Problem with user privilege

Hi all,
I got this problem with one user, its a weird one. A user, let say userA, when he tries to check in a doc, an error saying that he don't has privilege to do a check in appear (even though he has successfully do check in a few time before), after he got this error, from this point of time onward he can't do any check in again. Everything is set up properly, and the other user, let say userB who has the same role as userA don't encounter this kind of problem. Many times it happened, and every time I need to delete that user and recreate the user to fix the prob, but after a few success check in, the problem occurs again.
Has anybody encounter this problem before? There's no problem with other user, only this one user got this problem.
Thanks in advance.
regards,
d.s.

Are the users in the DB or in a directory?
Does the user still have the correct roles in the DB and when you look at the 'My Profile' page?
Tim

Similar Messages

Problems with User Privileges - Help required Novice Server Experience

Hi, We have an old Xserve runing Mac OS X 10.2.8.
I have shared the 3 drives out no problem. The problem I have is with Workgroup Manager 1.2.2. I have set 4 User accounts with their own username and password to access the drives which works fine, but if one User modifies a file or puts a new file on to the Server another user has only read access to that file from the server, and if they try to copy the file/folder to their local machine a warning box comes up saying that they have Insufficent Privileges.
It seems each User can only work on their individual files which is problem when we all need access to the same files/folders.
What do I need to do?
Many Thanks
Richard

Hi Richard.
You need to create a Group, and add all of your Users to that Group.
Make the owner of the sharepoint your admin account (who can be added to the Group, or not), and make the Group , well, the new Group you've created.
Set permissions for the Group to Read & Write.
In Workgroup Manager, Sharing, Share Points
select AFP and then choose “Inherit permissions from parent"
This is all in the 10.2 Server Admin, worth reading. The 10.4 docs are far better and it's a worthwhile upgrade if that's in the cards at all.

Run with user privileges but write to restricted folder

In Windows Server 2008 R2 (and in an Active Directory domain), the login and logoff scripts are run with user privileges.
Suppose that I run script1.ps1, when user1 logs in; I need that script1.ps1 is associated to user1, because it will write some informations about that user: it modifies a log file in a folder. Anyway, script1.ps1 will be run with user1 privileges.
I obviously made that file and that folder accessible (readable/writable) to user1: but I actually don't want the user to modify that log file. I would like that
only the script could do it.
Is there a way to work around this problem? Maybe should I run script1.ps1 in a different way?

Henry. You can add a subscription to a server that subscribes t event log entries on user computers. Subscribe to the logon/logoff events. Now you have a central repository of logon and logoff events.
There is no way to accomplish what you are asking to do. Any file that can be written to in logon script or during a user session can be changed by the user.
Bil is suggesting a "startup" script that runs when the user logs on and not when the computer starts. A user startup script runs as the user and not system.
Another method is to schedule a script that run at logon. This can run as system and write to a file that the user cannot change.
¯\_(ツ)_/¯

Problem with user-defined functions in XQuery String

hello
i've a problem with user-defined functions in XQuery String
details are here (the code is not Human-readable via forum's embedded editor ?? strange)
http://docs.google.com/Doc?id=ddqwddsr_21c96d9x
thanks !!

See
michaels> select xmlquery('declare function local:test_function($namecmp as xs:string?, $inputtype as xs:string?) as xs:string?
                    return {$inputtype}
                 local:test_function("1","2")' returning content) o from dual
Error at line 5
ORA-19114: error during parsing the XQuery expression:
LPX-00801: XQuery syntax error at '{'
3                       return {$inputtype}
-                              ^
michaels> select xmlquery('declare function local:test_function($namecmp as xs:string?, $inputtype as xs:string?) as xs:string?
                    $inputtype
                 local:test_function("1","2")' returning content) o from dual
O
2
1 row selected.

