Seperation of duties
Couple of questions:
1) Are there any useful oracle documents around recommended separation of duties in payables, ledger and receivables modules of EBS?
2) As I am from IT not financial background, can you give some basic examples of SOD conflicts and subsequent risks/fraud opportunities?
3) Are there any free tools or SQL queries to list SOD conflicts in EBS?
user599292 wrote:
Hussein Sawwan wrote:
Please see these docs/links.
ICM Segregation of Duties Constraints Data, Release 12.1 [ID 602873.1]
White Paper: Understanding and Working with Employee Suppliers in R12 [ID 1377888.1]
OICM: What Functions Should Be Constrained for the Payables Application With Segregation of Duties Constraints? [ID 352661.1]
Audit Engagements [ID 287134.1] To BottomTo Bottom
https://forums.oracle.com/forums/search.jspa?threadID=&q=separation+AND+duties&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
https://forums.oracle.com/forums/search.jspa?threadID=&q=Segregation+AND+duties&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Thanks,
HusseinThanks
Is there anyway to get a copy of the xls files mentioned in:
ICM Segregation of Duties Constraints Data, Release 12.1 [ID 602873.1]Yes, if you already have 12.1.x installed -- Look for SODconstraints.zip file under $APPL_TOP/html/US/download directory.
If you do not have 12.1.x installed, then you would need to download the Media Pack from Oracle e-Delivery website -- https://edelivery.oracle.com/
Thanks,
Hussein
Similar Messages
-
I am looking for some examples of how other companies set up a seperation of duties for the DBA's. How or what do you seperate? What permissions does each person have?
Thanks for any help.Jeff, there are many different ways to approach separation of duties for DBA's or DBA's vs Developers and a lot of what is practical depends on the size of the business and type of IT organization being practiced: central IT vs distributed IT.
Some sites have separate DBA's to manage test, to manage Quality Assurance, and Production. There is a hand off between each group and the test group DBA may have absolutely no access to the production databases.
Some sites have Application DBA's who create objects and apply object changes for the developers and which also have an Infrastructure DBA who installs the Oracle software, configrues the listener, and writes and manages the backups.
Here are some forum threads on topics related to handling access:
Restrict DBA from accessing User's Tables
Re: Restrict DBA from accessing User's Tables
Application sensitive data security model in Oracle databases
Re: Application sensitive data security model in Oracle databases
There are a lot more threads available. You can find them via the search feature.
HTH -- Mark D Powell -- -
Multiple Instances and schemas to One
Hi,
Good Morning to all gurus.
Using Oracle Version 11.2.0.2
We have a database With 4 instances and Each Instance will be having 10 to 15 schemas Based on Countries. Here in all schemas we will be having Huge data's (count may be 3 to 5 crores for some 10 tables)
Now am keen to Know If i change the above to a single instance and Single Schema(Common for all countries) What Pros and cons Will be there (Technical).
Any Links or Answers are highly appreciated.
HOPE GURUS Here can help me study and understand the above scenarios.
Regards,
Simma....http://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:2246908001297
cons:
o harder to manage
o harder to upgrade
o harder to patch
o harder to maintain
o causes your shared pool size to increase 1,000 times (shared sql goes down the tubes)
o takes more space
o queries against the dictionary will be impacted
o latching on the shared pool goes WAY up (latching = locks = serialization device =
slows you down)
pros:
o none that I can think of.
https://forums.oracle.com/thread/1032030
Seperate schemas have advantages with security, privacy, seperation of duties, and change control. Seperate schemas also have the advantage of logical granularity / grouping for easier management, upgrade, decommission, scalability, hardware or software migration.
Yes, you can develop applications faster if you don't have to think about security, scalability etc, but it will come back to haunt you later.
RobertGeier
AND
Separate schemas have the disadvantage of requiring additonal grants and privileges to support the reference of non-owned objects used in stored code and to support FK definitions across tables owned by different users.
Naming standards and system codes can be used to identify and segregate objects defined under one schema.
