Sign-On: Audit Level Profile Option

Hi,
Sign-On: Audit Level Profile Option after setting at site level to form is not displaying users in user-moniter form why?do i need to bounce anything or do i need to enable some auditing.
Regards

Hi,
like i went in user-profile-system then site is already checked mark by default, i checked mark user gave username as sysadmin(or any other user i want to audit) then came on profle column gave sign% and opened it opened all profiles with Sign-on
Application Responsibilty User
Profile name Site sysadmin
Sign-On:Audit Level Form Form
Sign-On:Notification Yes YesSet "Sign-On:Audit Level" profile option to "FORM" at the Site level only, and bounce the services.
Regards,
Hussein

Similar Messages

  • Gray out site-level profile options

    Hi All,
    Kindly let me know if there is any sql statement for graying out site-level profile otion for all the profile optinos.
    So that the dev user can only modify the profile options at user or resp level but not at the site level.
    Kindly help me out with some sql query which can gray out the site - level field at profile options.
    Thanks is advance.

    Hi,
    But they can simply login to Application Developer responsibility (assign it to themselves if they do not have it as they have access to System Administrator) and revert all the changes :)
    If each use has his/her own username, you should be able to know who is the one who updated the profile option value.
    As mentioned in my first reply, update the site updatable columns in the table, this should stop the users from updating those profile options (try this on a test/dev instance and take a backup of the table first -- please do not apply the same on your production instance).
    One other possible workaround/solution would be using forms personalization to hide the system profile option values at the site level but again if some one has the apps password and System Administrator responsibility he should be able to disable the code.
    Thanks,
    Hussein

  • Sign-On Audit: Forms

    Hi,
    AIX: 5.3 - EBS R12 - DB 10.2.0.2
    I have a question about the audit, at forms level.
    It happen frequently, that we have a frmweb process, at O/S level that consum ~20% cpu. When we check in the database, the process is not there anymore.
    We enabled the Sign-On Audit at forms level, to monitor from OAM.
    Is there any audit table that keep trace of the frmweb PID? I'd like to find, from a PID, which form it was and which user was using that form. Unfortunatly, when we find a frmweb process in trouble, there is no more connection to that form into the database so I cannot 'select process, action from v$session where process = <frmweb_pid>'.
    Thank you,
    Felix

    Felix.
    The list of tables which are involved when enabling this profile option are outlined in (Note: 368260.1 - What Tables Are Involved In Using The System Profile 'Sign-On:Audit Level'?).
    Regards,
    Hussein

  • Dynamical change read only property of  columns based on a profile option

    Hi,
    We are attempting to change a Oracle iProcurement(ShoppingCartPG) which has certain readonly columns by default.
    However, we need to make these columns updateable based on a responsibility level profile option. The code goes something like this.
    if readonly_profile_option = "TRUE"
    {make columnA property = readonly}
    else if readonly_profile_option = "FALSE"
    {make columnA property = updateable}
    I read the guide about switchers and it seems confusing (to me). So if someone can provide an example with some pseudocode that will be helpful.
    Also, can I dynamically add an LOV to column A if readonly is false? Of course the LOV should be disabled if readonly.
    Thanks a lot

    Hi,
    Thanks for the feedback.
    Tapash,
    Switchers definitely don't make sense.
    Raffy,
    Didn't know it was that simple. I always thought that the controller fires--> then the page renders --> then the VO attributes get poulated. Basing my understanding on this flow, I though that the bean properties can only be set in controllers and not in VOs(via SPEL). I'll try it tomorrow.
    Aprreciate your comments on the following.
    Our requirement is to make an Oracle seeded field(SupplierName in iProcurement) updateable and with an LOV . Oracle has seeded it as ReadOnly.
    I have two options.
    1. If I change the readonly property in jedeveloper(I cannot access it via personalization) and add SPEL that would be upgrade 'unsafe' customizing - I think.
    2. So I thought I'll extend the controller, substitute it and use
    messageLOVInputText SupplierNameBean=webbean.findChildRecursive("SupplierName");
    if{profle=not_read_only)
    {SupplierNameBean.setReadOnly(false)};
    else
    {SupplierNameBean.setReadOnly(true)};
    This is more upgrade safe. I have talked to the iProc development team and they are fine with it.

