Risk Analysis of derived role is not able to fetch organisational values.

Dear All,
We have run the Permission level analysis in GRC 5.2 for the ROLES at permission level and
found that the tool is not reading the ORGANIZATION VALUES maintained
in the derived roles.
We had explored in the GRC tool & found that the field BUKRS,KOART,etc
are ENABLED in the RULES.While the CC tool is fetching value of other authorzation object.
Please Advice if there is any configuration settings required.
For your reference I am pasting the part of report.
Medium     F_BKPF_KOA : Accounting Document: Authorization for Account Types     ACTVT : Activity     Create or generate
Medium     F_BKPF_KOA : Accounting Document: Authorization for Account Types     KOART : Account Type     $KOART
Medium     F_BKPF_BUK : Accounting Document: Authorization for Company Codes     ACTVT : Activity     Create or generate
Medium     F_BKPF_BUK : Accounting Document: Authorization for Company Codes     BUKRS : Company Code     $BUKRS
Thanks,
Sandeep Bhatia

Hello Sandeep,
Doing Org Lvl Analysis is not so simple in RAR.
Firstly this is only user based.
For using it you will have to schedule one job in configuration which will update Org Values for users in the database table. I don't remember name of this Utility however it will be something Orguser, just search in Configuration tab.
As mentioned by you, org lvl are already enabled and make sure there values is $.......,
Reason being Org Rules will be generated at runtime and then anlysis will be done.
It will be better you take help of SAP on this. As they have document which will be very helpful to you.
Regards,
Surpreet

Similar Messages

Not able to fetch characteristic Value(ATWRT)

Hi expert,
By using CLAF_CLASSIFICATION_OF_OBJECTS Function module I am only able to the characteristic description
from AUSP1 field . But My requirement is to fetch the characteristic value(ATWRT) when we are creating or changing MM01 or MM02.
Could you please tell how can i get characteristic value.
I have found out one BAPI BAPI_CLASS_GET_CLASSIFICATIONS where characteristic value(CHAR_VALUE field )has been maintained but message is showing BAPI_CLASS_GET_CLASSIFICATIONS has been obsolete. So can I use is BAPi into my program?

hello rajib bali ,
see if this helps you
1. if you have MATNR and WERKS select single CUOBJ from MARC table
2. Pass this CUOBJ to VC_I_GET_CONFIGURATION
Hope it helps...
Thanks and regards

Not able to fetch Roles for an user using HWF Identity XPath

Hi,
I am not able to fetch list of roles for a specific user using Human Workflow, Identity XPath. Using Script Activity when I am trying to call the menthod, the method doesn't return Role details. Any help will be appreciated...

That's the rules of how it works. A request has 1 request form per resource for all users on the request. Those fields must all be marked as available in bulk as well to be viewed if you have more than 1 user on the request. If you need to provide different values based on the user, your best option is pre-populate adapters on the process form and use logic to populate the fields. You will not be able to manually provide different values during the request.
-Kevin

Not able to fetch the data by Virtual Cube

Hi Experts,
My requirement is I need to fetch the data from Source System (From Data base table) by using Virtual Cube.
What I have done is I have created Virtual Cube and created corresponding Function Module in Source System.
That Function MOdule is working fine, if Data base table is small in Source System.But If data base table contains huge amount of data (millions of record), I am not able to fetch the data.
Below is the code I have incorporated in my function module.
c_th_mapping TYPE CL_RSDRV_EXTERNAL_IPROV_SRV=>TN_TH_IOBJ_FLD_MAPPING.
DATA:
    l_s_map TYPE CL_RSDRV_EXTERNAL_IPROV_SRV=>TN_S_IOBJ_FLD_MAPPING.
l_s_map-iobjnm = '0PARTNER'.
l_s_map-fldnm = 'PARTNER'.
insert l_s_map into table l_th_mapping.
create object l_r_srv
    exporting
       i_tablnm              = '/SAPSLL/V_BLBP'
      i_th_iobj_fld_mapping = l_th_mapping.
l_r_srv->open_cursor(
    i_t_characteristics = characteristics[]
    i_t_keyfigures      = keyfigures[]
    i_t_selection       = selection[] ).
   l_r_srv->fetch_pack_data(
    importing
      e_t_data = data[] ).
return-type = 'S'.
In the above function Module,Internal table L_TH_MAPPING contains Info Objects from Virtual Cube and corresponding field from Underlying data base table.
The problem where I am facing is, in the method FETCH_PACK_DATA, initially program is trying to fetch all the recordsfrom data base table to internal table.If Data base table so lagre, this logic is not working.
So would you please help me how to handle these kind of issues.