Problem with users disabling ARD client service

I've got a problem and i'm not quite sure of the work around. I'm a PC guy by nature and can't quite figure this out.
I'm having a problem with users disabling the ARD service from the sharing menu. Unfortunately users need to have admin privleges to do their work so I can't simply give them a standard account.
I've hidden the ARD user account i created from the login window through Netinfo, but I need to find a way to stop users from shutting the ard service down.
They don't seem to understand that the company requires that it be on the computer. Now, I'm the one who is set as the admin for ARD in the building, however we really just use it to rollout drivers, install packages, and its a lifesaver for remotely fixing problems with programs. The company didn't really buy it to spy on the employee's.
Is there any way to hide the service from an admin level account? Or keep them from shutting it down?
BTW, this would have to be done on multiple machines running both panther and tiger.
Any help would be appreciated as I'm not quite sure where to start.

First, as a matter of policy, let them know this service is active, and needs to remain active. If they disobey this instruction and turn it off, you have a human resources issue, not a technical issue.
Second, there are very few enterprise users that need admin access to their machines. Oh, they ALL think they do, and there will be howling when non-admin status is first imposed, but we have 350 users in a publishing environment with less that 20 setup as admins. Those users are almost all superusers who assist others in a technical role.
We have far fewer software problems like this and with ARD, IT can install/ authorize installation of software remotely should a user need that. It simply does not dramatically impact our users to have non-admin access. On the other hand, we recognize that a FEW users will need more access, and grant that on a case-by-case basis.

Problem with user mapping

Hello,
We got a problem with user-mapping to a SAP system.
We create a SAp system, and an alias to this system.
We add a user mapping for the administrator (user, not group). Check for connector is OK.
Now, we make the same user-mapping for a group.
if the user also belongs to the group "administrator" this mapping works, otherwise this fail with a message <b>"com.sapportals.portal.ivs.cg.SystemNotFoundException: Got null system object for alias R3HR".
</b>After checking, there is no user-mapping for the "administrator" group, nor for the roles that belong to that group, nor for the user.
So, it seem that the alias is only visible for an admin.
does any one got an idea ? we are on SP14, Linux.
regards
Guillaume PATRY

HI Guillaume,
The user mapping is available for both Admin as well as end users.
Open your system from System Administration>System Configuration>System Landscape.
In the property editor,in dropdown for property category,
select the logon method as UID?password and User Mapping type to admin/user.
Then you can create a Group,map the system alias for this group and add users to this group.
Also,in the property editor for the system,from dropdown for display,select permissions , and add the group to asssigned permissions as READ ONLY and select the checkbox for ENDUSER.
Hope,this resolves your problem.
Regards,
Siddhartha

Problem with user number

Goodmorning, I have a problem with user number of my smartphone Blackberry Curve 8900: when I call a numer of my adress book, on the right, appears a user number, that I don't know. Why dont'appears mine? I don't have buy this smartphone personally, but I had it (used) through the smartphone's owner...I think that the user number that appears on my display is his. How I can do to remove it?
Waiting for an answer, thank you.

Hello scricciolina90
Welcome To Support Forums
On or Curve 8900 from the Home screen > click Options > Click Advanced Settings > SIM Card > Highlight the phone number > Press the Menu key and click Edit SIM Phone Number > Check that field or Enter you Mobile number in that field .
Good luck.
Click " Like " if you want to Thank someone.
If Problem Resolves mark the post(s) as " Solution ", so that other can make use of it.

Problem with user services (creating a service for mpdas)

Hi, I'm using mpd and using a user service to start it.
However, I'm trying to create a service for mpdas (a mpd client for last.fm) and getting some errors:
currently, my mpdas.service is as following:
[Unit]
Description=AudoScrobbler client for MPD
After=mpd.service
[Service]
ExecStart=/usr/bin/mpdas
[Install]
WantedBy=default.target
Which giving me the following errors:
(14:49:55) [ERROR] You are not root. Not changing user ..
(14:49:55) [INFO] Connected to MPD.
(14:49:56) [INFO] Last.fm handshake successful. SessionID: ...
terminate called after throwing an instance of 'std::ios_base::failure'
what(): basic_filebuf::underflow error reading the file
Aborted
Which are the same errors I get if I run just "mpdas" instead of running it with sudo.
If I use it as a root service (instead of a user service) it fails on startup, but works fine when I restart the server.
So, I'm assuming:
1) mpdas needs root permission
2) if used as a root service, it fails at startup cause the mpd service (enabled as a user service) hasn't started yet
3) if used as a user service, it fails cause it needs root permission
What's the 'correct' way to solve this? (I believe mpdas should be a user service, cause it runs with a config that is just for my user).
Is there a way to make a user service run with root privileges?
I couldn't figure out the best way to configure it.
Last edited by alv-r- (2014-11-29 18:37:56)

