Role not fully removed

Hi,
We have a role that was assigned to a user temporarily so that he can perform certain functions. When it was removed, we noticed that the user can still access those transactions that were previously granted even after several relogins over a period of 1 hour.
In other words, he can still access those transactions after relogging in an hour later !
The ID was removed from the role via PFCG, and user comparison done.  From PFCG, that ID is not there anymore.  From SU01, the role/profile is also not there.
We can use PFUD to clear it but would like to know what could have caused this.
Has anyone ever encountered this before?  How was it resolved (besides using PFUD)?
Thanks in advance !

Hi Sisab,
did you set auth/new_buffering to 4 already (standard in actual release)?
PFUD/usercomparison works without problems normally. Pls check userbuffer content after removal or the role assignement and user comparison.
The expirience shows, that such cases may be caused by problems with buffer synchronization between different aplication servers. So first make sure, that the entries are removed on the database itself (usrbf2), then check the content on your other servers (if you have such...).
The FM susr_user_buffer_after_change should resolve the issue immediately (option 'profile' should be 4 when executing. There have been some corrections regarding buffering of user tables, pls make sure, that you have all of them implemented already.
b.rgds, Bernhard

Similar Messages

  • Roles not being removed from CC5.2

    After we run a full sync for users and roles we are still finding roles in CC 5.2 that have been removed/deleted from the SAP backend systems.

    HI,
    Try with a new job and for being on the safer side select all of the choices for full Sync - i.e profile, role and users. Also, select the relevant options for your system for the Batch Risk Analysis and the Management Reports too.
    Sometimes it is a common problem that Management reports show data for a role to be in Risk, which does not even exist because we did not check this option of Management reports while running the BG job.
    This might take a bit of longer time but will be accurate.
    Regards,
    Hersh.

  • Package folder not fully removed from DP

    Wanna ask, i have removed the package from my DP by selecting removed button from the package properties. But when i did a manual search on my DP, i found out that that the package folder is still present in the DP as shown below. But from the console, the
    content status already shows 0 targetted.
    Question is, how do i make sure that these folder are fully being deleted from my DP HD when i select removed button from the package properties? Do i need to manually delete these folders then? Or is my step in removing the package from DP is wrong? Need
    you guys advice.

    Yes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
    Did waiting longer solve this problem?
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Creative Zen Vision M not fully charging

    (Creative Zen Vision M not fully charging( Hi, I recently bought a refurbished ZVM that doesnt seem to charging properly. When I first got it, it hadnt been charged in quite some time so the battery was overdead. My PC couldnt detect it when I connected it via usb and it didnt even start charging at all. I then connected it to a wall charger and it finally started charging. The strange thing is it never fully charges. I've charged it twice now, both times for at least about 2 hours, and the battery doesnt go more than 50%. And when I connect it to my PC to transfer songs, instead of resuming its charge, my battery runs out. Is this a case of a faulty battery? I li've in Australia and I bought it from the USA. I would prefer not to go through the trouble of returning it if I could. Anything I should do like leaving it to charge for an even longer time? Also one more thing I should mention. When I remove the wall charger and plug it back in, it takes the ZVM sometime to detect it, about 30 minutes or so, and start charging again. Any help or suggestions would be greatly appreciated.

    I have the exact same problem. I just mailed mine in for repair today.

  • My mac book pro will not fully boot up. I have the grey background with the apple sign and the timer going round...but 20 minutes later still no desktop

    My mac book pro will not fully boot up. I have the grey background with the apple sign and the timer going round...but 20 minutes later still no desktop

    You could try doing a hard shut down (holding the power button or yanking the battery) and then doing a safe boot by holding the shift key at startup:
    http://support.apple.com/kb/HT1455
    Also, not sure if this applies in your case, but I've had that happen when there's a USB drive inserted either in the computer or a connected external keyboard.  I did a hard shut down, removed the drive and it went through a normal start up. 

