Substitution questions

Thu Sep 9 12:47:37 EDT 2004

Hi Nat,

Thanks for info sounds like an interesting process--I doubt we will get
an absence approval workflow authorized for go-live as it was not in the
original scope.

However, I am curious as to whether the profile that is created after
the manager approves the substitute is done manually by your SAP
security folks or after the approval does a background program compare
profiles and create the z-profile with the additional authorizations and
then again in the program add this z-profile to the substitute in
question?

Best regards,
Partha Chatterjee

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of
Nat 4 Govender
Sent: Wednesday, September 08, 2004 10:05 PM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: Substitution questions

Hi Partha,

No.  All this is part os our custom substitution workflow at Toyota.

When any type of absence is entered into the system this starts two
workflows
One for the approval absence and the other is for the substitution if
the
start date is greater than or equal to the current date.

With the substitution workflow a work item is sent to the person who
will
be absence to select a substitute and then to his superior to approve or
choose someone else.
On approval of the manager a profile is created which includes all the
profiles of the person  that is going to be absence and this is then
added
to the substitute with a start date and end date.

Regards
Nat Govender
Toyota South Africa
SAP Support  - SAP Workflow
Ext.              : 32645
Direct Line : 031 - 910 2645
Fax              : 031 - 902 9633
E-Mail         : ngovender4 at toyota.co.za

=20

             "Chatterjee,

             Partha (US - San

             Ramon)"
To

             <pchatterjee at delo         SAP-WUG at MITVMA.MIT.EDU

             itte.com>
cc

             Sent by: SAP

             Workflow
Subject

             <Owner-SAP-WUG at MI         Re: Substitution questions

             TVMA.MIT.EDU>

=20

=20

             2004/09/08 05:52

             PM

=20

=20

             Please respond to

               SAP Workflow

               Users' Group

             <SAP-WUG at MITVMA.M

                  IT.EDU>

=20

=20

Hi Nat,

I assume you add the new profiles manually?  Or have figured out a way
of automating this process via a Z-program?

Best regards,
Partha Chatterjee

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of
Nat 4 Govender
Sent: Tuesday, September 07, 2004 10:16 PM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: Substitution questions

In our substitution workflow we create a new profile of the who is going
to
be substitute called Z:and the user ID, eg Z:NAT and this new profile is
added to the substitute for the period of the substitution.

Regards
Nat Govender
Toyota South Africa
SAP Support  - SAP Workflow
Ext.              : 32645
Direct Line : 031 - 910 2645
Fax              : 031 - 902 9633
E-Mail         : ngovender4 at toyota.co.za

             "Dart, Jocelyn"

             <jocelyn.dart at sap

             .com>
To

             Sent by: SAP              SAP-WUG at MITVMA.MIT.EDU

             Workflow
cc

             <Owner-SAP-WUG at MI

             TVMA.MIT.EDU>
Subject

                                       Re: Substitution questions

             2004/09/08 03:42

             AM

             Please respond to

               SAP Workflow

               Users' Group

             <SAP-WUG at MITVMA.M

                  IT.EDU>

Hi Partha,
1) Yes you cannot chain substitutes - this is *not* missing
functionality -
this is for financial delegation/audit/security reasons. I.e. If I
substitute my work to someone else, this does *not* in any way imply
that I
am ok with them sending it on to a 3rd person.

2) No - trouble is that its very difficult if not impossible to know in
advance what authorisations they are going to need for the underlying
transactions/routines that may be called by workflow.  Better approach
is
to consider who will be substitutes up front in your design, so that
either
they are peers with similar authorisations, or you build your workflow
to
cater for possible action by a substitute, e.g. use user decisions
(which
don't require extra authorisation) and then perform updates in
background.

Rgds,
Jocelyn

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of
Chatterjee, Partha (US - San Ramon)
Sent: Wednesday,8 September 2004 11:23 AM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Substitution questions

Hi All,

I have looked at the WUG archives and still have a few questions on SAP
Inbox substitution functionality:

1) Is it still true that chaining substitutes is not recognized ( i.e. A
is
substitututed to B then B is substituted to C --> however C will not see
A's stuff?)  -- The last answer on this subject in the archives was in
2001.

2) When someone delegates is there any functionality which will allow
authority checks.  For example, I substitute a subordinate for my
workitems.  For some of these workitems, the subordinate does not have
the
underlying authority to execute this transaction even though I intended
him
to temporarily have such authority.  My understanding is that there is
no
such check since one cannot know intent and SAP feels the security
process
is separate.  It would be nice if there were something that informed the
mgr during substitution that some of his workitems could not be executed
by
his subordinate so he could choose someone else or call security etc.
Has
anyone else dealt with this issue?

Best regards,
Partha

This message (including any attachments) contains confidential
information
intended for a specific individual and purpose, and is protected by law.
If you are not the intended recipient, you should delete this message.
Any
disclosure, copying, or distribution of this message, or the taking of
any
action based on it, is strictly prohibited.

This message is a privileged and private communication and may be read,
copied and used only by

the intended recipient(s). If you are not an intended recipient, please
let us know by return email.

Please then delete the message and do not disclose its contents to any
person. Neither the sender nor

Toyota South Africa Motors accepts any liability whatsoever as a result
of the further dissemination

of this message. Whilst all reasonable steps are taken to avoid
corruption of data or information,

we do not accept any liability should such corruption occur.

This message (including any attachments) contains confidential
information
intended for a specific individual and purpose, and is protected by law.
If you are not the intended recipient, you should delete this message.
Any
disclosure, copying, or distribution of this message, or the taking of
any
action based on it, is strictly prohibited.

This message is a privileged and private communication and may be read,
copied and used only by

the intended recipient(s). If you are not an intended recipient, please
let us know by return email.

Please then delete the message and do not disclose its contents to any
person. Neither the sender nor

Toyota South Africa Motors accepts any liability whatsoever as a result
of the further dissemination

of this message. Whilst all reasonable steps are taken to avoid
corruption of data or information,

we do not accept any liability should such corruption occur.

This message (including any attachments) contains confidential =
information intended for a specific individual and purpose, and is =
protected by law.  If you are not the intended recipient, you should =
delete this message.  Any disclosure, copying, or distribution of this =
message, or the taking of any action based on it, is strictly =
prohibited.