Firefighter Configuration - FF Owner should not change the configuration

Hello Experts,
We have requirement to restrict Firefighter configuration changes only to Firefighter Administrators.
1. Restricting Firefighters to make any changes in Firefighter Configuration -- SAP Note 1101665 Superuser Security Role Modifies Tables - Successfully Achieved.
2. Restricting Firefighter ID Owners (having /VIRSA/Z_VFAT_ID_OWNER) to make any changes in Firefighter Configuration --> Need your inputs on how to achieve this.
We want that Firefighter ID Owners can only assign the FFID to Firefighters and assign a new controller only, but no following should be allowed to Firefighter Owners -->
a. Creating a new owner for a FFID.
b. Changing Firefighter configuration.
c. Creating or changing Reason Codes.
And which role should be assigned to Firefighter ID Controller?
Looking forward to hear from your experiences.
Thanks & Regards
Davinderpal Singh

Thanks Alpesh and Simon for your valuable inputs.
My observations are, if you assign Firefighter Owner and Controller role only, then user is not able to make any configuration change, Reason Code change, etc, etc - behaviour is as expected.
And in our case, this problem is coming as FF owners/controllers have been assignbed few other roles/profiles which seems to override the authorisations of FF owner role and allow changes in FF configuration.
Now searching through each of these roles/profiles for extra set of authorisation objects is a huge security job.
And we don't have much experience in Security - so as per your experiences what should be the best way to restrict FF owners to not make any change in FF configurations, without removing existing roles/profiles ( as we don't know what all would be removed if we remove all of these roles).
Is it possible to specify a condition/check so that if a user has been assigned FF owner role, inspite of whatever extra permission he has - he should not be able to make configuration changes - please bear with me if i am expecting too much over here.
Which authorisation objects controls FF configurations changes?
Best Regards
Davinderpal Singh

Similar Messages

  • Changing animation frame rate when rendering in photoshop does not change the length of the video?

    I made a walk cycle animation in Photoshop CS6 and want to render it into a quicktime format. I'd like it to be 12 fps, but when I rendered it at 12 fps the video seemed to be missing frames, and the video was 3 seconds long. I have 98 frames to my animation; doing the math, at 12 fps it should be 8 seconds long. Not 3.
    I was confused and for curiosity's sake I rendered the video at 6 fps, trying to really slow it down. The video ended up being STILL 3 seconds long and only maybe 20 frames. I was missing literally 70 frames. I'm so upset with this rendering thing, I could chuck my computer at the wall.
    Does anybody know of a solution to this?
    edit: If it means anything, I've tried rendering it straight from the frame view and the timeline view. Each time I render it I have the timeline frame rate match the rendering frame rate as well.

    floriannaart wrote:
    Changing animation frame rate when rendering in photoshop does not change the length of the video?
    Photoshop CS6 and CC support two types of animation Frame animations and a Video Timeline
    Changing the frame rate should not change the length of a video timeline. It should just change the number of frames that are rendered.  To change the length of a video you need to change the length of the video timeline.  If you increase the length of the timeline and there is audio I'm quite sure there will be a problem with it,  The Video part will most likely be better then the sound. The required number of extra frames can be generated however the video may look like slow motion. If you decrease the length the motion will speed up.  The length of a video is normally done be editing video clips which are trimmed and stitched together to get the desired duration. Not normally done by altering the duration of a clip.
    The duration a of Frame animation is the sum of the times each frame is displayed.  In a frame animation the length of time a frame is displayed can be varied it not a normal motion picture video.  To have a smooth frame animation you need a sufficient number of frames that are different from each other to show smooth motion.  You can use Photoshop Frame animation tween feature to have Photoshop manufacture frames to help with a smoothing the animation.   Once you have a frame animation the length with the motion you want you can have Photoshop convert it to a video timeline and render a normal motion picture video.  It will not have audio but you can add audio to it.

  • When I change the configuration of my iPad apps (I organise them on the laptop, then sync) the arrangement does not transfer to the iPad.

    When I change the configuration of my iPad apps (I organise them on the laptop, then sync) the arrangement does not transfer to the iPad.

