on 01-16-2012 9:15 AM
Dear Experts,
We have one audit requirement. We need u2018change logu2019 for useru2019s role modification.
I checked in console logs. I found the log for delete user & modify user. In case of delete user it is giving details which are the users had been deleted. But in case of role modify in user, it is not giving which are the users had been modified or which newly role had been assign.
We need change log report from MDM console.
Regards,
Gaurang
Hi Gaurang,
Please find section 4.2 of the document below:
http://help.sap.com/saphelp_mdm71/helpdata/en/4d/bf9ac206ec288de10000000a42189e/MDMSecurity71.pdf
Regards,
Neethu Joy
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Neethu,
My MDM version is 7.1 SP06
It appears to be helpful document.
Can you pls elaborate below paragraph mention in doc.
<repositoryAdmin><role action="modify" id="2"><functionRight>
<function>16777216</function><access>1</access>
</functionRight></role></repositoryAdmin>
In this case the role with ID 2 has been modified. The authorization with ID 16777216 (see function ID map below) has been set to 1 (Execute).
How to identify which user & which roles has been change from this log description.
Regards,
Gaurang
Hi Gaurang,
<repositoryAdmin><role action="modify" id="2"><functionRight>
<function>16777216</function><access>1</access>
</functionRight></role></repositoryAdmin>
In this case the role with ID 2 has been modified. The authorization with ID 16777216 (see function ID map below) has been set to 1 (Execute).
Below this section there is one table with function ID and Description.
Here in case of change in functions Tab
<access>X</access> will tell u if the function is set to Execute or None:
Legends:
Execute:1
None:0
and which function u will get from <function>16777216</function>
For decoding the function id there is a table given in section 4.2
and if there is any change in the table and fields tab:
then log will be as follows:
<repositoryAdmin><role action="modify" id="5"><objectRight> <object>1</object><type>0</type><access>2</access>
</objectRight></role></repositoryAdmin>
where access will tell u if its Read Write(3) or Read Only(2)
Which table u will get from <object>ID</object>
Now this role ID and Table ID is the Index values which u can get using API.
Try to write an api which will extract the Table ID ,Field ID and Role ID information in an Excel this u can use as reference the decode the Log.
Regards,
Neethu Joy
User | Count |
---|---|
88 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.