Using of CHANGEDOCUMENT_READ FM

[Former Member]

HI

I want to know if admin delete role for user (i need also the time that the role change) and i found CHANGEDOCUMENT_READ

but i dont know how to use it ?

i know about table agr_users and CDHDR but i dont know how to use it.

for example in date 16.8.2009 the admin delete for user the role sap_all ,

i want to know that .

Best Regards

Joy

[Clemenss]

Hi Joy,

I do not have the exact answer for your question, but:

In many transactions, you have menu uitility or extras function for change history.

CHANGEDOCUMENT_READ FM is used to read the change documents.

table CDHDR has change object, database table, use, change date, CDPOS the fields changed with old and new value.

One possible way to understand your specific situation is to make a similar change manually, then check the CDHDR for your user on that day, then check CDPOS.

Regards,

Clemens

[Former Member]

HI Clemens,

Thanks ,

when i delete one role for user and i put the tables (cdhdr, cdpos and also pfcg in the class ) on the FM i get noting .

do u have an idea why ,maybe i miss some parameter ?

Best Regards

Joy

[Former Member]

Which release and SP are you on? This is relevant.

Roles are just a tool ontop of profiles (and JAVA UME groups) to assign access, so:

If this is in an ABAP system, then you can use report RSUSR100 to evaluate the changes (the backend table is USH04) when the actual profiles were assigned.

But the application specific user change documents are now (since about a year or so) merged into the standard application change documents (CDPOS etc).

There is a new report now => RSUSR100N which will evaluate both.

There are some important SAP notes to implement and also the possibility to migrate existing data to the new mechanism (created prior to it existing).

Cheers,

Julius

[Former Member]

HI Julius,

Thanks ,

I debug the report RSUSR100N and i found the FM :SUSR_CHANGE_DOC_ROLES which

what i need but when i try to delete one role from my role today and i give my BE name as user

in low I & EQ and f_date today and the FM run about 2 Sec ,

i think that this is to much do u have idea way for simple selection the report are delay ?

Regards

Joy

Edited by: Joy Stpr on Aug 17, 2009 10:23 PM

[Former Member]

I am not logged on, but if you search "OSS" for the name of the report there is also a migration procedure and some subsequent notes to the initial one about the change. Compare these to your SP level.

If you are using Central User Administration then you must please take a look at the subsequent notes.

Cheers,

Julius

[Former Member]

Call the function module by passing OBJECTCLASS = 'PFCG', DATE_OF_CHANGE = <Date since the change has happened> (you can leave this blank as it is optional, then it will give all the changes since the beginning) and OBJECTID = <Role Name>.