AE 5.2: Using user groups as a dropdown function

Hi All
We would like to use the user group functionality on CUP but the client does not have the same user groups across all systems.
Our suggestion is that they have all user groups defined across all the systems.
Is there a way that we could accomodate the client as per the current set-up where not all user groups are defined on all systems?
Any assistance on this matter will be appreciated.

Hi,
I'm not sure of all the complexities around this but we had a similar problem where the user respository we used could not be connected using LDAP.
The solution that was implemented was to create an ADAM (Active Directory Application Mode) directory, which is connected to the user repository - ADAM is then connected the UME for AE as the LDAP server.
Probably not the most elegant solution, but we have been using this in PRD environment for a couple of months now without any performance issues.
Unfortunately I don't have all the details to guide you through all the config that was required, but perhaps you could investigate this as an alternative solution.
Regards

Similar Messages

When do I use user group "wheel"?

Hello,
I have the following question: What exactly is the user group "wheel" for and when do I use it (instead of "admin", for example)? Background to the question is, I recently noticed that some applications needed to be updated regarding ownership and ACLs.
I had installed them while working as a non-admin user by drag and drop, authenticating as an admin user (which is short named "admin", too) when asked to identify as one. The apps were installed alright, but the ownership was set to the non-admin user, while the group was "admin". This caused some problems with BOINC, for instance, which I tried to fix by updating ownership and ACL, accordingly.
When checking other apps that were installed with Mac OS X I noticed that most belonged to "root" (aka "System") and group "wheel" instead of "admin". This lets me wonder about when to use which group.
Does anyone know about the backgrounds of this?
Thank you in advance
Jim

Regarding your original question:
"I had installed them while working as a non-admin user by drag and drop, authenticating as an admin user (which is short named "admin", too) when asked to identify as one."
Okay, a couple of things here.
First of all, for the most part, whenever you copy files in the Finder, the copied files take on the ownership of the person doing the copying (there's one exception which we'll see in the next paragraph). Since you were in a non-admin account, the Finder realized that in order to modify the /Applications/ folder, you'd need to first authenticate with an administrator name and password to obtain permission. Once permission was granted, the copied files took on the ownership of the user doing the copying (the non-admin user).
"The apps were installed alright, but the ownership was set to the non-admin user, while the group was "admin"."
Let's say you have a folder "ExampleFolder" whose owner is "root" and group is "admin". When you copy an item into the ExampleFolder, the copied item will take on the group permission value from the parent folder. That's why the item you copied had a group of "admin" (since the /Applications/ folder's group is "admin").
"When checking other apps that were installed with Mac OS X I noticed that most belonged to "root" (aka "System") and group "wheel" instead of "admin"."
Hmm, as far as I can tell, that's not true. Almost all of the applications in the /Applications/ folder will be drwxrwxr-x, root-owned, and group of "admin". Note that there is a display bug in the Ownership & Permissions section of the Finder's Inspector-style Info window in Tiger. The values shown in the pop up menus for owner and group do not update dynamically as you change your selection. Instead, they continue to show the owner and group of the original item on which you first opened the Inspector panel. So, for example, if you selected the /System/ folder, which has an owner of root and group of wheel, and then opened the Inspector window, any subsequent items you selected (such as applications in the /Applications/ folder) would still appear to have a group of "wheel". (The regular style Finder Get Info windows are fine).
Hope this helps.....
Dual 2.7 GHz PowerPC G5 w/ 2.5 GB RAM Mac OS X (10.4.3)

Add User/Group API's restricted functionality.

I'm trying to add user/group attributes that are present within the iPortal GUI but appear absent within the API (WWSEC_API). Namely 'Default Homepage'. Could someone please advise if this element can be assigned values through an API (perhaps other than the one I am using).
Cheers.

It doesn't appear so. I have managed to assign a default homepage via setting up a default homepage for a group and then assigning the person to the group. Unfortunately, it works off and on.