The use of solid naming standards with a well chosen group of owners (schemas) would likely be a good compromise. The choice really depends on how large the applicaiton is going to be object wise and how integrated the objects are going to be. The more integration the less separate owners is beneficial.
IMHO -- Mark D Powell -- -
Database Security against 'connect internal'
Hi Dba's
Is there any way to set up a password authentication while connecting as
oracle(unix)user during 'connect internal' connection?. The reason is though oracle owner password can be kept properly, still the system admin(unix)can still use su (unix)command to become oracle user and connect to oracle without validating password.
What is the best way to set up a password by which the password will be validated during the connection time.
Please note ....!!!! Creation of exclusive password file, changes in init parameters everything has been tried.
Hence, looking for any better solution.
Regards
_RamV
nullThere certainly is a need for securing your database from administrators. The idea that you MUST trust your dba or your sys admins is no longer a reasonable one. Just to give you an example, let's say a government stores its most confidential secrets in an Oracle database. Trusting the dba is not an option in this situation.
This certainly is an exterme case, but there certainly are many, many other situations that have similar requirements. I'm not sure that everyone's medical records should be available to the dba just because he's in charge of doing backups. The truth of the matter is that many, many dbas are kids straight out of college or independent consultants. This is this way in every industry, including the medical and banking industry.
There are solutions that alleviate the problem, but they are not as good as they should be. For Oracle there are encryption solutions (www.appsecinc.com) that help you prevent dbas from reading the data, but they do not help prevent the data from being destroyed. A good backup plan can help alleviate this problem.
Other possible solutions include setting up good policies that include seperation of duties and the use of a change management department. For a more thorough discourse on security policies for Oracle, check out the Oracle Security Handbook (http://www.amazon.com/exec/obidos/ASIN/0072133252/qid%3D998406055/107-7202182-0758137).
HTH,
[email protected] -
How do I recognize and treat seperately entries in a text box?
I've placed a text box in a report that is populated by data entries that are seperated by a semicolon. Each entry is unique and distinct. I want to try to count and group these individually, but since they exist in a text box seperated by a semicolon, how can I treat them as unique? Here is an example:
02 Inadequate Policies and/or Procedures;01 Lack of Policies and/or Procedures;05 Inadequate Separation of Duties;10 Financial Systems Deficiency;Hi,
Whether the values is fixed ie, you will get a string with 5 values which is :;: seperated.
If it is fixed you can use a way.
for ex; you have a string of 5 values.
first formula u write : Stringvar
Variablename := split(Fieldname,';')[0]
like that five formula.
Then you can take the count(Variablename).
Regards,
Sathish -
Unable to capture the excise duties for intra stocktransfer
Dear All,
while doing goods receipt aganist outbound delivery in receiving plant for intracompany(Depo to Depo) unable to capture the excise duties.Please help on this.
Thanks & regards,
BhargavHi Prabhu,
Excise duties are are not picking automatically while doing j1ig
Thanks & Regards,
Vijaybhaskar -
Related to Free goods with Excise Duties
Saogurus,
In my client place some time they get a sample from the Vendor in which he never sends invoice for that sample but sends excise invoice along with this sample, for whch we never take credit for such excise duties but it suppose to be add to tthe Material cost.
in SAP :- Where i created Purchase order and marked as free goods and in the inovice Tab i mentioned tax code which are no credit in nature,at the time of GRN, wtere enter the value maually at excise item level but after saving the GRN, why the system posting the value in the register(which suppose to be not). the condtion types which are used in the tax code are
JMIP,JMX2
JEC2,JEX2
JSEI,JHX2.
Thanks
PraveerHai,
Maintan the material as a non cenvatable in J1ID - Mateiral & Chapter ID combination & try again. -
Splitting comma seperated column data into multiple rows
Hi Gurus,
Please help me for solving below scenario. I have multiple value in single column with comma seperated values and my requirement is load that data into multiple rows.
Below is the example:
Source Data:
Product Size Stock
ABC X,XL,XXL,M,L,S 1,2,3,4,5,6
Target Data:
Product Size Stock
ABC X 1
ABC XL 2
ABC XXL 3
ABC M 4
ABC L 5
ABC S 6
Which transformation we need to use for getting this output?