  • How to read responsibility level profile in forms personalization r12.1.3

    All, I have one custom profile option at responsibility level. I am wondering if I can read that value in WHERE CLAUSE of a WHEN_VALIDATE_RECORD trigger?
    I am trying to access responsibility level profile option using "${ps.up_prior_gl_period_allow.VALUE}". But, it doesn't seem to work.
    However, I am able to read site level profile option using "${ps.up_prior_gl_period_allow.VALUE}".
    Please help.

    Have you tried using fnd_profile.get_specific()?

  • Disable profile option updation at user level

    I want to disable the profile option HR: Security Profile or for that matter any other profile option at user level. The user should be able to see the value set by the system administrator (Field should be grayed out) and user should not be able to update it.
    How to do it??

    Try a personalization combined with custom PLSQL, like this:
    1) Acces System Profiles
    2) Help->Diagnostics->Custom Code->Personalize
    3) In the newly displayed Form Personalization form, create a line with a description like this: Prevent modification of USER_VISIBLE_VALUE
    4) In the Conditions tab, set Trigger Event = WHEN-NEW-ITEM-INSTANCE
    5) Set Trigger Object = PROFILE_VALUES.USER_VISIBLE_VALUE
    6) In the Condition text area, enter:
    apps.xxror_test_sysprofile(:PROFILE_VALUES.USER_PROFILE_OPTION_NAME,'USER')=1
    7) Set Processing Mode to Both
    8) Switch to the Actions tab and create two actions:
    first:
    type = property
    description = Don't update
    Language=all
    enabled=yes
    object type=Item
    target object=PROFILE_VALUES.USER_VISIBLE_VALUE
    property name=UPDATE_ALLOWED
    value=false
    second:
    type=property
    description=Don't enter
    language=all
    enabled=yes
    object type=Item
    target object=PROFILE_VALUES.USER_VISIBLE_VALUE
    property name=ALTERABLE_PLUS
    value=false
    9) Repeat steps 3-8 if desired for other levels, such as:
    Prevent modification of SITE_VISIBLE_VALUE
    Prevent modification of APPL_VISIBLE_VALUE
    Prevent modification of RESP_VISIBLE_VALUE
    Prevent modification of SERVER_VISIBLE_VALUE
    Prevent modification of ORG_VISIBLE_VALUE
    paying attention to update the corresponding names for xxx_VISIBLE_VALUE.
    10) Create the following PLSQL function:
    CREATE OR REPLACE function xxror_test_sysprofile (
    prof_opt_name in varchar2,
    lvl in varchar2
    return number
    is
    v_ret number;
    s_prof varchar2(1024);
    s_uname varchar2(100);
    s_lvl varchar2(10);
    begin
    -- returns 0 if the user "uname" must be granted access the profile named "prof_opt_name" at the "lvl" level
    -- returns 1 if the user "uname" must be forbidden to access such a profile at such a level.
    -- important assumption: the "lvl" parameter may have only one of the following values:'SITE', 'APPL', 'RESP', 'USER', 'SERVER', 'ORG'
    -- or else this function will return 1, thus forbidding the access
    s_uname:=substr(upper(trim(nvl(fnd_profile.value('USERNAME'),''))),1,100);
    if s_uname in ('MY_ADMIN_1','MY_ADMIN_2','SYSADMIN') then
    v_ret:=0; -- no restrictions
    else
         if s_uname in ('MY_POWERUSER_1','MY_POWERUSER_2') then
         -- restrict to only the below mentioned profiles
         s_prof:=substr(upper(trim(nvl(prof_opt_name,''))),1,1024);
              s_lvl:=substr(upper(trim(nvl(lvl,''))),1,10);
              if
              (s_prof like '%WHATEVER%')
              then
                   if s_lvl in ('SITE', 'APPL', 'RESP', 'USER', 'SERVER', 'ORG') then
                        v_ret:=0; -- level acceptable for these users on these profiles
                   else
                        v_ret:=1; -- unknown level, so reject
                   end if;
              else
                   -- these users may not access these profiles, so reject
                   v_ret:=1;
              end if;
         else
              if s_lvl = 'SITE' then
              -- no way any other user than those above may modify site-level profiles
              v_ret:=1;
              else
                   -- any other user than those above may modify lower-level profiles, but
                   -- for now reject all
                   v_ret:=1;
              end if;
         end if;
    end if;
    return v_ret;
    end;
    Pls be aware that testing first on a test instance is always advisable.

