Risks associated with database refresh.

Hi experts,
I need to clarify a doubt .I have a cloned SAP BW system (from another system i.e SAn to SAN copy)and then after few months after the first clone I need to refresh the database(Oracle 10 G).The reason being I will have some changes in data at the source system from where it was copied earlier.I shall be applying the application changes by tracking the transport requests(from the original system).
I need to clarify if we don't refresh the whole system again by SAN to SAN copy and then do a database refresh will there be any problem .Is there any risk associated with it.
Will the requests be available to me on the monitor with the new data or there will be some issues.
A quick response shall be very useful.
Shailja.

Hello,
Orders for Production , Maintenance, Deliveries, Transfer Order etc. are created according to the factory calendar .
You must be sure that all operations can be carried out in the seven days of the week (e.g. deliveries), because SAP can be scheduling aTransfer Order for a Sunday and somebody can be calling you for fixing the issue!
The normal case is that some operations can take place in the weekend (Production, Maintenance) but other Logistic Operations ( Deliveries) are done only from Mo to Fr. If this is your case, I would create an additional seven days calendar and assign it to the work centers in Production and maintenance, but the Plant would remain linked to the old five days calendar
Hope this can solve your issue.
Dario

Similar Messages

Risks associated with digital signatures

We are looking to develop a process to use digital signatures on PDF documents, send them via email to a line manager, who adds his digital signature as a "stamp of approval" who then emails them to a specific department for processing. Are there any risks associated with using digital signatures in adobe, and general best practices for their usage, or best practices to mitigate the risks associated with them.

If you procure and use commercially-issued credentials (not self-signed), digital signatures are much safer than any other signatures.
1. They tell you whether the signed document has been altered. The document's author may specify which alterations (like form fill or signing) are acceptable. A digital signature tells you what kind of alterations in the document occurred after signing. In Acrobat you can always get the signed version before any alterations occurred.
2. The digital signature tells you who the signer is (not only from the appearance but from the signing credential which is present in the signatures).
3. The signing credential of a digital signature can be verified on-line that it has not been revoked and is still good. Acrobat has a feature to embed revocation information in the document, so that you can get verification that the signing credential was good at the signing time even if you do not have Internet access.
4. In Acrobat the last signer can lock the signature, so that no other modifications of the document are allowed.
So, there are many advantages to using digital signatures. The only risk that you have is that a signing credential can be stolen if someone has an access to the computer or token where the credential is stored AND gets hold of the credential's password. Each credential is password protected, so you guard this password as you guard any other password. If you suspect that someone got hold of your credential and password you can always ask the credential's issuer to revoke this credential and to issue you a new one. In this case the only time span when someone may use your credential is the time lag between the time the credential was stolen and the time the issuer revoked it.

CUP 5.3 is coming back with all risks associated with a user

HI, i know this has probably come up in the past but i'm not finding it anywhere in the forum. we are having a problem with CUP 5.3 provisioning as it's bringing up all risks associated with a user rather than the new ones for the role being requested. this is especially aggravating for roles that do not have a conflict. i'm thinking this might be a very simple answer but i'm not finding it anywhere.
thanks
ryan

Ryan,
Excuse me for the link. the problem was because a 'P' at the end
This is the correct one: Did CUP risk analysis change with SP7?
And, as per my knodelge, There's no way to show only the "new risks" in CUP risk analysis.
If you want to use GRC succesfully, first you have to "get clean". Check here (Note 1593056 - Best Practices for Remediation of
Segregation of Duties risk):
The Risk Analysis and Remediation (RAR) application is part of the "Get Clean" methodology which is at the core of GRC Access Control. The first step of any Access Control project should be to "Get Clean" of any segregation of duties violations through the use of RAR. Once clean, Compliant User Provisioning, Enterprise Role Management and SuperUser Privilege Management are tools used to "Stay Clean".
If you've already identified the risk, mitigate them. This is the best practise. I undertand your problem, but until you finish the "clean procedure" you should use an alternative workflow for CUP.
Cheers,
Diego.

Risks associated with changing to new Plant Calendar assigned in OX10

Our site is considering changing the factor calendar from 5 days a week to 7 days a week in OX10 for the plant. We curently use all supply chain modules and otc. Can anyone tell me the warnings/risks associated with doing this?
Thank you.

