FOLDER LEVEL RESTRICTION IN SOLMAN

SOLMAN PROJECT
Dear All,
I have to create a new project in Sol man (eg."Document"). The requirement is to upload all the documents of the project into Sol man. Documents are already classified module wise as IT,MM,SD,Mktg,E Biz etc. and stored in respective Subfolders.
Similar folder structure has been created within Sol man, with folder names as below and documents have been uploaded respectively:
Level 1: Project Name
Level 2: Module Names
Level 3: Module Folders
DOCUMENT
IT
- Sub Folders
SD
- Sub Folders
PP
- Sub Folders
our requirement is to restrict user's access for Level 2 and Level 3 Folders. Suppose There is three user A user is having IT access and B is having SD access and C is having PP access but the requirement is A user is not able to see SD and PP sub folders and Vice versa and B user is not able to see PP and IT and C user is not able to access SD and IT.
Kindly help in this matter
Thanks in Advance

Hi
to restrict the folder level access.
[Restricting access to structures in the Solution Manager|Restricting access to structures in the Solution Manager] check the above thread
and for documents
i would like to direct you to the sdn solution manager wiki,
[http://wiki.sdn.sap.com/wiki/display/SMSETUP/Home|http://wiki.sdn.sap.com/wiki/display/SMSETUP/Home]
there you get link of all documents.
Jansi

Similar Messages

Defining metadata at the folder level.

We are migrating from Content DB to Webcenter Content 11.1.1.7, using FrameworkFolders.
Our old Content Management solution (Content DB), allowed us to define metadata on a folder level. For example a group of metadata (a category in Content DB) could be defined and applied to a specific folder. When documents are uploaded, the server enforces the metadata to be populated for all documents uploaded to that folder and all child folders.
Webcenter Content seems to behave quite differently. From what I can tell, this is set up in the "Configuration Manager" Admin applet. Metadata fields are defined in the "Information Fields" tab. Sets of fields are defined as a "Rule". Roles are enforced on uploaded content through "Profiles". A given profile is enforced by the user of a "Trigger". The trigger is specified to look at a specific field, which is global to everything on the server. This is all documented here: http://docs.oracle.com/cd/E23943_01/doc.1111/e10978/c04_metadata.htm#DAFJDCEH
Having the trigger field be global seems to be very restrictive. We will have several different systems storing content on the server. Isn't this a big limitation of the product?
How can create a rule to enforce metadata to be populated for all content that is uploaded to a folder?
Thanks!

I'd say the answer is: create a folder and assign it a set of metadata (and inherit, if you will).
I don't think WebCenter Content, or UCM, has a concept equal to the mentioned category as described; i.e. an object that represents a metadata settings that can be assigned to 'something'. There are, however, many concepts that are close:
- rules/profiles mentioned in the initial posts - a profile (consisting of rules) may correlate to a "content type". It defines what fields make sense for this particular content item, what is required, default, etc. (relationship between fields). The caveat is that profiles define actually just how content items behave in the GUI; (global) rules can enhance also back-end processing (e.g. fill in an automated contentID identifier, if missing), but in reality they don't define data model
- folders - folders help to define hierarchy on items. As Srinath explained, we can also benefit from propagation of metadata, or inheritance. This is probably the closest concept to the Content DB category, but the holder is not the category, but the folder itself. Keep also in mind that folder is an optional parameter, and metadata inherited from a folder can be overriden for both items and folders
- in URM, where the categorization is more strict is another hierarchical structure; retention category (which can be assigned other settings, esp. disposition rules, and which can contain retention folders)
- yet, another concept that might be useful in some use cases are folios; a folio is an item (XML-file) that has its own metadata, and can reference other content items. However, operations on a folio item OOTB does not affect contained content items, and a content item can be referenced by several folios.
Finally, if no standard concept helps, you may always create your own customization via filters. A filter is a Java piece of code, which can be "hooked" to standard events (like "uploading a file", or check-in as it is called in UCM) and which can do whatever validation you like. For instance, I created a component which checks that an assigned quota on a folder to which an item is uploaded is not exceeded.
I assume that for your use case, you might be good to go with a combination of folders and profiles (a profile setting can also be assigned to a folder as default metadata). Let us know if you get stuck.

ACL's the best way to go for XSAN Folder level access.. Doesn't look it..

