Access Control thru Process Management

Hi,
I am using 11.1.2.1 version. In my planning application, I have given access to 3 users (user1, user2 and user3) to all security enabled dimensions. I have granted their access to all relevant data forms. Now, through process control, under "Budget" scenario and "Working" version, against the particular entity, I created a subhierarchy with an Account dimension member (lets say a1). The planning unit is assigned an owner (user1) and a reviewer (user2).
Now, when I select Tools->Manage Process and select that particular scenario and version, I can see the current owner is user1. But, with the access of user1, I can see all the account dimension members within the data form are editable including a1.
How can I restrict the user1 to edit data only for a1 and not all the other Account members?
Thanks.

Hi,
Actually, when I am not using subhierarchy, there is no issue. But, nothing is happening when I am using subhierarchy. Has anybody faced this issue in 11.1.2.1? Please help.
Thanks.

Similar Messages

Online file storage with access control and file manager integrated to APEX website

I have APEX 4.2 website with few user accounts. I would like to share approximately 100 GB of documents to users. Some documents will be public (in some public folder) and everyone with account in my website will be able to download that public files. And some files/folders will be with restricted access and only user with appropriate credentials will be able to download it.
I would like to find some cheap cloud file storage.
Some storage that offers plugin/component = file manager that will be integrated to my APEX website and authentication will be transparent to my users (authentication with some API or URL). Every user will see only his files. I want some ready to use component and call only minimum API.
I would like to integrate that storage to my website or call some user specific URL and redirect my user to some page with file manager.
All files will be read only for all users.
Thanks for some tips

what will you be using for your file manager? Or do you even know yet?
I do not have tons of experience but if I had to come up with a solution I would build the interface with APEX and use the database to store the files inside so you can control access.
You can create a procedure that takes in parameters like username, session id, encrypted session id from the browser cookie and either return the file or give the user an error message letting them know they arent authorized. You could use plugins to give the users a better file managing experience like the 'multiple file upload' plugin that allows AJAX based multiple file uploading.
Id put this on an amazon EC2 cloud micro instance. It's uber cheap.

HP Access Control Intelligent Print Management (IPM) Solution

hi
i want to implement HP Access Control Intelligent Print Management (IPM) Solution in our cutomer organization
please help below
where i can download the software
installtion steps
requiremnets
please provide the detail s

This seems to be a commercial product. For the best chance at finding a solution I would suggest posting in the forum for HP Business Support!
You can find the Commercial board here:
http://h30499.www3.hp.com/t5/Networking/ct-p/hp-networking
Best of Luck!
You can say thanks by clicking the Kudos Star in my post. If my post resolves your problem, please mark it as Accepted Solution so others can benefit too.

Integrating SAP HCM with third party Access Control System

Hi Experts,
We have client using SAP HCM and intend procuring an Access Control Solution to manage her people.
What the client wants to avoid though is having to create a new employee in SAP HCM and manually creating same in the Access Control Software. Is there a way this can be automated such that upon recruitment of new staff, the data is updated in the Access Control DB which uses MS SQL? If this is possible, what is required to get this working well.
Thanks for your support in this regard.
Regards
John

For time management with the help of transaction pt80 you can download the information about employees with the help of idoc. And there are some programs a.k.a connectors that link access control systems and SAP so that you do not hire the same employee in the access control problem. You hire the employee in SAP and SAP sends the information (HR Minimaster DATA) to the related program.
It is also do the same thing for the employees who resign. I mean if an employee is fired or resigned from the company than it is sent to the related system.
These can be found under PDC integrated systems. You can find information about the systems from Ecohub. http://ecohub.sap.com/
I hope this answer will help.

Oracle9iAS Java Process Manager

Hi anyone...
i have a security issue on --> possible to access Oracle9iAS Java Process manager anonymously. The security people suggest to restrict access to /oprocmgr - status in httpd.conf, but not sure how and where to do this.
Please advice
Thanks
Mahani

Hi Mahani,
You can try this in your HTTPD.Conf File :-
<Location /oprocmgr-status>
Deny from all
</Location>
Regards,
Sandeep

Are GRC Access Control, Process Control and Risk Management separate?

Are these 3 different modules that you have to purchase separately or are they included in one suite?

