Who deleted or changed data

Hi All,
Is there a transaction to know to who deleted the plan version or changed the plan version in KP97?
and t code to find who deleted or changed master data in finance.
Our posting periods T001B have also been changed and amounts posted to wrong periods and one of the virement.
WE ARE HAVING ISSUE AS BELOW--
I too looked at both tables COBK and COEJ and noticed that the documents were not shown in table COEJ. If these records have been deleted I'm not sure how to check this unless the system can show an audit trail of when table COEJ was last edited? (Presuming that the only way to delete these records is to physically delete them from the table directly?)
The entries on 10th August 2009 in plan version 3 shown in the screenshot below relates as you say to the overnight job through transaction ZPVC, this transaction must have picked up that on the 10th August records were missing from table COEJ and therefore recognised this and therefore posted the difference, for example ZPVC realised that in table COEJ ledger code 200310/55010 now totals to £2,289,824 and not £2,069,324.
AND COULD BELOW EXPLANATION BE A REASON FOR ABOVE PROBLEM*********
The point of my e mail is to query whether this issue could be related to the changes made during the weekend of the 8th and 9th of August, just prior to go live with the system enhancements. The other issue which leads me to believe that this could be related to the go live transition, is that on Monday the 10th August we discovered that the period settings had been changed from current period 5 to previous period 4.
Thankfully we were able to confirm that no postings were made to period 4 during this time which would have lead to errors in the accounts.
ANY LEAD ON THIS WILL BE HIGHLY APPRECIATED.
Thanks!

Hi,
To see the IMG changes proceed as follows;
Position Cursor on the IMG node and click on "Change Log" button (F7). If table loggin is not enabled then you may not be able to see the changes already made. But to track future changes in IMG settings you may Activate Table Logging at the Client Lebel. This can be helped by Basis Team. To check
For changes made using KP97 you will be able to see changes in the planning screen. Go to KP06 or KP26 or KP46 and select the values and press overview button. Then position cursor on the value that you think has got changed and click Line Items (CTRL + SHIFT + F3) you will see the changes.
For changes to FI Master data there are different TCodes;
FS04 - Display changes to GL master centrally etc.
The user id will be available in the change log.
Thanks,

Similar Messages

How to Know who Deleted Your Share Folder Data in Windows Server 2008

Dears,
I have Windows Server for file server and share folder, I have created some shred folders for our departments, based on their request I put specific names belong to department into share folders those users only has access for the share folder, for some unknown
reason some one has deleted all the data inside share folder in the file server, my question is how can I monitor or know who is deleted the information inside share folder because I have more than one user it has access on the share folder, is there any way
to know that like log files or any other solutions? thanks in advance..
Thanks.

Auditing access of shared folder will show you : who deleted shared folder data.
You can follow below steps :
Open Group Policy Editor by typing gpedit.msc to Start menu's search field or Run dialog window and hit Enter.
Go to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies Audit Policy, double click to open Audit Object Access.
Please refer to below links :http://roberttechnicalblog.blogspot.in/2010/02/auditing-shared-folder.html
And, http://www.sevenforums.com/tutorials/123362-audit-log-access-shared-folders.html
Meanwhile, you can also have a look at this proficient application(http://www.fileserverauditor.com/) which looks an exact solution to accomplish auditing task in windows server. It will notify you about all
changes made in windows server by sending a customized emails with real time alerts so that you can take required action while need in your working environment.

Who can create, change or delete cubes?

Hi Gurus,
I am trying to find out who can create, change or delete the cubes at our BW system.
I wanna learn if it possible to report this via SUIM or any other way.
If so can you please tell me about which TCODES or authorization objects should I use.
Thanks in advance!