  • Update profile options at user level?

    Hi All,
    Need a script for,
    update profile options at user level, for example we should be able to update a profile xyz for a user abc using that script?
    or please provide the document related to that..

    Hi All,
    Thanks for all sugessions,
    i have written an script for updating profile option value from backend.
    SELECT d.level_id,c.user_name, b.profile_option_name, a.user_profile_option_name,d.profile_option_value
    FROM fnd_profile_options_tl a,
    fnd_profile_options b,
    fnd_user c,
    fnd_profile_option_values d
    WHERE d.profile_option_id = b.profile_option_id
    AND d.level_id = 10004
    AND a.profile_option_name = b.profile_option_name
    AND d.level_value = c.user_id
    AND c.user_name = '&USER_NAME'
    update query
    update fnd_profile_option_values
    set profile_option_value = '&Profile_Option_Value'
    where profile_option_id in
    (select profile_option_id from fnd_profile_options where profile_option_name
    =(select profile_option_name from fnd_profile_options_tl
    where user_profile_option_name = ('&User_Profile_Option_Name')))
    and level_id = 10004
    and level_value in (select user_id from fnd_user
    where user_name in ('&User_Name'))
    Thanks
    One

  • Profile options at USER level in EBS r12

    Hi Gurus
    I'm an new to Oracle EBS can some one help with this,
    1. Turn on debugging using the following profile options at USER level :
    FND: Debug Log Enabled : Yes
    FND: Debug Log Level : Statement
    2. Run the Create Accounting Program
    3. Derive debug message using the following query and upload in excel format :
    SELECT substr(module,1,70), MESSAGE_TEXT, timestamp, log_sequence
    FROM fnd_log_messages msg, fnd_log_transaction_context tcon
    WHERE msg.TRANSACTION_CONTEXT_ID = tcon.TRANSACTION_CONTEXT_ID
    AND tcon.TRANSACTION_ID = <’Accounting program ‘ request ID>
    ORDER BY LOG_SEQUENCE
    4. Upload the LOG and OUTPUT files for the :
    - Create Accounting
    - Accounting Program
    Will be waiting for you reply.
    Best Regards
    Babu.

    Hi Babu,
    FND: Debug Log Enabled : Yes
    FND: Debug Log Level : Statement
    - Navigate to sysadmin responsibility > profile > system
    - Find for the respective profiles eg: FND: Debug Log Enabled
    - Set your desired value.
    2. Run the Create Accounting Program
    Run the create accounting conncurrnet program View > Request > New from the respective module
    SELECT substr(module,1,70), MESSAGE_TEXT, timestamp, log_sequence
    FROM fnd_log_messages msg, fnd_log_transaction_context tcon
    WHERE msg.TRANSACTION_CONTEXT_ID = tcon.TRANSACTION_CONTEXT_ID
    AND tcon.TRANSACTION_ID = <’Accounting program ‘ request ID>
    ORDER BY LOG_SEQUENCE
    Run this query from backend, and provide the Concurrent ID of the Create accounting program (replace this at <’Accounting program ‘ request ID>)
    - Create Accounting
    - Accounting Program
    Upload the the logfile and output files of the respective program and the output of the above query.
    I believe this is an action plan from the SR, you may also get the assistance from the SR itself and they will help you. Anyways let us know if you need any assistance
    Thanks &
    Best Regards

