Question Re: Function Permission : AND/OR Searchtype upload issue in Additional Q&A

Function Permission : AND/OR Searchtype upload issue

Former Member — Mon, 22 Oct 2012 16:03:39 GMT

Hi All,

We are on GRC 10.0 SP09.

While uploading ruleset, in Function Permissions file we have searchtype AND at some places is taken as OR by the system.

We understand that if searchtype is blank, system consider's it as AND and if there is no object values mentioned also system takes it as AND.

But when we mention it as AND at some places, Error is we have system taking it as OR.

Please help what would be the possible solution, how system considers the permission conditions.

Regards,

Sravan

Re: Function Permission : AND/OR Searchtype upload issue

premb — Mon, 22 Oct 2012 16:22:45 GMT

Hi Sravan,

Is that happenning only in one field or across the field? For example, for ACTVT and BUKRS

ACTVT 01 AND

BUKRS CMP OR

It can have only AND with the fields and not OR. You can have ACTVT 01 OR 02.

If you have different condition, please paste here.

Thanks

Prem

Re: Function Permission : AND/OR Searchtype upload issue

Former Member — Mon, 22 Oct 2012 16:59:48 GMT

Thanks for your reply Prem.

Please share if we have any info regarding GRC system's behaviour for the searchtype as you explained one scenario.

Thanks in advance.

Regards,

Sravan

Re: Function Permission : AND/OR Searchtype upload issue

FilipGRC — Mon, 22 Oct 2012 17:45:23 GMT

Sravan,

a search operator type may act differently depending on case – below I described possibile ways:

Values defined in range (value from, value to) are linked automatically by the operator OR
Different fields of a one authorization object are linked automatically by the search operator AND
If the same authorization field types (for example activates 01 and 03) are combined, the search operator decides how the fileds are linked together
It is recommended that you use search operator not in HR area only!

Let me know if you need more information,

Filip

Re: Function Permission : AND/OR Searchtype upload issue

Former Member — Tue, 23 Oct 2012 01:41:01 GMT

Hi Filip,

Thanks for your reply.

for the third point

If the same authorization field types (for example activates 01 and 03) are combined, the search operator decides how the fileds are linked together

Query-

If we define ACTVT 01 and 03 for same object and searchtype as and/or will operator consider it as what ever defined?

or what value operator takes by default if we maintain searchtype blank in the file we upload in all the scenarios.

Thanks in advance for your inputs.

Regards,

Sravan

Re: Function Permission : AND/OR Searchtype upload issue

neerajmanocha — Tue, 23 Oct 2012 03:46:28 GMT

Hi Sravan,

You may would like to go to below SAP Notes related to Operators. These have all the details how rules should be designed with the help of operators.

1330165 - Instructions on how to use Operators AND OR NOT

1358952 - Rule Architect - logic of the NOT operator

These will have answer to your all queries.........

If you have same object and have ACTVT 01 and 03 in same line item (irrespective of AND/OR), system will consider this as OR between 01 and 03 (means 01 or 02 or 03). Now opertor AND/OR comes next if you have same Field ACTVT in 2 line items. based upon your operator, your 2 line items will be considred in rules.

Hope this helps.

Thanks & Regards

Neeraj

Re: Function Permission : AND/OR Searchtype upload issue

Former Member — Tue, 23 Oct 2012 05:33:40 GMT

Thanks a lot Prem, Filip and Neeraj for your helpful inputs.

Regards,

Sravan