Access Rights in Development system

Hi,
I would like to understand whether as a practice, access rights in development system also follow the same principle of need to know and need to do basis,
or generally all the users having access to development system are given the same access rights?
As only SAP support personnel or developers have the access to the system, Can the access to configuration (SPRO)  be restricted to the respective relevant modules like MM consultants will have access only to the MM module and SD will have SD module etc.
I am also interested in understanding how the access can be restricted to the respective modules? i.e. what are the authorization objects relevant for this purpose?
Thanks in advance for any help.
Krishna

>
Krishna Mohan Unnam wrote:
> I am also interested in understanding how the access can be restricted to the respective modules? i.e. what are the authorization objects relevant for this purpose?
> Krishna
The activities within the implementation mainly consists of one thing. Transaction codes. The tricky thing is to find out which transaction code to use, but... SAP have developed a smart tool where you define a project in SPRO_ADMIN and there you assign activities by selecting nodes from the IMG. This can then be inserted into a role via PFCG.
You will find many hits that give you tips on how to work with it if you search in the forum!
Regards
Fredrik

Similar Messages

  • Java daemon on boot: "This user is not allowed access to the window system right now."

    The daemon is located in /Library/LaunchDaemons/ and launches successfully on most occasions. However, it sometimes fails to start with this error:
    Nov 17 20:36:24 server.local java[28972]: This user is not allowed access to the window system right now.
    Nov 17 20:36:24 server com.apple.launchd[1] (net.java.server): Throttling respawn: Will start in 10 seconds
    I have the server command running as a background daemon using its "nogui" option (the developers claim to have written it to not display a gui). However, it seems that somewhere along the line, Java is trying to display something. As the daemon is running before users log in, it gives this error. Once a user is logged in to the system, it runs fine; however, logging in a user to run the server is not an option. It needs to run on boot.
    Any ideas for how to solve this? I'm going to contact the developers to see if it may be something they can fix, but I want to be able to force the issue in case the problem ever occurs in the future.

    Irrespective of any claims by the developer, this certainly appears to be a test case that shows that the tool is not working as expected, and that the application has a bug.  This test case would be better if there was some evidence around why only some of the startups fail, but in general this will involve what's been suggested earlier:  "Contact the application developer."  
    As some general background on what's involved, see daemons and agents and related; processes that are not allowed to connect to the GUI for reasons of security.
    I'd also suggest testing your DNS, as seeing "server.local" can imply local DNS configuration errors.   Launch Terminal.app  from Applications > Utilities and issue the following harmless diagnostic command and see if it reports no changes, or if it detects network or DNS errors:
    sudo changeip -checkhostname
    If this is OS X Server and a NAT'd network, you do not want to reference any DNS servers located off of your NAT'd network.
    Why DNS?  Because DNS errors can cause only some operations to fail, particularly if there's more than one DNS server selected (and where some subset of the DNS servers are malfunctioning or misconfigured).

  • FICO and SPRO access in development system

    hi security admins,
    i am a security consultant. now i am in development system. i want to give FICO access and SPRO access( only fico nodes should be authorised to access, others nodes should not authorised ) in development system. please suggest and tell me the procedure for restricting specific access.
    regards
    ramesh

    >
    Dimitri van Heumen wrote:
    > using search will give you useful topics such as [this one|Trace File|UTFS]
    Dimitri,
    That one links me to a thread about trace files..... or am I missing something here?

  • Third Party Access to update SAP system vi SAP Portal..

    Hi Expert,
    We need to  implement  SAP Vulnerability in EP , Could you please advise me what are things need to be taken place in EP 7.01 SP 13  to stop portal access from  any anonymous user who is not in part of business user...
    Thanks in advance for supporting lot and guide a right path to implement this in porta....
    Best reagrds,
    Sudhir

    Hi Michael,
    there are different ways of accessing the SAP backend system from an iView developed with the PDK for .NET. You can use
    - the SAP Connector for Microsoft .NET (design time supported only in VS 2003, runtime works in VS 2005)
    - Web Services if your SAP system is running on Web AS 6.40
    - Web Services via XI/PI or BizTalk Server
    - 3rd party adapters
    - Enterprise Services
    If you browse through the forum and sdn.sap.com of www.microsoft.com/sap you will find a lot of information and pros/cons for the different methods of how to connect to the SAP system.
    - Juergen

  • How can I find my rights in BW system?

