OIM11g - Approval Workflow - Requester and Approver is same

Hi All,
I have a scenario where , requests are approved by a group. ( Resource Owners group).
and if anyone needs access to this resource, the members of the group will approve the requests.
What if any member of the "Resource Owners" groups raises a request on the same object ?? OIM functionally sends it to the group for approval, and it will become a self approval and is a conflict.
How to avoid this kind of scenarios.
Regards
Vicky
Edited by: vicky on Dec 7, 2011 5:18 AM

AFAIK I haven't seen any system property to stop this. SOA does not care about who the requester is and who are the approvers. The way Oracle has impletmented the identity service for OIM in SOA does not handle this. Seems there is no SOD checks. Open a SR which I believe should be taken as a ER.
Thus the workaround would be to get all the members of the approver group less the requester and assign to all the members. The member list should be comma seperated user ids.
HTH,
BB

Similar Messages

Using WF WS14000133 and WS14500015 in same approval process

Dear WF-Experts,
we want to use the WF WS14000133 and WS14500015 in same approval process in BAdi "Determination of Approver for n-Step Dynamic Approval Workflow".
For Example:
- Shopping cart with 3 items and total value 1000,. EUR
- first approval step financial for complete shopping cart cause total value
- second approval step for item 1 and 3 cause cost center
- not seperate approval for position 2
- third and final approval step for complete shopping cart cause total value
Thank you for your support
Best regards
Heinz-Georg

For one approval process you can use only one workflow. But as you want some steps for the complete shopping cart and others on line item, use the line item approval. If you want to do the approval on "header" level just make sure all the items get the same approval object guid. That way all the items are assigned to the same approver and in that way you have a "header" approval.
I used this for a similar requirement and it works fine.
Regards,
Martin

Additional attributes for requester and approver

Hi,
I have a scenario:
1.Requester should raise the request to assign the role for beneficiary and requester should select 'Valid from' and 'valid till' (valid from and valid till are additonal attributes)
2. Approver will reivew the request and should be able to change the 'valid from' and 'valid till' dates ( role active dates )
I have changed the 'AssignRolesDataset.xml' to display the additionals attributes for approver task by making 'approver-only'.
Can I add addtionals attributes for requester ? Can the requester additional attributes values will visible to approver to review and change?
These Additional attributes stores in which table?
Can any one Please guide me here.
Thanks
gr

Hi,
I have created the 'AssignRolesDataset.xml' as below and imported successfully in oim (purged also), but not able to see the additonal attributes when I raise the request from self service and select the 'Assign Roles' , also not able to see the attributes with approver.
AssignRolesDataset.xml
<request-data-set xmlns="http://www.oracle.com/schema/oim/request" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/request" name="AssignRolesDataset" entity="Role" operation="ASSIGN">
<DataSetValidator name="CreateUserDataValidator" classname="oracle.iam.requestactions.plugins.datavalidator.CreateUserDataValidator"/>
<AttributeReference name="RoleActiveFrom" attr-ref="RoleActiveFrom" type="Date" length="30" widget="date" read-only="true"/>
<AttributeReference name="RoleActiveTo" attr-ref="RoleActiveTo" type="Date" length="30" widget="date" required="true"/>
</request-data-set>
Please correct me here.
Thanks
Gr

How to unlock the request for a report and add the same query to new reques

hi,
how to unlock the request for a and add the same query to new reques

You can unlock in SE03 tcode.
Goto tcode SE01, give the transport number --> display --> double click on the transport --> in the next screen select all the elements --> delete --> save.
To attach it to another transport, In RSA1, click on transport connection> Choose Object types> query elements --> here you can find your query/ or you can search, which you can drag to right and attach to the transport (using truck button).

Different soap request in 9.2.0.4 linux and windows for same webservice

hi,
i deployed a webservice on iis5 (dotnet 1.1). the client for this web service is written in java and is loaded into oracle db (9.2.0.4 linux). and there are errors. the same java code is working fine on 9.2.0.4 windows.
description of the error:
<?xml version="1.0" encoding="UTF-8" ?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<SOAP-ENV:Body>
<ns1:MethodName xmlns:ns1=http://tempuri.org/Service/message/ SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<SomeString xsi:type="xsd:string" xsi:nil="true" />
<ErrorDes xsi:type="xsd:string" xsi:nil="true" />
</ns1:MethodName>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
there are problems with the 'SomeString' and 'ErrorDes' elements. there is an attribute xsi:nil="true". in the working requests this isn't present. the result of this, if for example DName isn't assigned a value this element isn't in the resulting response:
<?xml version="1.0" encoding="utf-8" ?>
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:soapenc="http://schemas.xmlsoap.org/soap/encoding/" xmlns:tns=http://tempuri.org/ xmlns:types="http://tempuri.org/encodedTypes" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<soap:Body soap:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<q1:MethodNameResponse xmlns:q1=http://tempuri.org/Service/message/>
<Result xsi:type="xsd:int">0</Result>
<ErrorDes xsi:type="xsd:string">string</ErrorDes>
</q1:MethodNameResponse>
</soap:Body>
</soap:Envelope>
what can cause this behaviour? is there a way to prevent sending the xsi:nil attribute?
thanks
ralf

