Substitution questions

Sun Sep 12 19:33:05 EDT 2004

An option we have setup at customers here is when using true (HR)
substitutions and not just the Workflow one.
Works as follows.

Assign permissions to positions not people.
So when a substitution takes place, the overnight job
assigns extra roles to that person.
the standard pFCG update job, users the holder relationship normally.
But the report can be changed to use extra relationships.
You may prefer to try it in a user exit.
I found adding an extra relationship to the standard report
easier.

This approach is good but not perfect.
since there is delay in the receiving the roles, (till the job runs).
Also a cutoff happens when the substitution terminates.
So a workflow in progress can be trapped be lack of authorization.

My thought at the end of the day,  if a person is allowed to be a substitute, you need to ask yourself why is It only valid for them to have the access some of the time and not all of the time.

Do they become less of risk when their manager goes on holiday
and turn into a devil on their return.

I think people confuse responsibility and authorization.

I never did understand this argument.
If there is a valid argument, I would love to here it.

cheers

Phil Soady
Senior Consultant
Business Technologies
SAP Australia
M  +61 (0) 412 213 079
E  phil.soady at sap.com

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of Nat 4 Govender
Sent: Thursday,9 September 2004 3:05 PM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: Substitution questions

Hi Partha,

No.  All this is part os our custom substitution workflow at Toyota.

When any type of absence is entered into the system this starts two
workflows
One for the approval absence and the other is for the substitution if the
start date is greater than or equal to the current date.

With the substitution workflow a work item is sent to the person who will
be absence to select a substitute and then to his superior to approve or
choose someone else.
On approval of the manager a profile is created which includes all the
profiles of the person  that is going to be absence and this is then added
to the substitute with a start date and end date.

Regards
Nat Govender
Toyota South Africa
SAP Support  - SAP Workflow
Ext.              : 32645
Direct Line : 031 - 910 2645
Fax              : 031 - 902 9633
E-Mail         : ngovender4 at toyota.co.za

             "Chatterjee,

             Partha (US - San

             Ramon)"                                                    To

             <pchatterjee at delo         SAP-WUG at MITVMA.MIT.EDU

             itte.com>                                                  cc

             Sent by: SAP

             Workflow                                              Subject

             <Owner-SAP-WUG at MI         Re: Substitution questions

             TVMA.MIT.EDU>

             2004/09/08 05:52

             PM

             Please respond to

               SAP Workflow

               Users' Group

             <SAP-WUG at MITVMA.M

                  IT.EDU>

Hi Nat,

I assume you add the new profiles manually?  Or have figured out a way
of automating this process via a Z-program?

Best regards,
Partha Chatterjee

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of
Nat 4 Govender
Sent: Tuesday, September 07, 2004 10:16 PM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: Substitution questions

In our substitution workflow we create a new profile of the who is going
to
be substitute called Z:and the user ID, eg Z:NAT and this new profile is
added to the substitute for the period of the substitution.

Regards
Nat Govender
Toyota South Africa
SAP Support  - SAP Workflow
Ext.              : 32645
Direct Line : 031 - 910 2645
Fax              : 031 - 902 9633
E-Mail         : ngovender4 at toyota.co.za

             "Dart, Jocelyn"

             <jocelyn.dart at sap

             .com>
To

             Sent by: SAP              SAP-WUG at MITVMA.MIT.EDU

             Workflow
cc

             <Owner-SAP-WUG at MI

             TVMA.MIT.EDU>
Subject

                                       Re: Substitution questions

             2004/09/08 03:42

             AM

             Please respond to

               SAP Workflow

               Users' Group

             <SAP-WUG at MITVMA.M

                  IT.EDU>

Hi Partha,
1) Yes you cannot chain substitutes - this is *not* missing
functionality -
this is for financial delegation/audit/security reasons. I.e. If I
substitute my work to someone else, this does *not* in any way imply
that I
am ok with them sending it on to a 3rd person.

2) No - trouble is that its very difficult if not impossible to know in
advance what authorisations they are going to need for the underlying
transactions/routines that may be called by workflow.  Better approach
is
to consider who will be substitutes up front in your design, so that
either
they are peers with similar authorisations, or you build your workflow
to
cater for possible action by a substitute, e.g. use user decisions
(which
don't require extra authorisation) and then perform updates in
background.

Rgds,
Jocelyn

-----Original Message-----
From: SAP Workflow [mailto:Owner-SAP-WUG at MITVMA.MIT.EDU] On Behalf Of
Chatterjee, Partha (US - San Ramon)
Sent: Wednesday,8 September 2004 11:23 AM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Substitution questions

Hi All,

I have looked at the WUG archives and still have a few questions on SAP
Inbox substitution functionality:

1) Is it still true that chaining substitutes is not recognized ( i.e. A
is
substitututed to B then B is substituted to C --> however C will not see
A's stuff?)  -- The last answer on this subject in the archives was in
2001.

2) When someone delegates is there any functionality which will allow
authority checks.  For example, I substitute a subordinate for my
workitems.  For some of these workitems, the subordinate does not have
the
underlying authority to execute this transaction even though I intended
him
to temporarily have such authority.  My understanding is that there is
no
such check since one cannot know intent and SAP feels the security
process
is separate.  It would be nice if there were something that informed the
mgr during substitution that some of his workitems could not be executed
by
his subordinate so he could choose someone else or call security etc.
Has
anyone else dealt with this issue?

Best regards,
Partha

This message (including any attachments) contains confidential
information
intended for a specific individual and purpose, and is protected by law.
If you are not the intended recipient, you should delete this message.
Any
disclosure, copying, or distribution of this message, or the taking of
any
action based on it, is strictly prohibited.

This message is a privileged and private communication and may be read,
copied and used only by

the intended recipient(s). If you are not an intended recipient, please
let us know by return email.

Please then delete the message and do not disclose its contents to any
person. Neither the sender nor

Toyota South Africa Motors accepts any liability whatsoever as a result
of the further dissemination

of this message. Whilst all reasonable steps are taken to avoid
corruption of data or information,

we do not accept any liability should such corruption occur.

This message (including any attachments) contains confidential information
intended for a specific individual and purpose, and is protected by law.
If you are not the intended recipient, you should delete this message.  Any
disclosure, copying, or distribution of this message, or the taking of any
action based on it, is strictly prohibited.

This message is a privileged and private communication and may be read, copied and used only by

the intended recipient(s). If you are not an intended recipient, please let us know by return email.

Please then delete the message and do not disclose its contents to any person. Neither the sender nor

Toyota South Africa Motors accepts any liability whatsoever as a result of the further dissemination

of this message. Whilst all reasonable steps are taken to avoid corruption of data or information,

we do not accept any liability should such corruption occur.