Authority check - in terms of User Group

Hi all,
I need restrict the usage of a finnance report by order of users.the report has order grup as an input, only certain order groups should be viewed by certain users. in authority check can do the checking by using user groups instead of individual used.i.e create separate object for seperate order group and for each order group can i check against user group instead of individual users. kindly help.
thanks.

hi,
Authorizationcheck can be done for:
1.Transactions
2.ABAP programs
in abap programs use the below code as reference for authorization check
AUTHORITY-CHECK OBJECT 0.
MESSAGE e184(sabapdocu) WITH text-010.
ENDIF.
rewards points if useful.
regards
sandhya

Conditions based on user groups

Hi,
I am already using the authorization i dont want to make any changes.
I want to restrict the column using user group.
If my user group is admin or unique then display the item and if the user group helpdesk or test then dont display.
I am using condition: PL/SQL Function Returning boolean
declare
begin
return apex_util.current_user_in_group(p_group_name=>'admin');
end;
It is working fine for only admin group. If i need to display the column to either admin or uniqueuser group ,Then please could you advise the expression for that.
Regards
Harinder

Hello Harinder,
What about
return apex_util.current_user_in_group(p_group_name=>'admin') or apex_util.current_user_in_group(p_group_name=>'yourOtherGroup');
Greetings,
Roel
http://roelhartman.blogspot.com/
You can reward this reply by marking it as either Helpful or Correct ;-)

EasyDMS - How to create user groups?

Hi,
we are using ERP2005 and EasyDMS SP08(Unicode). We like to use user groups from the authorization tab to implement authorizations on folders and document.
We can create a user group in EasyDMS, but if we assign this to a document it is said that the user group doesn't exist.
I have assumed that we have to create the user groups in tcode EASYDMS_CUS before but that doesn't work either.
Has anybody an idea?
Regards,

Hi Oliver,
please implement SAP note 1037891. This note is necessary to avoid the '...doesn't exist' message.
Best regards,
Christoph

Afaria User Group

Hi
I'm using User Groups in Afaria based in AD group.
I have just one problem, I don't able to see devices list when I use user group?
What can be happening?
Regards,
Lucas Araujo

You're right.
USER groups are not shown in the link window so you can't tell if a specific policy is linked to a given device/user pair. It will be but the UI doesn't show it.
It's a pain to debug :-(
BR
Peter

Pulling user/group field data from SharePoint list using REST, jQuery, Knockout.js Sharepoint 2013

I'm trying to make an interactive task board based on the task list app in SharePoint 2013. The task lisk includes fields like "Title","Description","Status","% Complete","Due Date","Assigned To",
etc. I used knockout.js to bind "Title","Description", and "Status" to my HTML controls. Here is some of the code:
var ViewModal = function(items, listname){
var self = this;
self.sortBy = ko.observableArray(sortBy);
self.tasks = ko.observableArray(items);
self.listname = ko.observable(listname);
self.auto = ko.observable(false);
self.getTasks = function() {
clearTimeout(self.getTasks);
// server relative url to REST service endpoint
var ajaxurl = _spPageContextInfo.webServerRelativeUrl + "/_vti_bin/listdata.svc/" + self.listname() + "?$orderby=PriorityValue";
$.ajax({
type: "GET",
url: ajaxurl,
contentType: "application/json; charset=utf-8",
dataType: "json",
cache: false,
processData: true,
success: function (data, status, xhr) {
if (status == "success" && data) {
ko.mapping.fromJS(data.d.results, mapping, self.tasks)
$(".task-item").draggable();
error: alert
if (self.auto()) {
setTimeout(self.getTasks, 10000);
<div class="tasks-column">
<div class="column-header">Not Started</div>

