Setting to Retain User Action Logs in GRC 10.0

Is there a setting to retain the User Action logs in SAP GRC 10 System for x number of Days. Is it dependent on the ST03N Log settings

Hi Selva,
For this you need to schedule the action usage job. Once you schedule this job you can view the logs in Reports and Analytica tab under Security Link->Action Usage by user,role and profile.
Hope this helps.
Regards,
Neeraj

Similar Messages

User action logging

I'm writing a small model of a GUI, which I'm going to
perform user tests on via the web. For these tests, I need to log
all user action (button clicks etc). I have no problem with the
actual logging, but how do I submit it from the tester so I'll be
able to view the statistics? Note that the tests will be performed
at the testers own computers.
Thanks a lot in advance.

Anyone? :(

Portal - User Action Log?

Hi All,
Does the portal server create any log entries for the User Actions done by the Content Administrator on Portal?
The Issue is, after designing the Portal Contents ( Pages, iViews etc. ), we came to know that an iView which working in the Production system, is totally missing from the Development System.
I would like to know if there is any way to find out/track the iView deletion from the Portal Content.
Any leads would be really helpful.
Thanks,
Mausam

http://help.sap.com/saphelp_nw2004s/helpdata/en/c2/ee4f58ff1bce41b4dc6d2612fae211/frameset.htm
Regards,
Nitin

[Forum FAQ] Group Policy Preferences Scheduled Tasks Item not working when the option Run whether user is logged on or not is selected

Scenario:
We use one of the following Group Policy Preferences Scheduled Tasks item to deploy a task to clients:
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
(Note that on some platforms, "At least Windows 7" is replaced with "Windows Vista and later.")
After designating a user account to run the task, we select “Run whether user is logged on or not” option, and “The Do not store password…”
check box is automatically grayed out (See Figure 1).
Figure 1
After finishing configuring the task item, on a client, we run command
gpupdate/force to forcefully update group policy. However, on the client, when we check if the task is listed in Task Scheduler snap-in, the task is not displayed, and when we run
gpresult/h report.html to collect group policy result for troubleshooting, we see an error as similar as shown in the following figure (Figure 2).
Figure 2
Cause:
To make the scheduled task run whether the user is logged on or not, we need to store the password of the designated user account. However, for the content of the scheduled
task item is stored in Sysvol where it’s not safe to store passwords, this function has been deprecated.
Workaround:
We can run the task with system account
NT Authority\System, or we can use specific user accounts to run the task when the given user is logged on. (See Figure 3)
Figure 3
Reference:
MS14-025: Vulnerability in Group Policy Preferences could allow elevation of privilege: May 13, 2014
http://support.microsoft.com/kb/2962486
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hello Everyone,
Succeeded !!!!!!!
Even i was struggling with this same Problem to execute a batch via Window scheduler and set the setting to "Run whether the user is logged in or not".
I tried many time but the batch runs with " Run
whether user is logged on" and not with "Run
whether user is logged on or not".
what i discovered is that there was one mapped drive
path in my batch file which was not the complete path like y:/AR.qvw actually what i did i changed that map path to the complete path like \\servnamename\d$\AR.qvw and the batch executed successfully with the setting "Run
whether user is logged on or not"
The
conclusion is that check the dependency of the script on external resources because when you check this option "Run
whether user is logged on or not" It actually conflicts. This my discovery.
If
you have any question write me on [email protected]
Thanks
& Regards,
Arun

Shows link only if user is logged in

Hi there,
DW 8, PHP & my SQL
I have a db of registered users and have links to download
documents.
Some of these documents are for everyone and some I only want
to be
downloadable or logged in registered users - all on the same
page.
If someone can please point me to a tutorial or advice as to
what I am
to do, I will really appreciate it.
Regards,
Deon