    Hy,
      I have access to a BW  3.5 system, but I can't do much on it.
    For example , I can't add queries , etc.
    So..I need authorization to make all kind of things a developer needs to do.
    My question is:  what authorizations exactly I need ?
    I want to be sure that the administrator gives me all the needed rights, so I don't have to ask him every day .
      Thank you.

    Anda Vicovan wrote:>
    > This is a nonsens : "if it was me I'd distrust you for asking system access questions outside the company."  )
    >
    > I really need to know for what authorization to ask, because I have some training materials, given by the company,
    >
    > and I can't do much of the exercises , because no one set my rights on the system.
    >
    >  I had this problem before for web dynpro study and every day I had to write an e-mail to ask for an authorization to one more transaction.
    >  So, I think that are some several basic rights for the tarining systems.
    As Jurjen said, ask your security for the developer access.  Without knowing your setup it's difficult to tell you what you need.  My idea of developer access could be very different to your security admin's
    Why don't you identify everything that you need to do & sit down with your security admin and make sure they assign it & you test it.
    That is far more likely to result in success than ansking what is a relatively ambiguous request on a forum.

  • Your account does not have access to the forums system.

    Greetings, My name is Jeff, I'm from Netwrix Corporation, which is a Microsoft partner. I have a problem with accessing Microsoft TechNet forum. After signing-in to my account: [email protected], I go to TechNet
    forum, and get a message that:  "Your account does not have access to the forums system." And also I've noticed that all my posts were deleted from TechNet forums. Can moderators tell me why did that happen? Why didn't I receive any warning
    about my account suspension? 
    I've already submitted 2 tickets to MSDN Site Feedback Inquiry but didn't receive any answer.
    I've called Microsoft TechNet at 800-344-2121 and Professional
    Support team at 1-800-936-5800.  But everybody send me to the MSDN Site Feedback Inquiry from which I didn't get any answer.
    Anybody can help me with my problem?

    Hi,
    Is this the profile you're referencing?
    http://social.technet.microsoft.com/Profile/netwrix
    It doesn't appear to be banned, but you're definitely right about there being no activity listed.
    I'd suggest contacting the forums team directly by sending an email to fissues (at) microsoft [dot] com. The admins do monitor this forum, so you'll probably get a response here as well.
    Don't retire TechNet! -
    (Don't give up yet - 13,085+ strong and growing)

  • Error -17600 when switching from LabVIEW Development System to LabVIEW Run-Time Engine in Adapter Configuration

    I receive an error message (code -17600) while loading my test sequence after switching from LabVIEW Development System (2009 f3) to LabVIEW Run-TIme Engine using the Adapter Configuration.
    ErrorCode: -17600,
    Failed to load a required step's associated module.
    LabVIEW Run-Time Engine version 9.0.1f3.
    When I switch back to the LV development system, everything is OK, and the sequence loads and runs perfectly.
    My TestStand Engine Version is 2012 f1 (5.0.0.262).
    I'd appreciate any help on this issue.
    Roman