<div class="task-item">
<div class="view" data-bind="visible: !IsEditing()">
<button class="edit" data-bind="click: $root.editTask">edit</button>
<h2><span data-bind="text: Title"></span></h2>
<div data-bind="html: Description"></div>
<span data-bind="text: PriorityValue"></span>
</div>
<div class="edit" data-bind="visible: IsEditing">
<button class="save" data-bind="click: $root.saveTask">save</button>
<input type="text" data-bind="value: Title"></input>
</div>
</div>
I'm having trouble displaying the data from the "Assigned To" user/group field. I tried:
<span data-bind="text: AssignedTo"></span>
But it displays the field as [object Object]
I tried using $select/$expand
?$select=Title,AssignedTo/Id,Assignedto/Title&$expand=AssignedTo/Id,AssignedTo/T‌itle";
But it still returns the [object Object]

Hi,
Please use the REST URI below:
/_api/lists/getbytitle('ListName')/items?$select=Title,AssignedTo/ID,AssignedTo/Title&$expand=AssignedTo/ID,AssignedTo/Title
More information for your reference:
How to get User Details and User Group Details in SharePoint 2013 REST API with Knockout for SharePoint Js (KoSpJs)
http://www.ashokraja.me/post/How-to-get-User-Details-and-User-Group-Details-in-SharePoint-2013-REST-API-with-Knockout-for-SharePoint-Js-(KoSpJs).aspx
How to Get Login Name and Display Name using SharePoint 2013 REST API
https://www.nothingbutsharepoint.com/sites/devwiki/articles/pages/how-to-get-login-name-and-display-name-using-sharepoint-2013-rest-api.aspx
Best Regards
Dennis Guo
TechNet Community Support

I have a Mac Pro using Lion, with a SSD for system. Restored drive from backup. Now logon password doesn't work. Account password still works. Changing password in user group preferences no longer works to change logon password.

I have a Mac Pro using Lion, with SSD for system drive. Drive stopped booting, but otherwise appeared healthy. Restored from system backup. Now drive seems to work properly, BUT my logon password no longer works. Password OK for account; can access system preferences, and change user password there BUT logon still refuses to accept password. No luck changing password for that account after adding new administrator account and logging on from that account. Suggestions? Thanks.

If you redirect Accounts to another location (not on the Boot Drive) you need to direct them back there again after a restore.
SystemPreferences > Accounts/User&Groups > ...
... Unlock the lock, then hold down Control as you click on an Account to get access to the Advanced Options pane.

SQL Performance issue: Using user defined function with group by

Hi Everyone,
im new here and I really could need some help on a weird performance issue. I hope this is the right topic for SQL performance issues.
Well ok, i create a function for converting a date from timezone GMT to a specified timzeone.
CREATE OR REPLACE FUNCTION I3S_REP_1.fnc_user_rep_date_to_local (date_in IN date, tz_name_in IN VARCHAR2) RETURN date
IS
tz_name VARCHAR2(100);
date_out date;
BEGIN
SELECT
to_date(to_char(cast(from_tz(cast( date_in AS TIMESTAMP),'GMT')AT
TIME ZONE (tz_name_in) AS DATE),'dd-mm-yyyy hh24:mi:ss'),'dd-mm-yyyy hh24:mi:ss')
INTO date_out
FROM dual;
RETURN date_out;
END fnc_user_rep_date_to_local;The following statement is just an example, the real statement is much more complex. So I select some date values from a table and aggregate a little.
select
stp_end_stamp,
count(*) noi
from step
where
stp_end_stamp
BETWEEN
to_date('23-05-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
AND
to_date('23-07-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
group by
stp_end_stampThis statement selects ~70000 rows and needs ~ 70ms
If i use the function it selects the same number of rows ;-) and takes ~ 4 sec ...
select
fnc_user_rep_date_to_local(stp_end_stamp,'Europe/Berlin'),
count(*) noi
from step
where
stp_end_stamp
BETWEEN
to_date('23-05-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
AND
to_date('23-07-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
group by
fnc_user_rep_date_to_local(stp_end_stamp,'Europe/Berlin')I understand that the DB has to execute the function for each row.
But if I execute the following statement, it takes only ~90ms ...
select
fnc_user_rep_date_to_gmt(stp_end_stamp,'Europe/Berlin','ny21654'),
noi
from
select
stp_end_stamp,
count(*) noi
from step
where
stp_end_stamp
BETWEEN
to_date('23-05-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
AND
to_date('23-07-2009 00:00:00','dd-mm-yyyy hh24:mi:ss')
group by
stp_end_stamp
)The execution plan for all three statements is EXACTLY the same!!!
Usually i would say, that I use the third statement and the world is in order. BUT I'm working on a BI project with a tool called Business Objects and it generates SQL, so my hands are bound and I can't make this tool to generate the SQL as a subselect.
My questions are:
Why is the second statement sooo much slower than the third?
and
Howcan I force the optimizer to do whatever he is doing to make the third statement so fast?
I would really appreciate some help on this really weird issue.
Thanks in advance,
Andi