    Sounds like your iPhones software may be corrupt. Try placing the iPhone into recovery mode. To do this, follow the steps in this article:
    http://support.apple.com/kb/HT1808
    Hope this helps
    - Greg

  • I can not change the time in activity Appointment in WebUi

    Dear Experts!
    I can not change the time in activity Appointment when creating: calendar -> month -> click on the day
    snapshot of problem:
    http://imglink.ru/show-image.php?id=e7a096115a6371ffab46c701f8e470ba
    When I create a Appointment (Activities -> Create Appointment) of all good:
    http://imglink.ru/show-image.php?id=ef65a38bdf7fc77eb9a71ec5c3ad5603
    Help me this problem?

    You need to add that attribute using the config tool for your view configuration. Select the attribute All Day from the context node BTDATE in the available fields to your display field and then save it. It should now be visible in your UI and now you can select or uncheck it to make the time field enable. Check the below image
    http://imglink.ru/show-image.php?id=a9a660778c0fee2b3fd7409d620eddc5
    Regards,
    Shobhit

  • Windows 7-8.1 Can not change the MAC Address on wifi and cannot load login page in public HotSpot.

    Windows 7-8.1 Can not change the MAC Address on wifi and cannot load login page in public HotSpot.
    Adapter: Ralink RT3070 Chipset wifi adapter
    Tested: os Windows 8.1 Professional
    Hot Spot: 802.11b
    The first problem windows 7-8.1 got IP adress and connect he public HotSpot  but  cannot load login page or any other page. It does not work with it.
    The second problem Wifi canrd/configure/Advandes (No network adress change function).Tested with the default windows driver and the ralink rt 3070 driver the same problem.On windows XP the same function the same driver works perfectly.
    multiple users to have expressed interest in the problem But Microsoft not corrected the problem window7-8.1 10?
    lizardsystems.com/wiki/change_mac_address/faq/change_mac_address_in_windows_7
    blog.technitium.com/2011/05/tmac-issue-with-wireless-network.html
    superuser.com/questions/519189/how-to-change-the-mac-address-in-win-8-to-spoof-a-roku-player-through-a-wifi-spl
    social.technet.microsoft.com/Forums/windows/en-US/59e07df3-471c-499e-ad5f-e7cb507595df/cannot-change-mac-address-in-windows-7-driver-has-option-doesnt-work-neither-does-regedit-ms?forum=w7itpronetworking
    networksteve.com/windows/topic.php/CANNOT_CHANGE_WIRELESS_%28SPOOF%29_MAC_ADDRESS_ON_WINDOWS_7/?TopicId=16810&Posts=1
    On windows XP or linux have a MAC adress Change function  allow 00 mac adress and another normal mac adress range.On windows 8.1 all Mac changer program dont work.This 2,6,A,E on second adress are not vaild Mac adress. You simply can not use normal MAC
    addresses on windows 8.1.When i connect the usb the Pc windows 8.1 recognizes the adapter but the default  driver and the downloaded ralink driver the same problem.On windows xp the current driver works perfectly have (Local Mac Network Adress) funktion
    and works with the 802.11b hot spot.I got the internet my PC and laptop too public HotSpots and another wifi HotSpots if wont work correctly i can not use neither the windows 7,8,8.1 or 10. Many users have expressed interest in the problem more forums.
    The 3. problem im tested in virtualbox the windows 7 and 8.1 on 8.1 (on the blue wifi platform) not show correctly the signal strengh. On windows 7 show this correctly.The windows 7-8.1 Configure/advanced the advanced options on Ralink 3070 the default (windows
    driver) somehow downgraded function is less than for Xp. Configure/advanced the advanced options (needs to be upgraded in the future) because it does not advance but rather regressed.
    Today it is very common these wi-fi technology increasingly used (hotels,Public Hots Spots,Internet coffe,) growing free bublic wifi projects. The wifi funktions on windows  need debugging and modernize.The quality of Wi-Fi is now the operating system
    is now a thing order which is not good then the operating system is unusable.