    Hi Roman,
    There are a couple of things you can try:
    1) Determine if the LabVIEW RunTime Engine is corrupted in some way. Create a new simple VI with no sub-VIs, using the same LabVIEW Development system you used for mass-compiling the VIs. Create a TestStand step that calls this VI and ensure it runs correctly. Now switch your LabVIEW adapter to use the RuntimeEngine and choose the "Auto detect using VI version" option.
    Check if the simple VI is loadable and runs without errors in TestStand.
    If the step generates the same error, you should try a re-install of the LabVIEW development system.
    If not, its most likely that there is some VI you are using that is not loadable in the LabVIEW Runtime Engine because:
    1) Some sub-VI is still not saved in the right version or bitness. Open the VI heirarchy of the top-level VI that you are calling from TestStand and examine the paths of all the sub-VIs to check if they were in the folder you masscompiled and re-save any that are outside this directory.
    Also, when you try to close the top level VI, do you get a prompt to save any unsaved files? If so, they could be the sub-VIs that are not saved in the right version. Save all of them.
    Check if you are loading any VIs programatically and if these are compiled and saved in the right version as well.
    2) There is some feature you are using in your LabVIEW code that is not supported in the LabVIEW RunTime Engine. To check this, add your top-level VI to a LabVIEW project and create a new build specification and create a new executable from this VI.
        Right-click "Build Specifications" and choose "New->Application(EXE)".
        In the Application Properties window, select Source Files and choose the top level VI as the start-up VI.
        Save the properties.
        Right-click on the newly created build specification and choose Build.
    Run this executable (it will be run using the LabVIEW RunTime) and check if the VI has a broken arrow indicating that it cannot be loaded and run in the LabVIEW Runtime Engine.
    You might need to examine your code and find the feature which is not supported in the LabVIEW RunTime and find an alternative.
    Another thing i forgot to mention the last time around is if you are using 64-bit LabVIEW with 32-bit TestStand, then executing code using LabVIEW RTE from TestStand will not work since the 64-bit LabVIEW RTE dll cannot be loaded by the 32-bit TestStand process.
    If none of the above steps resolve the issue, consider sharing your LabVIEW code so i can take a look.
    Regards,
    TRJ

  • How to define a new user in Enterprise manager with Specific access rights?

    Hi,
    I want to create a new user in OEMS 11g who should be able to access only the scheduler jobs section.
    How can this be acheived?

    You can create new administrators via the Setup --> Administrators page
    You can grant certain access rights to targets, you can not however grant priv to only access the job system
    Take a look at http://download.oracle.com/docs/cd/E11857_01/em.111/e14586/security3.htm#sthref235
    Regards
    Rob
    http://oemgc.wordpress.com

  • Data not loading in Development system( Urgent)

    Dear SDNs,
                       Am loading data in development system... The message in status tab is Error message from the source system
    Diagnosis
    An error occurred in the source system.
    System response
    Caller 09 contains an error message.
    Further analysis:
    The error occurred in Service API .
    Refer to the error message.
    Procedure
    How you remove the error depends on the error message.
    Note
    If the source system is a Client Workstation, then it is possible that the file that you wanted to load was being edited at the time of the data request. Make sure that the file is in the specified directory, that it is not being processed at the moment, and restart the request.
    I tried to reload the data but am getting the same kind of error message...
    I checked out whether the source system connection is OK or not... While am checking the source system connection I got an error message like as follows
    <b>BW unknown in source system
    The BW IDoc type ZSIA035 is not the same as the source system IDoc type
    The following errors occurred in the source system:
    EDI: Partner profile not available
    Entry in inbound table not found
    Entry in outbound table not found
    Entry in outbound table not found</b>
    Wat kind of action does we follow in this situation...
    Kindly Advice me...
    Answering getz appreciated...
    Warm Regards,
    <i>Aluri</i>

    Hi Aluri,
    I do faced the same problem before....
    Is RFC connections and Partner Profiles are done properly between BW system and R/3 systems.........
    If it has done properly....... Try to Activate the R/3 source system at BW side...
    Still if you are getting the same error..
    Right click on R/3 Source system at BW -> select Resore....
    It will ask you RFCUSER passward for BW adn R/3
    After doing it also still if you get the errors ...
    Try to configure the all these steps....
    Step 1: Create a Logical System at BW and R/3 side using t-code SALE
    Step 2: Create the RFC Connection between BW to R/3 and R/3 to BW using the SM59 and Do the Test Connection and Remote login
    Step 3: Create the Port Number for IDOC processing at R/3 and BW sides using WE21
    Step4 : Create the Partner Profiles at R/3 and BW sides using the WE20
    Specify the Inbound and Outbound parameters at R/3 and BW
    For to know message types follow the link.....
    http://wiki.ittoolbox.com/index.php/HOWTO:Re-Connect_R/3_and_BW
    Check this Link also...
    http://help.sap.com/saphelp_nw04/helpdata/en/72/c18ee5546a11d182cc0000e829fbfe/content.htm
    After doing all these things now come to BW
    Create R/3 Source System at AWB....
    Hope it Helps...
    Regards,
    Kiran Telkar
    * Assign points if it helps your requirement * *

