication.java:417)
         at oracle.jsp.JspServlet.doDispatch(JspServlet.java:267)
         at oracle.jsp.JspServlet.internalService(JspServlet.java:186)
         at oracle.jsp.JspServlet.service(JspServlet.java:156)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:588)
         at org.apache.jserv.JServConnection.processRequest(JServConnection.java:456)
         at org.apache.jserv.JServConnection.run(JServConnection.java:294)
         at java.lang.Thread.run(Thread.java:534)
    ## Detail 0 ##
    java.sql.SQLException: Missing IN or OUT parameter at index:: 1

  • My phone locked and i keyed in the number to release it, but it needs now a password for the network how do i find this

    my phone froze, so i restarted it with the pin number, but now it needs further info and needs a password for the network . how do I retrieve this password?

    In needs a password for WHAT network? If you're talking about a WiFi network, you'll have to ask whoever owns the network. We have no way of knowing.

  • How to delete the Transport Request release from SE09

    Please let me know How can I delete the New Transport release request from SE09 and if I HAVE OBJECTS SUCH AS Process chain and process variant, infopackage in one request. Being A NEW request it has Delevelopment correction ABDK904193 under main request ABDK903667, should I double click on  ABDK904193 FIRST AND then go to request editor and change - display and select all request and delete it and save and then delete main request ABDK903667. If I do this will there be any problems on Process chain Objects such as locking or unlocking. let me know if there are any more steps that need to be taken to avoid any trouble.
    hope u will help me asap
    thanks
    hardeep

    Hi Hardeep,
    Allways delete child node and then parent node.Coz Parent node does not allow you to delete straight away so first delete child node either by double clicking and select all>>delete or individually select each object by placing cursor on it and say Delete by pressing the Delete Icon..it will prompt u message obj is locked press delete that will delete the object, subsequently when all objects are deleted then delete the request also.
    when u delete a request all the objects saved or locked onto that request are released or unlocked.
    So all the objects that were previously locked or saved onto a req are now ready to save into another req.
    Simply say, once the objects are deleted from the req they are independent again with latest changes and readily available to save onto a diff req.
    another option is release the req but do not transport it to target system.
    Regards
    Ellora

  • Did ComboBox change in the recent JavaFX releases?

    Hi there.
    I use a ComboBox to display the gender of a person. Now recently we discovered a bug, and I am pretty sure it used to work in a previous version. I also updated my JDK recently to 7u13 ( JavaFX 2.2.5) and maybe some others did too.
    The following use case should work (and even worked in my opinion), but doesn't anymore.
    Run the code. (Gender is initialized with null)
    Click the Chose Male Button.
    Male is selected in the ComboBox.
    Click Reset.
    Click Male.
    Nothing happens! I expected that Male is again selected.
    Can someone comment on this issue please?
    import javafx.application.Application;
    import javafx.beans.property.ObjectProperty;
    import javafx.beans.property.SimpleObjectProperty;
    import javafx.collections.FXCollections;
    import javafx.event.ActionEvent;
    import javafx.event.EventHandler;
    import javafx.scene.Scene;
    import javafx.scene.control.Button;
    import javafx.scene.control.ComboBox;
    import javafx.scene.layout.VBoxBuilder;
    import javafx.stage.Stage;
    public class TestApp2 extends Application {
        public static void main(String[] args) {
            Application.launch();
        private ObjectProperty<Gender> gender = new SimpleObjectProperty<Gender>();
        @Override
        public void start(Stage stage) throws Exception {
            ComboBox<Gender> comboBox = new ComboBox<Gender>();
            comboBox.setItems(FXCollections.observableArrayList(Gender.values()));
            comboBox.valueProperty().bindBidirectional(gender);
            Button button = new Button("Reset");
            button.setOnAction(new EventHandler<ActionEvent>() {
                @Override
                public void handle(ActionEvent actionEvent) {
                    gender.set(null);
            Button buttonSetMale = new Button("Set Male");
            buttonSetMale.setOnAction(new EventHandler<ActionEvent>() {
                @Override
                public void handle(ActionEvent actionEvent) {
                    gender.set(Gender.MALE);
            Scene scene = new Scene(VBoxBuilder.create().children(comboBox, button, buttonSetMale).build());
            stage.setScene(scene);
            stage.show();
        public enum Gender {
            MALE,
            FEMALE,
            UNKNOWN
    }

    This is a known bug and is fixed in JavaFX 8.0. You can see the bug report here:
    http://javafx-jira.kenai.com/browse/RT-27654
    -- Jonathan

  • Unable see the transported changes.

    Hi All,
    There is change in my source IDOC structure for mapping.
    In my dev system i have imported this changed idoc and made the mapping changes
    I have transported these objects from DEV to Test server
    The changed mapping got successfully transorted from DEV to Test server
    For changed IDOC   the changes were successfully imported from DEV to Test server. But there was problem for assembly. The problem was with Version conflicts for this IDOC. 
    What I did is, I deleted this IDOC definition from test server and retransported the IDOC from DEV to Test server
    This time the IDOC got successfully imported and exported in test server. SWC got assembled successfully.
    But the IDOC did not get created.
    I can see the IDOC in transported list but cant see the IDOC structure created in test server under Imported objects.
    Please suggest.
    Regards,
    Sheetal

    Hi Sheetal.
    You can see in change List in Test Server if there are objects stopped (not active) there. Or maybe you have to retransport all objects. If In the Test Server shows the conflits message, you must accept this updates (accept button new objects).
    Regards.
    Bruno

Maybe you are looking for