Hi,
Try these Authorization objects:-
S_RS_ICUBE --> Authorizations for working with InfoCubes and their subobjects
S_RS_ADMWB-->
Authorizations for working with individual objects of the Data Warehousing Workbench. In detail, these are: source system, InfoObject, monitor, application component, InfoArea, Data Warehousing Workbench, settings, metadata, InfoPackage, InfoPackage group, Reporting Agent settings, Reporting Agent package, documents (for metadata, master data, hierarchies, transaction data), document store administration, (Customer) Content system administration, broadcast settings.
Authorizations for working with the BI Accelerator Monitor.
Refer the detailed description of Authorization Objects on the below link:-
https://help.sap.com/saphelp_nw70ehp1/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/content.htm
Hope it helps.
Regards,
Hemlata

How to find out when data was deleted from table in oracle and Who deleted that

HI Experts,
Help me for below query:
how to find out when data was deleted from table in oracle and Who deleted that ?
I did that to fidn out some data from dba_tab_modifications, but I m not sure that what timestamp shows, wether it shows for update,insert or delete time ?
SQL> select TABLE_OWNER,TABLE_NAME,INSERTS,UPDATES,DELETES,TIMESTAMP,DROP_SEGMENTS,TRUNCATED from dba_tab_modifications where TABLE_NAME='F9001';
TABLE_OWNER                    TABLE_NAME                        INSERTS    UPDATES    DELETES     TIMESTAMP         DROP_SEGMENTS TRU
PRODCTL                        F9001                                                     1683         46       2171            11-12-13 18:23:39             0                   NO
Audit is enable in my enviroment?
customer is facing the issue and data missing in the table and I told him that yes there is a delete at 11-12-13 18:23:39 in table after seeing the DELETS column and timestamp in dba_tab_modifications, but not sure I am right or not
SQL> show parameter audit
NAME                                 TYPE        VALUE
audit_file_dest                      string      /oracle/admin/pbowe/adump
audit_sys_operations                 boolean     TRUE
audit_syslog_level                   string
audit_trail                          string      DB, EXTENDED
please help
Thanks
Sam

LOGMiner --> Using LogMiner to Analyze Redo Log Files
AUDIT --> Configuring and Administering Auditing

I had to change my apple ID now how do I update icloud without deleting all cloud data on the computer?

My provider is terminating email service so I had to change my apple ID. I did that in iTunes but now my icloud on my PC wants me to sign in under my old id, I don't see a way to update to the new ID without deleting all cloud data on the PC. Is there another way so I don't have to resync everything from the cloud?

Check the list in the link below, how to change all services, after you changed your Apple ID:
What to do after you change your Apple ID email address or password - Apple Support
https://support.apple.com/en-us/HT204071
In particular, for iCloud:
Update your Apple ID or password on your iPhone, iPad, iPod touch, Mac, PC, and Apple TV.
iPhone, iPad, and iPod touch
Go to Settings > iCloud.
If you're signed out, enter your updated Apple ID or password. The data in iCloud will automatically appear on your device after you sign in.
If you're still signed in with your previous Apple ID:
Scroll down and tap Sign Out, then tap Sign Out to confirm. If you're using iOS 7 or earlier, tap Delete Account, then tap Delete to confirm. You might need to enter your password. Your data will remain in iCloud and will be updated on your device when you sign in to iCloud again.
Enter your updated Apple ID or password.

How can I find out who deleted my data

I think my soon to be ex husband deleted my phone data through my iCloud account..how can I know for sure???

No way to tell. If he accessed your account using your ID/password (assuming he knew those), then there's no way of knowing that. If he doesn't know your ID, then someone else has deleted your data. But again, there's no way of knowing who, if anyone.

Delete or change exif data

does anybody know a plugin or skript to delete or change the exif data ( camera data ) and export the image without the exif info as dng.

the goal is. i like to test different raw converters like phaseone c1, leaf, photoshop camera raw, aperture, lightroom with dng files. I like to buy a digital back phase one or leaf and like develope the leaf files in phase one c1 and phase one files in the leaf application to see the qualitiy of the chip. Both applications do not allow to convert the other files.