  • Profile option update at responsibility level from backend

    Hi,
    I referred few online and oracle support document to update the profile option from backend. I was able to change the profile option at site level, but when I am trying to update the profile at responsibility ( or any level such as user etc), I am unable to do so. Though the script says that profile option has been updated, it doesn't show up when I check on frontend.
    EBS 11.5.10.2
    DB 11.2.0.1
    The script which I use to change profile at site level is this:-
    DECLARE
    stat boolean;
    BEGIN
    dbms_output.disable;
    dbms_output.enable(100000);
    stat := FND_PROFILE.SAVE('SITENAME', 'ABDVLP', 'SITE');
    IF stat THEN
    dbms_output.put_line( 'Stat = TRUE - profile updated' );
    ELSE
    dbms_output.put_line( 'Stat = FALSE - profile NOT updated' );
    END IF;
    commit;
    END;
    I tweaked the above script to include the responsibility level change, but its not changing. Both the below scripts are not making any changes.
    SCRIPT - 1
    DECLARE
    stat boolean;
    BEGIN
    dbms_output.disable;
    dbms_output.enable(100000);
    stat := FND_PROFILE.SAVE('ICX_DISCOVERER_LAUNCHER', 'http://nalinoes01.abd.ad.acco.com:8003/discwb4/html/discolaunch.htm?Connect=[APPS_SECURE]', 'RESP',51889,671);
    IF stat THEN
    dbms_output.put_line( 'Stat = TRUE - profile updated' );
    ELSE
    dbms_output.put_line( 'Stat = FALSE - profile NOT updated' );
    END IF;
    commit;
    END;
    Note: I found the responsibility id from the below query
    SELECT responsibility_id  ,application_id
         FROM fnd_responsibility_tl
        WHERE responsibility_name = 'DIRECT CA IBE CUSTOMER';
    ===============================================================================
    SCRIPT-2
    DECLARE
       stat           BOOLEAN;
       resp_id        NUMBER;
       appl_id        NUMBER;
       resp_appl_id   NUMBER;
    BEGIN
       DBMS_OUTPUT.DISABLE;
       DBMS_OUTPUT.ENABLE (100000);
       -- Set the Profile Option value at responsibility level
       SELECT responsibility_id, application_id
         INTO resp_id, resp_appl_id
         FROM fnd_responsibility_tl
        WHERE responsibility_name = 'DIRECT CA IBE CUSTOMER';
       stat :=
          fnd_profile.SAVE
             (x_name                        => 'ICX_DISCOVERER_LAUNCHER',   -- Profile name you are setting
              x_value                       => 'http://nalinoes01.abd.ad.acco.com:8003/discwb4/html/discolaunch.htm?Connect=[APPS_SECURE]',   -- Profile value you are setting
              x_level_name                  => 'RESP',   -- Level that you're setting at: 'SITE','APPL','RESP','USER', etc.
              x_level_value                 => resp_id,   -- Default NULL Level value that you are setting at, e.g. user id for 'USER' level. X_LEVEL_VALUE is not used at site level.
              x_level_value_app_id          => resp_appl_id,   -- Default NULL. Used for 'RESP' and 'SERVRESP' level; Resp Application_Id.
              x_level_value2                => NULL   -- 2nd Level value that you are setting at.  This is for the 'SERVRESP' hierarchy.
       IF stat
       THEN
          DBMS_OUTPUT.put_line ('Stat = TRUE - profile updated');
       ELSE
          DBMS_OUTPUT.put_line ('Stat = FALSE - profile NOT updated');
       END IF;
       COMMIT;
    END;

    I tried to change at SERV level and still the profile never gets updated. Kindly help.

  • I sign up for TAPJOY.While signing in,they install something in my PROFILE CONFIGURATION...When I check my Settings-General,I can't see the PROFILE OPTION! Please help me :) Im running ios 6.0.1

    I sign up for TAPJOY.While signing in,they install something in my PROFILE CONFIGURATION...When I check my Settings-General,I can't see the PROFILE OPTION! Please help me Im running ios 6.0.1

    Well, after another call with Apple support and the engineers, no success.  After spending over 20 hours trying to debug this, I give up.  Apple was basically fishing for a solution with trial-and-error settings on the iphone.  Then they wanted me to plug in software to log my iphone connections to the router, etc, etc., etc., at which point I decided I no longer wanted to participate in their testing process and will simply return the router.
    25 hours of my life I'll never get back.
    Big bummer, and frustrating for all the obvious reasons.