Hello,
Orders for Production , Maintenance, Deliveries, Transfer Order etc. are created according to the factory calendar .
You must be sure that all operations can be carried out in the seven days of the week (e.g. deliveries), because SAP can be scheduling aTransfer Order for a Sunday and somebody can be calling you for fixing the issue!
The normal case is that some operations can take place in the weekend (Production, Maintenance) but other Logistic Operations ( Deliveries) are done only from Mo to Fr. If this is your case, I would create an additional seven days calendar and assign it to the work centers in Production and maintenance, but the Plant would remain linked to the old five days calendar
Hope this can solve your issue.
Dario

Risk associated with AUTH_SWITCH_OBJECTS

As discussed in previous threads the following was indicated wrt auth/object_disabling_active:
The auth/object_disabling_active parameter is a prerequisite for globally deactivating checks on individual authorisation objects.
If the paramter is set to "Y", the disabling of checking of authorisation objects globally through transaction u201CAUTH_SWITCH_OBJECTSu201D is not prevented.
My question:
What is the risk associated, if the transaction AUTH_SWITCH_OBJECTS is not contained within any role or assigned to any user including the authorisations team? Due to this transaction not being assigned or even in existence within our productive environment, no auth object has been disabled from auth relevancy.
Thank you!

Even auth_switch_objects on it's own is not enough.
But if there is no intention to turn objects off globally and none are turned off then it cannot harm much to turn it off, no?
Some folks got a bit nervous when transaction SU24_CHECK flew up, but that has been deactivated and I am not aware of any other dark horses which globally disable checks client specifically (except of course the usual table editing tools....).
Cheers,
Julius

How to Synchronize an association with Database Changes

Hi,
I was wondering if someone has any ideas about how to manage FK changes with the BC associations. In general my questions center around tooling support for re-factoring associations and syncing them with db changes. I have read the following but all these discuss entity attribute related changes which are simple to manage.
http://download.oracle.com/docs/cd/E14571_01/web.1111/b31974/bcentities.htm#ADFFD169
http://jdeveloperfaq.blogspot.com/2010/02/faq-15-how-to-synchronize-adf-entity.html
Re: How to manage ADF BC components in the case of datamodel changes
I have 4 use cases.
Case 1: When an association is added to the db, how does one bring it to the BC layer.
Case 2: Deletion of an association from db is easy to manage because once it exists in bc layer, it can be treated as a valid one at the model later regardless of its existence on the db.
Case 3: When an association is modeled in BC layer and a corresponding FK does not exist in DB. How does one turn that association into a physical FK in the db if one wants to install a FK. What is the naming convention for installing such a db FK constraint that can sync easily with tooling. I understand that it is not necessary to have a physical FK as the BC layer will take care of enforcing the relationship. But my requirement is that first the modeling at bc layer can go on and then the constraint can be implemented at a later date.
Case 4: When a FK is renamed in db how does one reconcile that with a previously created association at the model layer based on an old fk with a different name.
Thanks,

The synchronize with DB will pick up new FK defined in the DB and will suggest to add them to your ADF BC layer.
You can also generate DB objects from your ADF BC layer.
Drag your ADF BC into an ADF BC diagram, select all of them, right click and select Generate Business Object->Database Objects
This will create the objects in the DB - note though that this will override your DB objects.

Are there health risks associated with WiFi?

Hi folks, i've become tired of my ethernet cable unplugging from my mac. So i'm thinking of going wireless.
Now here is my question...is WiFi safe? I'm going to bestbuy tonight to check out their wireless routers, (Lynksis WRT54GS-CA), but i'm wondering if these things are safe. It will be located in my office which is the next room to my bedroom.
Any info you guys have would be appreciated. It seems I can't find a consistent answer regarding this question.
Thanks

Not to sound cynical, but unless you live out in the middle of nowhere, you're being bombarded with RF signals on a constant basis from cell phone microwave towers, and lower energy radio and TV signals, and natural background radiation. Do any of your neighbors have wifi? You may be exposed to the 2Ghz+ RF signals already. At any rate, the power output is likely on the order of milliwatts - pretty negligable.
Physicists corrrect me if I'm wrong, but ionizing radiation isn't "additive" - in other words, an energy wave needs to have a minimum amount of energy to displace an electron form a lower energy state. The energy from multiple waves that don't have this minimum don't "add" their energy together, so it's an all or nothing event.
I wouldn't sweat it - I'd be more concerned about securing your wireless network from intruders and eavesdroppers.