Hi Experts,
My requirement is I need to fetch the data from Source System (From Data base table) by using Virtual Cube.
What I have done is I have created Virtual Cube and created corresponding Function Module in Source System.
That Function MOdule is working fine, if Data base table is small in Source System.But If data base table contains huge amount of data (millions of record), I am not able to fetch the data.
Below is the code I have incorporated in my function module.
c_th_mapping TYPE CL_RSDRV_EXTERNAL_IPROV_SRV=>TN_TH_IOBJ_FLD_MAPPING.
DATA:
    l_s_map TYPE CL_RSDRV_EXTERNAL_IPROV_SRV=>TN_S_IOBJ_FLD_MAPPING.
l_s_map-iobjnm = '0PARTNER'.
l_s_map-fldnm = 'PARTNER'.
insert l_s_map into table l_th_mapping.
create object l_r_srv
    exporting
       i_tablnm              = '/SAPSLL/V_BLBP'
      i_th_iobj_fld_mapping = l_th_mapping.
l_r_srv->open_cursor(
    i_t_characteristics = characteristics[]
    i_t_keyfigures      = keyfigures[]
    i_t_selection       = selection[] ).
   l_r_srv->fetch_pack_data(
    importing
      e_t_data = data[] ).
return-type = 'S'.
In the above function Module,Internal table L_TH_MAPPING contains Info Objects from Virtual Cube and corresponding field from Underlying data base table.
The problem where I am facing is, in the method FETCH_PACK_DATA, initially program is trying to fetch all the recordsfrom data base table to internal table.If Data base table so lagre, this logic is not working.
So would you please help me how to handle these kind of issues.

Not able to change exportfolders value in MBeans for FRConfig.cmd for Hyperion Financial reporting 11.1.2 version.

I am not able to change exportfolders value in MBeans for FRConfig.cmd for Hyperion 11.1.2 Financial reporting .
When I enter the value , it just vanishes. Am I missing something here.?
I need to set export path for PDF generation in Hyperion financial report for batches.

Edit FRConfig.cmd and update
set EPM_ORACLE_INSTANCE=%MIDDLEWARE_HOME%\user_projects\epmsystem1
update epmsystem1 to the correct epm instance name
Cheers
John
http://john-goodwin.blogspot.com/

Not able to get net value in billing document vf01.

Hello Sir,
I am trying to create an invoice for milestone billing plan. I have maintained copy controls at item level as follows
coplying req. 002
vbrk/vbrp        001
pricingtype     D
billing qntty     A
while i save contract and trying to create billing document system is not able to show net value in billing document.
Please guide me to get the net value in the billing document.
looking forward to reply.

Sir, May I know what is the process to confirm milestone billing. as per my knowledge we release billing block and then billing document is processed.
In my case even if i release billing block billing document succesfully created and saved but net value seems zero.
I am not aware of complete proces.
reply would be appreciated.
thanks