  • Script to check finding profile option at user level

    HI Friends,
    i want to find out
    script to check finding profile options at user level using sql in oracle apps 11i.
    Please suggest me.
    Thanks,
    DBA

    i want to find out
    script to check finding profile options at user level using sql in oracle apps 11i.Note: 470102.1 - How To Check If a Profile Option Is Set In Oracle Application
    Note: 201945.1 - How to list E-Business Suite Profile Option values for all levels using SQLPlus
    Note: 282382.1 - How to Search all of the Profile Options for a Specific Value
    Note: 367926.1 - How To Find All Users With A Particular Profile Option Set?
    Note: 282382.1 - How to Search all of the Profile Options for a Specific Value
    How To Set A System Profile Value Without Logging In To The Applications [ID 364503.1]
    How to Change Profile Option Value Without Forms [ID 943710.1]
    Thanks,
    Hussein

  • How to get profile options & values at user & responsibility level by SQL?

    Experts, How to get profile options and values at user and responsibility level using SQL?

    SELECT
    po.profile_option_name as name
    , po.user_profile_option_name
    , decode(to_char(pov.level_id),'10001','SITE','10002','APP','10003','RESP','10005','SERVER','10006','ORG','10004','USER', '???') as "LEVEL"
    , decode(to_char(pov.level_id),'10001','','10002', app.application_short_name,'10003', rsp.responsibility_key,'10005', svr.node_name,'10006', org.name,'10004', usr.user_name,'???') as context
    , pov.profile_option_value as value
    FROM
    fnd_profile_options_vl po
    , fnd_profile_option_values pov
    , fnd_user usr
    , fnd_application app
    , fnd_responsibility rsp
    , fnd_nodes svr
    , hr_operating_units org
    WHERE 1=1
    AND pov.application_id = po.application_id
    AND pov.profile_option_id = po.profile_option_id
    AND usr.user_id (+) = pov.level_value
    AND rsp.application_id (+) = pov.level_value_application_id
    AND rsp.responsibility_id (+) = pov.level_value
    AND app.application_id (+) = pov.level_value
    AND svr.node_id (+) = pov.level_value
    and org.organization_id (+) = pov.level_value
    ORDER BY 1, pov.level_id, 5
    You'll need to apps initialize your SQL session before running this ...
    Regards,
    Jon

  • Changing Profile option 'Sequential Numbering' at Site Level

    Hi -
    I need some input regarding a change that I am planning to make to fix the following error in Order Import:
    "Your profile option does not allow automatic numbering.
    Please ask your system administrator to change the sequential numbering profile."
    At our site, we are not using Automatic Numbering for any types of orders, RMAs etc. These numbers are provided by the legacy system, which populates the OE interface tables. Right now, the Profile Option "Sequential Numbering" is set as follows:
    Site: Not Used
    Application: Order Management - Partially Used
    Responsibility: Order Management User/ Super User - Partially Used
    I have found that if I change the Site profile to 'Partially Used', I don't get this error.
    How will this change affect other applications like AR, AP, OKC, OTL etc? What do we have to be careful about? Do we need to test anything else? Any feedback will be appreciated.
    Thanks
    [email protected]

    EDI inbound(Order) program had been successfully Reading data from the Flat file placed in the inbound folder and Inserting the data correctly into the Interface tables and automatically firing the Order Import Program. How-ever Order import program was failing to create an order giving a error message like
    ‘Your profile option does not allow automatic numbering.
    Please ask your system administrator to change the sequential
    numbering profile.
    I tried running the Order import Program manually after inserting the very same data in to the interface Tables from PLSQL developer. And the order was getting created successfully.
    To debug the issue further what I did was - Disabled the “Order Import” Concn program, placed the data file in the inbound folder and ran the EDI Order Inbound Program. The idea was to compare the entries in the interface tables between the one inserted by the EDI program and ourselves from PLSQL developer. The Data seemed to be the same. Then I enabled the “order Import” Conc Program and ran the same for the very same entry inserted by the EDI inbound program and the Order got created successfully….!
    The responsibility was the culprit…!
    EDI Inbound is run from ECE Super User and Manual Order Import from OM Super user…
    Now order is getting created Successfully from e-Com Resp through EDI Inbound after setting that Profile Value to "Always Used".