back from lunch - where you at on the table?
"crash" <[email protected]> wrote in message
news:[email protected]...
> Is this site for your or for a client? If a client, I
woudl build an
> access table that allows them to determine (or you to
easily administrate)
> access levels.
>
> If it's for you, that's not really necessary, though I
find it helps me.
> Somewhere write down your access levels:
>
> 1 - Default, open
> 2 - Member
> 3 - Edit (add/edit content)
> 4 - Admin (add/edit/delete site sectiosn)
>
> Next, create your table for your documents. WHat
information do you need
> to have contained within them? How are you puloading
them? Do they need
> approval before being released? Do they need to expire?
>
> So far, we know we need this information in our
documents table:
>
> docID
> docName
> docUrl
> docClearance (what number of clearance is needed tob e
read)
>
> We may need these fields:
> docDateAdd
> docDateEdit
> docDateRemove
> docPublish (can be bool, or 1 - 4 to define steps of
publication such as
> submission, waiting, approved, live)
>
> Do you grab your users' clearnace on your login page?
(it's a checkbox on
> hte MM server behavior thingy)
>
> More after lunch, get those tables setup.
>
> "Deon" <[email protected]> wrote in
message
> news:[email protected]...
>> crash, my db is set up and users can log in and out.
Just for what it
>> might be worth in the future, I have a default
Access level of 1. That's
>> where I am now.
>>
>> Deon
>>
>>
>> crash wrote:
>>> Where are you at now? Do you ahve your database
setup at all? Or are
>>> you saying you have your database setup, but
only a table for the users
>>> in it?
>>>
>>> Should not need a tutorial, should be fairly
straight forward.
>>>
>>>
>>> "Deon" <[email protected]> wrote
in message
>>> news:[email protected]...
>>>
>>>>Crash,
>>>>
>>>>thanx for the time to answer my question. My
db only makes provision for
>>>>the registered users. At the moment I only
know what I want and have no
>>>>idea how to get there. Are there tutorials
you are aware of for this? If
>>>>not, I can Google if I know what to look for.
>>>>
>>>>Thank you again!
>>>>Deon
>>>>
>>>>
>>>>crash wrote:
>>>>
>>>>>What separates the two out in your
database? Do you have a "class"
>>>>>field to determine document class (ie,
private or public?) Do you have
>>>>>a table of association that says which
users or which level of users
>>>>>can access which documents?
>>>>>
>>>>>Getting that built will be your first
step. After that, I would build
>>>>>two recordsets, one public and one
private. I would then use DW's show
>>>>>region if recordset is not empty Server
Behavior to show the links I
>>>>>wanted.
>>>>>
>>>>>Another way to buidl ti would be to use
one recordset and the split the
>>>>>two (public/private) into arrays and
display them according to isset()
>>>>>statements.
>>>>>
>>>>>HTH,
>>>>>
>>>>>Jon
>>>>>"Deon" <[email protected]>
wrote in message
>>>>>news:[email protected]...
>>>>>
>>>>>
>>>>>>Hi there,
>>>>>>
>>>>>>DW 8, PHP & my SQL
>>>>>>
>>>>>>I have a db of registered users and
have links to download documents.
>>>>>>Some of these documents are for
everyone and some I only want to be
>>>>>>downloadable or logged in registered
users - all on the same page.
>>>>>>
>>>>>>If someone can please point me to a
tutorial or advice as to what I am
>>>>>>to do, I will really appreciate it.
>>>>>>
>>>>>>Regards,
>>>>>>Deon
>>>>>
>>>>>
>>>
>
>

Task Scheduler Security Option - Run if user is logged in or not

using Windows Server 208 R2 Terminal Server - Running .NET 4.0 programs
We are running .NET 4.0 Windows Forms programs using Task Scheduler with the Security Option - Run whether user is logged in or not.
When the Task Scheduler starts these jobs they either not not run or they fail.
Questions:
1. What shell is used by Task Scheduler with the setting "run whether user is logged in or not" ?
2. Is there some way to detect this shell or environment in a .NET program?
I am trying to determine if I can modify the .NET programs so they will run in this shell with no errors.
Thank you
MisterT99

Hi Mister,
In addition, Since you need to launch a GUI application through Task Scheduler, so this task also need to run interactively.
However, if the item "Run whether user is logged on or not" is selected, tasks will not run interactively, so we need to select the "Run only when user is logged".
I recommend you can change the item "Change user or group" in security option and add a group, which will make sure your application will run interactively for all users in the group when the users logon.
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

How to Set "RETAIN" provisioning action as default???