Security risks associated with backups

If an admin has full privileges to a backup infrastructure such as Veeam servers, then technically a VM could be backed up to a place it shouldn't be, or a restore job could be done to a place where it shouldn't be, so that virtual machines could be compromised. As a reference point, for the Vmware infrstructure my target security level is risk profile 2. What do I need to do and how far do I need to go to secure backup infrastructure?

Hello,
Your backup service account used by things like Veeam need to be restricted. Please follow your backup tools, security considerations. If they say to grant Admin access, do not use that product, it is incorrect. :} Here is how I see these tools being used:
User logs into Backup server, backup server auth is in use. Backup server talks to vCenter (vCenter auth is in use, yes this is a service account). Restrict per backup documentation and then restrict further as necessary. Limit to where a restore could take place for example. I would limit to a staging area but that is just me using permission on datastores.
You need to secure your backup infrastructure as it if was your production environment as it contains your entire environment. Encryption, user auth, and service level auth. Use a separate user for each service account (including backup), and monitor what that user does, etc.
Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009, 2010, 2011,2012,2013,2014
Author of the books 'VMWare ESX and ESXi in the Enterprise: Planning Deployment Virtualization Servers', Copyright 2011 Pearson Education. 'VMware vSphere and Virtual Infrastructure Security: Securing the Virtual Environment', Copyright 2009 Pearson Education.
Virtualization and Cloud Security Analyst: The Virtualization Practice, LLC -- vSphere Upgrade Saga -- Virtualization Security Round Table Podcast

Refresh the object associated with a Row in a Data Control?

I am using EclipseLink & have an issue with multiple updates of the same Row. During an update, a new instance of the entity is returned by the update method. The instance bound to the Row is not updated with this new version and subsequent updates fail with an optimistic locking exception since the entityVersion hasn't been updated.
Question: Is it possible to refresh the instance associated with a data control Row? I can remove rows, create rows, but it is not apparent to me how to update a row. I am trying to avoid doing a full retrieve on the bound iterator.

Hi!
The issue here is, by my opinion, a gap between ADFm and EJB 3.0 in use-cases with large data sets. If you search this forum, you may find related thread by Pedja about problem of feasible "scrollable" af:table with large number of entities in EJB finder result list. Unfortunately, the ADFm "paged" fetching is in mismatch with EJB support for "paged" (or scrollable) results lists. The all results of EJB finder method are retrieved from data source, stored in memory (thus breaking the heap) and transferred to ADF datacontrol. Then, and only then, ADFm paged fetching and caching mechanisms are employed – but they are just cosmetics as the main data set is permanently stored in memory as List<?>. The workaround is, as Pedja discovered, to write completely proprietary TableCollectionModel which completely evades ADFm and is implemented by set of EJB Session methods for paged acces to datasource through TopLink and native database queries (enabling retrieval of particular range of rows instead a complete result set). Of course, this is very complex coding experience and I find it a not acceptable for efficient development of modern applications on ADF + EJB stack, especially as it brakes a technology independence promoted by EJB and EclipseLink and other standards-based technologies (as you have to use database-specific native query implementation for paged /scrollable access!).
What I want to say is that I have feeling that ADF support for EJB is not complete in full extend and that ADFm is still much better suited for BCs then for EJBs. I hope that this will be solved in future as this issue may pose a significant issue on application development in enterprise-level area where it is supposed that we are dealing with BROWSING also a large data sets.
Yes, I emphasize a BROWSING as I strongly oppose a dogmatic approach that SEARCHING is a solution for every use-case. From theory of information, the system SHOULD NOT limit the user in accessing ALL information (based on access rights, of course). So the idea that SEARCH forms should be used to bridge a architectural gap between a ADFm and EJB is not acceptable, as the search MAY limit the user in acquiring the information he (or she) is not able to describe in adequate manner based on search criteria offered by the developer. So, the developer may be responsible for misinformation of user, by limiting his access to information, jus for technology limitations of ADFm which forces a development of purely SEARCH-based functionalities.
I hope that development team would appreciate and consider this remarks, and invest effort in closing (not bridging!) the gap between ADFm and EJB.
Regards,
PaKo