Change Data Capture, insert+delete instead of update

Hello everyone,
I'm having an odd issue, that I need some help understanding. I've got a number of tables enabled for Change Data Capture, but I've noticed some behavior that doesn't make sense.
I am utilizing CDC to populate an ODS via SSIS packages, and have noticed a few instances where I'm getting a delete operation come through, but the source record still exists. In the source system, I can query 'cdc.fn_cdc_get_net_changes_...'
and see combinations of 1 (delete) and 4 (update new) for the __$operation.
__$start_lsn, __$operation, TableId, ...
0x000BB75700002F250005, 1, 1938241
0x000BB75700002F250005, 4, 1938241
Also, if I query the cdc.<Table>_CT table directly, I see pairs of 1 and 2 (insert) for the same __$start_lsn and __$seqval. How can this happen? If I get *net* changes, shouldn't I only get one record back per the primary
key of the source table?
__$start_lsn, __$seqval, __$operation, __$update_mask, TableId, ...
0x000BB75700002E7C0005, 0x000BB75700002E7C0003, 1, 0x0FFF, 1938241
0x000BB75700002E7C0005, 0x000BB75700002E7C0003, 2, 0x0FFF, 1938241
0x000BB75700002F250005, 0x000BB75700002F250003, 1, 0x0FFF, 1938241
0x000BB75700002F250005, 0x000BB75700002F250003, 2, 0x0FFF, 1938241
Let me say, I've got a trace going to see if I can find the command(s) that is causing the duplicate results, but has anyone ever seen this before?
Thanks in advance for your time and help!
Jarret

This is called a deffered update. It is the way that some tables are updated - ie a delete followed by an insert.
See if the behavior still occurs when using trace flag 8201, ie
DBCC TRACEON (8207, -1)
looking for a book on SQL Server 2008 Administration?
http://www.amazon.com/Microsoft-Server-2008-Management-Administration/dp/067233044X looking for a book on SQL Server 2008 Full-Text Search?
http://www.amazon.com/Pro-Full-Text-Search-Server-2008/dp/1430215941

Change data capture - ignore delete?

Hello,
I'm trying to solve an issue I met on a synchronous change data capture : I created a CDC table with the DBMS_LOGMNR_CDC_PUBLISH.CREATE_CHANGE_TABLE procedure:
BEGIN
   DBMS_LOGMNR_CDC_PUBLISH.CREATE_CHANGE_TABLE (
      OWNER             => 'APPO',
      CHANGE_TABLE_NAME => 'CT_TEMP_H1',
      CHANGE_SET_NAME   => 'SYNC_SET',
      SOURCE_SCHEMA     => 'APPO',
      SOURCE_TABLE      => 'TEMP_H1',
      COLUMN_TYPE_LIST => 'ISSUE VARCHAR2(10), TITOLO VARCHAR2(150)',
      CAPTURE_VALUES    => 'BOTH',
      RS_ID             => 'Y',
      ROW_ID            => 'N',
      USER_ID           => 'N',
      TIMESTAMP         => 'N',
      OBJECT_ID         => 'N',
      SOURCE_COLMAP     => 'Y',
      TARGET_COLMAP     => 'Y',
      OPTIONS_STRING    => NULL)
END;
Now, it works correctly, and in the CT_TEMP_H1 table I can find all the information about changes that occourr in the TEMP_H1 table
What I'd like to know is if there is a way to avoid the capture "trigger" to fire in the event of DELETE records: due to the application business logic, I'm interested just in insert and updates on the source table, and I don't mind about delete(s), so I don't want them to consume resources (both disk space and CPU) on the server.
Is there a supported way to do so?
Thanks in advance,
- Paolo

Thanks for your answer, Damorgan,
But the CAPTURE_VALUES parameter only manages the UPDATE issues, to have one row containing the row values before the update occurred and another row containing the row values after the update occurred.
What I'm interested in is aviod logging in the change table all the delete operations occourring in the source tables (a sort of "afert indert or update" trigger, instead of the "insert, update or delete"...)
Any hint?
- Paolo

Changing data directly in employee user details / who's who

Using: EP7, MSAD
Hi all,
I would like to know whether it is possible to add a modify button within the user details window (who's who) for changing data directly and not to change to a different location within the enterprise portal.
if yes, how can I do that? Is it also possible to modify different fields depending on the department of the user who wants to change a profile?
Thanks in advance
Michael

I think you'd need to write a brand new who's who for this...