Thanks in advance !Hello,
Do you need to do this tranformation through OWB mapping only? And can you please tell what type of source you are using? Is it a flat file or a table?
Thanks -
Excise duties for ship to party in exports process
Hi experts
i added one more ship to party for foreign sold to party and , in exports sales order for the line item i changed the same ship to paty.
we processed up to billing and came to know excise duties are not posted to accounting and unable to do excise invoice i n J1IIN... is there any possibility and pricing changes and configurations needed in this scenario.
your answer is most valuable for me
THanks in advance
MadhuHi Raj,
thanx for reply and exactly what u said.
sold to party is Foreign customer
ship to party is domestic customer
for one line item i am doing invoice now here i am getting sold to party name only , anyway my client wants to get excise duties in the invoice and posted to accounting and do J1IIN.. please tell me possibilities.
if i change Pricing procedure excise duties from statistical to active is it works or is there any other procedure
please experts help me
Madhu -
No cell seperator shown after adding rows to table
Hi All,
I'm trying to add rows for the user to click on to 'add new' similar to the contacts application. It works, but when the new row displays it has no separator. My code is inside the setEditing overridden method as shown...
- (void)setEditing:(BOOL)editing animated:(BOOL)animated {
// call super first
[super setEditing:editing animated:animated];
// add/remove placeholder items
[self.tableView beginUpdates];
NSMutableArray *indexPaths = [[NSMutableArray alloc] init];
for (int g=0; g < editGroups.count; g++)
if ([[editGroups objectAtIndex:g] isArray])
// get the count of objects for this group
SEL propertySelector = NSSelectorFromString([[[[editGroups objectAtIndex:g] editFields] objectAtIndex:0] fieldName]);
[indexPaths addObject:[NSIndexPath indexPathForRow:[[editObject performSelector:propertySelector] count] inSection:g]];
if (editing)
// Show the placeholder rows
[self.tableView insertRowsAtIndexPaths:indexPaths withRowAnimation:UITableViewRowAnimationFade];
else
// Hide the placeholder rows.
[self.tableView deleteRowsAtIndexPaths:indexPaths withRowAnimation:UITableViewRowAnimationTop];
// send object did update message to delegate
[delegate didUpdateObject];
[self.tableView endUpdates];
Thanks
RayI just found the problem, and for anyone else out there with the same issue. I had to remove the [super setEditing:editing animated:animated] at the beginning of my method. My super is UITableViewController, and for some reason calling the super on this method causes the seperator lines to vanish.
Thanks All -
with my hp office 5010 all in one printer, i'm not able to scan, and this is one of his duties. why isn't it possible?? Bad ssoftware while downloading it from internet because I lost CD rom. No pilot available for scanning with it??? Bad version of soft??? I bauught this printer because of his utility and space occupped: able to print, copy and scan in same machine, gain of room, perfect, but my scanning function is not working!!!! I would like to solve this damned problem which upset me since several weeks.... Waiting for an answer and a solution, best regards
pmonteil31 wrote:
Waiting for an answer and a solution, best regards
Hi,
Sorry you have to wait longer because I can not find your printer model under Google. Must be very old ?
Regards,
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem. -
Wrong payslip in case of seperation
Dear all ,
While running payroll for seperated employees the system is displaying wron information in payslip , like the amounts , tax etc. is coming right but the no. of paid days is wrong.
What could be the possible error.
Regards,
nehaHi Friends,
I am also facing the same problem, In my scenario,
Iif the employee is a regular, it show the full days in salary slip(ie.30/31), but when employee seprated from the orgnisation on suppose 15th of that month it is showing 13 days in salary slip. why this difference is coming.( salary is calculating correct).
Can you please give the solution.
Regards
Raj -
Esic contribution is not deducting on seperation cases in retro run.
Dear Experts,
Employee was got seperated in previous month (for example Oct) and now while executing retro run (Dec) for those employee ESIC is not contributing even though they comes in esic eligibility.