TheSaint wrote:Why should it fails with sudo?
It works only with sudo. It was failing as a system service because it needs mpd, which I configured as an user service. Then when systemd starts the system services (when booting) there's not mpd instance running and it fails.
TheSaint wrote:Doesn't it works with fakeroot ?
As a noob, I don't know exactly how fakeroot works, I'll take a better look at it, but running it with fakeroot takes rid of the errors I was getting when not running as sudo.
The problem I have now is that it still fails on startup, but there isn't any helpful (or unhelpful) message. It just shows the PID and says it failed.
If I run
systemctl --user start mpdas
it works well though. Any ideas of why this happens?
My current unit file looks like this:
[Unit]
Description=AudoScrobbler client for MPD
After=mpd.service
Requires=mpd.service
[Service]
ExecStart=/usr/bin/fakeroot /usr/bin/mpdas
[Install]
WantedBy=default.target
Raynman wrote:Why does it need root privileges? Maybe you just need to configure it properly to run under your normal user?
Seeing the options in the man page and the config options for the config file, I don't see any that could do the trick.
I'll send a message to the developer with the error I'm getting (when not running as sudo).
Last edited by alv-r- (2014-11-29 18:36:59)

Problem with users accessing sharepoint 2013 site collection

I have an unbeliveable problem..
I have a sp site with several site collections..
I have around 15 users.. Everybody have access to the root site. Two users do not have access to site collections even though they are in EXACTLY same permission groups like other users who can access those site collections!
I tried to delete them from all user groups in SP, then delete their user profiles in Central Administration, and delete them from Active Directory. After that I recreated their profiles in Active directory, readded them to Central Administration, and again
added them to coresponding groups in SharePoint site collections. They again CAN NOT ACCESS site collections.
What should I do.. This is incredible that 5 users with the same user privileges can access site collections, and 2 can not, even though they are all created in the same way..
Regards,
Srdjan

Hello,
Have you found a solution for this problem? I have the exact same problem with 2 users accessing a site collection (access denied). I found also this row on uls log:
Access Denied. Exception: Attempted to perform an unauthorized operation., StackTrace:   at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)     at Microsoft.Office.Project.PWA.PJBaseWebPartPage.OnPreInit(EventArgs
e)     at System.Web.UI.Page.PerformPreInit()     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)     at System.Web.UI.Page.ProcessRequest()     at System.Web.UI.Page.ProcessRequest(HttpContext context)     at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionSt... 6955b79c-c42c-50fc-84f8-2b68f97002ea

Problems with user out of OS administrator group

Hi!
I have the following problem. I did an installation of several clients that point to a server, several months ago. The clients work with Windows 200 Professional. The installation in each client was made with a Windows user that has administrator privileges. I had no problems with the clients working with this user and they have been working up to now. But, when I try to take the OS user out of the ADMINISTRATOR group and into the groups USER or RESTRICTED USER, nothing works. I can't do anything that involves oracle and I get the following errors:
- When I try to connect to my application, it says:
Initialization error
Could not load "C:\oracle\ora92\bin\oci.dll"
OracleHomeKey : SOFTWARE\ORACLE\HOME0
OracleHomeDir: C:\oracle\ora92
Found: oci.dll
Using: C:\oracle\ora92\bin\oci.dll
Loadlibrary (c:\oracle\ora92\bin\oci.dll) returned 0
- When I try to start the HTTP Server, the following error appears:
Permision Denied. Could not open document config file c:\oracle\ora92\apache\apache\conf\httpd.conf
Why?, whats happening?. Is there any special privilege that must be given to my non-administrator user?.
Does it have to be in the Administrator Group necessarily?.I don't think so, but I don't know the solution. Any ideas?
Thanks a lot

It is probably a file system permissions issue. Try granting whichever users or roles need the Oracle client read/execute access on the %ORACLE_HOME% directory and subdirectories.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