Not able to get changed values in the SAVE EVENT in ServHPartnerDet view

Hi Experts,
I am new CRM WEB IC, i have requirement like need to access four IBASE fields from BupaIbaseDetail and need to display those fiedls in ServHPartnerDet view. I am able display the fields and its values in the target view. But when user press change button and changes those four fields and press save button not able get the changed values in to the SAVE EVENT.Anyone please help me in this.
IBHEADER , IBASEADDRESS are the CONTEXT NODE CREATED in target view. I have binded IBHEADER to CuCoIbase custom controller and getting four fields data from IBASEADDRESS. below is the code for CREATE_CONTEXT_NODES.
METHOD create_ibaseaddress.
DATA:
    model        TYPE REF TO if_bsp_model,
    coll_wrapper TYPE REF TO cl_bsp_wd_collection_wrapper,
    entity       TYPE REF TO cl_crm_bol_entity,              "#EC *
    entity_col   TYPE REF TO if_bol_entity_col.             "#EC *
model = owner->create_model(
      class_name     = 'ZL_CRM_IC_SERVHPDET_CN00'
      model_id       = 'IBaseAddress' ).                    "#EC NOTEXT
ibaseaddress ?= model.
CLEAR model.
coll_wrapper =
    ibheader->get_collection_wrapper( ).
TRY.
      entity ?= coll_wrapper->get_current( ).
    CATCH cx_sy_move_cast_error.
ENDTRY.
IF entity IS BOUND.
    TRY.
        entity_col = entity->get_related_entities(
                        iv_relation_name = 'FirstLevelComponent' ).
      CATCH cx_crm_genil_model_error.
    ENDTRY.
    TRY.
        entity ?= entity_col->get_current( ).
      CATCH cx_sy_move_cast_error.
    ENDTRY.
    CLEAR entity_col.
    IF entity IS BOUND.
      TRY.
          entity_col = entity->get_related_entities(
                          iv_relation_name = 'ComponentAddress' ).
          ibaseaddress->set_collection( entity_col ).
        CATCH cx_crm_genil_model_error.
      ENDTRY.
    ENDIF.
ENDIF.
ENDMETHOD.

Code i have written in the CREATE_CONTEXT_NODE method for my custom context nodes( IBHEADER,IBASEADDRESS).
this CREATE_IBHEADER some data related to IBASE header then from this reading the IBASEADDRESS contextnode fields for displaying in the ServHPartnerDet. It is working fine but After changing the four fields values in the ServHPartnerDet view and trying to save, then context is not reading the new values it gives the old values only.
TRY.
      lr_coll_wr = ztyped_context->ibaseaddress->get_collection_wrapper( ).
      IF lr_coll_wr IS BOUND.
        lr_entity ?= lr_coll_wr->get_current( ).
      ENDIF.
    CATCH cx_crm_genil_model_error.
ENDTRY.
CALL METHOD lr_entity->if_bol_bo_property_access~get_property_as_value
    EXPORTING
      iv_attr_name = 'BUILDING'
    IMPORTING
      ev_result    = lw_building.
the building has got result of old value no the new value.
method CREATE_IBHEADER.
    DATA:
      model        TYPE REF TO if_bsp_model,
      coll_wrapper TYPE REF TO cl_bsp_wd_collection_wrapper,
      entity       TYPE REF TO cl_crm_bol_entity,    "#EC *
      entity_col   TYPE REF TO if_bol_entity_col.    "#EC *
    model = owner->create_model(
        class_name     = 'ZL_CRM_IC_SERVHPDET_CN01'
        model_id       = 'IBHEADER' ). "#EC NOTEXT
    IBHEADER ?= model.
    CLEAR model.
bind to custom controller
DATA:
      cuco TYPE REF TO cl_crm_ic_cucoibase_impl,
      cnode TYPE REF TO cl_bsp_wd_context_node.
cuco ?= owner->get_custom_controller(
        'CuCoIbase' ).                                      "#EC NOTEXT
cnode ?=
    cuco->typed_context->ibaseheader.
coll_wrapper = cnode->get_collection_wrapper( ).
ibheader->set_collection_wrapper( coll_wrapper ).
endmethod.

Not able to edit the value options in LKM

Hi
I have recently upgraded to ODI 11g .
In that we are not able to edit the value options in LKM.
(i.e.. editor window is not appearing, not able to edit the text.
Please let me know the solution .
Thanks

We were using JDK1.6.0_29 and it was not supporting ODI 11.1.1.5, so we have uninstalled the JDK1.6.0_29 and reinstall the JDK1.6.0_11.This solves our issue.
Thanks a lot!!

