Change Documents for RAR

[Former Member]

We use RAR 5.3 SP 14 and were wondering if there were any tables or reports that can show the change history upon mitigation added to a user. We can see the date that the mitigation was assigned to a user, but we can't seem to find the date when a mitigation was removed from a user.

For those that are questioning, we do use CUP for mitigations too, but we are mainly trying to find the change documents for RAR.

Thank you in advance.

[Former Member]

SAP Answered

"In 5.3, there is no change log for mitigation control assignment. The only option in 5.3 is if you configure the Workflow option for Mitigation, then a request would have been routed through CUP for

this change and then you could search in CUP for the history of the change. Specifically, under RAR in Configuration - Workflow - Mitigation, if this parameter is set to YES, anytime you would

add, remove or change a mitigation for a user, a workflow item would be sent through to CUP for approval before the change is actually posted.

However, if you don't have this configured, there is no change log of mitigation changes.

There is no change log table in RAR to track mitigation changes, sorry. The change log information is not retained in RAR for changes to mitigations. The only "change log" information in RAR is for

Configuration and rules. This data is stored in table VIRSA_CC_CDHDR and VIRSA_CC_CDPOS. Again, this is only for changes to configuration and changes to rules. This is the only data that RAR tracks

changes for.

Changes to mitigations are NOT stored anywhere in RAR. Please let me know if there is any concern."