Database Account and User Groups

Hello,
Currently, I am using DATABASE ACCOUNT for an authentication scheme for all of my applications but, I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users. I have read that, in order to apply user groups in an application, you must use APPLICATON EXPRESS ACCOUNT credentials.
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication? What is the best practice in a case like this?
Can anyone please shed some light on this? Thanks.
- Dee

Dee,
I would like to setup User Groups as well to limit users to thier prospective pages and/or objects within the application for easy maintenance of users.I'm not clear on what your purpose is, just runtime authorization, or something more?
Another developer has modified the "APEX_ACCESS_CONTROL" table with an additional column(s) that would allow access to specific pages. I am not sure if this is good practice to modify Apex tables.Those tables belong to your application's parsing schema and they are accessed only by code in applications you develop. The Application Express machinery knows nothing about them.
Is there a way to create user groups while using DATABASE ACCOUNT for authentication?You can create your own tables to define groups and to keep track of which named accounts belong to which groups. And you can write an API for applications to use to query this information and to maintain it from custom applications built for that purpose.
All

Similar Messages

Need info regarding Oracle UCM Accounts and Security Groups behaviour

Need information regarding Oracle UCM Accounts and Security Groups behaviour.
Oracle UCM version: 11.1.1.5.0
Steps:
1. Log in with "weblogic" user and created a content with id "content1"
2. Applied "@acc1(R)" and "TestGroup1" to the cotent created in step 1
3. Log out
4. Log in as "acc1user1", the user is not able to see the "content1"
5. Log out
6. Log in as "role1user1", the user is not able to see the "content1"
Account and Group information:
1. User "acc1user1" is part of "@acc1(R)"
2. User "role1user1" is part of "role1(R)" and is mapped to "TestGroup1" in UCM
Expected:
Both "acc1user1" and "role1user1" should be able to see "content1" as they have at least Read permission.
Please help me understand why the users are not able to see the content.

ACLs, like Accounts, are optional security setting which may add on some extra functionality to mandatory security groups. Likewise, the resulting permission is taken as an intersection of SG and ACLs.
But in the second part the number of set of users is huge (approx say 600)I don't get this completely. Does this mean that those "sets of users" (users who see the same data) are distinct and that there is 600 of such groups?
If you read thoroughly the manual I sent earlier, there is a recommendation that there should be maximum 50 security groups, and you should use accounts, should this number be exceeded. This means you could have all the documents in one security group (and have one common role with Read permission), but combine it with accounts. ACLs are not a good choice here - their performance and manageability is much worse than of accounts. ACLs are primarily used if you expect security settings to change during the lifetime (e.g. a project manager adds temporarily rights to access an item to another user, and revokes it when the user finishes his or her work).
Note that accounts as well as permissions of users within accounts can also be mapped externally (from LDAP/AD) and it usually follows some kind of org chart.
I'd feel more comfortable not to speak about users, security groups, roles, etc., but about some real-life objects and scenarios.

Difference Between Service Account and User Account

What is the Difference Between Service Account and User Account

Hello Mohit,
Basically there are two types of approches which you should understand.
In many environments, administrators prefer to simply create a domain user account and assign appropriate privileges to it. Then this user account is used in order to start a specific service on a computer.
In that case there is really no difference between a user account and the so called service accounts. Since this service account is simply a domain user, all the task related to managing the domain users apply to it. For example you
should keep the password up to date manually. Some environment move step forward and assign
Deny Logon Locally of this type of service account in order to enhance the security.
The second concept is Managed Service Accounts. There are plenty of differences between a Managed Service Account and a User Account.
The Display Icon is different from a view perspective.
The type of object is different.
Managed service accounts password management is automatic.
You can not create Managed Service Accounts using GUI. They are only created using Powershell.
You can refer to link below for more inormation:
Service Accounts Step-by-Step Guide
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

I want to add another ipod, but under a different account and user name can i do this and how?

I want to add another ipod under my exticting I tunes. But want to set it up as a different account and user. Is this possible and how?

The easiest way is set up a new user profile on your PC. Then copy the iTunes folder to the public folder and from there copy it to the iTunes folder in the new user profile.
(this way you can use music in both accounts, even if you bought it from Apple - it needs to be DRM free though, so older stuff might be protected)

How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

SAB BO 4.1 SP1
Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

Hello Ricardo,
have you try a call like this one ?
    <schedule>
      <name>"test"</name>"
      <format type=\"webi\"/>
      <destination>
        <inbox>
         <to>userId1,userId2,userId3,groupId1,groupId12</to>
        </inbox>
      </destination>
    </schedule>
Regards
Stephane