  • Lenovo G50 BIOS in this system is not fully ACPI compliant

    Hello everybody !
    I kinda have a problem as the title states.My neighbour has a Lenovo G50 she bought and came with windows 8.1 x64 ( which she doesn't like at all and in my opinion win7 is far more superior ). The thing is I wanted to install her the Windows 7 Ultimate but everytime the " loading files " ends right after it boots from the dvd I get a bsod with the message " The BIOS in this system is not fully ACPI compliant Stop 0x000000A5 "
    I tried all kind of different settings through the bios, changed from UEFI boot to Legacy / disabled secure boot / fast boot / I set the ACHI to compatible / but the end result is almost the same ( two times with different settings my screen froze with a red line over the top after loading the files )
    My question is what is the problem and is there a fix for it? (of course it is,but I don't know it )
     Thanks !
    Moderator comment: Remark(s) contravening the Community Rules removed - implied profanity. Keep it clean.

    You can edit/enter bios via Fn+F2 buttons

  • Web pages are not fully functional on iPad

    Until recently I was enjoying my experience with my iPad 2. I went to Netflix to write a review for a film and was unable to do so.  For whatever reason, I am unable to select the desired stars for my rating.  While obviously this is not a deal breaker, it is frustrating knowing that some web sites are not fully functional with my iPad. I hope this changes in the future. Cheers.

    Here we are over 2 years after the original post and I am having this problem too. Having it in both Safari and Chrome. When I first got my Ipad 3 I was able to rate movies (select star from red to yellow) on the netflix.com website. Somewhere along the line that quit working. Everything else on the site works even radio buttons on page where you select types of movies you watch and how much. At first I thought something on the website changed but then I got a new Ipad 3 at work, low and behold, I was able to rate movies by selecting stars. So what's the difference? Tried deleting history, cookies etc. Removing apps and rebooting. Long story short, I reset my Ipad deleteing all user info and settings and setting up as a new Ipad and it still doesn't work. I can't find any settings on the website itself that affect this. Anyone?

  • Users stills appear to have transactions assigned even though roles have been removed.

    Hi,
    I'm currently looking at a number of users with access to sensitive transactions (e.g. SCC4).
    When looking at a combination of the AGR_ROLES and AGR_TCODES tables I can see there is currently only one active role and one active user assigned this access which would fall in line with what was to be expected based on the population I am looking at (we're not concentrating on auth object level for now).
    However when I go through SUIM and filter on users by complex criteria and enter transaction code SCC4, about 20-30 users pop up (this is how many people used to be assigned access to SCC4).
    When access was removed for these 20-30 users, it was done at 'role level' so my question is, even if roles have been removed, when looking through SUIM would a user still appear to have transactions associated with that role assigned - if so, why does this happen? I assumed once a role is removed it would removed the underlying transactions etc with it?
    My assumption at the moment is that even though SUIM is showing users still have access to SCC4 they can't actually use it as the role it was associated with has been removed.
    Any help/clarity on this would be greatly appreciated.

    Hi Johnny,
    Please do perform the User comparison.
    Goto PFCG  -> Role Name -> user comparision
    then check in SUIM still user is having that Tcode or not .
    for detail
    Go to SUIM
    Roles by complex selection criteria -> put Tcode there
    it will give you Roles name having that tcode . and then you go to that Role and you will get list of Users in PFCG (User assignment Tab) .
    same goes with User
    SUIM - Users  by complex selection criteria - > put tcode -> Profiles associated with - > roles assosiated with it .
    But i suggest after you make any changes to Role / Profile you please do user comparision .
    Regards
    Dishant Pathak

  • Page not fully loading unless refreshed

    I am experiencing a bit of difficulty with one of my websites and I am hoping that some fresh eyes may help. What is happening is, the index page is not fully loading on arrival. It only loads if the page is refreshed. Can someone take a look and see if you can see the problem?
    Any help is appreciated

    Have a look where?
    Can you post a link to your website?
    * "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
    * "Remove the Cookies" from sites that cause problems: Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    * Don't make any changes on the Safe mode start window.
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]
    Other things that need attention:<br>
    Your above posted system details show outdated plugin(s) with known security and stability risks that you should update.
    *Shockwave Flash 10.0 r22
    Update the [[Managing the Flash plugin|Flash]] plugin to the latest version.
    *http://www.adobe.com/software/flash/about/

  • Windows 8 Adobe Reader will not fully open a pdf compiled with several pdf's into one - why?