Who deleted data from IC

Hi,
is there any way to know who deleted data from a IC, ODS ?
I looked for a job "BI_DEL*" on SM37 but data was deleted with right click -> complete delete so it seems not to record any entry.
thx in advance

Hi juan
You need to go T-code SLG1
give this in selection condition
External ID: MON:PROTOCOLL_ACTION
T-code : RSA1
Provide date if you can give because there are hell lot of data so be specific in giving the date
you will find some records for deleted request from data target..now search for your target...the user is given in statring of each record
Thanks
Tripple k

Capture who changed data using Forms Personalization & changed to what data

Dear All,
When the data is changed to a new data (say the price has been changed), I need to capture
a) the original data
b) newly changed data
c) who changed the data
into a newly created custom table using FORMS PERSONALIZATION.
How do I do using FORMS PERSONALIZATION?
Thanks.
Matthew

Hey guys, I did it.... and it does work. Here is what I did.
I created a table to capture the required data.
CREATE TABLE XYKA_PRICE_CHANGE_DTLS
LIST_LINE_ID NUMBER,
PRODUCT_ID VARCHAR2(240),
PRODUCT_ATTR_VAL_DISP VARCHAR2(4000),
NEW_PRICE NUMBER,
DIV_NAME VARCHAR2(240),
PRICE_CHANGED_BY VARCHAR2(6),
PRICE_CHANGED_TIME DATE,
OLD_PRICE     NUMBER
Create two procedures which needs to enter data into this XYKA_PRICE_CHANGE_DTLS table. We will pass values from FORMS PERSONALIZATION by calling this
procedure in the ACTION tab.
CREATE OR REPLACE procedure PRICE_CHANGE_DETAILS(price IN number,updated_by IN varchar2,disp IN varchar2,prod_id IN varchar2,line_id IN number,head_id in number,old_price in number) AS
v_name varchar2(240);
BEGIN
select name into v_name from qp_secu_list_headers_v where list_header_id = head_id;
insert into XYKA_PRICE_CHANGE_DTLS(NEW_PRICE, PRICE_CHANGED_BY,ITEM_NUMBER,PRICE_CHANGED_TIME,PRODUCT_ID,LIST_LINE_ID,PRICE_LIST_NAME,OLD_PRICE) values (price,updated_by,disp,sysdate,prod_id,line_id,v_name,old_price);
COMMIT;
END;
CREATE OR REPLACE procedure APPS.PRICE_CHANGE_DTLS(price IN number,updated_by IN varchar2,disp IN varchar2,prod_id IN varchar2,line_id IN number,head_id in number,old_price in number) AS
V_PRICE_CHANGED_TIME date;
V_PRODUCT_ID varchar2(240);
V_LIST_LINE_ID number;
V_count number := 0;
BEGIN
select count(*) into v_count from XYKA_PRICE_CHANGE_DTLS
WHERE LIST_LINE_ID = line_id AND PRODUCT_ID = prod_id AND NEW_PRICE = price;
if nvl(v_count,0) = 0 THEN
PRICE_CHANGE_DETAILS(price,updated_by,disp,prod_id,line_id,head_id,old_price);
else
null;
end if;
END;
In fact, I want to capture the current price and the changed price in pricing which is OPERAND field in qp_list_lines_v table (OM MANAGER > PRICING > PRICE
LISTS > PRICE LIST SETUP)
In the FORM PERSONALIZATION, enter the seq and the description
Seq          1
Description     GLOBAL_VARIABLE
Level          Function
     In the CONDITION tab
          Trigger Event          WHEN-NEW-ITEM-INSTANCE
          Trigger Object          LIST_LINES.OPERAND
          Processing Mode     Not in Enter-Query Mode
          Level               Site
In the ACTION tab
          Seq          1
          Type          Property
          Description     Operand Value
          Language     All
          Object Type     Global Variable
          Target Object     XX_EXIST_OPERAND_VALUE
          PropertyName     VALUE
          Value          ${item.list_lines.operand.value}
          Seq          2
          Type          Property
          Description     USER
          Language     All
          Object Type     Global Variable
          Target Object     XX_USER_ID
          PropertyName     VALUE
          Value          =fnd_global.user_id
Seq          2
Description     CONDITION & PASSING PARAMETER
Level          Function
     In the CONDITION tab
          Trigger Event     WHEN-VALIDATE-RECORD
          Trigger Object     LIST_LINES
          Condition     ${item.list_lines.operand.value} <>${global.XX_EXIST_OPERAND_VALUE.value}
          Processing Mode     Not in Enter-Query Mode
          Level               Site
In the ACTION tab
          Seq          1
          Type          Builtin
          Description     PASSING_VALUE
          Language     All
          Builtin Type     Exceute a Procedure
          Argument     ='begin PRICE_CHANGE_DTLS('''||${item.list_lines.operand.value}||''','''||${global.XX_USER_ID.value}
||''','''||${item.list_lines.product_attr_val_disp.value}||''','''||${item.list_lines.product_id.value}
||''','''||${item.list_lines.list_line_id.value}
||''','''||${item.list_lines.list_header_id.value}||''','''||${global.XX_EXIST_OPERAND_VALUE.value}
||''');end'
Click APPLY NOW button. Save it and the close this FORMS PERSONALIZATION. Go back to the navigation and then click on the module. Try changing the price.
Your current and the newly changed price along with who changed it, time etc will be inserted into XYKA_PRICE_CHANGE_DTLS table.
Edited by: e-brain on Sep 14, 2009 11:21 AM
Edited by: e-brain