Migrate Rpd Catalog and User ,Groups from OBIEE 11.1.1.3.0 to 11.1.1.5.0

hi Guys,
I have got a setup of OBIEE 11.1.1.3.0 on windows 32bit machine and now i am planning to have a setup of 11.1.1.5.0 on windows 64 bit machine.
please tell me the Detailed steps for Migrating the Rpd Catalog and User ,Groups from OBIEE 11.1.1.3.0 to 11.1.1.5.0
Like
1. Do i have to copy the RPD and Catalog Directly to 1.5 or some Upgrade Assistance is to be done
2. If i am Using the Export Provided in the myrelam ( in 1.3) and taking it to obiee 1.5 (as it already contains some inbuilt policies and groups) does it going to give me error
Regards
Ankit

Check the Oracle reference I have provided earlier. Concept goes like this:
Important difference is that upgrading from 10g to 11g is called an "out-of-place upgrade" while upgrading to another 11g is called an "in-place upgrade," because the upgrade operates on existing files. Moving from one 11g release to another 11g release is sometimes referred to as "patching."
http://download.oracle.com/docs/cd/E21764_01/bi.1111/e16452/bi_plan.htm#BABECJJH
Follow patching and not out-of-place upgrade as you are required to upgrade component
http://download.oracle.com/docs/cd/E21764_01/doc.1111/e16793/patch_set_installer.htm#PATCH789
Hope this is clear now

All Users and User Groups member count 0

I've setup SCCM 2012 R2, configured the AD User Discovery. But my Member count for All Users and User groups is 0, Memebers Visible on Site is 968.
I'm not sure how to get the Member count working.

Hi,
Please check Smsprov.log to see whether there are any errors when you open Device Collections.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to create secutiry filters and users, groups in system 9

HI,
Could you please help me how to create security filters and groups, users in system 9. I need it very ugent. i am very much thankful to you.. if you respond immediatly.
Thanks,
sudhakar.

In short here's how I did it in 9.3.1 but there are multiple ways to do it.
I'm using MSAD external authentication.
Using EAS right click on database, Edit, Filters. Create your filters.
Then go to Shared Services.
Find the MSAD user/group and provision them to the Essbase database that you have your filters on. Access level is "Filter".
Then go back to EAS and Refresh Security From Shared Services.
Then go back to Shared Services.
Navigate to Projects & then your Essbase server. Find your Essbase database and click on it. To the right it'll populate a list of all the users/groups you provisioned to above. Select all of them and click Next.
Now you should see a drop down at the top showing your filter(s). Click the checkbox(s) next to the users/groups you want to apply that filter to. Click the green checkmark to apply the filter, and repeat for your various filters that you want to apply. Only 1 filter per user/group.
Then go back to EAS and Refresh Security From Shared Services again.
Good luck, hope this helps.

Trash and user group help!

why do i need to type in password when i delete things? how do i remove it?
and i can't delete items directly from the dock as well. like opening from the downloads folder and dragging the file to trash. i have to bring open up Finder and delete from the folder directly.
another issue is that am i able to remove the gues user from my start up screen? i've already disabled it from the user groups but i still see it in my login screen.
one last problem, is it a norm to have current leakage for the MBP? i've been having frequent shocks from the 2 bottom corners of it when i plug it in to a power source. i bought it from an authorized retailer and using it in the country where i've gotten it from. i've just gotten my mbp about 3 weeks back.
thanks for replying my queries!

Hi,
Yeah in ACS 3.1 its under the Shared Profile Components page. In ACS 4.1 its directly under the user groups or under SPC page.
You need to check the box for "define ip based access restriction" and deny access for all other groups to the wireless access points network device group.
ACS 3.X)
1. Denied Calling/Point of access restrictions
2. AAA Clients =UPS_PDU (Power Supplies)
3. Port = just put a * for all
4. Src IP address = just put a * as well
SUBMIT to SAVE
Create a second one for the other group like so:
1. Denied Calling/Point of access restrictions
2. AAA Clients =Routers_Switches
3. Port = just put a * for all
4. Src IP address = just put a * as well
Click submit to save it.
Go to the ACS User groups section and select the Network Administrators Group " that don't need access to the UPS's" and apply the NAR you created to that group. Do the same for the other grouping.
(ACS 4.X)
Go directly under the "user groups" and create the NAR under there. No need to go under the Shared Profile Components section
Hope this helps and let me know if you need further assistance or explanation.
Craig

Developer Center and Users Group Speakers

Two questions:
1. Who is responsible for keeping the SAP PowerBuilder Developer Center home page current? About 50% of the links point to Not Found pages.
2. Who at SAP would be the contact for getting someone to come speak at a PowerBuilder users group meeting? In the past, I had many of the Sybase representatives contact information but I have 0 contacts at SAP.
It's been an uncertain path to chart for PowerBuilder development efforts at our company not knowing if this product is going to be supported.
Thanks,
-Allen