    Hi,
    For changing the MAC address for Windows 7 is designed with some limitation, we cannot get over it. Thanks for your understanding.
    Under Windows 7, the possible range of spoofed addresses for wireless adapters that can be set is limited.  To be used by Windows 7, a spoofed MAC address should have 0 as a least significant bit (unicast) and 1 as a second least significant
    bit (locally administered) in the second nibble.  Thus possible values for the second nibble are limited to 2, 6, A and E.
    In other words 
    MAC address:  “XY-XX-XX-XX-XX-XX” “X” can be anything hexadecimal.  The hexadecimal “Y”, written in binary format, is  Y:  “kmnp”,  where “p” is the least significant bit; 
    p=0 --> unicast;
    p=1 --> multicast;
    n=0 --> globally assigned MAC;
    n=1 --> locally administered;
    So, actually MAC can be changed  to any combination in which p=0 and n=1;
    “Y” can be 2, 6, A or E.
    So the possible MAC addresses in Windows 7 for wireless adapters:
    X2-XX-XX-XX-XX-XX
    X6-XX-XX-XX-XX-XX
    XA-XX-XX-XX-XX-XX
    XE-XX-XX-XX-XX-XX
    For the wifi hotspot issue, please check this blog to see if it can be helpful.
    Windows 7 Connectivity Problems in Public Hotspots
    http://blogs.technet.com/b/patrickr/archive/2010/07/28/windows-7-connectivity-problems-in-public-hotspots.aspx
    Kate Li
    TechNet Community Support

  • DST: the SQL Cluster did not change the time by itself..

    Hello,
    DST: the SQL Cluster did not change the time by itself..
    Where should I look for the issue. The time was changed manually to continue processing....
    Thanks,
    Dom
    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Hi,
    Thanks for your posting.
    For the Sql cluster issue, i think you may ask in:
    http://social.msdn.microsoft.com/Forums/sqlserver/en-US/home?category=sqlserver&filter=alltypes&sort=lastpostdesc
    Regards.
    Vivian Wang

  • Why can I not change the apple id associated with iphoto and imovies

    Why can I not change the appleid associated with iphoto and imovies

    Is it not your Apple ID? Is this a used Mac? If so, the Mac, OS X and the iLife apps are all registered to the original owner of the Mac.
    When someone sells a Mac they should erase the Mac and reinstall the most recent version of OS X that came with the Mac. And they should call Apple Care and have the Mac, the OS and the iLife apps disassociated from their Apple ID. Can you call the original owner and request that?

  • HT5312 I DO remember them but Apple chose to put them in Japanese and I can not change the language on Manage my Apple ID so I do not know if I made an error ,it threw me off , it was the wrong question Where did you fly to on your first Aiplane trip ? th

    I DO remember them but Apple chose to put them in Japanese and I can not change the language on Manage my Apple ID so I do not know if I made an error ,it threw me off , it was the wrong question Where did you fly to on your first Aiplane trip ? then I was unable to enter until 8 hours then called Apple Japan 4 times each time threy asked me would you like to speak with an English speaker,I said yes then they told me sorry today is Sunday no English speakers ,but they refused to speak Japanese, then I called 5th time and a kind guy could speak English we were on 1and 1/2 hours he got me to log in but the reset key chain could not be completed still pending.
    He said do not mess with that ! then I got a text from somewhere to reset 4 pins suddenly it was very strange I said to him that I got this pin this morning but it said you can use maximum 3 hours it had a UK number and I told him I do not like this and will not enter the code he said do not do it if it is from the UK and then I said to him ok you did a lot to help but we can not go any further ! and we cut of I went back to my computer to re do the ID but I found everything a mess so I call and a stupid sounding Japanese women with a squeaky voice came on I was calm at first and they want your phone number your IMEI number your iPhone serial number date of birth Address email address it takes 10 munutes to check then they ask what are you caling about so I try to explain my keychain is broken or problems with language security questions and can not change my pasword because the security question have failed me so it is ONE BIG HEADACHE AND I START I GET STRESSED she says Do want an ENGLISH speaker ,I say yes ,that guy i talked to earlier but I never got his name and first time I ever talked to him but they said he is not here so I said ok and then she said today is sunday so call back in the morning ,I said ,well ok in Japanese but they make you feel stupid because they do not want to speak Jap@anese with none natives and they are to busy,And they feel that I should not bother them ,then I say that Apple Japan is trying to refuse Apple foreign customers and then she wants to hang up and ask me to visit the shop ,but they are the same I have a very bad time with Apple Japan since they do not discuss software problems or security with customer meaning if you have a problem they ask you to come on a time 20 minutes max so they do hardware test and say you phone is fine then I say no I can not reset my ID they say you must call call centre so I am going around in circles ,When I call English it is usually Australia so if my problem is in Japan surely if do not want me to talk to them in Japanese and they ask me to call Australia but every time my call charge is expensive after asking them is this free because I have Apple care they say yes but when the call goes to Australia 0120 277 535 it might change to paid call so I call then I have to ask is this charging they say we can not give you that information ! so what can I do I have have been at the computer and phone all day on my day off work and in tre week I am so busy and can not use my phone I can not work without it ,this new technology for you ,they can not cope with the fact that the customer have problems yet they do not want to deal with us because they can not solve it and so it shows them to be useless they like to walk around in their cool tee shirts and retro shop but when it comes to functionality we are unwelcome they got the money so do not return because apple is perfect that nothing should go wrong .
    But it does somehow my English security answers do not work on a Japanese Question especialy if I did not choose that question I set  up the multiple choice In English and wrote the answers in English or Roman and set them langauge preferences in English, do you really think you can correctly write english name or word in Japanese they write a police patrol car  pato caa パトカア they do not have r and l .So it is my choice to make my security easy for me and as difficult for others to hack.But they also have patororoo choo meaning ' now patrolling ' so why they have pato caa patrol car and patoro patrol and have thousands of Chinese words kanji they can find patrol.
    I am getting off the topic but I am at a loss to fix this problem when they hold the keys and i have all the info to verify my ID.

