LTM Security role was unassigned somehow -

100% certain a user had the LTM RequisitionApprover_ST role as she last approved requisition on 3/22/17

Yesterday she went in to approve and no longer had access.

Is there a log that can show when/who/how a rule became unassigned from an actor?

I have a general idea but need to see if can 'show' it.

1. When we went live, we did NOT have ISS working, though we were federated with LSF being primary

2. We added rules on LTM side that related to LTM and rules on LSF that related to LSF

3. Our Security team had not been running ISS Syncs and not all security changes were consistently being done via ISS when it was implemented.

4. 3/28 is when a consistent sync schedule was implemented weekly

Sometime between 3/22 and 4/26 I know this rule was removed from her security.

(*we had done a copy from our prod environment to our test environment on 4/26 so I looked in TEST and she didn't have this rule)

Is there some log or something that will show what happened in a sync? If ltm had 5 rules and lsf didn't have one of those, would it have been 'unassigned' ??

I just trying to help figure out how rules 'disappear' as it has happened to a few others as well

Any insight or direction would be greatly appreciated

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

unknown

We have had a similar issue in the past, I believe that it was somehow related the manual load/update of users using a spreadsheet that was not always up to date with ISS= different role assignments. I work more with the lsf security side and have seen deleted roles come back to life in the Security Administrator. We have since stuck closer to using the ISS tool for user updates and have tried to keep the 'spreadsheet' up to date. In your #2 above, did you mean roles instead of rules?

unknown

We too are federated with lsf primary. In the beginning, we had some issues. I recalling having to define the landmark roles in the Lawson RM Administrator on the lsf side.

Derick Safarian

Are you referring to roles, or rules? If roles are disappearing from users, you can look in the LTM audit logs to see if it will display the role deletions. The business class is ActorRole. Once you have opened the ActorRole business class, locate the Actor, then go to Actions -> View Full Audit Log. You can also try to change the "As of Date" to a previous date to see how data looked in the past.

unknown

I mean ROLES.. If a role was deleted, you can't click on it to view the audit log for it... appears audit log is role by role... so I have to add the role back, then view audit log and can then see if/when it was deleted.

Just seems like should be easier way to see it.

But I found out that wasn't the issue in the case I had issue with... HiringManager_ST apparently allowed requisition approval of their own req's and we changed to custom hiring manager role for a request in april and now that apparently doesn't allow the req approval.

But issue has been identified...

0712131256598360.doc

Copyright © 2025 Infor. All rights reserved.