Hi,
The execution plan for all three statements is EXACTLY the same!!!Not exactly. Plans are the same - true. They uses slightly different approach to call function. See:
drop table t cascade constraints purge;
create table t as select mod(rownum,10) id, cast('x' as char(500)) pad from dual connect by level <= 10000;
exec dbms_stats.gather_table_stats(user, 't');
create or replace function test_fnc(p_int number) return number is
begin
    return trunc(p_int);
end;
explain plan for select id from t group by id;
select * from table(dbms_xplan.display(null,null,'advanced'));
explain plan for select test_fnc(id) from t group by test_fnc(id);
select * from table(dbms_xplan.display(null,null,'advanced'));
explain plan for select test_fnc(id) from (select id from t group by id);
select * from table(dbms_xplan.display(null,null,'advanced'));Output:
PLAN_TABLE_OUTPUT
Plan hash value: 47235625
| Id | Operation          | Name | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT   |      |    10 |    30 |   162   (3)| 00:00:02 |
|   1 | HASH GROUP BY     |      |    10 |    30 |   162   (3)| 00:00:02 |
|   2 |   TABLE ACCESS FULL| T    | 10000 | 30000 |   159   (1)| 00:00:02 |
Query Block Name / Object Alias (identified by operation id):
   1 - SEL$1
   2 - SEL$1 / T@SEL$1
Outline Data
/*+
      BEGIN_OUTLINE_DATA
      FULL(@"SEL$1" "T"@"SEL$1")
      OUTLINE_LEAF(@"SEL$1")
      ALL_ROWS
      OPTIMIZER_FEATURES_ENABLE('10.2.0.4')
      IGNORE_OPTIM_EMBEDDED_HINTS
      END_OUTLINE_DATA
Column Projection Information (identified by operation id):
   1 - (#keys=1) "ID"[NUMBER,22]
   2 - "ID"[NUMBER,22]
34 rows selected.
SQL>
Explained.
SQL>
PLAN_TABLE_OUTPUT
Plan hash value: 47235625
| Id | Operation          | Name | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT   |      |    10 |    30 |   162   (3)| 00:00:02 |
|   1 | HASH GROUP BY     |      |    10 |    30 |   162   (3)| 00:00:02 |
|   2 |   TABLE ACCESS FULL| T    | 10000 | 30000 |   159   (1)| 00:00:02 |
Query Block Name / Object Alias (identified by operation id):
   1 - SEL$1
   2 - SEL$1 / T@SEL$1
Outline Data
/*+
      BEGIN_OUTLINE_DATA
      FULL(@"SEL$1" "T"@"SEL$1")
      OUTLINE_LEAF(@"SEL$1")
      ALL_ROWS
      OPTIMIZER_FEATURES_ENABLE('10.2.0.4')
      IGNORE_OPTIM_EMBEDDED_HINTS
      END_OUTLINE_DATA
Column Projection Information (identified by operation id):
   1 - (#keys=1) "TEST_FNC"("ID")[22]
   2 - "ID"[NUMBER,22]
34 rows selected.
SQL>
Explained.
SQL> select * from table(dbms_xplan.display(null,null,'advanced'));
PLAN_TABLE_OUTPUT
Plan hash value: 47235625
| Id | Operation          | Name | Rows | Bytes | Cost (%CPU)| Time     |
|   0 | SELECT STATEMENT   |      |    10 |    30 |   162   (3)| 00:00:02 |
|   1 | HASH GROUP BY     |      |    10 |    30 |   162   (3)| 00:00:02 |
|   2 |   TABLE ACCESS FULL| T    | 10000 | 30000 |   159   (1)| 00:00:02 |
Query Block Name / Object Alias (identified by operation id):
   1 - SEL$F5BB74E1
   2 - SEL$F5BB74E1 / T@SEL$2
Outline Data
/*+
      BEGIN_OUTLINE_DATA
      FULL(@"SEL$F5BB74E1" "T"@"SEL$2")
      OUTLINE(@"SEL$2")
      OUTLINE(@"SEL$1")
      MERGE(@"SEL$2")
      OUTLINE_LEAF(@"SEL$F5BB74E1")
      ALL_ROWS
      OPTIMIZER_FEATURES_ENABLE('10.2.0.4')
      IGNORE_OPTIM_EMBEDDED_HINTS
      END_OUTLINE_DATA
Column Projection Information (identified by operation id):
   1 - (#keys=1) "ID"[NUMBER,22]
   2 - "ID"[NUMBER,22]
37 rows selected.