    You have to enter the Apple ID and password. You are running into the Activation Lock
    iCloud: Find My iPhone Activation Lock in iOS 7
    Is there a way to find my Apple ID Name if I can't remember it?
    Yes. Visit My Apple ID and click Find your Apple ID. See Finding your Apple ID if you'd like more information.
    How do I change or recover a forgotten Apple ID Password?
    If you've forgotten your Apple ID Password or want to change it, go to My Apple ID and follow the instructions. SeeChanging your Apple ID password if you'd like more information.

  • When I try to upload a file it goes through the correct proceedure, but does not change the remote file i.e.Index.htm

    Hi
    I have an uploading problem to the server. The problem is when I try to upload a file it goes through the correct proceedure,
    but does not change the remote file i.e.Index.htm, or three stages1.htm.
    My Localroot folder is C:\Gods Plan Web\
    The site map layout is C:\Gods Plan Web\Index.htm
    The folder for the remote site is /public_html/
    Should the local root folder mirror the remote site, i.e./public_html/
    if this is so, what should I put into the
    (a) Local Root Folder box?
    (b) site map layout box?
    The FTP is performing well other than changing the intended file.

    You should be uploading only the contents of your local root to the public_html folder (remote root).
    The index.html you use as your site's home page needs to be in your site root. If you look at your Files window in DW, you should have something like the following...
    Site - Whatever you named your site
         index.html
         images
         pages
              page1.html
              page2.html
    If you have any folder between Site - and the index.html page, like...
    Site - Whatever you named your site
         mywebsite
              index.html
    It will upload to the public_html while still in that folder, so to find your page online, you would need to type something like...
    www.mydomain.com/mywebsite
    public_html should NOT appear within your local files and if it existed there, would cause a redundancy if uploaded. You would need to type www.yourdomain.com/public_html to see the uploaded pages.
    If you could post a screen shot of your expanded Files window while connected to the server (just connect and click the Expand button in Files, don't drill down into any of the directories), we may be able to see the issue.

  • Work order should not update the fields in PR

    Hi  Gurus
    My requirements is that workorder should not updates the purchasing data fields in PR  do not go to the shoping cart. How can make it possible.
    Thanks in Advance

    Hi,
          I am not sure of your requirement clearly but check up the below user exits :-
    COZF0001 Change purchase req. for externally processed operation
    COZF0002 Change purchase req. for externally procured component
    or BADI :- IWO1_PREQ_BADI BAdI for Manipulation of P.Reqs from Orders + Networks ,SE18
    regrds
    pushpa

  • Schedule lines should not change 3 weeks time from MRP date

    Hi
    Is there any specific customisation required to get following results in case of schedule lines.
    1) MRP should not change/adjust the already send delivery schedule lines  which are lying within 3 weeks time from MRP date
    2) System should not allow to book the GRN unless the messages / print out has been generated from the system in case of scheduling agreement.
    Thanking you
    Shantakumar
    09944009752

    Hi,
    There are 2 possibilities:
         1. use MRP fixing using planning time fences, this is done by putting the relevant settings in the MRP1 view of the material master
         2. use the firming options of the scheduling agreement, these are set per material number that is entered in the scheduling agreement.
    The GR can only be posted for schedule lines that have been processed aka output generated.
    Regards,

  • Can't use Find My Friends on iPhone due to Apple ID not being verified. Can't do this as I can't access my .mac email any longer and I can not change the primary e-mail address for my Apple ID!