    Windows 8 Adobe Reader will not fully open a pdf compiled with several pdf's into one - why?

    Hi Michael,
    “AdbeRdr11003_en_US.exe” is the download installed on our CEO’s new Windows 8 laptop.  It is a Dell XPS Re: Windows 8 Adobe Reader will not fully open a pdf compiled with several pdf's into one - why? Dell XPS 13" .  It has a full install Windows 8 Professional for its’ Operating System.
    I’ll attempt to attach the file in question.  The file opens fine on our Windows 7, and XP computers (with  the proper Adobe Reader on each).
    Our CEO says there is a message that comes up saying he needs Adobe Flash.  I’m attempting to find out whether or not he is trying to open it the ‘Metro’ view, or the ‘Desktop’ view – no answer yet.
    If your system strips the attachment, let me know, and I’ll upload the file to an ftp site {if necessary}.
    Wayne Nault
    [personal info removed by moderator]

  • DTR component not fully functional

    Hi all,
    We recently tried to change the DTR repository properties file, according to SAP NOTE: 1001509.
    After performing the process mentioned in this note, we noticed this particular repository.properties file has the wrong content (I downloaded the file from online NWDI - DTR and this caused the file to include HTML Tags and replacing the Key/Value pairings with a different keyset).
    This caused the DTR to not fully function; for example we cannot checking any activities anymore. Whenever we try to restart the DTR application in the Web AS, we get a NumberformatException on multiple Key/Values in this repository.properties file.
    At this moment, we are not capable of changing this repository.properties file since we cannot checkin activities.
    We also tried to replace the repository.properties file on UX, but we now believe (since this file is also version controlled) it is only contained in the NWDI Database.
    I've included the error trace DTR pushes out;the current repository.properties file (wrong one) and the correct repository.properties we wish to have in place.
    This is a very challenging topic for our teams to solve.
    Anybody up for an idea?
    Thanks,
    Wesley

    The great thing about most BlackBerry phones is their removable battery. Anytime something goes wonky with your phone, doing a battery pull should be your first course of action. When you do a proper battery pull, many unnecessary temporary files get deleted and this helps your phone run smoother and ofter quicker. To do a proper battery pull, make sure your phone is powered on then remove the battery and replace it a few seconds later and wait for your phone to boot up. Don't worry, you won't lose any personal data. Many phones from competing manufacturers don't have this feature so be happy that you can correct many issues using this simple technique.
    I can answer your question about voicemails right away. Your carrier's voicemail number should be programmed on the SIM card. To access it, simply press and hold the #1 on your phone for a second or two. That should direct you right to your voicemail box where you'll be prompted to enter your password. If you press and hold the #1 on your keypad and you're not directed to your voicemail box, contact your carrier to obtain the number as well as instructions on how to enter it in your phone.
    Try the battery pull and report back with your results. Cheers.  
    - If my response has helped you, please click "Options" beside my post and mark it as solved. Clicking the "thumbs up" icon near the bottom of my response would also be appreciated.

  • L505D-S5965 BIOS not fully ACPI compliant

    Okay, I tried to reply to "BIOS Update Failure Satellite L505D-S5965" since my issue is similar and I have the same model, but that issue is closed so it wouldn't let me.
    A couple weeks ago I was picking up my laptop and it slipped out of my fingers ad fell. Only about 6 - 8 inches, but it landed at an awkward angle. It immeadiatly started making a sound that made me think I had damaged the hard drive (a noisy whiring noise). I unplugged it and pulled the battery out immeadately. When I rebooted it, Vista never loaded fully, (I got a "Windows is loading files" but never a logo). I get a BSOD that reads 
    The BIOS in this system is not fully ACPI compliant. Please contact your system vendor for an updated BIOS.
    STOP: 0x000000A5 (0x00001000, 0x00000000, 0x96408500, 0x00000100)
    The laptop has not booted since. Ever since, I get the option to attempt to boot Windows normally or go into Windows Startup Repair but it won't respond to the keyboard to let me choose which, and after 25 seconds attempts to boot into Windows Startup Repair, which gives me the same BSOD.
    I can punch F2 to enter BIOS or F12 to enter Boot Manager, but the system doesn't responcd to keyboard in either.
    I swapped the hdd into another laptop, which booted sucessfully.
    A known good hdd installed in this system gives same BSOD.
    I removed the hdd and booted off a recovery disc, which yeilded the same BSOD.
    I attempted to flash BIOS off a USB as described in the above mentioned post, and it never worked. It looks like it never accessed the flash drive. The BIOS version is the most current available according to Toshiba, 1.5
    If I remove the HDD and don't have a Recory disc in the DVD drive, I get:
    "PXE-E61 Media Test Failure, check cable
    PXE-M0F: Exiting PXE ROM.
    No Bootable device -- insert boot disk and press any key"
    This is the same with the BIOS flash drive or without.
    I managed to disconnect the CMOS battery, upon booting the next time it recognized that power from CMOS had been interupted, but didn't change any other behavior.
    So, do we think that my problem is physical damage, or did I do something interupting power? I have a parts laptop, so would the damage be, is it something I could swap (parts computer doesn't power off battery or AC, no lights, brick)
    Anyone have any suggestions on what to try next?
    Sean