Hi Allen,
>>My manager "heard" that PowerBuilder was no longer being supported after 2015.<<
I hear that very often! And I am very sad about it, because these rumors come from people right out of our community.
I spend a lot of my spare time in fighting this fire that is lit again and again without any proof!
I spoke with senior SAP managers and saw and heard what they said at our PBUGG Meeting last year. From this I can say that PowerBuilder is now a SAP product and has the same support and maintenance that SAP gives to all their other products!
I just spent 4 hours in supplying material to one of our UserGroup Members who is in the same trouble as you!
If you go to Bruce’ blog http://brucearmstrong.blogspot.de/ the first video More video from the PowerBuilder User Group Germany http://vimeo.com/81870887 you find after 13:00 min Robyn Chan speaking of 8 years maintenance.
SAP has a general paper about their release and maintenance strategy called “SAP Release Strategy” See: http://scn.sap.com/blogs/sapreleasestrategy (but you need a S-Id).
If you don’t have a S-Id you can look at what’s public for Business Objects. http://scn.sap.com/docs/DOC-31244 and Chrystal products http://scn.sap.com/docs/DOC-44670?rid=/webcontent/uuid/c018fb0e-8724-2b10-c489-9b8333e5e0f9. I think you can expect at least the same for PowerBuilder.

ORG Unit and User groups

Hi,
I need the function modules that can :
1) Fn. mod. to give all user groups to which a user belongs
2) Fn. mod. to give all Org. Units to which a user belongs
Full marks.....
Regards,
Gaurav.

hi,
call function 'HRCM_ORGUNIT_EMPLOYEE_LIST_GET'
exporting
plvar = p_plvar
otype = 'O '
objid = s_orgeh-low
begda = p_effdt
endda = p_effdt
* PATH_ID = 'O-S-P'
tables
pernr_table = i_pernr
exceptions
path_error = 1
root_error = 2
no_employees_found = 3
others = 4
Regards
Reshma

HT204053 can I have two cloud accounts on one mac. Different i tunes accounts and users

Can I have two ic;ouds on the same mac. This is a ridiculous set up. Why do I need to create a user name and insert all of this information just to get a simple answer. its no wonder people end up googling stuff rather than using this website.

If you prefer to Google, then Google. On here you stand a good chance of getting a direct answer from experienced users. And the login is necessary because without it we'd get more spam and stupid posts than we do now. Pretty well all online forums require an login for the same reason.
To answer your actual question. Firstly, you can use different Apple ID's for iTunes (and iTunes in the Cloud and iTunes Match) and iCloud itself, with email, Calendar and Contacts syncing, PhotoStream, and so on. There is no conflict about doing this.
If you want to use two separate actual iCloud accounts you can do one of two things:
1. You can set up a second user account on your Mac: then each user account can be separately signed into and iCloud account with all its facilities.
2. Having decided which iCloud account is to be your main one, and having signed into System Preferences>iCloud with it (and enabled Mail, Calendars and so on) you can sign in with the other account in System Preferences>Mail, Contacts & Calendars. The email, calendars and contacts will appear alongside those belonging to the first account. The only differences from the primary account are a) Email is not 'pushed' but checked at intervals, and b) you can only use PhotoStream with the primary account.

Help setting up accounts and user rights for students

hi there, we've just bought an xserve for a college classroom running 20 imac clients and me being new to the xserve and macs in general wondered if you guys can tell me the workflow for setting user accounts up and getting the students to log onto the xserve domain with their accounts. so that the xserve can give their imacs the restrcitions for their use (user rights basically) how the imacs log on has really got me stumped as with windows it does it on logging in? any help would be appreciated

I've just realised that you have to manually remove some stuff from the classes such as reference to J2Se classes.
How do you do this.

Administrator account AND user account neccesary?

I recently read in some posts that you should have an administrator account setup up on your mac but then also have a user account for yourself to use. Can anyone better explain this to me and tell me why I should do this? Right now I am the only one using the computer and there is only one account set up and it is the admin account.
Thanks

Depending on how often you take your pB on the road determines it for me.
Portables are more likely to be stolen than desktops, and if there is sensitive info on it, ssn's for example, I prefer to have that protected or hidden in an upper level account.
That way, if you use a second account for normal, mundane stuff, if it is heisted, the crooks would not have access to top secret stuff.
JMTCW

What's database call and user call?

There is no stats named as "database call" in v$statname, but there is a stats named as "user call". Are they the same? And what's the meaning of database call? in 10046 raw trace file, there are something like, parse, fetch, exec, wait. Are all of them "database call"? And someone said "database call" is some OCI function, anyone could put more information?
Thanks,
Daniel

You can read about database calls in this great book and one of the user call definitions is here

Database Account and User Groups

Similar Messages

Maybe you are looking for