My problem with access privileges

Hi there...
So here's my problem. I've had the one Account/User on my MacBook for a very long time. When I purchased an iPod Touch I decided to create a New Account on the same MacBook to manage this iPod, so that my old iPod could stay synced with my original admin account.
I set the new account up as an Admin and thought this would solve any problems with writing/reading any files. However, when I went to move the music files I wanted into the iTunes to put on my iPod Touch I ran into an error. As this was some time ago, I'm not 100% sure but I believe I had to set the "Music" folder as having Read AND Write privileges. And everything seemed to run fine. Even songs I downloaded onto my Touch through the iTunes wireless store would transfer over to my MacBook without a problem.
However, recently I have encountered problems with my system. Songs that I have downloaded onto my Touch won't transfer onto my MacBook. It tells me that I do not have sufficient access privlidges even though when I go to the "Get Info" section of my "Music" folder it is still set as Read and Write. And also, now I'm trying to download the new software for my iPod Touch but again I get the same message about Access Privlidges.
I have no idea why this is now a problem when before it seemed to work fine. So now I would like to know if there anyway of setting it so that both my Accounts on my MacBook can do WHATEVER they like. They are both set as Admins, but it seems as if my one for the Touch is restricted. So I would love it to have the exact same Access Privlides as my original account. Or if this is not possible, I would love to hear about other possible ways of correcting this problem.
Thank you for you time and I'm looking forward to hearing back from you.

If you have two user accounts, even if both are admin accounts, one user cannot access the files in another user's Home folder unless they are specifically shared. If you want both users to be able to access the one iTunes music library, then you must share the library by activating that feature in iTunes' sharing preferences of the account that "owns" the library.

Help! Stupid problem with user accounts!

I got a very old, very cheap laptop (original ibook clamshell). The Short Name referred to one of the previous owners. I had a vague idea of changing it, but realised this might be difficult. I haven't really got a rescue CD at present; the OS must have gone through several OS versions on the way, and it won't run Tiger which is what I have on my desktop.
The OS is up to late Panther. I haven't had any problems with it. Having some time on my hands, I picked up an O'Reilly book on 'Panther hacks', and went through the 'Change Short Name' routine with netinfo. Before doing this, I made sure there werent any document files on the machine I'd be bothered about losing. It has less than 1Gb hard drive space, so I've never regarded it as a machine to keep things on.
Went through the process of doing this, and moving the home directory, without problems.
Logged out. Discovered that there were two users with my name because I'd also created another user with my name but realised that the main account with the Short Name will run the machine. Logged in, and deleted one of them into Deleted Users.
This took a suspiciously long time; I suspect I deleted the main user by mistake. Yes, I realise this was a Bad Thing.
Suddenly, instead of having two administrator accounts with my name, I have one standard account with my name. (Yes, both accounts were administrator accounts before I deleted the wrong one by accident...)
I haven't particularly lost data, because any data created on Methuselap the Ancient of Days's minuscule hard drive gets networked straight over to my main desktop, and I don't have a login password set (again, anything that needs to be secure can go on a flash drive or the desktop), I'm annoyed (mostly at my own stupidity) that I am now no longer able to fix my privileges to set myself up as admin.
Has anybody got any particular bright ideas for what to do next?

Ruth,It will be of benefit to others who may find a similar situation to yourself if you mark Niel's post as 'Helpful' or more probably 'Solved' and the overall case as answered.
This will also credit Niel for providing the help and push him 10pts closer to getting his Level 5 status!
thanks
mrtotes

Problem with users in portal - login conflict with LDAP.

Hi.
Let me describe our problem:
We've a EP5 portal with LDAP conected to a central LDAP server, users access with the same user and password to all the different systems.
The problem happens to users who have theyr passwords expired. We already set to 0 the password expiration days to avoid future problems but that didn't applied to the already expired ones.
This affected users cannot change the password due to problems with the connection rights to LDAP server.
We're trying to find the place there it's set that the user is in some kind of "password expired" status, directly in a database table if neccesary, to change the status manually, as system does not allow os to set it by user administration in portal.
Any suggestions would be appreciated.

