Who deleted my workflow?

[Kesari V.S. Katakam]

Paul,

If you still didnt find any trace of SWWL / SE38 of the program attached to
it...

then you would also need to find

is there any user exit/program, which calls a deletion of workitem, based on
any condition / state ? .

Because there is a possiblility that some one is deleting the workitem,
instead of logically deleting it when some condition is met etc.

On 8 September 2011 03:55, <Paul.Bakker at osr.treasury.qld.gov.au> wrote:

> Mike,
>
>  ST03 looks gold. I'll give it a go and report back.
>
> I didn't think any normal user would _know_ how to delete workflows, so I'm
> very curious to determine the who/what/how.
>
> thanks!
> Paul
>
>
>
> From:   "Mike Pokraka" <wug at workflowconnections.com>
> To:     "SAP Workflow Users' Group" <sap-wug at mit.edu>
> Date:   07/09/2011 08:21 PM
> Subject:        Re: Who deleted my workflow?
> Sent by:        sap-wug-bounces at mit.edu
>
>
>
> G'Day Paul,
>
> A couple of things to try:
> Depending on the level of auditing you should see SWWL in the security log
> SM20.
> You can also use ST03 to look at system stats and see if SWWL was run.
> Either Detailed Analysis -> Business Transaction analysis (can take a
> while but may give you usernames), or Workload -> Total and then go to
> Transaction Profile in the Analysis views section and do a search.
>
> People can do stuff using SE38 as well, so +not+ finding SWWL isn't
> necessarily conclusive.
>
> Cheers,
> Mike
>
> On Wed, September 7, 2011 8:57 am, Paul.Bakker at osr.treasury.qld.gov.au
> wrote:
> >
> > Wug'ers,
> >
> > Today I encountered a strange situation : a user emailed me a screenshot
> > of
> > an (active X) workflow log, but when I logged into the (Production)
> > system,
> > the workflow instance had disappeared.
> >
> > I'm sure it's the right system, as I can see an email (in SOST) generated
> > by the workflow instance at the correct time.
> > The workflow cannot be found via GOS, SWI1, or even by looking through
> > SWWWIHEAD.
> >
> > I can only conclude that the workflow instance (and its log) was
> > physically
> > deleted!
> >
> > Does anyone know how to find out who deleted a workflow? Do they leave a
> > ghostly trace?
> > I tried the table CDHDR, but no joy there.
> >
> > thanks!
> > Paul Bakker
> > Australia
> >
> >
> >
>
> *********************************************************************************************
>
> > Only an individual or entity who is intended to be a recipient of this
> > e-mail may access or use the information contained in this e-mail or any
> > of its attachments.  Opinions contained in this e-mail or any of its
> > attachments do not necessarily reflect the opinions of Queensland
> > Treasury.
> >
> > The contents of this e-mail and any attachments are confidential and may
> > be legally privileged and the subject of copyright.  If you have received
> > this e-mail in error, please notify Queensland Treasury immediately and
> > erase all copies of the e-mail and the attachments.  Queensland Treasury
> > uses virus scanning software.  However, it is not liable for viruses
> > present in this e-mail or in any attachment.
> >
>
> ***************************************************************************************************
>
> >
> > _______________________________________________
> > SAP-WUG mailing list
> > SAP-WUG at mit.edu
> > http://mailman.mit.edu/mailman/listinfo/sap-wug
> >
>
>
> _______________________________________________
> SAP-WUG mailing list
> SAP-WUG at mit.edu
> http://mailman.mit.edu/mailman/listinfo/sap-wug
>
>
> _______________________________________________
> SAP-WUG mailing list
> SAP-WUG at mit.edu
> http://mailman.mit.edu/mailman/listinfo/sap-wug
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/sap-wug/attachments/20110910/e98c7e55/attachment.htm