Hi All,
I would like to keep "RETAIN" provisioning action as default in ARQ while "adding" a role.
Actually, there is one configuration parameter "2045" which will make it possible. But this is ONLY applicable to the situation where a role is selected from existing assignment by clicking on "Existing Assignment" button.
As soon as a role is selected from the existing assignment automatically the provisioning actions is set to "RETAIN" (due to the config. parameter 2045).
But what I want is, whenever a user adds a role to a user in access request form, the default provisioning action should be set to "RETAIN". I could not find any suitable configuration parameter for this.
Has anyone set this before? Or does any one know how to set it?
Please advise.
Regards,
Faisal

Hi Alessanrdo,
Thanks for your reply.
Actually the motive behing this option is to cover the "loop hole" of ARQ application. If you notice, we can "keep" adding the same role which is already assigned with different validity dates. ARQ does not control this!
Eventually, what happens that in the back end system, the user master record is overwhelmed with the same role entry with different validity dates!
Unfortunately, application does not have any control over this. Therefore, at least making "RETAIN" as the default provisioning action, we can have a "sort" of control over this. What happens is, if I add a role which is already assigned to a user and change the validity dates, there will not be any new entry in the back end system with the same role.
Hope this will help you understand the requirement and advise me.
Regards,
Faisal

How to retain users' Form Setting?

Hi Experts,
As subjected, I have setup UDF in categories and displayed in preferred sequence. I have also setup the Form Settings hiding and showing preferred fields and rearranging the sequence. I realize when I log in with the SAME User Id on a Different Workstation, the Form Settings I had setup doesnt seem to reflect according.
Please help me or guide me how I can retain users' Form Settings??
Thanks!
Chinho

Hi Dianne,
An SAP support briefed me that we should always use the FILE > EXIT function, because an inproper shutdown by click on the "x" by the window pane will mean that SAP may not have done a proper save and shutdown. And maybe this could affect the UDFs visibility and sequence that was already set on that PC.
Also, I have confirmed that the GENERAL > USERS > COPY FORM SETTINGS function, copies only the relabeling, UDFs category..etc onto another user, but it does not copy the visibility and sequence that was pre-set on another PC. When you try to login on another PC, you will simply need to reset the visibility and sequence of your UDF again on all modules.
Sad case.
Hope it helps!
Chinho

I have set up two users, one for myself and one for children. The computer automatically logs in for the children with no password required. When the children go to spotlight and type in a search criteria all of my files show up. How do I prevent this?

I have set up two users, one for myself and one for children. The computer automatically logs in for the children with no password required. When the children go to spotlight and type in a search criteria all of my files show and open up. How do I prevent this?

Log in to your account, and move all your files to your home folder. No other users should be able to access them there and they won't show up with a Spotlight search.
Make sure your kids' account(s) do not have admin privileges.

How can I set a specific user log on neme to a specific machine

Greeting,
I have a question :
How can I set a specific user log on name to a specific machine.
e.g.
Only User.A can log on to PC.A and the other can not.
Base On :
Windows Server 2003
Active Directory Version : 5.2.3790.1812

Technically we're both right. This depends on what scenario you're setting this up.
1) If you want to say only this person can log on to this machine, and it's not an enterprise solution (meaning you have a handful of computers you want restricted, not all computers) then do something like Yan Li has recommended. However, I
do not recommend using any DENY LOCAL LOGON user rights. In this case, you would have to deny everyone except 'User A' and your Administrators. If you put a user in ALLOW LOCAL LOGON and DENY LOCAL LOGON, then DENY wins and no one logs in. Instead,
you should remove all the settings from ALLOW LOCAL LOGON and add only User A and administrators.
2) If this is an enterprise solution, use the LOG ON TO option I mentioned before. Managing user right assignments per machine is very difficult and isn't a practical way to do it on a large scale. If every user in your domain is assigned a computer
that they can use, only that user can use that machine and that machine will effectively only allow that user. For this to work, EVERY user must be restricted to a workstation, if no setting is present, then that user can log on anywhere. This
is my preferred solution still.
Like I said, it depends on your situation to which route is better. I hope this helps and is clear and easy to understand.
- If you have my posts to be helpful, or the answer, please mark them appropriately. Thank you.
Chris Ream

New to the Apple and I want to set up a user account that will not delete the guest users files and allow and preserve their personal settings after log out. Is this possible?

New to the Apple and I want to set up a user account that will not delete the guest users files and allow and preserve their personal settings after log out. Is this possible?

The built-in guest user account will not do this. Simply create a new standard account and call it "Guest" or "Guest Users" or whatever you like.
Go to System Preferences > Users& Groups, click "+" to make a new account.

