Adding new Users ,Roles in existing application except jdev

Dear All,
I am creating a test application to workaround with adf security, I created some users, enterprise roles and application roles, gave proper mapping to the adf resources(jsf and taskflows), and every thing is working fine. I am doing all this thing in integrated wls server. But suppose if the user wants to create some new users, roles then how will he do this things ?
I accessed the integrated wls console but got no hints in deployments section-> application->security tab.
Is there any other way..?
Regards,
Santosh
Jdeveloper 11.1.1.1.2.0

Hi,
there is no unified API in ADF Security to manage identities. If you work with the WLS integrated LDAP then you can use OPSS (see Fusion Middleware documentation) and access the JPS factory and provider. If you identities are stored in other system (RDBMS, OID etc.) then you use APIs exposed by these technologies (You may also want to check with Oracle Identity Management to see if there are APIs they expose for this). Because ADF Security does not provide its own identity store, changing users and roles is not in the domain of it (I should say "not yet" as it is on my wish list)
Frank

Similar Messages

Error adding new users from local server

Hello, BPC Gurus,
We use BPC 7.0 MS SP4, MS SQL 2008 (Server name - BPCP01)
In Administration Console we're trying to add user from local server (server with SQL Database), and warning window is appeared with message "The Server Is Not Operational [BPBCP01]"
I checked Logging folder and found message:
==============[System Error Tracing]==============
[System Name] : OSoftAdminSecurity
[Job Name]     : frmManageUser::GetAllObjectsFromDomainServer
[DateTime]     : 2010-12-06 16:58:43
[Exception]
    DetailMsg : {System.Exception: The server is not operational [BPCP01]
   at Microsoft.VisualBasic.CompilerServices.LateBinding.LateGet(Object o, Type objType, String name, Object[] args, String[] paramnames, Boolean[] CopyBack)
   at OSoft.Consumers.Admin.Security50.ManageDataSet.GetAllObjectsFromDomainServer(String pDomainName, String pLDAPFullPath, Int32 pDomainObjectType, String pObjectValue, String pDomainType)
   at OSoft.Consumers.Admin.Security50.frmManageUser.GetAllObjectsFromDomainServer(String pDomainName, FILTER_TYPE pOptionType, String pOptionValue, String pDomainType)}
===========[System Error Tracing End ]===========
Any ideas?

The installation was done with a local user or with a domain user?
You know that BPC server can not be in the same time also domain controler.
Are you using Windows authentication or CMS authentication.
If you are using CMS authentication then again you can not add local users.
If you are using Windows authentication then you have to go into server Manager
Options - Define System User Groups
Domain Type - Local Windows
System User Group Name - Local Users.
If you are using Windows 2008 make sure you addrole to have compatibility with IIS 6.because using this module bpc is adding new users.
Regards
Sorin Radulescu

Recipient Policies failure when adding new users

Hi,
I have some trouble adding new users to my Exchange 2007 setup. I get the message "The Exchange server address list service fail to respond. This could be because of an address list or email address policy configuration error"
Of course I Googled around to find solutions, but after trying everything, it still doesn't work. System Attendant just seems to run nice.
This is the 8231 message I get in the logs:
Permanent failure reported by policy group provider for 'CN=Recipient Policies,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[org],DC=local':'MAD.EXE', error=8000ffff. Taking provider offline.
After Googling the error I came across al kind of solutions, however, most of them relate to Exchange 2003.
Pretty much the issue here; http://social.technet.microsoft.com/Forums/exchange/en-US/f1c07fe1-451f-4cf4-8b8d-3e0d15376307/the-exchange-server-address-list-service-failed-to-respond-this-could-be-because-of-an-address?forum=exchangesvrgenerallegacy
Is there any way of recreating the Default Policy? It doesn't work through Management Console. Maybe via ADSI?
Could anyone help? Thanks a lot.