Please advise.Yeah, IN42 to 44 are activated,
ZN42 Formation of differences, transfer of n
WGTYP? Query wage type
/3EA
ELIMI * Elim.time period ID
SUBWTD/AEA DT Difference tab.
ZN43 Store the differences in DT (India)
WGTYP? Query wage type
/3EA
ELIMI * Elim.time period ID
ADDWTD/AEA DT Difference tab.
INESR /AEA DT
/AEA
ELIMI * Elim.time period ID
ADDWTI/ZEA IT Input table
and only /zea is reflecting in RT -
Get distinct values from a coma seperated string variable
Hi ,
I am getting an comma seperated string as in parameter, now i want to get the distinct values from that string and will use those values to pass it to a query.
any helptry this:
sorry about the messiness - it's just quickly copied from some badly formatted code....
TYPE T_FieldArray IS TABLE OF varchar2(255) INDEX BY BINARY_INTEGER;
function SPLIT_CSV_FIELDS (
p_Input_Str in varchar2,
p_Delimiter in varchar2,
p_Quote_Char in varchar2)
return t_fieldarray is
v_FieldArray T_FieldArray;
v_input_str varchar2(4000);
v_field_str varchar2(255);
v_pos number;
e number := 0;
v_delim_str varchar2(3);
cur_pos number;
begin
loop
-- find each delimiter char in string
v_pos := INSTR(v_input_str, p_Delimiter);
-- each time delimiter char is found
if v_pos > 0 then
-- current field value is current string to position prior to delimiter char
v_field_str := UPPER(SUBSTR(v_input_str, 1, v_pos - 1));
-- remove quote char from end of field (if any)
v_field_str := TRIM(TRANSLATE(v_field_str, NVL(p_Quote_Char, p_Delimiter), ' '));
-- increment element number
e := e + 1;
-- get remainder of input string to check
v_input_str := SUBSTR(v_input_str, v_pos + 1, LENGTH(v_input_str) - v_pos);
v_FieldArray(e) := v_field_str;
else
-- increment element number
e := e + 1;
-- last field value is what's left of input string less quote char (if any)
v_field_str := TRIM(TRANSLATE(UPPER(v_input_str), NVL(p_Quote_Char, p_Delimiter), ' '));
v_FieldArray(e) := v_field_str;
exit;
end if;
end loop;
return v_FieldArray;
end; -
Opening and closing balance for Excise duties for a particular plant
Dear Experts,
Please suggest how I can get balance of excise duties for a particular plant at a given date in registers(RG23A & RG23C PartII).
Thanks
LokeshDear Lokesh,
Just find the Google with "J33_BPP_32_CHEM_EN_IN" you will find the Word document for standard SAP document
With all the steps in details
Maybe you are looking for
-
I got a pc with windows 7 now itunes wont open
we had windows xp and itunes worked then we got windows 7 and it wont even open. Why is this
-
Sales Area is not visible in CRM for the products downloaded from R/3
Hi Experts, Our client is using CRM 2007 and R/3 4.7. connectivity was established via Middleware. Before downloading the materials from R/3 we have done the following things 1. Following customizing objects were downloaded DNL_CUST_PROD0 DNL_CUST_PR
-
hallo wer kann mir helfen dies zu lösen unter windows 8.1 beim update von CS6 Illustrator kommt immer wieder dieser fehlmeldung Adobe Illustrator CS6-Aktualisierung (Version 16.0.3) Installation fehlgeschlagen Fehlercode: U44M1P7 danke für hilfe m2mo
-
How to download certificate for the first time programmatically?
Hi, I'm accessing a https server which has a self signed certificate for the first time. I was trying to download the certificate using like cert = sslsession.getPeerCertificates()[0] However I got the following exception: SSLPeerUnverifiedException
-
MySQL & JSF driven Web Application
I have the whole database, written in SQLyog. I already have a huge GUI application that works with this database. I didn't use Hibernate for object mapping, all the SQL statements I wrote manualy. I want to make a small web aplication that will read