After login each morning on my work desktop, none of my frequently used sites like iGoogle, New York Times, my webmail are logged in. How can I change this. Browser is set to retain cookies.

I work on an office network. I log out every evening. The next morning after I have logged back in to the system and go to FireFox, I find that I have to log back in to iGoogle, MyYahoo, The New York Times even if I've checked "remember me," or "keep me logged in". Also, on the Weather Channel site, I enter a few cities I follow. Each day, I have to reenter them because they disappear. In FireFox, the browser is set to retain cookies. Anyone have an idea of what's going on. I don't seem to have this problem with IE.

I work on an office network. I log out every evening. The next morning after I have logged back in to the system and go to FireFox, I find that I have to log back in to iGoogle, MyYahoo, The New York Times even if I've checked "remember me," or "keep me logged in". Also, on the Weather Channel site, I enter a few cities I follow. Each day, I have to reenter them because they disappear. In FireFox, the browser is set to retain cookies. Anyone have an idea of what's going on. I don't seem to have this problem with IE.

Task Scheduler wont run when set to "Run whether user is logged on or not"

Hi
I have two 2008 R2 servers with the same task and pretty much the same powershell script the schedule is running. The powershell just runs a daily snapshot of the server. One server it runs fine with "Run whether user is logged on
or not" selected. But when selected on the second server it won't run. I mean, the schedule says its run, but the poweshell doesn't launch and do its job. Everything is the same on each server apart from what is being snapshotted.
Even the location of where the snapshot is going is the same. Same domain account, same password. When I change it to "Run only....." it runs fine. But the server may not be logged in all the time, so I need it to run whatever.
Any help would be greatly appreciated.
Thanks
Matt

I'd check in the windows system and application event logs. Also check the task log.
Event Viewer\Applications\Microsoft\Windows\TaskScheduler\Operational
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Equipment action log and display changes nnot updating

Hello Guys,
it is little strange but for some of the equipments action log and display changes are not being updated.
The records are there only till 2007 but since 2008 whatever changes we make now they are not being recorded in action log or changes.
But strange thing here is usage list is being updated as it is supposed to be.
i have checked most of the config. but really not helpful.
i am clueless here.
Can anyone help?
Thanks & Regards,
vaibhav