Looking to restrict a particular user from seeing an entire XSAN Volume. I do want the user to mount the volume but only see and Read/Write to a handful of Folders. Other users need to R/W to his folder but he cannot modify or even see anyone elses..
Kind of a modified guest account.
Any ideas? I see that using ACL's might get a little dodgy, and since its a XSAN in a FCP enviroment, I don't need any Permission issues..
Perhaps Folder Level Permissions?
TIA...
CH-

I would also recommend using workflow rules for finding your specific approvers, as for using the org structure see Whether or not to use HR organizational module in workflow rules?
For the number and type of approvers needed, if it's not a very complex set of decisions you can use the workflow template development tools (if/case/loop etc.).
Very complex decisions will probably require z-tables to help you keep the data maintained - although using classification to find approval paths as done in the purchasing release strategy is possible I would not recommend since it's harder to read in my opinion.

Folder Level Security

What is the easiest way to do folder level security in BO Universe. I have about 10 class in my universe. Based on who logs in and use the universe i want to hide 5 folders. Can you please advice or refer me to a document

Hi,
In designer level we can set security based on based on users and on objects. in designer go to tools-> manage restrictions-> manage access restrictions -> add/hide users and objects.
Cheers,
Suresh Aluri.

Folder level script? How can I use field value as a pdf filename in save as dialog box

I read somewhere that if you use a folder level script, you can do things like save a pdf with a specific filename - possibly based on a field name.
How would one set up a folder level script?
How do you execute a script from the PDF?
What code would you use to change the PDF name to the contents of the fFieldName text field?
Or, is this really just impossible to do?

The article is interesting. It suggests you place code like this:
// Page Replacement Function
var ReplaceLastPage = app.trustedFunction( function(cPath) {
app.beginPriv();
this.replacePages(this.numPages-1, cPath); app.endPriv();
In the trusted folder. What is the path of the trusted function(s) that get automatically loaded into Acrobat?
I assume in the example above, function(cPath) is a function inside of the PDF...

Row Level Restrictions on DeskI Report not working under InfoView

When running/refreshing DesktopIntelligence XI r3 (Full Client) reports under InfoView, the row-level restrictions applied in the universe are not being included in the SQL (additional filtering is NOT happening). However, if a user creates a report using the same universe in WebIntelligence or if the user runs the same report in DesktopIntelligence, the row-level restrictions are working.
It strikes me that the problem has to do with security rights granted (or not granted), but I can't figure out which settings would allow the proper running of a DeskI report under InfoView.
Thanks for any assistance rendered!

Mike,
Do people connect to Infoview and Deski using the same authentication method and the same username?
How does this compare to how your data restrictions are configured?
Are you using @Variable('BOUSER') restrictions? Have you taken domain into account e.g. "Domain\UserName" vs "UserName"?

Org Level, fund center/cost center level restriction for tcodes????

I am looking to see whether org level restriction and cost center/fund center level restriction is possible for certain set of transactions.
I am using USOBX table for this analysis. This table has a check flag field ( same as in SU24) which says whether the Tcode (program) does the authority check for certain auth objects. Example- X (checked but not maintained in USOBT). This table pulls up several authorization objects under the 'X' category. However, when I do the System trace for the same tcode, all the objects (marked as X) are not captured. Instead only a few are captured.
Can we rely on the USOBX data or should we do system Trace for every tcode. I am just pulling a report and not creating roles at this point. So trace is time consuming. But data reliability is equally important.
My objective is to verify whether org level and cost center/fund center level restriction is possible or not for some tcodes.
Do you have any suggestion to achieve this faster (through USOBX or any other means)?
Thanks in advance
Kee

I would suggest you to check USOBX_C and USOBT_C instead of USOBX and USOBT as it will have your customization as well and not just the standard ones given by SAP.
Also when check field is X ...it means the object is checked but not maintained for the t-code as you already said but I am not sure how much it will help you as the they will not be pulled by PFCG when you are creating the role until you change the object to Check / maintain . When you do that the check field will be Y and not X. So basically it is the Y one which you need to see.
Going for trace is time consuming for every t-code and I am not sure if it really needed. When your roles are in testing phase and are tested by the functional team or the team which needs it and if they are missing some object, you can run a trace and find the missing object....
I am not sure on what basis you want to change some field to Org level ...but typically it is done if you want to do segregation of roles based on these org level. There could be various other reasons and it is better to talk to your functional counterparts before changing a field to Org level.
for ex : If you want to segregate on company code, you will create co. code as Org level and create roles for different company code.