Hi Combo,
Just check if msexchangeSystemAttendant service is running fine. If not please start System Attendant Service.
Also try restarting the system attendant service and file distribution service and check if they are already started
Run ExBPA and see if it throws any errors related to Email address policies which might help
Increase Diagnostic Logging for MSExchangeAL for below parameters to expert and see if it generates any relevant logs in event viewer
a)Address List Syncronizataion
b)Ldap Operations
If nothing works its better remove and recreate email address policies
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you.
Regards,
Sathish

Looking for Suggestions on granting all users access to an application *except a subset of users*

This might not be the right forum for this question, but since it is related to an App-V application I figured I would try since this may have come up for some of you. I am looking for the best way to grant all Domain Users access to an application
except for Domain Admins. Using the Full App-V infrastructure, I want to grant access to the App-V UI via User Targeting, but I don't want to allow Domain Admins access. The reason for this is because when we make updates to provisioned
server cores (stateless), we login with our Admin accounts to make modifications to the cores, and I would like to reduce the steps that need to be taken at the end to ensure that all AppV applications are removed before sealing up the core.
Currently, Domain Admins do not have access to any App-V applications, so this process is fairly clean. All applications are User Targeted.
Packages are cached on a persistent D drive on each server, so the issue is that the registry, programdata, and packageinstallationroot become out of sync if packages are pulled down during core modifications after the core is attached to other servers (hence
other D drives). Because of this, Machine Targeting is not an option for this either.

This would be so much easier with a "Configuration Manager" like feature where you could create a collection query to accomplish the same thing. Are there other tools out there that will do the same thing?

WLPI: integrating organizations and roles with existing application

Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin

Hi Martin,
We're in the middle of a prototyping exercise of getting WLS, JMS,
WLP, WLPI integrated accross one security realm. What its looking like
is this (bear in mind I think this hasn't been tried before judging by
newsgroups + BEA Docs)
1)WLP has a bug that you cannot get user details from LDAP(exception
is thrown)
2)WLPI does need a certain structure -
http://e-docs.bea.com/wlpi/wlpi121/install/cfigrun.htm#1246656
and
http://developer.bea.com/ftp_bin/Using_LDAP_with_WLPI.zip
A) To solve your problem maybe you could write a custom realm to
translate the roles + orgs back (no writing from WLPI ie read only )
to WLPI.
B) Maybe you caould have a META-DIRECTORY set up that synchronises the
RDBMSRealm with something else maybe LDAP or another RDBMSRealm
We are also looking into a unified security solution by Netegrity
called siteminder. They are about to release a version for WLS 6 but
they seem to be laggin behind. This provides a single signon over and
enterprise system.
This is a bit vague Martin, I will hopefully have more concrete info
in a week or 2. If you have any other info you can mail me on -
[email protected]
BTW this wouldn't be Martin Van Vilet from the Netherlands that worked
on the Intelligent Finance Product?
"Martin van Vliet" <[email protected]> wrote in message news:<3b17ece8$[email protected]>...
Hi,
how do I integrate WLPI's organizations and roles with an existing application's
data structure? It looks like WLPI expects organizations and roles to be groups
with a particular naming convention (i.e. an org is defined by a group 'WLPIOrg@MyOrg'
and a null member). If I am integrating with an application that stores organizations
and roles in (for example) separate database tables, how do I get WLPI to recognize
these? Or do I have to maintain the organizations and roles in 2 places, one for
the application and one for WLPI in the format described above?
THanks,
Martin

Error in Adding New Users

One client encounter a problem in one of there DB, where in they cannot add new User although they change the User Code many times but yet they get the same error. The error message is"This entry already exists in the following tables" (CUMI) (ODBC-2035) [Message 131-183]"
Why it says that the record exist in the CUMI Table?
I advise them to check the OUSR tables for those record with a GROUP value of 99 and advise them to delete in the SQL for them to add a new user. But they still encounter the same problem. As what they say they dont intend to recycle old user codes. They even try to add usercode that was not found in OUSR (like test100, try200) but still get the same error message.

Hi,
CUMI table is User Menu Items table.
Maybe the error caused by overlapping in the table. As a comparison, you can look at this note:
There is more than 1 series of outgoing/incoming payments defined for
Outgoing/Incoming Payment, with overlapping numbers (different indicator).
You are trying to add an Outgoing/Incoming payment based on an invoice
with deferred tax. You might get the following error messages:
Corrupted data in rows [Message 285-4]
"This entry already exists in the following tables (VPM7)(ODBC-2035)[Message 131-183]".
Other terms
VPM7, deferred tax, Mexico localization
Reason and Prerequisites
Application Error
Solution
This issue will be fixed in a patch of version 2005A SP1. Please refer
to the info.txt file on SAP Service Marketplace to confirm.
As a workaround, define a new series which does not overlap a previous
series for Outgoing/Incoming payment.
So, the solution is upgrade to latest PL or try the same work around with above note.
Rgds,