Hi Anne,
If you are refering to GRC Access Controls 5.3, Process Control 3.0 and Risk Management 3.0 - All 3 are separate.
A new version of GRC 10.0 has been launched which is currently in ramp up. This has all the above 3 in one suite.
Thanks and Best Regards,
Srihari.K

I cant access my application control in user management cosole( shared svcs

Hi all.. A bit confused....... I just migrated users and groups to Shared Services.......from essbase adminstration server and essbase server.....While migrating to shared services I created a password ( lets assume 'yyyyy') for Essbase Administration Server and Essbase Server.. Well I dont have much more users... the only user for EAS server is default one which is username/password ='admin/password'. For Essbase Server username/password=xxxxxx/xxxxxxx. But after migrating users and groups to shared services mode when I tried to login with these passwords Iam unable to login....... Then I tried to login with my old username/password..... it was successfull..
The problem is when Iam trying to assign access control to application in "user management cosole"....... it is showing the error" login failed due to invalid login credentials". And also I cant access Business Rules it is throwing the error"Refer to security guide to configure security permission for this application"...........?
Any Idea....... What should do ?
Thanks and Regards,
Sri-Oracle.
Edited by: Sri-Oracle on May 6, 2009 11:16 AM

Hi John......Thanks for your reply....
I did as you said but still no hope... I think Iam making a mistake at some point.... But I dont know what is it.
The Sequence what I did was
1.Started the Essbase Server (with old username/password....as it shows only one user name while it starts).
2.Started the Essbase Administrative Server.
3.Start the EAS console...... with the old username/password=admin/password.
4.In the enterprise view I right click on the Administrative server>Externalise users> But it says "There are no users available for migration". So it seems my EAS server security has been converted to Shared Services security mode..So where can i use my new password when I created while migrating to shared services? and what is the username is it admin or some other?
5.In the enterprise view I right clicked on the essbase server. I removed the current Essbase Server. Then I tried to add Essbase Server.. Here I can see the checkbox for "Use External Authentication". So it means my essbase server has been externalised.. Well Here is the problem..When the check box is enabled it shows only username that is admin.....and password field is not highlighted.. When I click these it says" Login fails due to invalid credentials"....But I can log in (Add Esbase Server) with uncheck the "use external authentication" check box and entered the details of my old username and NEW PASSWORD which is created while migrating ESSBASE SERVER to Shared Services... then it works..........
After these prolonged process also I cant go with access control option for applications in User Managemnet Console...........
Thanks and Regards,
Sri-Oracle

ESYU: R12 - Order Management를 위한 Multi Org Access Control(MOAC) setup 방법

Purpose
Oracle Order Management - Version: 12.0 to 12.0
Information in this document applies to any platform.
R12의 Order Management에 대핸 Multi Org Access Control(MOAC) setup 방법에 대해 알아본다.
Solution
일반적인 MOAC Setup:
1. HRMS에서 Security Profile을 정의:
a. HRMS Management responsibility 선택
b. HRMS Manager> Security> Profile로 이동
c. Security Profile이 정의되어 있는지 확인 (OM responsibility 혹은 Site level로)
d. 만일 아직 setup 되어져 있지 않다면 Operating Units를 입력
e. 저장
Note: 만일 위 d step과 같이 새로운 security profile을 생성하였다면 concurrent program 'Security List Maintenance'를 꼭 실행해야 한다.
그렇지 않으면 multiple operating units가 OM forms의 LOV에 나타나지 않을 것이다.
이 program은 multi-org access를 validating 하기 위해 사용하는 table에 data를 생성한다.
Navigation: HRMS Management> HRMS Manager> Processes & Reports> Submit Process & Report> Security List Maintenance
2. MO Profile Options setup:
a. MO: Security Profile - 이 profile setting은 MOAC functionality를 활성화 한다.
b. MO: Default Operating Unit - 이 Operating Unit는 OM forms과 report에서 default가 될 것이며, 이를 clear 하거나 변경하기 위해 LOV를 사용할 수 있다.
Keep the MO profiles in sync:
MO: Security Profile은 site와 responsibility level로 setting 할 수 있다.
MO: Default Operating Unit은 site, responsibility, user level로 setting 할 수 있다.
Application이 원하는대로 동작되지 않는것을 발견하면 이 profile options의 setting 값을 확인한다.
3. OM setup:
R12 upgrade 시 OM Profile에서 migrate 된 새로운 OM System Parameters를 확인:
Order Management Super User> Setup> System Parameters> Values
(See <<NOTE 393646.1>>-R12 Readiness Cheat Sheet: Migrated OM Profile Options)
4. Form에서 hidden field 'Operatin Unit'를 활성화시키고 default folder로 저장:
Sales Order and Order Organizer forms
Quick Sales order and Organizer forms
Sales Agreement forms
Pricing and Availability form
Other forms
Note: Sales Order form에서 hidden field 'Operating Unit'를 'Show' 하기 전에 fotm안에 이 field를 위한 공간을 만들어 놓아야 한다.
예를 들면 Customer Number field를 짧게 하거나 Operating Unit field로 이 field를 덮어씌울수 있다.
Reference
Note 393634.1

Hi Larry,
Have you considered adding the exec apps.mo_global.set_policy_context call to your connection's start-up script?
Tools -> Preferences -> Database -> Filename for connection startup scriptNot the most flexible approach, so I'm not sure if it is appropriate for your application, but just a thought. You might create distinct connection names with different start-up scripts for each org_id.
Regards,
Gary
SQL Developer Team