Creating user groups using SQ03.

I am going to make a change to a already existing query 01 in the user group /SAPQUERY/AM. I am not a query expert, in fact this is the second query that I am modifing. I am reading some documentation that the first thing that I have to do is create a user group. from what I am reading, the user group will contain the users that are allowing to modify queries. Since our users do not use this tool, I am the only one that creates and modifies queries. I think I am going to create a user group and that my user-id will be the only one in the group - correct? will I create one user group and and queries that I make changes to in the future user this user group or do I create user groups based on the users group that are defined by SAP. example - If I am changing a query in /SAPQUER/AM and in /SAPQUERY/AU - would I create 2 user groups 1 for AM and 1 for AU or would I create only 1 user group and use it for both queries.
After this, I think I have to copy the infoset (SQ02)and the query (SQ01) to custom names (names starting with Z) and then attaching the parts to the new user group.

Hi Timothy
Typically you want to create user groups for functional areas or grouped reports/queries. You can enter as many users as needed into a user group and only those who have the checkbox next to their name in the user group screen will have authorization to create/modify queries in the infosets where the usergroup is assigned. If you are creating 2 usergroups with the same users and authorizations then that is redundant but if the list of users is different or the authorizations may change then it would make sense to have 2 usergroups. You should have some naming convention to follow when creating the queries but the Z prefix is not required.
Andy