This is just one of the web service interop problems you can face. Both omitting the accessor with the NULL value as in your "working request" and placing xsi:nil attribute with the value "true" as in "not working request" are valid in soap messages. The problem happens when either the soap client or soap server/container does not fully support the soap spec or support with wrong interpretations. Most of the toolkit are not sophisticated enough to let you choose one of two options above.
Maybe you might want to consider not allowing non-null values so that you can get around with the interop problem, and add logic in the client and service implementation to handle special cases for default values indicating null.
Below is FYI.
SOAP 1.1 spec says the following.
"A NULL value or a default value MAY be represented by omission of the accessor element. A NULL value MAY also be indicated by an accessor element containing the attribute xsi:null with value '1' or possibly other application-dependent attributes and values."
On the other hand, there is no "null" attribute in http://www.w3.org/2001/XMLSchema-instance namespace referenced by xsi in your soap messages, and xsi:nil is the valid attribute name.
Regards,
Pyounguk

I have a report with 2 queries and prompts on same object tell me how many times it request for I/P?

Hi
i have a report with 2 queries and prompts on same object tell me how many times it request for I/P? can any one please guide me.
Regards,
Mahendra

Is this question related to Dashboards or webi ?

We have three discussions forums with same subject. whenever a post gets new reply in one forum, it should automatically trigger workflow functionality to check conditions and send the same reply to other synchronized forums.

we have three discussions forums with same subject. whenever a post gets new reply in one forum, it should automatically trigger workflow functionality to check conditions and send the same reply to other synchronized forums.
Rajiv Kumar

Hi,
More details about your discussions forum will make others easier to find a corresponding solution on your requirement.
If you mean there are three Discussion Board list waiting for synchronizing, I would suggest you create an Event Receiver for the three Discussion Board list.
Here is a link with code demo about how to copy items from one Discussion Board to another including Replies:
http://spcodes.blogspot.com/2013/03/programmatically-copy-items-from-one.html
Here is a step by step sample on creating a simple Item added event receiver for Custom List in SharePoint 2010:
http://msdn.microsoft.com/en-us/library/ff398052.aspx
More information on Event Receiver for your reference:
http://msdn.microsoft.com/en-us/library/gg749858(v=office.14).aspx
http://msdn.microsoft.com/en-us/library/ff408183(v=office.14).aspx
Feel free to reply if there are still any questions.
Best regards
Patrick Liang
TechNet Community Support

Ingesting HDV and AVCHD in same project - workflow?

Whats the workflow with ingesting HDV and AVCHD into same project? Im guessing convert both to 'Apple intermediate codec' i think this is straightforward for avchd as is in prefs pane of log and transfer, but how do i do this for hdv?
Also set the avchd to record at 1080i or does it not make much difference once captured / pro ressed up.?

Bring both in as ProRes. Much more processor efficient.

How to avoid triggering of a workflow multiple times at the same time?

Hello Workflow Gurus,
This is the situation.
I have a Notify requisition creator workflow. This workflow is triggered only when a PO is completely released(this Po is created with respect to a purchase req). I have implemented multiple release strategy in my PO workflow. Meaning, if a PO is created for 5 million, 4 entries are created in the release strategy(P0, P2, P3 and P4). Some approvers have authorization to approve P0 and some have authorization to release P2 etc. Before an approver can release P4, P0, P2 and P3 shuould be approved first.
My problem is when a approver has auth to release both P3 and P4, and if he hits the SAVE button, it is completely released and 2 notify req workflows are being triggered. I use the release indicator = 'C' (completely released) to trigger thos notify req creator workflow. In this case both workflows are triggered at the same time and date. I somehow have to say if this is triggered at the same date and time, complete one workflow.
BTW, I am not using any user exit to trigger this. This notify req creator WF is triggering event is "RELEASED'. When pO is completely released, 'RELEASED' event gets triggered which caused the notify req creator WF trigger.
How can I accomplish this?
Thanks
Rachana