    Sean
    First, let's try a system reset. Power off the notebook, unplug everything from it including the AC, remove the battery, press and hold the power button for 30 seconds, next replace the battery and the AC, then power on, as soon as you see the Toshiba logo press 'F2' to enter BIOS setup, in setup try to press 'F9' to load setup defaults, press 'F10' to save and exit. If the keyboard still won't work in setup to press 'F9' and 'F10', try this operation again, with an external keyboard.
    Assuming you can complete this operation, but it still does not resolve your problem, try powering off, remove the AC and battery, then try removing both RAM modules, next replace one module in a different slot, replace the battery and AC, and try it again. Repeat as necessary to try to find a bad RAM module and/or bad slot. See page 52 of your Satellite® L500 Series User’s Guide on how to access and remove RAM modules.
    Please let us know what happens. Good luck.
    Mike

  • Bios not fully acpi compliant

    I can't get past a blue screen (BSOD) which states ...The BIOS in this system is not fully ACPI compliant... I've researched this site and the web and can't find an answer that works. I'd like to try to update the BIOS since it's the original and there are 2 newer versions but they appear to require windows to run and I can't boot into windows. My system is:
    HP Pavilion Elite Desktop m9340f
    Q6700 @ 2.66 GHz
    6 GB RAM (2x2GB+2x1GB)
    Asus IPIBL-LB "Benicia" Motherboard
    BIOS 5.25 dated 6/16/2008
    Windows Vista 64bit
    This is how far I get:
    Windows is loading files...
    Microsoft Corporation flashes then BSOD
    Here's what I've tried so far:
    F8
    Advanced Boot Options:
    "Repair Your Computer" tries to start window, get BSOD
    "Safe Mode" "Loading Windows Files"  then BSOD
    F9 HP Diagnostics works OK and all hardware checks out OK
    F10 Setup mode, I've changed the SATA1 controller from RAID default to IDE and AHCI with same results
    F11 Recovery (tries to get into windows and get BSOD)
    Tried recovery using recovery DVDs with the same results when it tries to load windows
    Tried Windows 7 upgrade disk with same results
    Removed all RAM and tried one stick at a time with same results
    Installed HD in USB dock and have run chkdsk (no errors), MSE virus scan (no issues)
    Ran System File Checker sfc /scannow which resulted in this statement "Windows Resource Protection found corrupt files but was unable to fix some of them" I couldn't find any details in the CBS.log file
    Tried clean HD (SSD) to recover to with same results
    Reseated video card (same results)
    Removed video card and ran off onboard video with same results
    Reset BIOS to defaults
    Cleared CMOS with jumper
    I think I've exhausted about all I can think of and find online. Any ideas on how to flash the BIOS would be appreciated.

    HI NGNeer:
    Thank you for your reply.
    I am sending you a link to "Updating the BIOS During Startup" click here.
    I am also sending you a link to "Troubleshooting System Recovery Problems (Windows Vista)" click here.
    I hope these are helpful.
    Sparkles1
    I work on behalf of HP
    Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos, Thumbs Up" on the bottom right to say “Thanks” for helping!