Hi,
Please see attached code for your review:
Appreciate your valuable comments.
INCLUDE ZXEQMU02
*By: Ralph McKnight/AC Date: Mar061998.
*Description: Additional fields to be saved on append structures
            during equipment add/change - This development was
            Undertaken as a core modification - The exporting
            function parameters were changes to pass back the
            structures with the new user values.
*Sir4726 - Disable equipment popup box for equipment type 'E'
*Sartd42467-Add kokrs & kostl to auto maint
*By Ralph McKnight Apr161998.
*SARTD 75148 - 4.6C Upgrade, CH4K902173, Import/Export parameters can no
             longer have the same names, added a Changing parameter to
             return the changed values of EQUI and EQUZ to save the
             append structure fields ZAEQUI and ZAEQUZ for Job
             Resource Scheduling.
           - Also set the flags to update EQUI and EQUZ.
             by: HBAY342
*SARTD 92504 - Save new maintenance plant into ABAP memory. Needed for
             9/26/02 E.Krenz
*SARTD 109167 - AMI Foreign Trade REquirement. - Validations against
            - AMI Foreign Trade Synchronization tables(ZAESYNCDIV &
              (ZAESYNCMAT)         before save
              of the equipment.
SARTD 111318 - CHLK9A0I4A Check Equipment Acquisition Date, Value and
                 currency to avoid dump by SAP Standard system
SARTD 113133 AMI project: Added function call to prevent users from
             manually changing equipments when it is on a AMI transfer
             form.
KR 140649    AMI: Added parameter to FM call
             for Z_AMI_CHCK_IE02_UPDATE_ALLOWED. E.Krenz 12/23/03
03/02/2004 HBB8705   CHLK9A0WYR   EQUZ Append field rename
Modification Log
Date        User    Transport   KR     Description
06/29/2005 HBAK946 CHLK9A1N05 169999 RA Equipment Lockdown
                                       If equip is RA, check authority
                                       If no auth., then issue a mess
06/30/2005 HBAK946 CHLK9A1N29 169999 RA Equipment Lockdown
                                       Only process RA check if in
                                       t-code IE01, IE02 will be
                                       handled in user-exit
Begin of CH4K902173 - 4.6C upgrade - Changed import/export/changing
parameters
Old way follows:
*This is how the call to this routine should look with our mods.
*Note: the changes to the std are labeled with "DS Part 6 - RGM1
call customer-function '001'
     exporting
          data_equi           = equi
          data_eqkt           = eqkt
          data_equz           = equz
          data_iloa           = iloa
     importing
          own_msg             = own_msg
          data_equi           = equi "DS Part 6 - RGM1
          data_eqkt           = eqkt "DS Part 6 - RGM1
          data_equz           = equz "DS Part 6 - RGM1
          data_iloa           = iloa "DS Part 6 - RGM1
     exceptions
          posting_not_allowed = 1
          others              = 2.
New way follows:
CALL CUSTOMER-FUNCTION '001'
      EXPORTING
           ACTIVITY_TYPE           = ACTIVITY_TYPE
           DATA_EQUI               = EQUI
           DATA_EQKT               = EQKT
           DATA_EQUZ               = EQUZ
           DATA_ILOA               = ILOA
           MAIN_CLASS              = RM63E-KLASSE
           DATA_RM63E              = RM63E
      IMPORTING
           UPDATE_DATA_EQ          = UPDATE_DATA_EQ
           UPDATE_FLAGS_EQ         = UPDATE_FLAGS_EQ
           UPDATE_DATA_EZ          = UPDATE_DATA_EZ
           UPDATE_FLAGS_EZ         = UPDATE_FLAGS_EZ
      CHANGING
           CHGD_EQUI               = EQUI
           CHGD_EQUZ               = EQUZ
      EXCEPTIONS
           POSTING_NOT_ALLOWED     = 1
           POSTING_NOT_ALLOWED_EXT = 2
           OTHERS                  = 3.
End of CH4K902173 - 4.6C upgrade - Changed import/export/changing
Changes for SARTD 111318 to check Acquisition Date, Value and currency
Commented By Nikhil. Function Module looks to be specific for US.
*data: v_retval like sy-subrc.
                                                            "CHLK9A0I4A
*call function 'Z_VERIFY_ACQUISITION_DATA'
                                                            "CHLK9A0I4A
exporting
                                                            "CHLK9A0I4A
   p_equi        = data_equi
                                                            "CHLK9A0I4A
importing
                                                            "CHLK9A0I4A
retval        = v_retval.
                                                            "CHLK9A0I4A
*if v_retval ne 0.
                                                            "CHLK9A0I4A
raise posting_not_allowed.
                                                            "CHLK9A0I4A
*endif.
                                                            "CHLK9A0I4A
End of changes for SARTD 111318
*======================================================================
Begin of AMI
*======================================================================
Begin of insert SARTD 113133
read calling AMI program
DATA: z_ami_program(30) TYPE c.
CALL FUNCTION 'Z_AMI_CHECK_AMI_PRG_ACTIVE'
