Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Problems with CUA

0 Kudos

Hi,

I have a problem with the CUA.

We have scheduled the report RBDAPP01 for IDoc inbound processing. Oubound IDOCs are triggered immediately. The job RBDAPP01 is scheduled every five minutes.

We have scheduled the Report PFCG_TIME_DEPENDENCY as well once a day at 22:00.

Role assignment is only allowed in the central system.

Now, we have the problem, that an empolyee has deleted several roles. With the report RBDAPP01 this delete has taken affect. But at 22:05 the roles that were deleted before, were assigned to the user again.

Do you have any idea about this effect?

Best regards and thank you for your help.

Bjoern

3 REPLIES 3

Bernhard_SAP
Employee
Employee
0 Kudos

Hi Bjoern,

>

> Now, we have the problem, that an empolyee has deleted several roles. With the report RBDAPP01 this delete has taken affect.

>

I suppose, that the user deleted role assignements, not the roles themselves....

>

>But at 22:05 the roles that were deleted before, were assigned to the user again.

>

pfcg_time-dependency does not assign/delete role assignements, but only their profiles. The only exception is, if roles are assigned through HR-ORG.

b.rgds, Bernhard

0 Kudos

I suppose, that the user deleted role assignements, not the roles themselves....

> Yes, sure.

pfcg_time-dependency does not assign/delete role assignements, but only their profiles. The only exception is, if roles are assigned through HR-ORG.

> Okay, but if I delete a role assignment why are the profiles at 22:05 assigned again?

0 Kudos

Hi Bjoern,

did you check SCUL after the removal?

Even if the status was green, such issues can occur, if someone (re) processes (old) idocs in the child system directly. Then of course 'old' assignements are entered again. User-idocs shall never been processed manually in the child system.

So the scenario I can imagine is, that a change to that user has been performed. 3 idocs are sent to child. But the role idoc did not get processed (for instance lock-causes).

then the role asignement is removed, 3 idocs are sent again and are processed properly.

After that the errornous idoc got processed in the child system, and therefore the obsolete assignements are entered again....

b.rgds, Bernhard