Paul, <br><br>If you still didnt find any trace of SWWL / SE38 of the program attached to it...<br><br>then you would also need to find <br><br>is there any user exit/program, which calls a deletion of workitem, based on any condition / state ? .<br>
<br>Because there is a possiblility that some one is deleting the workitem, instead of logically deleting it when some condition is met etc.<br><br><div class="gmail_quote">On 8 September 2011 03:55, <span dir="ltr"><<a href="mailto:Paul.Bakker@osr.treasury.qld.gov.au">Paul.Bakker@osr.treasury.qld.gov.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Mike,<br>
<br>
ST03 looks gold. I'll give it a go and report back.<br>
<br>
I didn't think any normal user would _know_ how to delete workflows, so I'm<br>
very curious to determine the who/what/how.<br>
<br>
thanks!<br>
Paul<br>
<br>
<br>
<br>
From: "Mike Pokraka" <<a href="mailto:wug@workflowconnections.com">wug@workflowconnections.com</a>><br>
<div class="im">To: "SAP Workflow Users' Group" <<a href="mailto:sap-wug@mit.edu">sap-wug@mit.edu</a>><br>
</div>Date: 07/09/2011 08:21 PM<br>
<div class="im">Subject: Re: Who deleted my workflow?<br>
</div><div class="im">Sent by: <a href="mailto:sap-wug-bounces@mit.edu">sap-wug-bounces@mit.edu</a><br>
<br>
<br>
<br>
</div><div><div></div><div class="h5">G'Day Paul,<br>
<br>
A couple of things to try:<br>
Depending on the level of auditing you should see SWWL in the security log<br>
SM20.<br>
You can also use ST03 to look at system stats and see if SWWL was run.<br>
Either Detailed Analysis -> Business Transaction analysis (can take a<br>
while but may give you usernames), or Workload -> Total and then go to<br>
Transaction Profile in the Analysis views section and do a search.<br>
<br>
People can do stuff using SE38 as well, so +not+ finding SWWL isn't<br>
necessarily conclusive.<br>
<br>
Cheers,<br>
Mike<br>
<br>
On Wed, September 7, 2011 8:57 am, <a href="mailto:Paul.Bakker@osr.treasury.qld.gov.au">Paul.Bakker@osr.treasury.qld.gov.au</a><br>
wrote:<br>
><br>
> Wug'ers,<br>
><br>
> Today I encountered a strange situation : a user emailed me a screenshot<br>
> of<br>
> an (active X) workflow log, but when I logged into the (Production)<br>
> system,<br>
> the workflow instance had disappeared.<br>
><br>
> I'm sure it's the right system, as I can see an email (in SOST) generated<br>
> by the workflow instance at the correct time.<br>
> The workflow cannot be found via GOS, SWI1, or even by looking through<br>
> SWWWIHEAD.<br>
><br>
> I can only conclude that the workflow instance (and its log) was<br>
> physically<br>
> deleted!<br>
><br>
> Does anyone know how to find out who deleted a workflow? Do they leave a<br>
> ghostly trace?<br>
> I tried the table CDHDR, but no joy there.<br>
><br>
> thanks!<br>
> Paul Bakker<br>
> Australia<br>
><br>
><br>
><br>
*********************************************************************************************<br>
<br>
> Only an individual or entity who is intended to be a recipient of this<br>
> e-mail may access or use the information contained in this e-mail or any<br>
> of its attachments. Opinions contained in this e-mail or any of its<br>
> attachments do not necessarily reflect the opinions of Queensland<br>
> Treasury.<br>
><br>
> The contents of this e-mail and any attachments are confidential and may<br>
> be legally privileged and the subject of copyright. If you have received<br>
> this e-mail in error, please notify Queensland Treasury immediately and<br>
> erase all copies of the e-mail and the attachments. Queensland Treasury<br>
> uses virus scanning software. However, it is not liable for viruses<br>
> present in this e-mail or in any attachment.<br>
><br>
***************************************************************************************************<br>
<br>
><br>
> _______________________________________________<br>
> SAP-WUG mailing list<br>
> <a href="mailto:SAP-WUG@mit.edu">SAP-WUG@mit.edu</a><br>
> <a href="http://mailman.mit.edu/mailman/listinfo/sap-wug" target="_blank">http://mailman.mit.edu/mailman/listinfo/sap-wug</a><br>
><br>
<br>
<br>
_______________________________________________<br>
SAP-WUG mailing list<br>
<a href="mailto:SAP-WUG@mit.edu">SAP-WUG@mit.edu</a><br>
<a href="http://mailman.mit.edu/mailman/listinfo/sap-wug" target="_blank">http://mailman.mit.edu/mailman/listinfo/sap-wug</a><br>
<br>
<br>
_______________________________________________<br>
SAP-WUG mailing list<br>
<a href="mailto:SAP-WUG@mit.edu">SAP-WUG@mit.edu</a><br>
<a href="http://mailman.mit.edu/mailman/listinfo/sap-wug" target="_blank">http://mailman.mit.edu/mailman/listinfo/sap-wug</a><br>
</div></div></blockquote></div><br>