Security: problem Group/Filter by API VB

Bonjour,Je souhaite ouvrir l'acc?s ? une application pour un groupe et l'associer ? un filtre par un programme VB.Comment ouvir via un programme VB l'acc?s ? une application.How open access to a application for a group ? (use API VB for Essbase)[email protected]

try this (hctx is global) and ignore the note of ignoring filter and maxaccess line in the documentation:Sub EsbSetDatabaseAccess () Dim sts As Long Dim Items As Integer Dim UserDb As ESB_USERDB_T '***************************** ' Initialize UserDb structure '***************************** UserDb.UserName = "Joseph" UserDb.AppName = "Sample" UserDb.DbName = "Basic" UserDb.Access = ESB_ACCESS_FILTER UserDb.MaxAccess = ESB_ACCESS_FILTER UserDb.FilterName = "MyFilter" Items = 1 '*************************** ' Set Supervisor access level '*************************** sts = EsbSetDatabaseAccess (hCtx, Items, UserDb)End SubTom

Similar Messages

Problem with group filter display

I have used a record and group filter to display some data item. The data item has been displayed in content field of right side.
However, it display the data item in group field of left side which only suit to the condition by record filter. So, some data items of left side are not suit to group filter.
How can I get the data item which will suit to combine condition of record and group filter. Thanks!

The Group Tree (left) will ALWAYS show all groups, not just those selected using the Group Selection. Keep in mind that Group Selection does not actually pull records for the criteria it only suppresses groups that don't meet the criteria.
NOTE: The same is true if you're using SUM for any values. It will sum ALL the values - not just those in the groups being shown in the report. Use Running Totals for this so that you will only sum those groups that are visible in the report.
Again, either use or don't use the group tree but one can not specify which groups are shown in the group tree. It will ALWAYS display all groups of data pulled into the report.
Another option may be to utilize a stored procedure to pull ONLY the groups you want then report off the stored procedure.

Windows Deployment Services 2012 - Driver Group filter by Model value not working - Drivers are not installed!

Hi,
I'm using Windows Deployment Services 2012 to deploy Windows 7 Pro x64 driverless images to different hardware models (drivers are injected using WDS). I already have organized the drivers in driver groups per
hardware model. I'm experiencing driver conflicts so I decided to start using driver group filters to make sure that the driver groups are available only available for the corresponding hardware model.
To get the correct values for the filters i have used the following method: (as described in this article: http:// technet.microsoft.com/en-us/library/dd759191.aspx)
so I checked msinfo32.exe
(System Manufacturer: Dell Inc. System Model: OptiPlex 790)
and set these values in the driver group filter:
Then fired up WDS using PXE booting on my OptiPlex but when finished: No drivers are installed! I investigated further and found on forums to use the following commands (which return the same values btw):
wmic bios get manufacturer
(returns: Dell Inc.)
wmic computersystem get manufacturer
(returns: Dell Inc.)
wmic computersystem get model
(returns: OptiPlex 790)
Values are the same so no problem there.
Then I checked the output of the following commands:
wmic bios get model (returned: error, invalid query)
wmic bios get /all (returned: all kind of information but no model value)
When I remove the value "OptiPlex 790" from the filter list the drivers are installed correctly. So this has to be some problem with the Model value.
Could someone please help me?
As a workaround I now disable all the driver groups exept the one that I need for the hardware. But as more new hardware models are added this is a lot of work to do everytime.
Extra info:
I'm using a WINPE 4.0 image (windows 7 media boot.wim file). 6.1.7.601
Windows Server version: Windows Server 2012 - version 6.2 (Build 9200) - All Windows updates are installed
Windows Deployment Services version 6.2.9200.16384
Having this problem on multiple systems
Questions:
- Does WDS/WinPE uses only the Bios values for determining system info? (then this problem could be with Dell in this example, because no model value is available)
- Is this the correct way to set up driver group filters? (then this is a problem with MS. Does anyone have solution??)
Thank you for your answers & help!

Hi Microsoft,
I still have no answer to my Questions.
Thank you for your answers & help!

Group filter subtotal

Hi,
I have a group filter set dynamically using bind variables; it shows the X first records in each group and a subtotal that shows the sums for this X first records, but I need a subtotal for all records in that group too. Anybody knows how can I do that?
Thanks,
Rodrigo.