Hi Rachana,
Another way you could acheive this is to use start conditions for your workflow. You could specify that your workflow should get triggered only for release codes = XX or release strategy = XX, etc.. This way even after 1 stage of approval, when the approver clicks on SAVE, the release codes change and because there is start conditions in the workflow that would prevent another instance of the workflow from getting triggered.
For example, in your case, I presume PO, P1, P2, etc are your release codes.
You can have a start condition in your workflow wherein you specify that the workflow should get only triggered for release code = P2 [assuming release code P2 is always the 1st stage of approval]. So, once the approver for P2 has completed and Saved, since there is a start condition, there wouldnt be any other workflow instance started. By this way, any stages of approval wouldnt cause another workflow to initiate.
Hope this is what you have been looking for ?
Satish

ESS - Leave Requests and Approvals

Hi,
I have a few ESS problems regarding requests and approvals.
Firstly the leave requests are not reaching the approver's inbox.
Secondly for those that have been approved, the approval notification doesn't reach the employee's inbox. This somehow is also affecting the employee in that the leave although approved is not reflecting in the employee timesheet and the employee is not paid for the particular leave day requested.
Any help would be grateful appreciated.

Hi Nox,
ok then it seems there is a problem of the approval <u>task</u> not reaching the approvers universal worklist.
There could be multiple reasons for this: task is sent to someone else than you think, task is not sent to anyone, workflow goes into error, leave request workflow is not set up, universal worklist is not configured to retrieve the work items...
What I would do next is to check if the workflow is started or not. You can do this in transaction SWI1 in the test system client you are using by just entering the transaction and hitting F8. If the workflow is started, you should see a line for the leave request approvals. If not, there's config missing in the leave request side.
If the line can or cannot be seen, please come back with a confirmation and please also remember to award points if the answers are helpful
Best regards,
Mikko

How to get the document details of a Workflow Request?

We are using listRequests method of RequestManager class for getting workflow requests. This method returns collection of request information. But how we can get details of document, which has to be approved, through that request id?

Hi,
Hope u got the solution. If not, you can get the Document Item like this.
// Its the method call of previous link nickw-ocs has provided
Vector fileNames = getTargetDocumentsFromFolder(request1);
for (int j = 0 ;j<fileNames.size() ;j++ )
AttributeRequest[] pathar = new AttributeRequest[]
WSF.newAttributeRequest(Attributes.PATH),
WSF.newAttributeRequest(Attributes.PARENT_FOLDER)
FileManager filemanager = session.getFileManager();
// Resolve the file path based on folder ,document name
// combination.
String fileName = (String)fileNames.get(j);
System.out.println("Item id : "+item.getId()+" File Name : "+fileNames.get(j));
Item targetItem = filemanager.resolveRelativePath(item.getId(), fileName,
pathar);
// here you got the Document Item. So, you can do what ever u want, like read the docuemnt, update categories etc..
if (targetItem != null)
targetdocuments.add(targetItem);
}

Project Server 2013 - Reporting on Workflow Stages and Phases

I just received a requirement to build a report listing all the projects and their corresponding Workflow Stages/Phases in a chart. I did a chart using cube with the Project NonTimephased Data, but how will I do this with workflow stages and phases.

Hi,
Further to Andrew's reply, just thought of sharing a sql query to fetch this data as i can see "NewB" in your Avatar :)
and since this data is also not stored in a straight forward manner.
hope this helps.
SELECT P.ProjectUID
, P.ProjectName
, WP.PhaseName
, WS.StageName
, WSI.StageOrder
, EPT.EnterpriseProjectTypeName
, WSI.StageEntryDate
, WSI.StageStatus
--, CASE WHEN WSI.StageStatus = 0 THEN 'Not Started'
--WHEN WSI.StageStatus = 1 THEN 'Waiting for Input'
--WHEN WSI.StageStatus = 2 THEN 'Waiting for Approval'
--WHEN WSI.StageStatus = 3 THEN 'Workflow Processing'
--WHEN WSI.StageStatus = 4 THEN 'Stage Completed'
--WHEN WSI.StageStatus = 5 THEN 'Completed with Errors'
--WHEN WSI.StageStatus = 6 THEN 'Workflow Completed' END AS [Stage Status Description]
FROM MSP_EpmWorkflowStage AS WS
INNER JOIN MSP_EpmWorkflowPhase AS WP ON WS.PhaseUID =WP.PhaseUID
INNER JOIN MSP_EpmWorkflowStatusInformation AS WSI ON WS.StageUID =WSI.StageUID
INNER JOIN dbo.MSP_EpmProject AS P ON WSI.ProjectUID =P.ProjectUID
INNER JOIN dbo.MSP_EpmEnterpriseProjectType AS EPT ON P.EnterpriseProjectTypeUID = EPT.EnterpriseProjectTypeUID
WHERE WSI.StageEntryDate IS NOT NULL AND (WSI.StageStatus != 0 AND WSI.StageStatus != 4)
ORDER BY P.ProjectName
Khurram Jamshed - MBA, PMP, MCTS, MCITP (
Blog, Twitter, Linkedin )
If you found this post helpful, please “Vote as Helpful”. If it answered your question, please “Mark as Answer”.