Acrobat X Standard User: How can I view PDF metadata from a folder level?

Hello All,
This is my first post to this community. I would not be surprised if the answer to my question can be found in a simple search or tutorial. However, I assure you that I have been searching, clicking, reading and even attempting to install new software all morning and have only succeeded in further confusing myself.
I'm running Adobe Acrobat X Standard on a Windows 7 machine. My job includes the management of legal documents of conveyance. All conveyance instruments have a set of unique identifiers such as the county where the deed was filed, the book and page where it is filed, the type of instrument, and the date it was filed. Historically I have tried to jam all of this information and more into the file name of a pdf. For example: "105_Bk109-Pg188_Assignment_05251950" is the name of a file that I have open right now that indicates an Assignment filed in Crockett County, Texas (code 105) at Book 109, Page 188 and recorded on May 25, 1950. I typically work in folders that contain around a hundred similar documents with all of the fields I have described varying. My objective is to begin moving this information into the metadata or properties of the individual PDFs AND then be able to view those fields in Windows Explorer from the folder level. As I understand it, this is not possible. When I began searching for an alternative solution, I found several references to Adobe Bridge and attempted to install it. The installation failed, but more importantly I am not interested in becoming a CC user as I don't feel like it is necessary for what I am trying to accomplish. I'm not working with HD photos or video.
So my question is this: Is there a way (that doesn't involve purchasing and learning Adobe Bridge) that I can modify the attributes/metadata/properties of a pdf, and then see the modifications in a folder viewer without opening the pdf? Thanks in advance for your help.

Thanks for responding. I suspected that my understanding of metadata was incomplete or inaccurate. As I understand it, the metadata for any given pdf can be found by first opening the pdf; clicking File -> Properties, which opens a dialog box titled "Document Properties". The first tab in the dialog box is "Description" and includes the fields File, Title, Author, Subject, and Keywords. The values for these fields are what I'm referring to as metadata. Additionally, from the Document Properties dialog box, clicking on the "Custom" tab allows you to create custom properties and values, which I also considered to be metadata. I have manipulated these fields for a certain pdf as shown in the two screenshots below:
After making this changes, I saved the pdf and closed it. I then navigated to the folder where the pdf is stored using Windows Explorer. As you can in the following screen shot of WE, that the pdf I have made the changes to is the first in the list. The Windows Explorer columns include: Title, Pages, Author, and Subjects, but their values are all blank and fail to show what I have assigned them in the PDF properties (or what I thought was metadata). As for my custom fields, Windows does not give me any kind of option to display those. Windows inability to display something as simple as the number of pages in the PDF is completely baffling to me.
My objective is to be able to modify the standard document properties of a PDF with usable information, those being Title , Author, Subject, and Keywords. I would also like to be able to create the custom properties with additional useful information. I would then like to be able to use a file manager, to view the contents of a folder full of pdfs, similar to the screenshot above, and see the properties and custom field values that i have assigned to the pdfs in columns of the list of pdfs. Windows Explorer is the only file manager I have ever used. It's possible that the solution to my problem could be as simple as changing file managers. It may be that what I'm after is not possible at. Any suggestions would be greatly appreciated. Thanks.

Need help with folder level javascript to automate "save button" on a fillable form

I have been racking my brain for the past 6 hours trying to get a simple save button to work.
Background: I am using Acrobat Pro 11 to create a save button on a fillable form. My intent is for the end users (my team of 3, whos computers I have access to) to be able to fill out the form, click save, and have the filename appended with date and other info and saved to a local folder on their machine.
I am attempting to take the default form name i.e. Support Call Log.pdf and have three of the feilds within the form generate a new file name. --> Support Call Log_Brad_121_2015
End users will fill out the form using adobe viwer X.
Instead of putting the code that I have tried, modified, and tried again and again. I would like to ask for a fresh start and then see if I can locate my error after. I need to know what to put in my folder level script, line for line.
I also need to know the correct syntax and format to establish a new file name with the extracted feild data, saved to the same exact file path as the original document.
Any and all help will be greatly appreciated, I am about to go crazy!!!