  • You do not have sufficient access rights, pls help

    Hi folks,
    I'm getting the "You do not have sufficient access rights" error accessing the Identity System Console. The same admin account can access User/Group/Org Manager screen, however, for some reasons user and group searches return no results. This is the second OIS install against the same ldap dir (ovd to sun 6.3), so I had to specify Id server was not the first one to avoid profile conflict with oblix DBAgents. The admin user had been selected during prev install, and exists under o=Oblix in both cn=Web Masters and cn=Directory Administrators.
    I have LDAPMaxNoOfRetries set to the number of dir servers +1 in all globalparams.xml on OIS. I also can modify ldap dir via both ldapmodify and ldap browser binding to OVD as same user. Turning the TRACE on didn't showed any errors except for the following:
    DB_RUNTIME WARNING 0x00000504 ldap_config_db.cpp:187 "Exception during DB runtime code" function^LDAPConfigDB::Open() status^17
    DB_RUNTIME WARNING 0x00000504 ldap_config_db.cpp:355 "Exception during DB runtime code" function^LDAPConfigDB::ReadOblixDBConfig()status^17
    SCHEDULER_FRAMEWORK ERROR 0x00000501 ../obschedulerthread.cpp:316 "ObError exception caught" ObScheduledTaskLiaison::LoadTasks^ObWFScheduledTaskLiaison
    PPP INFO 0x000008C7 obeventcatalog.cpp:183
    Cannot find the action
    function^ObEventCatalog::GetActionEntry2Modify()
    actionName^front_page_admin_klogin_post
    APP_BASE WARNING 0x00000833 oblixbasecommon2.cpp:1235
    Login failed
    Error^You do not have sufficient access rights
    numLoginFailures^1
    There's nothing in the ldap logs either. The only warning I get per that user is in the ovd log:
    DoSManager: Found unbound connection from active ip addresses
    DoSManager: Found unbound connection from active users
    The Oracle Support is clueless, please help.
    Thank you, Roman

    Hi Vinod,
    Thanks for the post. OK, if I got it right, I have two entries under obcontainerId=DBAgents for each of my primary Id servers. For the one I currently use, I have this towards the bottom:
    obname=oblixConfig-OIS_mdi-oamlx-3
    obname=default-OIS_mdi-oamlx-3
    Both entries have obdbusedby set to OIS_mdi-oamlx-3 which is my OIS id. The obsearchbasestr is different: o=Oblix,o=paychex inc for the oblixConfig, and o=paychex inc,c=us for the default one. Is that's the way it should be?
    Thanks Roman
    P.S: I've noticed I get same error accessing My profile under User Manager.

  • Can not access CRM from outside the office network - Access denied You do not have sufficient access rights or privileges to perform this action.

    Hi,
    I can not access CRM from outside the office network - Access denied You do not have sufficient access rights or privileges to perform this action.  I can access CRM with same user id and password from our office inside the network.  I can get
    the page to give login details once I have login details I got below error. Please help me to solve this issue.  It was working before.
    Access denied You do not have sufficient access rights or privileges to perform this action. 
    Regards,
    Noushad
    [email protected]

    On Premise system Configured with AD FS server for claims-based authentication you need to update your host file with server url to access it from outside office network.
    Refer
    this on how to update host file.
    Regards, Saad

  • OAM- "You do not have sufficient access rights" message with Master Admin

    Customer has configured the OAM system to have both the primary and the secondary side for failover purposes. The back end directory server on both systems are in sync. The primary side of the systems works well as far as this issue is concerned.
    On the secondary side, if you login with the MASTER administrator of the system and click 'Identity System Console' or click any of the configurations under the Configurations in the User Manager, you get the error message saying "You do not have sufficient access rights". However, if they navigate to the Access system on the same browser and access the "Access System Console", and then navigate back to the Identity system, the Master Administrative rights are granted and now have a full access to the system.
    We tried following things to resolve the issue, but could not resolve it:
    1) Tried deleting 'cookieencryptionkey' which is found under "obcontainerid=encryptionkey,o=oblix" and restarted both the Identity Servers.
    2) Confirmed that the OAM administrator is present in cn=Web Masters,o=Oblix,<> and cn=Directory Administrators,o=Oblix,<> from the LDAP.
    3) Under the apps=PSC node, checked the Advance Properties for the 'obuniquememberStr' attribute:
    - Master Web Resource Admins (cn=master web resource admins, obapp=PSC, o=oblix, ...)
    Made sure that the values for the 'obuniquememberStr' attribute has the correct value there.
    4) Reconfigured the Secondary Identity Server.
    None of the above really helped to resolve the issue.
    Could anybody please help here to get rid of this issue.
    -Amol

