topic Problems with CUA in Application Development and Automation Discussions

Problems with CUA

former_member620387 — Wed, 22 Oct 2008 07:17:41 GMT

Hi,

I have a problem with the CUA.

We have scheduled the report RBDAPP01 for IDoc inbound processing. Oubound IDOCs are triggered immediately. The job RBDAPP01 is scheduled every five minutes.

We have scheduled the Report PFCG_TIME_DEPENDENCY as well once a day at 22:00.

Role assignment is only allowed in the central system.

Now, we have the problem, that an empolyee has deleted several roles. With the report RBDAPP01 this delete has taken affect. But at 22:05 the roles that were deleted before, were assigned to the user again.

Do you have any idea about this effect?

Best regards and thank you for your help.

Bjoern

Re: Problems with CUA

Bernhard_SAP — Wed, 22 Oct 2008 08:03:34 GMT

Hi Bjoern,


> Now, we have the problem, that an empolyee has deleted several roles. With the report RBDAPP01 this delete has taken affect.
>

I suppose, that the user deleted role assignements, not the roles themselves....


>But at 22:05 the roles that were deleted before, were assigned to the user again.
>

pfcg_time-dependency does not assign/delete role assignements, but only their profiles. The only exception is, if roles are assigned through HR-ORG.

b.rgds, Bernhard

Re: Problems with CUA

former_member620387 — Wed, 22 Oct 2008 13:30:38 GMT

I suppose, that the user deleted role assignements, not the roles themselves....

> Yes, sure.

pfcg_time-dependency does not assign/delete role assignements, but only their profiles. The only exception is, if roles are assigned through HR-ORG.

> Okay, but if I delete a role assignment why are the profiles at 22:05 assigned again?

Re: Problems with CUA

Bernhard_SAP — Thu, 23 Oct 2008 08:47:58 GMT

Hi Bjoern,

did you check SCUL after the removal?

Even if the status was green, such issues can occur, if someone (re) processes (old) idocs in the child system directly. Then of course 'old' assignements are entered again. User-idocs shall never been processed manually in the child system.

So the scenario I can imagine is, that a change to that user has been performed. 3 idocs are sent to child. But the role idoc did not get processed (for instance lock-causes).

then the role asignement is removed, 3 idocs are sent again and are processed properly.

After that the errornous idoc got processed in the child system, and therefore the obsolete assignements are entered again....

b.rgds, Bernhard