App Users [message #139372] |
Tue, 27 September 2005 13:47 |
PattyAtT
Messages: 3 Registered: September 2005 Location: USA
|
Junior Member |
|
|
Is setting the end_date of a user sufficient, or is there a way to drop/remove the user entirely from the application...
We're going through Sarb-Ox compliance right now, and I got the following question from our auditors:
"
Why are they being maintained if they have been in-active for 4 years?
"
|
|
|
Re: App Users [message #139382 is a reply to message #139372] |
Tue, 27 September 2005 15:08 |
mchittib
Messages: 87 Registered: September 2005
|
Member |
|
|
You can only give an end date. You cannot delete a user, probably they are stored, if at a later stage the user comes back to company, or to track the events done by that user.
|
|
|
|
Re: App Users [message #140064 is a reply to message #139415] |
Fri, 30 September 2005 12:51 |
AnalystParth
Messages: 15 Registered: September 2005 Location: India
|
Junior Member |
|
|
Well if the idea is to convince/explain to the auditors, there are plenty of reasons, a few below should help:
1. Lets say user X made a transaction for a million that has got recorded in the GL, and it happens 4 years ago. Are we better off keeping his information or loosing it?
2. As suggested by manwadkar, why loose the primary record that links a host of other user related transaction history
3. This information is not like paper based documents which one would feel is loading up space or adding to complications. So why not just leave it around, just in case you want to check some old archived history sometime later?
4. Its just two tables that maintain the user information (mainly) fnd_users and hz_parties. So why really bother about cleaning it up?
Now getting to the key concern that auditors probably have, "If a user is to be closed then the "clean" way would be to remove his record rather than just disable him. There is always be the danger of getting him revoked"
Well end dating as far as the application goes is the best way to disable him. Applications doesnt prefer deleting for reasons cited above. And you are better off diabling and enabling users as per requirement than deleting, loosing all his data and adding him back as if he were a new user!
--Parth
|
|
|
|