    Hi Vinod,
    Here is the customer's response to your above 2 questions:
    1. We have 4 Directory server profiles for Identity servers; one for user data and one for configuration data for each server.
    I have at least reduced them to two and used only the ones initially used by the primary identity server as our user and configuration data do not reside together. User data is consumed via OVD.
    However, this does not seem to have any effect on the current behavior.
    2. All components except for the access server are on 10.1.4.2 and the access server is on 10.1.4.1
    Also below are the errors from the oblogs:
    dentity Server log
    =============
    2008/03/19@10:04:16.508530 4332 262160 PPP INFO 0x000008C7 obeventcatalog.cpp:183 "Cannot find the action" function^ObEventCatalog::GetActionEntry2Modify() actionName^ENCRYPTION_cookieEncryptionKey
    Access Server Log
    =============
    2008/03/19@10:03:56.329959 13608 1687633 CONNECTIVITY DEBUG3 0x00000201 /usr/abuild/Oblix/1014lwhf/palantir/netlib/src/obmessagechannel.cpp:601 "Received " ipaddr^10.217.209.81 ipport^1853 seqno^12 opcode^1 opcodeStr^IsResrcOpProtected Message^ro=t%253d0%2520o%253d%2520no%253d%2520r%253d%2520nr%253d%2520wu%253d/identity/oblix/apps/admin/bin/frontpage_admin.cgi%2520wh%253d10.217.209.81%2520wo%253d1%2520wa%253d0%2520ws%253d st=ma%253d2%2520mi%253d2%2520sg%253d0%2520sm%253d version=3 pd=
    2008/03/19@10:03:56.340433 3099 802864 AUTHENTICATION DEBUG2 0x00000201 /usr/abuild/Oblix/1014lwhf/palantir/aaa_server/src/aaa_service_server.cpp:2779 "Authorization successful"
    Webgate Log
    ==========
    2008/03/19@10:04:05.661000 5796 4516 HTTP_REQ DEBUG3 0x00000201 \Oblix\coreid1014\palantir\webgate2\src\isprotected.cpp:185 "Resource is protected" ResourceOperation^GET ResourceType^http Resource^//10.217.209.81/identity/oblix/apps/admin/bin/front_page_admin.cgi authnSchemeName^Oracle Access and Identity Basic Over LDAP
    2008/03/19@10:04:14.661000 5796 4516 LDAP DEBUG3 0x00000201 \Oblix\coreid1014\np_common\db\ldap\util\ldap_util2.cpp:537 "MLK-Memory leak for LDAP error information. This will show up as memory leak in LDAP SDK calls." key^25
    2008/03/19@10:04:14.661000 5796 4516 LDAP DEBUG3 0x00000201 \Oblix\coreid1014\np_common\db\ldap\util\ldap_util2.cpp:537 "MLK-Memory leak for LDAP error information. This will show up as memory leak in LDAP SDK calls." key^25
    2008/03/19@10:05:54.552000 5796 5256 CONFIG DEBUG2 0x00000201 \Oblix\coreid1014\palantir\access_api\src\obconfig.cpp:865 "Client configuration not updated"
    2008/03/19@10:05:54.552000 5796 5256 CONFIG INFO 0x0000182D \Oblix\coreid1014\palantir\access_api\src\obconfig.cpp:866 "The Access Server has returned a fatal error with no detailed information." raw_code^302
    I checked the OVD logs but did not find any error in it. Customer also tried to unprotect the /identity and /access URLs but the issue persist.
    Also I do not feel this as a bug, because this environment was working quite for few months without any such issues, also there were no changes made on the OVD/AD configurations. However, the server that hosts the OVD/AD was shut down and when it was restarted, we started experiencing this issue.