    Can't use Find My Friends on iPhone due to Apple ID not being verified.
    Can't do this as I can't access my .mac email any longer and I can not change the primary e-mail address for my Apple ID!
    So my options are:
    Create a new Apple ID, use that and lose all the apps I've purhcased with it (a fairly substantial amount)
    Somehow Migrate these purchases over to a new Apple ID
    Apple let me change the primary ID for the account
    Anyone else ran into this before?
    I've tried accessing the mail through a mail application using the correct server information, and trying both the old 6 character password and the one I had to change it too after they updated the security guidelines - neither work.
    Help would be greatly appreciated as I can see more services down the line not working without the address being verified!

    To change the iCloud ID you have to go to Settings>iCloud, tap Delete Account, provide the password for the old ID when prompted to turn off Find My iDevice, then sign back in with the ID you wish to use.  When you do this you may find that the password for your old ID isn't accepted.  If this should happen, and if your old ID is an earlier version of your current ID, you need to temporarily recreate your old ID by going to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID.  Click edit next to the primary email account, change it back to your old email address and save the change.  Then edit the name of the account to change it back to your old email address.  You should not need to verify the old email address.  You can now use your current password to turn off Find My iDevice on your device, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll.  When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud).  Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was.  Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.

  • Should I change the pricing procedure in SD ?

    Hhello
    we are running sales orders with a certain pricing procedure now for a long time. There are a lot of change requests for this pricing procedure, including structural changes like new sums and changes of positioning of a conditon type within the procedure. Should I change the existing pricing procedure to meet the new requirements or should I create a new procedure with a complete new structure, sums etc ?
    Please advice. What are possible problems, which can occure in one or the other method.
    Best regards and thanks for your help
    Rauno

    Hi Rauno,
    You should definitly copy the current pricing procedure and make your changes to the copy.
    The only disadvantage is that you can't mix old and new flows into e.g. the same billing document ( = pricing procedure is split criterium ).
    But the BIG advantage is that all your old flows will not get inconsistent 100% guaranteed ( when you 'look' at them, or do e.g. VA02 on an old flow etc..)
    rgds
    Dirk

  • Where should I change the adapter? It doesn't work from the start.

    where should I change the adapter? It doesn't work from the start. But there is no apple store in our city.

    The phone does not charge when linking with adaptor. But it is OK when linking PC using USB instead. I do not know why, but I am just sure there is something wrong with the adaptor.

  • I purchased an iPhone 4S second-hand, and the previous owner did not remove the iPhone fron their iCloud account. They do not know their Apple ID.

    I bought an iPhone 4S secnd-hand. The previous owner did not remove the iPhone from their iCloud account. I've tried contacting the previous owner, but they also do not know.  What should I do now?

    If they were the one who set the lock, send them this link.
    If not, you need to contact the person who did or the device's original owner.
    (117626)

Maybe you are looking for

  • How to upgrade windows 7 32 to 64

    How do I upgrade From Windows 7-32 To Windows 64 in Boot camp?

  • How can I get my artwork back on my iPod if i manually manage my songs?

    When I updated my software to ioS5 on my 4th generation iPod touch I lost most of my album artwork, and even if I attempt to add it on the computer files, it will show on the computer but will not show on the ipod. Any suggestions?

  • Epic Slideshow...Please help.

    I have combed the manuals, discussion logs etc. but am yet to find a simple answer to my questions. Maybe there are none. My grandparents both passed away in the last month. I am not only archiving my pictures but creating a slideshow using final cut

  • Motion title problem

    Hi, I create final scroll subtitles in my DVCPRO50 PAL anamorphic project. In previous projects I allways create final subtitles with using Video Generators->Boris->Title Crawl. Now I need insert some logo in to subtitles. I try create it using Motio

  • Windows6.1-KB976462-v2-x64 update is not applicable to computer

    I am installing share point server 2010 in window 7 profession (64 bit ) so hot fix Windows6.1-KB976462-v2-x64 is required for is but when i am going to install this hot fix then it is giving me Message like this -> update is not applicable to comput