Java API for adding new User in OID

I am search documentation for sample code to add a new User to the OID via Java API, I could not find any. Is it not possible to do so? if it is, can someone point me to the right location.
Thanks

   * This method adds employee details into directory
   * @param emp Employee details to be added
   * @param password Password for the employee
   * @exception GroceryAppException if directory operation fails
public void addEmployee(Employee emp, String password)
    throws GroceryAppException {
    Map attrs = new HashMap();
    List objclass = new ArrayList();
    // Object classes that the employee must use
    objclass.add("top");
    objclass.add("inetOrgPerson");
    objclass.add("orcluserv2");
    // create other attributes and their values
    // Add all attributes that you need to set
    attrs.put("uid",emp.getEmpId());
    attrs.put("cn",emp.getFirstName());
    attrs.put("sn",emp.getLastName());
    attrs.put("postaladdress",emp.getAddress());
    attrs.put("mail",emp.getEmail());
    try {
      // create the Directory Entry with the specified attributes
      dirManager.addDirectoryEntry("cn="+emp.getFirstName()+"cn=Users,dc=oracle,dc=com"
                                         , objclass, attrs);
    } catch (NamingException namingEx) { // for Directory errors
      throw new GroceryAppException("Error while adding employee entry to directory :" +
                                  namingEx.getMessage());
}And the Directory Manager
   * Creates an entry in Directory with the specified attributes and objectclass,
   * with the specified Distingushed Name.
   * @param dn Distinguished name of the entry to be created
   * @param objCls Object classes that the entry must use
   * @param map Attribute,value mappings of the entry
   * @exception NamingException if adding entry fails
   public void addDirectoryEntry(String dn, List objCls, Map map)
     throws NamingException {
      // Create attribute list, ignore case of attribute names
      Attributes attrs = new BasicAttributes(true);
      if( !objCls.isEmpty()) {
        Attribute objclass = new BasicAttribute("objectclass");
        // Iterate thriough the collection and add the object classes to the attribute
        Iterator objclsIter = objCls.iterator();
        while(objclsIter.hasNext()) {
          // Add the object classes
          objclass.add(objclsIter.next());
        // Add the object class attribute to list
        attrs.put(objclass);
      // Iterate through other attributes and add to attributes list
      Iterator attrsIter = map.entrySet().iterator();
      while( attrsIter.hasNext() ) {
        Map.Entry attr = (Map.Entry)attrsIter.next();
        attrs.put(new BasicAttribute((String)attr.getKey(),attr.getValue()));
      // add the directory entry to the directory with the attributes
      dirctx.createSubcontext(dn, attrs);
   }

Configure new user role

Hello,
I'm new in town so, please forgive me all misteakes I will make. I try to do my best.
I would like to modyfie a user role in SAP CRM 7.0. My point is, I want to add a button ( assing a user to the respossible employee). In my current role I have only "search". But I want to assing a user to employee, in creating sales order level for example.
At start I know that I should copy standart role and make it "z" (and I did it).I copied sales rule. Than copy the navigation bar profile...(sls-pro) and here problems apper when a choose 'copy all'.
Help me with this, please.
ML

According to your link, I create new user named "A" belong to new group named "Beijing" in the BIEE console, and in the EM I also create new application role named "Beijing" that contains the "Beijing" group, then restart the server. Finally I filter the City column into "Beijing" in Administration-->Appliction roles-->"Beijing"-->Permissions-->Data filter, but when I login into the answer through A user, I see all data in the city column, do not only view "Beijing" data .
If you know the method for solving it, please help me. Thank you!

Domain Access Denied - Adding new users

Hi Experts,
I am working on SAP BPC 7.0 MS ver SP04 and am facing an error while adding users.
To Add a New domain user when selecting the domain, I am getting a warning message "Access is denied".
What could be the reasons behind this or are there any specific rights that need to be checked for access to the Domains? I have earlier added users from the same domain and had no warning message and post that no changes have been made to any user settings.
Any help or guidance / tips very much appreciated.
Regards,
Pankti.

Hi,
Earlier when u had added the users, did u add the users to the same application set or was it for different application set??
Can you please check your task profile. Kindly make sure that you have the appropriate authorizations.
Hope this helps.