IMPORTING
    p_ami_program = z_ami_program.
AMI validations if Equipment Update is allowed
For checking Equipment Check permission.
CALL FUNCTION 'Z_AMI_CHCK_IE02_UPDATE_ALLOWED'
EXPORTING
    active_ami_program = z_ami_program
    data_equz          = data_equz
    data_equi          = data_equi
    data_iloa          = data_iloa
    main_class         = main_class
    data_rm63e         = data_rm63e
EXCEPTIONS
    update_not_allowed = 8.
IF sy-subrc NE 0.
RAISE posting_not_allowed.
ENDIF.
Commented By Nikhil. Function Module looks to be specific for US.
checks for equipment ring fencing (only for manual IE02)
*if z_ami_program is initial.
call function 'Z_AMI_IE02_EXIT_RING_FENCING'
      exporting
           data_equz          = data_equz
           data_rm63e         = data_rm63e
      exceptions
           update_not_allowed = 8.
if sy-subrc ne 0.
   raise posting_not_allowed.
endif.
*endif.
End of INSERT SARTD 113133
*======================================================================
End of AMI
*======================================================================
*======================================================================
Begin of RA Equipment Lockdown >> CHLK9A1N05
*======================================================================
check if equipment is Radio Active
DATA: i_matnr_tab LIKE zhazind OCCURS 0 WITH HEADER LINE.
DATA: v_land1(3) TYPE c.
DATA: v_ra_flag(1) TYPE c.
*Begin of code insertion by pavan on 02 June, 2008.
DATA: zeqpnr_eccn-zeccn TYPE zeqpnr_eccn-zeccn,
      wa_zeqpnr_eccn TYPE zeqpnr_eccn.
break pkumar.
IF sy-ucomm = 'BU'.
IMPORT zeqpnr_eccn-zeccn FROM MEMORY ID 'ZECCNUM'.
MOVE: data_equi-equnr TO wa_zeqpnr_eccn-zeqnr,
        zeqpnr_eccn-zeccn TO wa_zeqpnr_eccn-zeccn.
MODIFY zeqpnr_eccn FROM wa_zeqpnr_eccn.
CLEAR wa_zeqpnr_eccn.
ENDIF.
*End of code insertion by pavan on 02 June, 2008.
IF sy-tcode = 'IE01'.
IF NOT data_equi-matnr IS INITIAL AND
     NOT data_equz-zzswerk IS INITIAL.
    SELECT SINGLE land1 FROM t001w
           INTO v_land1
           WHERE werks = data_equz-zzswerk.
    CLEAR: i_matnr_tab.
    REFRESH: i_matnr_tab.
    i_matnr_tab-matnr = data_equi-matnr.
    APPEND i_matnr_tab TO i_matnr_tab.
    CALL FUNCTION 'Z_MATERIAL_HAZARD'
      EXPORTING
        pland1    = v_land1
      TABLES
        matnr_tab = i_matnr_tab.
check if radio active
    READ TABLE i_matnr_tab INDEX 1.
    IF sy-subrc = 0.
      IF i_matnr_tab-ramat = 'X'.
check if user has Radio Active access
        AUTHORITY-CHECK OBJECT 'S_TCODE'
                    ID 'TCD' FIELD 'ZIE02_RA'.
        IF sy-subrc NE 0.
          MESSAGE w000(z5) WITH 'No access to create RA equipment'.
          RAISE posting_not_allowed.
        ENDIF.
      ENDIF.
    ENDIF.
ENDIF.
ENDIF.
*======================================================================
End of RA Equipment Lockdown << CHLK9A1N05
*======================================================================
*CHECK NOT data_equi-eqtyp = 'E'.
*CHECK NOT data_equi-eqtyp = 'F'.
DATA: v_stor_ucomm LIKE sy-ucomm.
DATA: v_equnr LIKE data_equz-equnr.
*Save the system user command field
v_stor_ucomm = sy-ucomm.
v_equnr = data_equz-equnr.
*Get the additional information
CALL FUNCTION 'Z_GET_MORE_EQUIPMENT_INFO'
CHANGING
    s_equi    = data_equi
    s_equz    = data_equz
    s_rm63e   = data_rm63e
EXCEPTIONS
    cancelled = 1.
*Begin of changes for SARTD 113691
IF sy-subrc NE 0.                                           "CHLK9A0KY9
RAISE posting_not_allowed.                                "CHLK9A0KY9
ENDIF.                                                      "CHLK9A0KY9
End of changes for SARTD 113691
*Restore the equip number
data_equz-equnr = v_equnr.
data_equz-zzkokrs = data_iloa-kokrs.                        "CHLK9A0WYR
data_equz-zzkostl = data_iloa-kostl.                        "CHLK9A0WYR
data_equz-zzswerk = data_iloa-swerk.                        "CHLK9A0WYR
*****SARTD 109167
*vALIDATE VALUES PER ami fOREIGN TRADE SYNCHRONIZATION RULES
*set screen 0101.
CALL FUNCTION 'Z_AMIFT_VALIDATE_EQUIP_MATNR'
TABLES
P_MESSAGES       =
CHANGING
    p_equi           = data_equi
    p_equz           = data_equz.
*****SARTD 109167
CH4K902173 - Should update EQUI and EQUZ, set flag to TRUE.
chgd_equi = data_equi.                                      "CH4K902173
chgd_equz = data_equz.                                      "CH4K902173
*Begin of Changes - CHLK980219 data not retained when creating record
*UPDATE_FLAGS_EQ = 'X'.                       "CH4K902173
*UPDATE_FLAGS_EZ = 'X'.                       "CH4K902173
*End of Changes
*If cancel was hit then back out of save
IF sy-subrc NE 0.
RAISE posting_not_allowed.
ENDIF.
*Restore the system user command field
sy-ucomm = v_stor_ucomm.
Begin of insert        SARTD 92504, AMI 9/26/02, E.Krenz
Store new maintenance plant in memory to be used by ZAEQASBR for
immediate ransfer of maintenance items.
EXPORT data_equz TO MEMORY ID 'ZAEQASBR'.
End of insert
>> CHLK9A1N29
clear transaction varient before going to IE02 or IE01 main screen
CALL FUNCTION 'RS_HDSYS_SET_TC_VARIANT'
EXPORTING
    variant                 = ' '
    flag_client_independent = 'X'
    overwrite_variant       = 'X'.
<< CHLK9A1N29
Regards,
vaibhav.