I changed my mailto: to yahoo mail but now when I click an email link it has the mailto: and the subject both in the To: part of the email. I have to delete the incorrect data out. How can I fix this?

I changed my mailto: to yahoo mail but now when I click an email link it has the mailto: and the subject both in the To: part of the email. I have to delete the incorrect data out. How can I fix this?

Firefox sent an email to me to confirm that I had asked the above question. The email had a link to click. When I clicked it from Firefox, nothing happened. Then I opened IE, signed into Comcast, opened the email, clicked the link, and it brought me here.

How to find the user who deleted the contents of DSO.

Dear friends,
Can u please tell me ,how to find the user who deleted the contents of the DSO.
The user has deleted the complete contents of the DSO. We need to find the user ,date and time.
regards,
Vijai

Hi,
If the user has used the manage option to delete the contents of the DSO then the changed by field will be updated by the users name. In case a program is used for the deletion then it wont be the case.
Regards
Govind.

Delete Customer Master Data OBR2

Hi
I'm using LSMW to import data. I would like to delete it afterwards. Transaction OBR2 which is in spro Financial Accounting (New) -> Accounts Receivable And Payable -> Customer Accounts -> Master Data -> Delete Customer master data.
But it does not delete the sales are segment, it also does not allow me to delete general data if sales segment exists.
Can anyone please let me know if there is another way around this? Any other way to delete this test data???
Thanks in advance