Andrew,
Sorry, but your sugestion didn't work. When I get the filter out of the data model and put it in the repeating frame in layout model, it appears as the same thing in my object navigator. Here's my problem: I have two groups: PRODUCTS and SECTIONS. The SECTION group is parent to the PRODUCTS group. I have to show the X better sold PRODUCTS per SECTION, a subtotal showing the amount of sales of these X PRODUCTS, another subtotal showing the amount of sales of all products of the SECTION and a grandtotal to all the SECTIONS. When I use the PL/SQL group filter, it sums only the X top records, instead of ALL records like you said. Any idea ?
Thanks in advance,
Rodrigo.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Andrew Tselischev ([email protected]):
Hi
As far as I understand you use group filter in data model.
I recommend use of group filter in Layout Model. I.e. for appopriate Repeating Frame:
1. Set the 'Filter Type' property to 'PL/SQL'.
2. Remove code from your group filter in data model to 'PL/SQL Filter' of Repeating Frame.
After that you will have X first records in each group and a subtotal for ALL records in that group. Now you need the subtotals for the first X records. This may be done, for example, by the following way:
1. Create the formula field <new_value> in main group:
BEGIN
IF <true_filter_condition> THEN
RETURN <your_value>;
ELSE
RETURN 0;
END IF;
END;
2. Create desired summary field on basis of <new_value>.
I hope it will help you.
Andrew<HR></BLOCKQUOTE>
null

Weblogic implementation of java.security.acl.Group

hi guys
Do you know of any specific reason why there isnt a implementation of the
java.security.acl.Group interface in the weblogic jar.
I am trying to create a simple user manager service which uses the mbeans
exposed by weblogic. However the interface I am coding to expects me to return
java.security.acl.Group when I create a Group. This has resulted in a deadlock
as I havent been able to locate a non deprecated implementation.
Thanks
anand

Yes, you can do this.
Alexandre Vauthey wrote:
Hi,
If I write my own securrity realm, am I able to use my own implementaion of
'java.security.acl.Acl' and 'java.security.acl.AclEntry' or do I have to use
the implementation provided by weblogic ? When Security.checkPermission() is
called, does it solely rely on APIs defined in 'java.security.acl' or does
it really expect to talk to an instance of weblogic 'AclImpl' ?
Thanks, Alexandre.
Alexandre Vauthey
Software Engineer
Application Networks
444 Ramona street
Palo Alto, CA 94301

JHeadStart Security problem-error page cannot be found- role based security

JHeadStart Security problem-error page cannot be found- role based security
Good morning! How are you? I would need some help in a jheadstart 10.1.3.2 security case and I was wondering if you could give me a hand to go on. I create the Model project with tables of oe schema. Then in JHeadStart to perform security I follow the following steps: In ViewController/WEB-INF/web.xml – properties I do the following: login configuration: http basic authentication rfc 7617: realm:jazn.com
Security roles : I define two roles: customer and administrator , Security Constraints: web_resources: All_pages, Url Patterns: faces/*. Then in Tools/Embedded OC4J Preferences/Global/Authentication JAZN/Realms/jazn.com/users: I define two users c1, password c1 and a1,password a1, roles/member users/ I attribute the roles to the relevant users c1—customer and a1—administrator. Then in application definition editor on service level I define security/use role based authorization=true , authorization type: JAAS and when access denied go to next group=true. On group level e.g.: ProductInformation: Authorization/Authorized Roles Permissions: administrator.On item level : Orders/Items/OrderTotal/Operations/Update Allowed: #{jhsUserRoles['administrator']},Then I generate the pages (run the jag) . The generation is completed successfully but when I run the View Controller project a “the website declined to show this webpage…(page cannot be found)’ is displayed. What should I do? I would appreciate it if you would help me on this issue! Thank you very much.

Thand you very much for your reply! Unfortunately there is a specific restriction-convention in the project I work in. I am supposed to perform role based security with my own tables and no by the jheadstart’s ones. Could you find out what is my fault with the steps I follow trying to perform the process?
To remind you my steps I paste the following again:
JHeadStart Security problem-error page cannot be found- role based security
Good morning! How are you? I would need some help in a jheadstart 10.1.3.2 security case and I was wondering if you could give me a hand to go on. I create the Model project with tables of oe schema. Then in JHeadStart to perform security I follow the following steps: In ViewController/WEB-INF/web.xml – properties I do the following: login configuration: http basic authentication rfc 7617: realm:jazn.com
Security roles : I define two roles: customer and administrator , Security Constraints: web_resources: All_pages, Url Patterns: faces/*. Then in Tools/Embedded OC4J Preferences/Global/Authentication JAZN/Realms/jazn.com/users: I define two users c1, password c1 and a1,password a1, roles/member users/ I attribute the roles to the relevant users c1—customer and a1—administrator. Then in application definition editor on service level I define security/use role based authorization=true , authorization type: JAAS and when access denied go to next group=true. On group level e.g.: ProductInformation: Authorization/Authorized Roles Permissions: administrator.On item level : Orders/Items/OrderTotal/Operations/Update Allowed: #{jhsUserRoles['administrator']},Then I generate the pages (run the jag) . The generation is completed successfully but when I run the View Controller project a “the website declined to show this webpage…(page cannot be found)’ is displayed. What should I do? I would appreciate it if you would help me on this issue! Thank you very much.