Changing of iBase in Change Requests and Corrections being processed

Good day!
After going SP18 with Solution Manager our iBase component system has gone "mad": number for productive ERP-system has changed several times.
Because of this change, a number of already approved change requests and corrections in processing can't be modified correctly. I can't change their status by regular operations from system document. Multiple correction/ change request change also won't work. And I can't change the iBase component in this documents, because the field is read only.
How can I close all Change Requests and corrections with old iBase component number?
Is there a way to change the iBase number in already approved Change Requests and Corrections, so i can perform operations with this system documents.

Hello Raguraman!
Thank you for your answer.
Anyway I implemented the note to which you refer, and still can't change iBase component in corrections and change requests which are in process. The "iBase/Component" field is still read only and contains components which do not exist anymore.
Do you know how can I change this values?

Can a workflow steps and users for the steps be controlled by contributors?

Is it possible to have a workflow that allows contributors to select list of steps and users in the steps? The universal set of steps and users for steps can be defined in the designer mode. But the contributors can decide for a particular content item what steps need to be skipped and the users for the step. But atleast one approver step is mandatory. This is some strange requirement that our client is expecting. Is this possible?
Regards,
Pratap

Hi Pratap,
Short answer: Yes. This has been possible since the Stellent 5.x days (and possibly earlier). We can help you with this if you need services - see our Workflow offerings here: http://bit.ly/b2Ydv6
Or you can do it yourself. For the details you should see "Setting Up Ad Hoc Step Users" in the workflow admin guide (pp 147, section 9-13) http://download.oracle.com/docs/cd/E10316_01/cs/cs_doc_10/documentation/admin/workflow_guide_10gr3en.pdf
Remember that a "step" is just a container for a certain group of users to take action on certain kinds of content. So you can have one step but if you loop over it 3 times with a different set of users each time you have a defacto 3 step workflow.
You need 2 things:
1) the workflow plumbing for the selection of the next "step" (and/or group of users) in the workflow (tokens and subworkflows typically)
2) a UI for the end users / contributors to actually make the selections.
For 1) you use tokens that will ultimately resolve to a list of user names who should take action. You might use names (e.g. bcripe) or aliases (e.g. The Legal Team) or other concepts that make sense to the end users who will be participating (e.g. capital expenditure review). Whatever you do the tokens will ultimately yield one or more user ids which become the step users.
For 2) you can use anything that will make those plumbing values available to the UCM workflow engine. Most common is using metadata fields. They're easy, can be displayed only during workflows (using rules and profiles), and fairly intuitive for most UCM users (if there are not too many!!!). However, you can just as easily write web services, BPEL tasks, or CIS integrations that take form or other triggered input from the user and pass those parameters back to the workflow engine. For more complex workflows this is often a good idea especially if you are dealing with people who are only casual users of UCM or who are interacting with content through another primary UI.
Either way, let us know what we can do to help. Workflows are a special passion to us here at Fishbowl and we've got supported software to prove it. http://bit.ly/95Rocu
Warmly,
Billy Cripe
Fishbowl Solutions

Need of "Workflow Engine" and "Worklist" in a transaction STMS

can you please tell me what is the need of "Workflow Engine" and "Worklist" in a transaction STMS

Workflow is an extra tool/feature which if you configure, will help you to move the appropiate transports to your QAS(Quality ) Sytem from DEV system. Not all the Transport. This way you can make sure that your some dangerous Transports dont get moved.
Like if you configure it, anyone who makes a transport in DEV wont be move the transport to QAS, because it provides a fature called QA Approval, that means only if the Transport is approved by the appropiate person ( that also you can configure) only then it can be moved to QAS, otherwise not.
Reward points if useful!
Cheers!
Bidwan

OIM11g - Approval Workflow - Requester and Approver is same

Similar Messages

Maybe you are looking for