  • IT roles not correctly updating assignedBy status in act sync

    IDM 8.0 sp5 java 1.5
    I have the following issue.
    I have a Business role called 'A' which containes IT roles '1' and '2'. (set waveset.roles to [A] via the active sync) works: correctly
    The active sync runs and business role 'A' is removed. IT roles '1' and '2' are explicily set to the user for deprovisioning scenario purposes (waveset.roles set to [1,2] via the active sync works: correctly
    Active sync is run again and role 'A' is readded and roles '1', and '2' are removed.(Active sync sets waveset.roles to [1,]
    works: INCORRECTLY
    Result: User shows up with roles A, 1, and 2 (which is correct), but the assignedBy attribute on roles 1 and 2 =null and directlyAssigned=true.
    what should happen is that roles A, 1, and 2 are assigned (which is correct), but the assignedBy attribute on roles 1 and 2 =[A] and directlyAssigned=fasle.
    anyone else have this issue? Anyone know how to fix this? We are even refreshing the view after we set waveset.roles and nothing happens. Do I need to refresh the rolesInfo or something?
    Thanks!!

    Hi..You guys are life savers.. if the role was changed in waveset.role, the resources were not getting created but the role was getting changed. Changing waveset.roleInfo solved my problem. Now both the resources and the user is getting updated.
    P.S: i added a refreshView after changing the role

  • E71 - fully removing deleted mail

    I actually have two problems:
    1) Deleted mail headers remain in my mailbox, with apparently no way to actually fully remove them from the machine.  If I delete a message, I want it to GO AWAY!  As it is now, it just has a red strike through the envelope icon.
    2)  On the Home screen, the mail displays a number which I can't figure out.  Right now it says Gmail (5).  I have, in fact, zero unread, unsent, drafts, or even undeleted mails in Gmail!  I have nothing!  Before it said 2, now 5... I can't figure it out, and I want it to say 0 considering there aren't any new mails!
    Weird stuff here, people. 

    dannybrothers wrote:
    I actually have two problems:
    1) Deleted mail headers remain in my mailbox, with apparently no way to actually fully remove them from the machine.  If I delete a message, I want it to GO AWAY!  As it is now, it just has a red strike through the envelope icon.
    Weird stuff here, people. 
    I agree that defaut mail is weird or rather illogical. By right when a mail is deleted, it should NOT be displayed in inbox at all.
    After some time using the default mail application or "messaging" (since E61i, now E71), I come to understand  that the "messaging" is a mirror of the mail server.  E.g. if the mail server has 10 e-mails, then Nokia's messaging/mail also will have 10 even if you have deleted.
    So to permanently removed all e-mails in Nokia's messaging/mail , then you must
    removed or delete all e-mails in your mail server, then;
    connect Nokia's messaging/mail with your mail server for updating
    And all e-mails are gone in your Nokia's messaging/mail.
    To Nokia: please improve! Why not add a "trash" and move all deleted mail from "inbox" to "trash"?
    27-11-2008
    RM346
    NOKIA E71-1(26)

Maybe you are looking for

  • Program Error Dialog box won't go away!

    Recently when I open almost any photoshop file, I get a dialog box that reads "Could not complete your request because of a program error"...when I click "ok" nothing happens, the dialog box remains and I can't do anything but force quit photoshop. 

  • How can I include assets in an AIR update?

    I have an Adobe AIR slideshow app built with flex 3. The app is packaged with an xml playlist and slides of various types, swf, jpg mov) When I package the app it includes all of these contents. I want to be able to update the contents, add new slide

  • Web inspector crashes in 5.1.4

    In upgraded to Safari 5.1.4 last night. Now I have multiple crashes in web inspector. I want to look at the history.state object in the console, so I type history the the period and web inspector crashes. I was debugging some javascript and part way

  • Illustrator can't find new font

    I am trying to use a new font I just downloaded online. When I try to use the font it doesn't show up in the selection. I looked and the font is located in my user > me > library > fonts folder but still won't find it. I even tried to put it in Macin

  • How do I eliminate this?

    Can somebody tell me how to get rid of this dialogue box that keeps appearing on my screen every day. http://s93744050.onlinehome.us/conflictbox.jpg It's called 'Conflict Resolver' and keeps telling me I have 4 sync conflicts and giving me a choice o