Sales Order form error "Not able to retrieve Display values for Service"

Hi,
Few of our orders flash the below error message when the order is queried
"Not able to retrieve Display values for Service"
Below are the points I observed
1.The orders I am referring to are imported order via EDI interface.
2.The service reference type code has value of ORDER, however no other service related fields (like service reference line id) have any values.
3. The item is not a service item (service tab in Item setup is disabled)
4. Same item when imported with value of "Customer Ordered" in "service reference type code" field, does not throw an error.
5. If I update "service reference type code" with value null or change it to CUSTOMER_PRODUCT, the error disappears.
Can someone explain the significance of this column value and what could have been causing this error message?
May be there are some dependent fields/setups which must have a value when service reference type code =ORDER.
Thanks in advance,
JC
Edited by: user10174990 on Oct 25, 2012 10:58 AM

Hi,
Maintain the dafault values using Tcode OISF with respective to Planning Plant you have to maintain the following values like Order Type, Main Work Center, Maint. Plant,Group,Group Counter,Business Area & Task List type.
or
Apply these OSS note 150732 / 195993.
regards,
Venkatesan Anandan

Not Able to Post Takeover Values using AS91

Hi Guys,
I am not able to post Takeover Values as of 12/31/2007. I gave the last closed fiscal year as 2007 and the system automatically took the takeover date as 12/31/2007. When I try to enter the dtat in Takeover values, it is greyed out. Can anybody explain why it is not allowing me to change values?
Thanks and Regards
Madhu Vutukuri

Hi,
Try this option -
1. Keep the cursor focussed on the field that you want to change
2. Goto Menu Edit >> Change field contents
A pop up will appear asking to change the value. Give the required value to be changed and save.
Regards,
Sridevi

JAXB: not able to get Attribute value

Hi there,
I am using oracle JAXB for XML processing. I am not able to get the value of an attribute. I ran the same code in SUN JWSDP 1.3, which worked correctly. I am not able to get the "foo" attribute for <Table> element using oracle JAXB.
The XML schema follows:
<?xml version='1.0' encoding='UTF-8' ?>
<schema targetNamespace="http://www.oracle.com/iAS/aggregator"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:jaxb="http://java.sun.com/xml/ns/jaxb"
xmlns:ag="http://www.oracle.com/iAS/aggregator"
xmlns="http://www.w3.org/2001/XMLSchema"
jaxb:version="1.0"
elementFormDefault="qualified">
<annotation>
<appinfo>
<jaxb:globalBindings fixedAttributeAsConstantProperty="true"
/>
<jaxb:schemaBindings>
<jaxb:package name="oracle.dms.aggregator.adml"/>
</jaxb:schemaBindings>
</appinfo>
</annotation>
<complexType name="Adml_T">
<sequence>
<element name="Table" type="ag:Table_T" minOccurs="0" maxOccurs="unbounded"/>
</sequence>
<attribute name="Version" type="token" fixed="10.1.3"/>
</complexType> 
<complexType name="Table_T">
<attribute name="foo" type="Name"/>
</complexType> 
<element name="Adml" type="ag:Adml_T"/>
</schema>
The XML file is:
<?xml version='1.0' encoding='UTF-8' ?>
<Adml xmlns="http://www.oracle.com/iAS/aggregator">
<Table foo="foosailor">
</Table>
</Adml>
The java file is:
import javax.xml.bind.JAXBContext;
import javax.xml.bind.Unmarshaller;
import java.io.File;
import java.util.List;
import java.util.Iterator;
import oracle.dms.aggregator.adml.Adml;
import oracle.dms.aggregator.adml.TableT;
public class JaxbQA
public static void main (String[] args)
throws Exception
Adml adml;
String fileName = "aggregator.xml";
String instancePath = "oracle.dms.aggregator.adml";
JAXBContext jc = JAXBContext.newInstance(instancePath);
Unmarshaller u = jc.createUnmarshaller();
u.setValidating(true);
Object obj = u.unmarshal(new File(fileName));
adml = (Adml)obj;
List tables = adml.getTable();
for (Iterator iter = tables.iterator();
iter.hasNext();)
TableT admlTable = (TableT)iter.next();
String name = admlTable.getFoo();
System.err.println("table foo=" + name);
c:\oracle\jdk\bin\java.exe -classpath .;c:\oracle\xdk\lib\xmlparserv2.jar;c:\oracle\xdk\lib\xml.jar JaxbQA
table foo=null

I tested in both 10.1.0.2.0 and 10.1.0.3, which both showed the same problem. A bug #3621204 has been filed.