  • Access to non-apple system prefs

    We are in a corporate environment. When setting up new Macs we turn off access to the System Preferences using the Accounts Control Panel. We want to prevent users from changing Network settings, Sharing options, etc. that we setup up for our company.
    The problem with this is when we install software for third-party products such as mice or graphics tablets. Many of these items install Control Panels that are accessed only through the System Preferences, but a non-admin user cannot go in and change the individual settings for these devices without having full admin rights to the System Preferences.
    Are there any workarounds for being able to control which Control Panels users have access to when using System Preferences?
    Thanks for any help!

    If your users are non-admins, they shouldn't be able
    to change the Sharing or Network prefs unless they
    enter an admin password. When setting up the new
    accounts, go into those prefs and ensure the little
    padlock icon is locked.
    Apparently this has improved over earlier versions of OS X when I wasn't looking. When we intially loaded OS X I remember turning on the access to System Prefs and locking the various control panels for the non-admin users, but I recall that some of them didn't stay locked. That's why we started turning off access to them completly. After that initial install of our desktop Macs I never tried this again. We've updated the OS a couple times, but never went in and tried this again because everything was working fine. But when I went to setup some new laptops with wireless mice that had their own control panels this became an issue and that's why I was looking for the workaround. It would be nice if Apple gave you a way in System Preferences to turn on/off access to the individual CPs without having to muck with system like this. But this will work for now.

  • Setting Item level access rights on sharepoint list item in ItemAdding event handler

    Hi ,
    I am using sharepoint 2013. I am trying to set item level access rights when a list item is added using the following code snippet,
    public override void ItemAdding(SPItemEventProperties properties)
    base.ItemAdding(properties);
    ConfigureItemSecurity(properties);
    private void ConfigureItemSecurity(SPItemEventProperties properties)
    var item=properties.ListItem;
    SPSecurity.RunWithElevatedPrivileges(delegate()
    using (SPSite site = new SPSite(properties.SiteId))
    using (SPWeb oWeb = site.OpenWeb())
    item.ParentList.BreakRoleInheritance(true);
    oWeb.AllowUnsafeUpdates = true;
    var guestRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Reader);
    var editRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Editor);
    SPGroup HRGroup = oWeb.SiteGroups.Cast<SPGroup>().AsQueryable().FirstOrDefault(g => g.LoginName=="HR Team");
    SPRoleAssignment groupRoleAssignment = new SPRoleAssignment(HRGroup);
    groupRoleAssignment.RoleDefinitionBindings.Add(guestRole);
    SPUserCollection users = oWeb.Users;
    SPFieldUserValueCollection hm = (SPFieldUserValueCollection)item["HiringManager"];
    SPFieldUserValueCollection pm = (SPFieldUserValueCollection)item["ProjectManager"];
    SPFieldUserValueCollection pmChiefs = (SPFieldUserValueCollection)item["ProjectManagerChief"];
    item.BreakRoleInheritance(true);
    item.RoleAssignments.Add(groupRoleAssignment);
    foreach (SPFieldUserValue staffMember in hm)
    SetRightsOnItem(item, staffMember, editRole);
    foreach (SPFieldUserValue staffMember in pm)
    SetRightsOnItem(item, staffMember, guestRole);
    foreach (SPFieldUserValue staffMember in pmChiefs)
    SetRightsOnItem(item, staffMember, guestRole);
    item.Update();
    private void SetRightsOnItem(SPListItem item, SPFieldUserValue staffMember, SPRoleDefinition role)
    SPUser employeeUser = staffMember.User;
    var userRoleAssignment = new SPRoleAssignment(employeeUser);
    userRoleAssignment.RoleDefinitionBindings.Add(role);
    item.RoleAssignments.Add(userRoleAssignment);
    Nothing is happening though... Is the event handler the right place to do this?
    thank you