Opening and closing a frame from an applet security problem

can I open a frame or a window from an applet and close the frame by using
System.exit(0) for the frame or will it throw a security problem.

I am using system.exit(0) to exit the JVM.
dispose()
Releases all of the native screen resources used by this Window, its subcomponents, and all of its owned children. That is, the resources for these Components will be destroyed, any memory they consume will be returned to the OS, and they will be marked as undisplayable.
If this frame have to be close and open again don't use dispose.
there is no check whether a frame is active? what you can do is set the the new frame to null (frame = null) and also when you dispose it, this will let you know if the frame is active or not.
Noah

I got this warning when i open a specific page on my website in IE : MuseJSAssert: Error calling selector function:Error: A security problem occurred.

Hi,
I found out when i'm in IE and go to the page 'Artists'
and i click on a name, for example: 'Abel Equipe ELA/I Gomes'
I get this warning :
MuseJSAssert: Error calling selector function:Error: A security problem occurred.
This is only in IE, not when i use Safari or Chrome
this is the website link
Any ideas how to solve this problem?

There's an invalid hyperlink on the Abel Equipe ELA/I Gomes page on a bit of text that reads "with your input." You need to find this text within Muse, clear the hyperlink and enter a valid one.

Need to solve serious security problem with Oracle Reports URL

As mentioned repeatedly on this forum, Oracle Reports allows serious security breaches that allow users to see reports that they did not generate -- it's easy to guess a legal URL by changing the getjobid parameter.
I've reviewed the JavaDocs to part of the rwrun.jar file and reviewed some of the example report plugins. This shows promise in helping to solve this security problem but critical pieces are missing.
1) The javadocs are accurate for only 10g (9.0.4) but not correct for 10g (10.1.2+), which we are currently using. I need access to the updated version of this javadoc.
2) Even with the updated version of the JavaDoc, I haven't found a class from which to inherit that would give me the opportunity to generate random jobid values, which then would effectively prevent users from guessing other jobid values, and thereby gaining access to other's reports (which in our cases, may contain sensitive information.
3) We have found that we can send the parameter=value of EXPIRATION=1 which helps protect such information, but this requires that every program which invokes a report be modified to add this parameter. It would be far better for the report server to be configured to use a java class we write that inherits from some rwrun.jar class that would by default, add the EXPIRATION=1 parameter.

Hi,
Thanks for our replies. I will ask to an administrator about this security problem, now I know it depends of a security parameter.
But I would know if it could be possible to hide the technical name of the query in the url. It could improve the security level of our reports in a first time in this way.
Thanks a lot,
JW.

Javascript security problem in IE/Netscape

I am facing with the javascript security problem in IE/Netscape. I have solved this problem partially, but there are more issues involved.
Here's the scenario:
There is an HTML page on client's hard disk (main.htm) containing two frames:
frame 1 contains a page that lies that is deployed from my server, say
src="http://127.0.0.1:8080/MyApplication.htm"
frame 2 contains a page that lies on the client's server, say
src="http://www.clientside.com/clientPage.htm"
My page in frame 1 wants to access the URL of the page in frame 2 (through a button click, say ). This is done in MyApplication.htm through javascript as:
window.parent.frame2.location.href;
Now when the above line is executed, i get the following error:
In IE(5.0): "permission denied"
In Netscape(4.7): "access disallowed from scripts at http://127.0.0.1:8080/MyApplication.htm to documents at another domain."
(which is understandable)
I have partially solved the above problem in Netscape, by granting access permissions to MyApplication.htm (page on my server) to access the
"http://www.clientside.com/clientPage.htm" page at client's domain.
This is done as follows:
1. First enable code base principals in client's Netscape by adding the following line in prefs.js file of Netscape
"user_pref("signed.applets.codebase_principal_support", true);"
2. Secondly i must add the following line in java script of "MyApplication.htm"
"netscape.security.PrivilegeManager.enablePrivilege("UniversalBrowserAccess");"
Now when the client clicks the button on my frame he'll get a netscape window asking him to grant permissions to MyApplication.htm.
After granting permission, MyApplication.htm can retrieve the URL of clientPage.htm (even if he browses to another url)
As you can see this problem is solved partially, but i want that the page "main.htm" (which is now on the client's hard disk),
must be deployed at client's server (in which case not even the above technique works).........what should i do? any alternates or other solution?
Secondly i want this to work with IE too, (which should according to their documentation, but does not and is therfore a big IE bug-as mentioned on the net)
Any sort of help in this case would greatly appreciated.
Thanks
Faisal Moin Khan

i believe you are posting in the wrong forum.
This forum is foro XML web services.