Hi
Please go through the SAP documentation on how to perform deletion of customer master data.
This may help you in executing the function correctly.
<b>Delete Customer Master Data</b>
In this activity, you delete the master records for customers by using a program. Only use this program in the test phase.
Note
The company code for which master records are to be deleted, may not yet be flagged as productive.
Only master records for accounts which do not have any transaction data may be deleted.
Requirements
The general customer master data is only deleted for customers who are not also created as customers in Sales and Distribution.
Activities
Delete the master records for the required company codes.
Additional information
Refer to the SAPF019 program documentation for further information on the program.
Deleting Master Data
Description
This program deletes master data in Financial Accounting and is designed for preparing the system for productive startup. It deletes:
     Customer master data
     Vendor master data
     G/L account master data
You can run this program in three different ways:
1. Deleting general master data (in G/L accounts in one chart of accounts)
2. Deleting master data dependent on company code
3. Deleting general master data and master data dependent on company code
For each deletion run, you can specify whether or not the system should take into account the deletion flag in master records ("Delete per deletion flag only"). If it takes into account deletion flags, it uses the following standard logic:
Option 1: The "All areas" deletion flag must be set.
Option 2: The "Specified co. code" deletion flag must be set.
Option 3: It is sufficient to have the "All areas" deletion flag set.
Note: Deletion blocks are always checked at general data and company code-dependent data level. If there is a block at company code-dependent data level, then the general data is not deleted either. The deletion block takes precedence over the deletion flag.
General master data in Financial Accounting can also be used in other SAP applications:
     Customer master data in Sales and Distribution
     Vendor master data in Purchasing
     G/L accounts as primary cost elements in Cost Accounting
The program deletes the following:
     Change documents for master data
     SAPscript text files
     The following data is deleted for customers:
o     General master data
o     Bank details
o     VAT registration numbers
o     Addresses
o     Classifications
o     Credit management: across control areas
o     Credit management: centrally
o     Unloading points
o     Tax indicators
o     Contact persons
o     Licenses
o     Partner function limit
o     Shipping data
o     Master data in the company code
o     Dunning data
o     Linked data
     The following data is deleted for vendors:
o     General master data
o     Bank details
o     Contact persons
o     VAT registration numbers
o     Addresses
o     Classifications
o     Master data in the company code
o     Dunning data
o     Linked data
     The following data is deleted for G/L accounts:
o     General master data in the chart of accounts
o     Names in the chart of accounts
o     Key word list in the chart of accounts
o     Master data in the company code
o     Sample accounts, if selected
For customer and vendor contact persons, the addresses are not determined from central address management until the actual runtime. Therefore differences can arise as to the number of addresses in the detail log between the test run and the update run.
Automatic worklists for customers and vendors are also deleted with the general master data. Matchcodes are always deleted.
You may have to fix the number ranges after the program run.
The system makes changes to the database in the update run only. It will then also write a system log entry for documentation.
Requirements
General master data can only be deleted if no other application makes reference to the account. Use the resetting programs from
     Sales and Distribution (customer master data)
     Purchasing (vendor master data)
     Cost Accounting (G/L account master data)
If you want to delete only general master data, master data dependent on company code cannot have been created in Financial Accounting.
If you want to delete master data in a test company code, master data dependent on company code cannot have been created in any other company code except the test company code. The productive indicator cannot be set for the company code.
If a customer or vendor is referenced by another customer or vendor (for example, via fiscal address or alternative payee), you can only delete the referenced master record by deleting the referencing master record at the same time.
Furthermore, you can only delete master data in Financial Accounting if no transactions have been posted to the corresponding accounts. If there are transaction figures in one of the selected accounts, you have to manually access and run program SAPF020 (reset transaction data from a company code) before you can delete that account.
Output
The log lists every table which is processed in the program selection.
You can also create a detail log for each account type to find out why certain data cannot be deleted. The detail logs show you what other company codes and applications use the data and how customers and vendors are linked to one another.
Note
Since deleting or displaying even smaller volumes of data can result in runtime problems, you should run this program as a background job. Currently, the program individually deletes matchcodes for each master record in the database. Several match code IDs refer to each matchcode. This can place a considerable load on the database.
You cannot delete transaction data in individual accounts.
Important: The archiving programs in Financial Accounting are designed for the productive system.
If you are running this deletion program for the first time, then you must start program SAPF047 before deletion in order to generate link information.
I hope this may be of help to you
Good Luck
Hari

Who deleted or changed data

Similar Messages

Maybe you are looking for