User management and Access Control in HCM Cloud

Hello,
Information is scarce about User management and Access Control in Oracle Cloud generally. Today, I have two questions :
- How can I bridge HCM Cloud user store with my on-premise IDM or security repository in order to allow identty governance to flow to HCM Cloud service ?
The only information I got was that you can declare manually and by bulk import through files my users. This is not really interresting as I have an automatic IDM with workflows and identity control on provisioning and de-provisioning.
Is there a SPML or proprietary endpoint to do it automatically ? What are the prerequisites ? Do I have to implement OIM on my side ?
- Once my users are created, how can I do webSSO from my internal security repositories to the HCM Cloud service ?
I do not want to distribute new set of login / passwords to my users. Is it possible to do Identity Federation (SAML 2.0 or WS-Fed) with HCM Cloud service ? What are the prerequisites ? Do I have to implement OAM on my side ?
I accept all pieces of information you can give me on this topic to help me understand the funcitonalites, limits and options offered by Oracle Cloud and more precisely by HCM Cloud service.
Best regards,

OIDDAS has limited capability of access control and information hiding. Presently, the permissions and privileges can be set at a realm level, and fine grained access control / information hiding cannot be done.
At present, the only way to restrict view and access control is by appplying ACLs (which is not the safest bet).

HFM, Process Management, NO ACCESS Issue

Gurus !,
Users have a Reviewer 1-3 role with submitter role as well, however, when they try to access a Scenario that has "Process Management" = "Y", they get NOACCESS.
I think it is beacause of the Process Management setup and the calc status shows as SC, CN or LOCKED (when logged in with Process Super role)
Process Level shows ... NOT Started ... so the questions becomes ... can a reviewer 1 see data when the process level shows "Not Started" ?
Thanks in anticipation ... ,
Edited by: user10940595 on Jun 8, 2010 6:22 AM

One more question: how exactly is the "No Access" information displayed? That is, what exactly is the error message you get? For example, users in Financial Reports may intermittently get an "access denied" message when trying to run a report there. In that case, the issue has nothing to do with permissions of the users but is instead a DCOM bug in Windows. Having the exact message may help us see if you are experiencing a different problem than data access.
--Chris

UWL Integration - Process Control & Access Control

Hello Community,
Has anyone worked on UWL integration of Access Control 5.3 & Process Control 3.0?
Is this feasible by developing UWL custom connectors? Any hints?
(NW2004s - EP7.0)
Thanks!
Dhanz

Hi
Even though you set risk analysis to be done at single in RAR , it will automatically consider following type if done from CUP
1. SOD conflict
2.Critical action
3. Critical Permission
If you want to have only SOD risk analysis ,then deactivate all critical action rules in RAR OR create a new ruleset and assign all SOD risk to it and use with CUP .
Thanks & Regards
Asheesh

Process to activate access control dynamiclly

Hello,
I would like to make a process that activate the access control to a specific button, page..etc dynamically according to a condition, something like:
" Assign access control (view,edit,admin) of (page#, button..) to user (x) when (condition)"
How can I do that?
Thanks in advance,
Edited by: Najla on Jan 17, 2013 12:19 AM

Hi Najla,
you can use authorization schemes:
http://docs.oracle.com/cd/E37097_01/doc/doc.42/e35125/sec_authorization.htm#BABEDFGB
Br,
Marko Goricki
http://apexbyg.blogspot.com/

Fail to install Process Management ES and access workspace!

I failed to install Process Management ES and got the message "Error [ALC-LCM-030-200]" when it install the "adobe-workspacepersistence-dsc.jar".
Then i can access the "http://localhost:8080/workspace" but fail to login and get message "An error occurred during the operation. Please try again or contact your system administrator for assistance. (ALC-WKS-007-000)".
many thx for yours attention!!!

Could you share the associated error for the failure to deploy adobe-workspacepersistence-dsc.jar as found in the ConfigurationManager log ([InstallRoot]\configurationmanager\log\**).
Thanks,
John

Bpel process manager server failed thru JDEV-10.1.3.4

All,
soa Version: 10.1.3.4
I created application server successfully, but when i try to create integration server from jdev I got the error as bpel process manager server failed. I checked my DB is up, as some blog says hw_services should be up(i made it up), but still I couldn't create the integration server!!
What could be the other issues?
thanks
sen

Hi',
When you are making the Integration server connection in Jdev, in step 2 use port 80, it is by default 8080, this worked for me before, give it a try.
-Yatan

Form Manager Access Control

Hi,
I can logon to Adobe FM AdminUI in my company. I tried to control access a workflow with fmAccessPage. I set a person to allow a workflow, but from her screen the workflow category is not shown. Instead, I set all users to allow the workflow category, the category is not shown.
How long does it take to reflect the access control to user screen?
Regards,
Akira

Hi Akira ,
Which version do you use ? I think there is an error on the category access for Livecycle 7.0 , and it is good for Livecycle 7.2

Access Control thru Process Management

Similar Messages

Maybe you are looking for