Not able to fetch serial number in MFBF

Hello,
We are doing production booking through MFBF transaction and the serial number has to be enterred for each backflush.
I want to check the serial number for validation, hence i am using user exit "ZXMRMU02" with customised code.
I need to fetch plant and posting date from input screen and compare the posting month with serial number letter(month) if both are matching then only I should be able to do MFBF otherwise system should through an errror message that " posting is not in current month.
The problem here is I am unable to fetch serial number from input screen (Program Name SAPLIPW1 & Screen Number 0200). however I am able to get Material , Posting dates, Plant.
Please suggest how can we fetch serial number from input screen.
when i go with field exit, I could fetch serial number but not able to fetch plant and posting dates which are in first screen.
Thanks,
Kumar

Dear Kumar,
As per Std SAP behaviour, You can't use Serial Number Management for Goods Movement with Backflushing.When you are setting Backflush indicator as 1 always backflush in Material master system will not allow you to maintain serial number profile in work scheduling view.
Also go thr. SAP Note No. 317455 for more clarification about using serial numbers with backflushing.
Hope this helps.
Regards,
Tejas
Edited by: Tejas Pujara on Apr 10, 2009 7:12 AM

Not able to fetch some network switches data in LMS 4.0

Hi Experts,
we have LMS 4.0 and we found one problem that some network switches data are not able to fetch with LMS.
what could be the reason to happen this type of problem?
please assist with best solution to resolve this issue..
Suhas B.

Hi,
I am facing below problem
Config Archival Status
No. of Devices
Successful
48
Failed
1
Partially Successful
0
Total
1345
Configuration Never Collected
1338
So I look up a device in the Device Center, here is its Reachability Status:
SNMPv1 Read
Success
SNMPv2c Read
Success
SNMPv1 Write
Failed
SNMPv2c Write
Failed

PCA query not able to fetch data

HI All, I have installed PCA Business content cube and all the queries available in the Business content relavant to the PCA cube. I have loaded one quarter worth of data. The Profit center - Balance sheet and Profit center - Income statement queries are not able to fetch any data. I am able to execute te query but the report has no data in it.
Can any one suggest me if there is any thingthat I can do or any ways to dedbug this query.
Has any one encountered similar poblem

Are you executing this query "wide open" or you using Characteristic Restrictions and/or Variables that could be filtering out your data? Did you try executing the query using tcode RSRT via 'Execute + Debug'? That may help. Also, take a look at the source InfoProvider in LISTCUBE using the same criteria as the query to see if any data retrieve via that method.

GRC AC 10.0 Mass risk analysis vs. Role level analysis

Hello GRC experts,
I urgently need your advice on the issue with deactivated permission objects which are identified as risks in the mass role analysis.
For example, in one role we have deactivated the permission object: S_ARCHIVE, and there are No activities maintained.
But in the mass role risk analysis and in the CUP request this object S_ARCHIVE with the ACTVT 01 is displayed as risk. As you can see in the screenshot, there are no activites maintained at all. We have created the MSMP workflow where all CUP requests with risks should go the the Security Stage. Now we have the situation that even though our roles are clean, they are forwared to the Security stage. It is a huge problem, because our security stage has no even more to to, than before using GRC! Because the dectivated objects are identified as risks.
Please advise me, how to solve the problem. Did I missed some config parameters or is it a well known problem?
We are on SP14, AC 10.0.
At the single role level there are no risks displayed.
Thanks in advance,
regards
Sabrina

Hi Sabrina,
check note
http://service.sap.com/sap/support/notes/2036645
Please let me know if it works.
Regards,
Alessandro

Risk Analysis of derived role is not able to fetch organisational values.

Similar Messages

Maybe you are looking for