Restoring expired Portal passwords
Solved

Problem with ownership/privileges of NEW external hard disk

An external La Cie drive died on me this morning. I replaced it with a brand new one on which I copied all my files from a back-up. Everything went OK. I gave the new disk the exact same name than the one that had passed away and that was enough for QuarkXpress to figure out the correct location of images imported in various documents.
I then stumbled upon an unexpected ownership/privileges problem with an European piece of software, Ragtime, that will not allow me to do anything but read a document, claiming that "I do not have sufficient privileges".
I tried to grant myself such "privileges" in the Get Info window, but OS X refuses, stating once again that I do not have sufficient privileges to tinker with the system.
I am all by myself, I am the owner/administrator of the machine and don't know what to do. I called Apple Care, but they claim that I'm not entitled to any help because a) the problem occurred with a disk not manufactured by Apple and b) the software I was using is not manufactured by Apple.
Underprivileged
G5 Mac OS X (10.4.7)
G5 Mac OS X (10.4.7)

Hi, okapulco. Welcome to the Discussions.
I presume this is when using Ragtime in an attempt to work with documents on the new FireWire drive. I suspect your former LaCie drive had been set-up as follows:
1. Open the Get Info window for the FireWire drive.
2. In the Ownership & Permissons pane, select "Ignore ownership on this volume."
3. Close the Get Info window.
Good luck!
Dr. Smoke
Author: Troubleshooting Mac® OS X

Extremely annoying problem with user folder name in windows 8.1

Here is the thing:
Friend of mine bought the laptop (very strong and expensive asus - republic of gamers) with installed windows 8.1 on it, but after a few days only I bought that computer from him because he didn't need it and he didn't use it at all!
But, his name stayed in the windows. I changed all user accounts names and everything which was possible to be changed, but when i go to C/users his name is still there on folder!
I can say it is very annoying because that laptop cost almost 3.000 USD and I still need to look at someone else's name in my user folder!
I tried to change "ProfileImagePath" in: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ .... but after that windows logged in as a temporary profile and I spend another hour to figure out
how to reverse the thing!
How is possible that some so basic and simple things can't be changed at all in newest windows??? Only because some name was entered first it's not possible to be changed ever again???? Seriously?
Not only this problem, there is too many problems with this windows 8.1! Too many! You definitely made the worst thing ever!
I am extremely unhappy and upset with this operative system! I,m cursing the day when i gave so much money for computer with crap called windows 8.1!!!!
Very very angry!!!
(P.S English is not my native language)

Hi,
According to your description, it seems that you have resolve that issue.
Not only this problem, there is too many problems with this windows 8.1! Too many! You definitely made the worst thing ever!
Please let us know what problem did you encounter? Please give us more detailed information in order to provide the further help.
Here is a overall guide for you to know well the Windows 8.1
Windows 8.1: frequently asked questions
No Karen, I didn't resolve the issue.
I asked very simple question how to change something so basic like user folder name in Windows 8.1
You know: "C:/Users/"user name"
All the links you are giving to me doesn't provide any concrete answer to this question. I spent hours and hours googling and researching about this question and only solution which i found is that i need to create completely new user account and delete completely
the old one, just to be able to remove an old name of user folder! Are you kidding me?
How is possible that such a basic thing is so complicated?
Is there any way to change folder user name in any other way because i don't want to create a new user account!
Simple question, but, like always, no any concrete answers - just some empty talks, and totally useless links and SPINNING IN THE CIRCLE all the time without the CONCRETE solution.
As for part of my post which you quoted, and your request for more informations in order to provide me further help, i just gave it to you again. I want to change user folder name. What you don't understand in that question?
UPDATE:
Ok, i came back to edit this post because i have a feeling that maybe you don't understand the question and giving me this link because maybe you simply don't know that when you go to:
Control panel/user accounts/change your account name... and change the name, and after that, when you go to C:/users, the folder with the user name still have an old user name. Which means that any changes in control panel or anywhere else doesn't make any
changes on C:/users/ folder itself!!!!!
In previous windows versions was possible to change it by editing "ProfileImagePath" in:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ ....
But when I try to do that in Windows 8.1, when I reboot computer it logs in with some temporary account, so i need to reverse everything to be able to use computer with the real account!
So basically it seems that is absolutely impossible to change user folder name in Windows 8.1, which is simply unbelievable!
I really think i explained very good now.

Problem with user privilege

Similar Messages

Maybe you are looking for