Didn't let me do it, invalid. So, here is what I have now changed my button code to:
//get field value
var fv1 = getField("Technician:").value;
var fv2 = getField("Date Received:").value;
var fv3 = getField("Unit Number:").value;
// Split Path into an array so it is easy to work with
var aMyPath = this.path.split("/");
// Remove old file name
aMyPath.pop();
var NewFileName = "Support Call Log" + "_" + fv1 + "_" + fv2 + "_" + fv3 + ".pdf";
NewFileName = NewFileName.replace(/[\s\!\?\<\>\'\"\*\/\\\=\?\^\`\{\}\|\~]+/g, "_");
aMyPath.push(NewFileName);
//save
mySaveAs(this,aMyPath.join("/"));
Im still getting the error dialogue box, and nothing shows in my javascript debugger window when I click the button. Seems to be something goofy with my Folder level script:
var mySaveAs = app.trustedFunction(
     function(oDoc, cPath, cFlName)
          cPath = cPath.replace(/([^/})$/, "$1/");
          try{
               oDoc.saveas(cPath + cFlName);
               catch(e){
                              app.alert("Error During Save");

DIR Search at Folder Level

Hi all,
Is SAP DMS has the functionality to search the document using classification within the Particular Folder. so far i have only seen the document Search is at classification charateristics or at the Document Text level.
Pls Let me know, whether Searching at folder level is possible or not?
Regards,
S Anand

hi,
Find in Structure
To find the folder in the SAP Easy Document Management structure in which a document was originally created, proceed as follows:
       1. Select a document or folder in the directory structure of SAP Easy Document Management, for example, in the Search
           Result folder.
       2. Choose Find in Structure in the context menu of the document or select the Find in Structure indicator in the search
           dialog for documents .
           Microsoft Windows Explorer highlights the folder in which you originally created the document.
Benakaraja
??p

Is it possible to install folder level script automatically by any other application ?

I want to install folder level javascript through flex application .is it possible to do this or by any other technology.
1 way to do is to copy file using file stream of that application but as directory for folder level javascript is protected one therefore file operation give i/o error
any other solution .

I do not think any Adobe product will allow you to do this for obvious reasons. '
You can use any installer program the will perform the installation for users if the users decide to allow your request.

Folder level javascript.

how can i use getNthPageWord methode from folder level script.

function SaveXml() {
myFun = app.trustedFunction( function()
    app.beginPriv();
if(this != 'undefined')
    try
       for(i=0;i<70;i++)
          var arr= new Array();
          arr=this.getPageNthWord(2,i);
          console.println(arr);
    app.endPriv();
          catch(e){
          console.println("error");
}else
     console.println("undefined");
          console.show();
and i am calling savexml methode in cExec: property of addToolButton.but it is not working please tell where i am making mistake.

Folder level Javascript disabled for a user

Hi Gurus,
I created a folder level JS, it works fine on all computer here exept on one. On one computer, the javascript's in the pdf are working but the function called in the folder level script is not executed. (when it works on all the others). The script is in the right folder and the pdf works on other computers. Do I have to enable something in the preferences of acrobat reader 9.1. I checked the settings for JS in edit/preference and they are the same as for the others.
Thanks for your help guys.

All the script does it to generate a mail with the mailto function. The Preferences-JavaScript are set as on my pc. So it must be something else. If I email the pdf to my pc, it works, so the pdf form is fine, the script is the same as on my pc.
--- En date de : Mer 2.9.09, try67 <[email protected]> a écrit :
De: try67 <[email protected]>
Objet: Folder level Javascript disabled for a user
À: "antony clark" <[email protected]>
Date: Mercredi 2 Septembre 2009, 13h35
That's why I recommended to make a
test script, to make sure folder-level
scripts are working on this machine.
There's no setting to specifically allow folder-level
scripts. If they are
properly placed and JS is enabled then they will launch.
However, if your script inserts menu items you should make
sure that this
option is checked under Preferences-JavaScript, the second
check-box from
the top. You should probably check all 4 boxes, just in
case.
>

Object Level and Folder Level Instances Limit on R3?

Hi there,
We've been thinking about setting a global limit on instances of 35, but were wondering if we can apply a limit of 50 only on certain reports?
This is only for reports where the business has justified that they will need to go over that.
Basically, will object level limits override folder level or even global level limits?
Many thanks,
Nawar

It will override Global level limits.
Create a User and apply limits to that particular User , so that where ever that user ran a report that limits the instances according to user limit.
Thanks,
Anil

Handle doc/open event at folder level

Hi,
Is there a way to handle doc/open event at the folder level?

javax.sing.table.AbstractTableModel.addTableModelListener(TableModelListener l)

FOLDER LEVEL RESTRICTION IN SOLMAN

Similar Messages

Maybe you are looking for