Simple trigger to allow users to log on at certain times

I am trying to create a trigger that will allow certain users to only log into the database between 12am - 4 am.
Can I assign a trigger to a user or to a role or how do I parse it out. I dont think I have this trigger just right yet...
Or can this be set in the database it self? I looked at the user accounts, profiles, roles and dont see anything about connection times.
Oracle 10.2.0.4
I want to create a trigger that will only allow the user to log into the database between 12 and 4 am.
My next question is can I assign this trigger to the role that the user has been assigned to?
I have pulled some similar code that I would like to use but do not know how to modify it to be either assigned to a user: npq or to the role ntq_ro.
create or replace trigger logon_time after logon on database
begin
if to_char(sysdate,'HH24') between 4 and 24
then
raise_application_error(-20001,'Not allowed to logon database during this time');
end if;
end
/

yes, I would love to all by command line...
Bere in mind I change to to test...
SQL> CREATE OR REPLACE TRIGGER "SYS".LOGON_TIME_RESTRICTION_NPQ AFTER
2 LOGON ON DATABASE
3 BEGIN
4 if to_char(sysdate,'HH24') between '14' and '16' AND USER='NPQ' THEN
5 raise_application_error(-20001,'Not allowed to logon database during this time');
6 end if;
7 end;
8 /
Trigger created.
SQL> exit
Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
[oracle@kali ~]$ sqlplus
SQL*Plus: Release 10.2.0.4.0 - Production on Mon Jan 10 14:41:02 2011
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
Enter user-name: npq
Enter password:
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
Alert log triggered errors:
Mon Jan 10 14:41:10 2011
Errors in file /u01/app/oracle/admin/NASARPT/udump/nasarpt_ora_17508.trc:
ORA-00604: error occurred at recursive SQL level 1
ORA-20001: Not allowed to logon database during this time
ORA-06512: at line 3
/u01/app/oracle/admin/NASARPT/udump/nasarpt_ora_17508.trc
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
ORACLE_HOME = /u01/app/oracle/product/10.2.0/db_1
System name: Linux
Node name: kali.mtsallstream.com
Release: 2.6.18-164.6.1.el5
Version: #1 SMP Tue Oct 27 11:28:30 EDT 2009
Machine: x86_64
Instance name: NASARPT
Redo thread mounted by this instance: 1
Oracle process number: 31
Unix process pid: 17508, image: [email protected] (TNS V1-V3)
*** ACTION NAME:() 2011-01-10 14:41:10.293
*** MODULE NAME:([email protected] (TNS V1-V3)) 2011-01-10 14:41:10.293
*** SERVICE NAME:(SYS$USERS) 2011-01-10 14:41:10.293
*** SESSION ID:(54.49496) 2011-01-10 14:41:10.293
Skipped error 604 during the execution of SYS.LOGON_TIME_RESTRICTION_NPQ
*** 2011-01-10 14:41:10.293
ksedmp: internal or fatal error
ORA-00604: error occurred at recursive SQL level 1
ORA-20001: Not allowed to logon database during this time
ORA-06512: at line 3
I also tried the setting for the to_num but it would not even compile:
SQL> CREATE OR REPLACE TRIGGER "SYS".LOGON_TIME_RESTRICTION_NPQ AFTER LOGON ON DATABASE
2 BEGIN
3 if to_num(to_char(sysdate,'hh24miss')) between '000001' and '040000' AND USER='NPQ' then
4 raise_application_error(-20001,'Not allowed to logon database during this time');
5 end if;
6 end;
7 /
Warning: Trigger created with compilation errors.
SQL>

Setting to Retain User Action Logs in GRC 10.0

Similar Messages

Maybe you are looking for