  • MO Operating Unit Profile Option Needed for Mass Allocation in R12

    Mass Allocation does not work in R12 unless you set MO Operating Unit profile option at GL Responsibility level. Is that an official requirement from Oracle or is that a bug? A client should be able to implement and use GL without setting operating units as they are needed for subledgers.

    Hi
    I have found the below mentioned information on MO: operating Unit Profile option from the Oracle E-Business Suite Multiple Organizations & Oracle General Ledger Reference Guide which directly or indirectly requires the setting of the profile option at the appropriate level (responsibility, site etc)
    Profile Options not Owned by General Ledger:
    The following profile option affects the operation of General Ledger, but is not "owned" by General Ledger:
    • MO: Operating Unit - This profile option controls which operating unit a particular responsibility is assigned to.
    Note: General Ledger's Account Inquiry window ignores the setting of this profile option. This allows you to drill down to your subledgers independent from their multiple organization setup. As a result, when you drill down to subledger details, General Ledger will show you all of the transactions that comprise an account balance, regardless of which organization originated the transaction.
    To use multiple organizations, you must define an accounting setup with at least one legal entity, a primary ledger that will record the accounting for the legal entity, and an operating unit that is assigned to the primary ledger and a default legal context (legal entity).
    You must set either the MO: Operating Unit or MO: Security Profile profile option for each application responsibility to use Multiple Organizations context sensitive applications. When you connect to the Oracle Applications, you sign on by entering your user name and password. Then, you choose a responsibility that is available to your user. After you choose your responsibility, there is an initialization routine that reads the values for all profile options assigned to that responsibility. Oracle Applications allows you to see only the information for those operating units that are assigned to your responsibility.
    Hope this helps.
    Thanks and Regards
    Manish Jain

  • Probleme whith "MO: Operating Unit profile option"   please help.

    i have this message when i call this API:
    HZ_CUST_ACCOUNT_V2PUB.CREATE_CUST_ACCOUNT,
    the message is :
    1. Please set the Receivables system options for this operating unit and ensure that the MO: Operating Unit profile option is correctly set with an operating unit that is set up in Receivables.
    2. Column account_number must have a value.
    please can some one help me !
    thinks a lot.

    Hi
    I have found the below mentioned information on MO: operating Unit Profile option from the Oracle E-Business Suite Multiple Organizations & Oracle General Ledger Reference Guide which directly or indirectly requires the setting of the profile option at the appropriate level (responsibility, site etc)
    Profile Options not Owned by General Ledger:
    The following profile option affects the operation of General Ledger, but is not "owned" by General Ledger:
    • MO: Operating Unit - This profile option controls which operating unit a particular responsibility is assigned to.
    Note: General Ledger's Account Inquiry window ignores the setting of this profile option. This allows you to drill down to your subledgers independent from their multiple organization setup. As a result, when you drill down to subledger details, General Ledger will show you all of the transactions that comprise an account balance, regardless of which organization originated the transaction.
    To use multiple organizations, you must define an accounting setup with at least one legal entity, a primary ledger that will record the accounting for the legal entity, and an operating unit that is assigned to the primary ledger and a default legal context (legal entity).
    You must set either the MO: Operating Unit or MO: Security Profile profile option for each application responsibility to use Multiple Organizations context sensitive applications. When you connect to the Oracle Applications, you sign on by entering your user name and password. Then, you choose a responsibility that is available to your user. After you choose your responsibility, there is an initialization routine that reads the values for all profile options assigned to that responsibility. Oracle Applications allows you to see only the information for those operating units that are assigned to your responsibility.
    Hope this helps.
    Thanks and Regards
    Manish Jain

Maybe you are looking for