Added new parm to an existing SQL stored procedure CR 11 doesn't like it

Hi
I have added a new parameter to an existing SQL stored procedure (SQL 2000). This stored procedure is currently being called from a Crystal XI report. It prompts for a date which works great. (The report was created with this parameter). I added a new parameter to the stored procedure. When I do a preview in Crystal, it prompts for the new parameter, but is NULL when I look at the SQL query and it brings back no data. If I try to verify the database, it tells me that I am missing parameter @ProcessType (varchar(5))--(name of new parameter). I have physically added this parameter to the crystal report with the select expert and still no luck. I have already tried renaming the procedure but am unable to update datasource location because of this parameter. The report is very detailed and I do NOT want to create a new report.

Unfortunately, I have tried and retried to do this. Nothing changes. I usually would get a message like database has changed, proceeding to fix report. I don't get this. It merely tells me database is up to date and only returns the 1 parameter, yet when I go to the datasouce and try to update it, it tells me that I have not supplied the new parameter.
I have tried everything, from closing Crystal reports and then going so far as to reboot my machine, just in case their was some kind of caching going on.
I have even asked other people I work with to look at it to make sure I am not doing something dumb...

Implications of adding new key fields to existing table

Hi All,
I have searched forum regarding this. But didn't find exact answer.
We are planning to add new key fields to existing Ztable. I want to know the implications of this.
I have checked the where used list of table and found no impact. Only one point is making me to think again and again.
If we add key fields to existing table then we have to adjust the table from SE14 to activate it. But this adjustment doesn't ask for TR.
So if i release my TR, entries in other systems will also be adjusted accordingly??? Business is OK with the new fields values to be blank for existing entries.
Thanks,
Vinod.

Yes the data in transported systems will also be adjusted. If this table contains too much data make transport at late hours because it will take long and table can't be used while it's adjusted. In this adjustment process data is copied to a temporary table and moved back to original table using move-corresponding command after key added. There will data loss if you remove a key or key fields field length but in your case it shouldn't be a problem.
Edited by: Gungor Ozcelebi on Jul 2, 2009 9:18 AM

Error when adding new user in account admin

I am logged in using an administrators account and want to add a new user.
Whenever I type in the email address that I require, it says 'Sorry! An error has occurred. Please try again'.
What is this error all about and how do I add a new user??
Thanks

Hi,
Is your system a dual stack (ABAP+JAVA)? In that case the ABAP stack will be the master. You can check if it's an ABAP data source if you go to UME >> Configuration >> Data Sources
Regards,
Vit
More info in thread: How to create Roles in UME (ABAP+JAVA stack)
Edited by: Vit Vesely on Apr 10, 2010 9:28 PM

Adding New Org Units to Existing Organization Structure

Hi,
There is a change in the Org Structure, i.e we are adding new Org Units(Personnel Sub areas) to the existing Structure and creating postions to the newly created Org Units using PP01. Now my question is what are all things need to be configured with respect to Payroll, for the newly created PSA.
Rgds
Ram

Hi Ramakrishna,
Please be more clearer. PSAs are not org units. PSA belong to enterprise structure, whereas Org Unit belong to Org Structure. When you create new positions under the Org Units tht have been assigned to a PSA, PA, Company Code, Cost Center and Controlling area combination, you would have to set the following.
Group your PSA for,
Primary Wage Types
Premium
Work Schedule
Time Recording
Absence Attendence Type.
Assign Tax Area to a PSA(If it is US Payroll).
Any more suggestions from experts?
K

Error Message When Adding New User

Hello,
We are on FDM 11.1.2.1.501 and today as I was going to add a new user in the system I got the below error message:
Error: Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
After the error the usual user maintenance screen came up and I was able to add the users I needed to without any problems. Anyone have an idea what this error means? Just looking to prevent problems on down the road.
Also, there wasn't anything in the FDM error log nor in the windows event viewer on any of the servers.
Thanks in advance,
Jason

Oracle was able to provide a solution to this one. Somehow there was a disconnect between HSS and FDM so went into SS and deleted out the affected application. Then went onto the FDM web server and ran the user migration utility to reconnect that application with SS and now it works fine w/out the error message.

DPS - adding new users

I have previously added 5 new users in the Account Administration area without problem.
Today, I have tried to add another address which is also registered and verified as an Adobe ID, but whenever I submit it, I am getting the message 'Sorry! An error has occurred. Please try again'.
Any suggestions?

Is the new user's Adobe ID already verified to use with DPS? If so, that could be the problem. Use a valid email address that hasn't been connected yet with DPS.

Adding new Users ,Roles in existing application except jdev

Similar Messages

Maybe you are looking for