<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<title>Workflow Substitution Report</title>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
 name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
 /* Font Definitions */
 @font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman";}
a:link, span.MsoHyperlink
        {color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {color:purple;
        text-decoration:underline;}
p
        {mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:12.0pt;
        font-family:"Times New Roman";}
span.emailstyle18
        {font-family:Arial;
        color:navy;}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:Arial;
        color:navy;}
@page Section1
        {size:8.5in 11.0in;
        margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
        {page:Section1;}
-->
</style>

</head>

<body lang=EN-US link=blue vlink=purple>

<div class=Section1>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Will that definitely show who did the
actual approval, though?&nbsp; This issue has been in the back of my mind for
some time now.&nbsp; We wrote some reports that go directly against some
workflow log tables &#8230; a big no-no since they probably won&#8217;t work
whenever we upgrade from 4.6C.&nbsp; Two years ago, SAP brought this subject up
in an ASUG meeting.&nbsp; At that time, customers really weren&#8217;t using
the workflow information system and due to this lack of interest, SAP made no
plans to replace it in BW.&nbsp; Since SOX came along, I&#8217;ve suspect this
issue will start to get more visibility.&nbsp; It goes beyond the mere
technical ability to properly read workflow logs, which of course may be
archived long before audit reports require their data.&nbsp; Since
theoretically workflow merely connects the dots of existing processes, it&#8217;s
always possible for someone to take action outside the workflow.&nbsp; Without application-level
tracking, we could never be certain who did what.&nbsp; For example, if a purchase
order approval workflow uses release strategy, or a sales order approval
workflow uses the status network to block and unblock orders, someone could
conceivably go directly into the <st1:place w:st="on">PO</st1:place> release
transaction or the sales order change transaction and modify the release level
or the status.&nbsp; If I&#8217;m writing a report, should I look at the
workflow log or the change log?&nbsp; For sales orders, I&#8217;m not sure it&#8217;s
even possible to track status changes (JEST) via the change log (CDHDR/CDPOS),
but that&#8217;s another topic.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Bottom line, if you want to report on who
actually did something rather than who had the capability of doing something,
my thinking at the present is that it is safest to always go all the way back
to the application.&nbsp; Of course, many applications don&#8217;t support
digital signatures, change tracking, or other mechanisms for storing this data,
so in those cases it&#8217;s simply not possible.<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Best of luck,<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>David<o:p></o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p>&nbsp;</o:p></span></font></p>

<div>

<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>

<hr size=2 width="100%" align=center tabindex=-1>

</span></font></div>

<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
sap-wug-bounces@mit.edu [mailto:sap-wug-bounces@mit.edu] <b><span
style='font-weight:bold'>On Behalf Of </span></b><st1:place w:st="on"><st1:City
 w:st="on">Toledo</st1:City></st1:place>, Joe (NBC Universal)<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, September 08, 2005
12:53 PM<br>
<b><span style='font-weight:bold'>To:</span></b> 'SAP Workflow Users' Group'<br>
<b><span style='font-weight:bold'>Subject:</span></b> RE: Workflow Substitution
Report</span></font><o:p></o:p></p>

</div>

<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Hi there Bob.</span></font><o:p></o:p></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font><o:p></o:p></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I've used table HR_USD2 to generate a
report to show active substitutions.</span></font><o:p></o:p></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font><o:p></o:p></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I hope this helps.</span></font><o:p></o:p></p>

<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>&nbsp;</span></font><o:p></o:p></p>

<p class=MsoNormal style='margin-left:.5in'><font size=2 face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----<br>
<b><span style='font-weight:bold'>From:</span></b> sap-wug-bounces@mit.edu
[mailto:sap-wug-bounces@mit.edu] <b><span style='font-weight:bold'>On Behalf Of
</span></b>Schmidt, Bob<br>
<b><span style='font-weight:bold'>Sent:</span></b> Thursday, September 08, 2005
10:00 AM<br>
<b><span style='font-weight:bold'>To:</span></b> sap-wug@mit.edu<br>
<b><span style='font-weight:bold'>Subject:</span></b> Workflow Substitution
Report</span></font><o:p></o:p></p>

<p class=MsoNormal style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>&nbsp;<o:p></o:p></span></font></p>

<p style='margin-left:.5in'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>We are allowing users to create substitution rules in
their workflow inboxes usually a manager delegating to their admin. The issue
we are having is that auditors are requesting a report of workitems processed
by each user and additionally if a substitution rule was involved and whom it
was performed on behalf of.<br>
<br>
Has anyone encountered similar requirements and how was it satisfied?<br>
<br>
Regards,<br>
Bob Schmidt <o:p></o:p></span></font></p>

</div>

<br>------------------------------------------------------------------------------------------------<br>This message is for the designated recipient only and may<br>contain privileged, proprietary, or otherwise private information.  <br>If you have received it in error, please notify the sender<br>immediately and delete the original.  Any unauthorized use of<br>this email is prohibited.<br>------------------------------------------------------------------------------------------------<br>[mf2]</body>

</html>