    Hi ,
    You can refer to the code working in my environment:
    using System;
    using System.Security.Permissions;
    using Microsoft.SharePoint;
    using Microsoft.SharePoint.Utilities;
    using Microsoft.SharePoint.Workflow;
    namespace ItemLevelSecurity.ItemSecurity
    /// <summary>
    /// List Item Events
    /// </summary>
    public class ItemSecurity : SPItemEventReceiver
    /// <summary>
    /// An item was added.
    /// </summary>
    public override void ItemAdded(SPItemEventProperties properties)
    SPSecurity.RunWithElevatedPrivileges(delegate()
    try
    using (SPSite oSPSite = new SPSite(properties.SiteId))
    using (SPWeb oSPWeb = oSPSite.OpenWeb(properties.RelativeWebUrl))
    //get the list item that was created
    SPListItem item = oSPWeb.Lists[properties.ListId].GetItemById(properties.ListItem.ID);
    //get the author user who created the item
    SPFieldUserValue valAuthor = new SPFieldUserValue(properties.Web, item["Created By"].ToString());
    SPUser oAuthor = valAuthor.User;
    //assign read permission to item author
    AssignPermissionsToItem(item,oAuthor,SPRoleType.Reader);
    //update the item
    item.Update();
    base.ItemAdded(properties);
    catch (Exception ex)
    properties.ErrorMessage = ex.Message; properties.Status = SPEventReceiverStatus.CancelWithError;
    properties.Cancel = true;
    public static void AssignPermissionsToItem(SPListItem item, SPPrincipal obj, SPRoleType roleType)
    if (!item.HasUniqueRoleAssignments)
    item.BreakRoleInheritance(false, true);
    SPRoleAssignment roleAssignment = new SPRoleAssignment(obj);
    SPRoleDefinition roleDefinition = item.Web.RoleDefinitions.GetByType(roleType);
    roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
    item.RoleAssignments.Add(roleAssignment);
    Thanks,
    Eric
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected].
    Eric Tao
    TechNet Community Support

  • Transport Webi Reports and Web services as the backend of dashboards from BO Production to BO Development system

    Hello Experts,
    I am working on SAP BO 4.1. I have made several dashboards on top of web services ie;Web Service Method. I have 2 systems in BO ie; Development and Production Systems.The BW production system is connected to BO Development and Production both.
    The Webi reports are made on top of BI BEx Query. From the webi reports, BI Web Services are made on top of which the dashboards are made further.
    The Webi Reports, Web Services and the Dashboards everything is made directly in BO Production.
    My question is, Can I transport the Webi Reports and the Web Services from BO Production to BO Development?
    And If yes, will it have any other impact on webi reports, web services or dashboards?
    Thanks & Regards,
    Alfred Thomas

    Hi Gill,
    As per your reply,with the promotion managament i have make the web services again manually in Dev system...Right?
    Is there any way possible that i can transport the webservices and the webi reports usind Query AS A Web Service Designer. And if yes, through this QAAWS will the WSDL or the URL required for the web services in the connection button in dashboards will automatically updated or changed as per the Development System?
    But i am not able to enable the "Deploy to Other servers Option" in QAAWS.
    Can you please help?
    Regards,
    Alfred thomas

Maybe you are looking for

  • Apple symbol on unlock iPhone 5s

    I have iPhone 5s through Verizon and had it for about three weeks and love the phone.  One issue though.  Every third or fourth time I unlock my phone via fingerprint sensor the screen unlocks and as soon as I touch the screen the phone immediately g

  • Can i print out the manual for ipod mini in different language?

    hi i wanna get an ipod mini for my mom and she doesnt really speak or read enlgish all that well, i mean ill gladly help her out, but i want her to have some sort of manual in case im not around, she speaks russian and i was wondering if i can get a

  • Sqlj runtime error with oracle 10G in Websphere6 or 5.1

    We are trying to migrate from oracle 9i to 10G and we are compiled all our sqlj code with codegen = -oracle option.(previously we used to use codegen=-jdbc which for some reason doesnot work).it compiles fine with out any erros.. But when we try to r

  • Data packages drop to bottom of status window

    Using BPC 5.1 SP03 Has anyone noticed after kicking off a data package via eData, the package's row entry in the eData status menu moves to the bottom of the list. There is never a start time---it never runs. I have to manually delete the item and ru

  • How do I set Time Machine to remind me to backup?

    I don't keep my external hard drive plugged into my computer all the time. I just plug it in every few weeks to backup my hard drive; however, I have been forgetting lately because the reminders stopped popping up on my desktop. Before I upgraded to