Applet problem with FileWriter() (security problem?)

btBut1.addActionListener(new ActionListener()
   public void actionPerformed(ActionEvent e)
       FilePermission perm = new FilePermission("<<ALL FILES>>" , "write");
      try {
            FileWriter outputStream = null;
            outputStream = new FileWriter("./bandiere/testouno.txt");
       catch (IOException eX) {
   });This is a bit of code from an APPLET which I'm working on. The code does not work...
I smell it is a security problem, but I'm not sure...

You are trying to write to the local file system which is not allowed unless the applet is signed.
Unless you think you are trying to write to the server, in which case, you can't do that with FileWriters. You'd have to make a connection to the server via a socket or URLConnection or something to pass the data over.

Signed applets in 1.4.1: non-trust ignored: severe security problem?

Hello all,
I am signing applets with a developer certificate.
Until know everything worked fine with Plugin 1.3.1.
Know I changed to Plugin 1.4.1 and encountered a strange behaviour: When I open the HTML page with a browser (tried IE 5.5 and Mozilla 1.1) the certificate-question pops up. The problem: if I choose not to trust the certificate, the applets starts nevertheless and I can use the system clipboard inside my Applet (for what applets needs to be signed)!
This looks like a severe security problem!
Does anyone know anything about this? Can you reproduce this?
thanx!
Marcus

Hi,
I tried to reproduce what you said with plugin 1.4.0 (I don't have 1.4.1 yet) and IE6.0 (It doesn't have anything to do with the browser)
My Java console said :
"User has denied the priviledges to the code
writeFile: caught security exception"
The security seems to work OK in 1.4.0.
I will have to try 1.4.1.
Patrick

How to pull groups from more than one OU using weblogic "All Groups Filter" from AD.

Hi,
Please help me for pulling groups from more than one OU using weblogic "All Groups Filter" from AD.
AD structure is:
c001639domain.local
       ||
       ||
    OU=Security_Groups
                  ||
                  ||
                  >> OU=CORP_ECM---> n number of group
                  >> OU=CORP_hodata--> n number of group
                  >> OU=CORP_citrix--> n number of group
                  >> OU=CORP_driver --> n number of group
                  >> OU=CORP_temp --> n number of group
Requirement is i want to filter groups from OU=CORP_ECM and OU=CORP_hodata.
Thanks,
Jagan.

I used below option but its not working getting zero groups.
(&(objectClass=group)(|(ou=CORP_ECM,dc=Domain,dc=com)(ou=CORP_hodata,dc=c001639domain,dc=local)))

SAP ERP Security Problems

Hello,
We are searching and investigating the security problems and needs in SAP Systems (the NetWeaver and R3).
We are looking for vulnerabilities from the network level up to the application and SAP-GUI level.
We would like to hear and learn from users on case studies and problems that occurred during implementing and running the SAP systems.
We would appreciate if you could contact us for further details.
Thank you.
<Contact information removed by forum moderator>
Message was edited by: Christian Wippermann

Dear Alon,
Thank you for your interest in SAP Security. You are very welcome to investigate product security and to share your results with SAP ([email protected]). But this is exactly the place where SAP users should report security problems they may find. They should not report to other companies! That is why I removed your contact information and closed this thread.
To make myself clear: Please report security problems directly to [email protected] My collegues there will support to solve the issues.
Best regards,
Christian

ERROR Msg: MuseJSAsset: Error calling selector function:Error: A security problem occurred.

ERROR Msg: MuseJSAsset: Error calling selector function:Error: A security problem occurred.
Just launched site using 1 of my 5 CC web-hosting chips. Using Adobe's hosting: ns1, ns2 & ns3.worldsecuresystems.com
Concerned that the "• Assign a domain name (e.g., www.mycompany.com)" keeps coming up, even tho' I've launched???????????

Hi,
The MuseJSAsset error usually appears if there is any conflicting script on the page. Have you added your own code to the site using Insert HTML feature? If yes, please try removing it.
Regarding your second concern, What is your site URL?
Regards.
Aish

Security: problem Group/Filter by API VB

Similar Messages

Maybe you are looking for