Lync 2013 Error - Certificate could not be published in the database associated with User Services Cluster

Hi Lync gurus,
I have a weird issue:
Just installed a Lync Standard 2013.
Everything works except I keep getting this error in Log: every 30 minute or so.
First an Error: Event 47067
A server did not respond to HTTP request
Server lyncserver.domain.local did not respond to HTTP request PublishCertRequest targeted at
https://lyncserver.domain.local:444/LiveServer/UserPinService.
Cause: Server might be down or the network path between servers might not be properly configured.
Resolution:
Please ensure that the server can be connected on the target port using telnet and then re-try.
Then I get a Warning: Event 47068
GetAndPublish web service failed.
Certificate could not be published in the database associated with User Services Cluster [lyncserver.domain.local ]. Request Details - Entity: [[email protected]], Device Id: [6BB30A3E-2923-553A-8E5F-0B2FB2CEA330], Authenticated User: [sip:[email protected]].
Additional Context: [Publish_Failure: OtherFailure;HttpNoResponse:"lyncserver.domain.local "]
Cause: This could be due to network connectivity issues with the remote server, or because the database is down.
Resolution:
Please ensure that the user services is reachable and the database is up and running.
Thanks for any help

Please check you can telnet port 443 and port 444 on Lync Front End Serve from client.
Try to regenerate a new certificate for Lync Front End Server.
Check all the services on Lync Front End Server are started.
Check the option “Enable all purposes for this certificate” is checked for the trusted root CA certificate.
For the detailed steps:
Run MMC--Add\Remove Snap-ins--certificates--Local Computer--Trusted Root Certificate Authorities--Certificates, find the Root CA certificate you installed--Properties--General, check the "Enable all purposes for this certificate".
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Synchronize with Database on Entity Object re-creates Association

hi
Please consider this example application created using JDeveloper 11.1.1.4.0
at http://www.consideringred.com/files/oracle/2011/MovedAssociationApp-v0.01.zip
It has an EmpManagerFkAssoc Association which has been moved from the "movedassociationapp.model.entities" package to the "movedassociationapp.model.assoc" package (using the "Refactor - Move..." context-menu option).
When selecting "Synchronize with Database..." in the context-menu of the Employees Entity Object, and clicking the "Synchronize All" button, this results in JDeveloper re-creating the EmpManagerFkAssoc Association,
as shown in the screencast at http://screencast.com/t/l7jaoU2C
- (q1) Is this Association re-creation intended behaviour (if so, please explain, if not, which bug number)?
many thanks
Jan Vervecken

Ferez,
have you seen this thread in the ADF forum, Cannot 'Synchronize with database' my entity objects ?
It mentions the existence of a bug that may cause this (though no reference number), and one user posted a workaround they were using.

This mailbox database is associated with one or more active PublicFolderMove requests

I'm trying to clean up an Exchange 2013 installation (CU2) which is the result of a migrated Exchange 2007 done last summer.
This installation contained several databases which we are trying to slim down to just one, but I've run into some trouble deleting one of these databases. I've made sure that there's nothing left in the database but the Monitoring mailboxes, but when I
try to delete the database I get the following error:
This mailbox database is associated with one or more active PublicFolderMove requests. To get a list of all PublicFolderMove requests associated with this database, run Get-PublicFolderMoveRequest | ?{ $_.RequestQueue -eq "Public Folder Database" }. To remove a PublicFolderMove request, run Remove-PublicFolderMoveRequest <Recipient ID\Request Name>.
If I look into that one further I can see the following:
[PS] C:\Windows\system32>Get-PublicFolderMoveRequest | fl
RunspaceId : d07e91a4-aadb-4c2a-8e01-68127464e8e0
SourceMailbox : contoso.local/Users/Contoso
TargetMailbox :
Name : PublicFolderMove
RequestGuid : 65c5d048-0e56-4c01-88ce-8594699826ee
RequestQueue : Public Folder Database
Flags : IntraOrg, Pull
BatchName :
Status : InProgress
Protect : False
Suspend : False
Direction : Pull
RequestStyle : IntraOrg
OrganizationId :
WhenChanged : 2013-06-25 16:03:10
WhenCreated : 2013-06-25 16:03:07
WhenChangedUTC : 2013-06-25 14:03:10
WhenCreatedUTC : 2013-06-25 14:03:07
Identity : \PublicFolderMove
IsValid : True
ObjectState : New
So, I've found out that I can run "Remove-PublicFolderMoveRequest <Recipient ID\Request Name>" to remove that request, but I find it a little disturbing that we've had that job for 9 months in the background, and I'm unsure of what will happen
if I actually delete that job.
The Target Mailbox is also empty. Shouldn't it contain something?
We want to keep the Public Folder Database in the current database and it should not have anything to do with the database I'm trying to delete (it does not reside there right now).
Any thoughts on how to proceed, and what the reason for this might be? Could it be something that was done while migrating from E2k7 to E2k13 and never was cleaned up correctly?
Any thoughts will be greatly appreciated!

Yeah, thanks! But, the problem is that I can't delete it because of the error message in the first post ;) Namely:
This mailbox database is associated with one or more active PublicFolderMove requests. To get a list of all PublicFolderMove requests associated with this database, run Get-PublicFolderMoveRequest | ?{ $_.RequestQueue -eq "Public Folder Database" }. To remove a PublicFolderMove request, run Remove-PublicFolderMoveRequest <Recipient ID\Request Name>.

Risks/Consequences Associated with changing short text in BS22

Hi,
I need to change the short text of some status of the TJ02T table (i.e. I need to change the short description of status I0098 from CRT to CREA).
Someone can tell me if there are risks or contraindications associated with this change in BS22?
Thanks
Elisa

Elisa
In my ECC6 system I0098 is already CRTE...
My personal opinion is that this is a user-training issue and BS22 should stay standard..
There is a user-exit which manipulates the text on the status in an object (order, notif, etc) without changing BS22.
PeteA

Exchange 2013: This mailbox database is associated with one or more active mailboximport / Cannot uninstall exchange

We have a corrupted installation of Exchange 2013 due to installating CU6
New Exchange server is already installed and mailboxes are migrated over, I am now in the process to uninstall the old exchange 2013 so we can decomission it but I get this error when I try to run uninstall
"This mailbox database is associated with one or more active mailbox import,To get a list of all Mailboximport request associated with this database, run Get MailboxImportRequest | ?{ $_.RequestQueue -eq "<Database ID>"}....
But when i run this command I get an error of" The Get-MailboxImportRequest is not recognized as a cmdlet...
Any advise is appreciated
Thanks.

Hi ,
From the error message i came to know few things i have mentioned mentioned below .
If you want to remove the problematic exchange server , you need to remove the existing mailbox import requests.
For that you should need to have the required permission for the user account from which you are trying to execute the command
Just check your user account is having the Mailbox Import Export role permissions .
If you have the required permissions then go ahead and execute the commands
Get-MailboxImportRequest | ft -au ( this is to see how many no of the mailbox import request are available
Remove-MailboxImportRequest
( this command is to remove the entire mailbox import move request)
Once you have done with that , then you start proceeding uninstalling the exchange server .
Regards
S.Nithyanandham
Thanks S.Nithyanandham

Associating Workflow Schema with Database

Hi,
During installation of Workflow, the workflow schema has been associated with a database.
Now i want to use workflow with another database.
How to do the same?
1) Whether i can create a new workflow schema for the second database? If so , how to create a new one.
2) If the existing workflow schema can be shared with the second database, how to do it? Will it have any impacts
in the first database?
Request you to revert ASAP.
Thanks in Advance.
Regards,
Venkatroyal

Hi,
You need to install Workflow in the database that you want it to work in. Ask your DBA to install Workflow server in the database that you need it to be in.
Theoretically, you could access the existing Workflow system from a different database, but you would have problems with attempting to issue savepoints and maintaining transactional integrity between the two systems.
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Risks associated with database refresh.

Similar Messages

Maybe you are looking for