User= Group= SubGroup= Role: Now working when this link is used

Hai,
We are using EP 5.0 with LDAP 7.6 When a user id created it is attached to a group and the group is attached to a role. I introduced a nested group in this link as userid is attached to group, group is attached to sub group and subgroup is attached to role. When i did like this and login to the portal system the roles are not seen in the portal.
Below are the things which i did,
When a user id(Ex : MYTEST1) is created it is attached to a group(Ex : ESS_GE) by the below code.
       String group = "ESS_GE";
       String groupdn = "cn=" + group.toUpperCase() + "," + groupsRoot;
       String userdn = "cn=" + userid.toUpperCase() + "," + peopleRoot;
      // modifications for group and user
      LDAPModification[] modGroup = new LDAPModification[2];
      LDAPModification[] modUser = new LDAPModification[2];
   // Add modifications to modUser
   LDAPAttribute membership = new LDAPAttribute("groupMembership", groupdn);
   modUser[0] = new LDAPModification( LDAPModification.ADD, membership);
   LDAPAttribute security = new LDAPAttribute("securityEquals", groupdn);
   modUser[1] = new LDAPModification( LDAPModification.ADD, security);
    // Add modifications to modGroup
    LDAPAttribute member = new LDAPAttribute("uniqueMember", userdn);
    modGroup[0] = new LDAPModification( LDAPModification.ADD, member);
    LDAPAttribute equivalent = new LDAPAttribute("equivalentToMe", userdn);
    modGroup[1] = new LDAPModification( LDAPModification.ADD, equivalent);
   // Modify the user's attributes
   lc.modify( userdn, modUser);
   // Modify the user's group attributes
    lc.modify( groupdn, modGroup);
Group is attached to a role(EP_GE_USER_ROLE). So the link is User =>Group=>Role which is MYTEST1=>ESS_GE=>EP_GE_USER_ROLE. This linke is working perfectly
I introduced a nested group and changed the link as User=>Group=>Sub_Group=>Role which is MYTEST1=>ESS_GE=>ESS_GE_ONLINE=>EP_GE_USER_ROLE.
After this when I login with the user id MYTEST1 the Roles which are attached to ESS_GE_ONLINE is not shown. Any idea why the roles which are attached to group ESS_GE_ONLINE is not transferred to ESS_GE group. Should I have to add any other LDAP attributes apart from the one which are coded below.
String group1 = "ESS_GE";
String group2 = "ESS_GE_ONLINE";
String groupdn1 = "cn=" + group1.toUpperCase() + "," + groupsRoot;
String groupdn2 = "cn=" + group2.toUpperCase() + "," + groupsRoot;
//Add ESS_GE_ONLINE group to ESS_GE group
LDAPAttribute membership1 = new LDAPAttribute("uniqueMember", groupdn2);
modGroup1[0] = new LDAPModification( LDAPModification.ADD, membership1);
LDAPAttribute security1 = new LDAPAttribute("equivalentToMe", groupdn2);
modGroup1[1] = new LDAPModification( LDAPModification.ADD, security1);
//Add ESS_GE group to ESS_GE_ONLINE group
LDAPAttribute membership2 = new LDAPAttribute("uniqueMember", groupdn1);
modGroup2[0] = new LDAPModification( LDAPModification.ADD, membership2);
LDAPAttribute security2 = new LDAPAttribute("equivalentToMe", groupdn1);
modGroup2[1] = new LDAPModification( LDAPModification.ADD, security2);
lc.modify( groupdn1, modGroup1);
lc.modify( groupdn2, modGroup2);
Thanks & Regards,
H.K.Hayath Basha.

change that to the following and retest:
Joshua Fowler wrote:
I think you're correct. Under the Publish settings of the document, that's what "Class" points to.
Here's the first main section of the code:
package com.anselmbradford
import flash.display.MovieClip;
import flash.events.TimerEvent;
import flash.utils.Timer;
public class Main extends MovieClip
* Create a new CountDown object, listen for updates and pass it the date to countdown to.
public function Main()
var cd:CountDown = new CountDown();
cd.addEventListener( CountDownEvent.UPDATE , _updateDisplay );
cd.init( new Date(2015,3,9,20,00) );
* Update the display.
private function _updateDisplay( evt:CountDownEvent ) : void
Does this look correct?
Thanks again!

To use the "Users & Groups" preferences pane, System Preferences must quit and reopen.

When I try to access some of the system preferences in Mavericks I get an error pane that states "To use the “Users & Groups” preferences pane, System Preferences must quit and reopen."
Has anybody had this problem and if so what is the fix?

Usually happens if you opened one that was 32-bit. Then, you need to revert back to 64-bit.

Using users and groups from LDAP in ADF application

Hi there,
I'm using WebLogic Server 10.3.5.0 and JDev 11.1.2.3.0.
I configured my WL server to use the users and groups defined in my LDAP server (they display when I select the Users or Groups tab). So this works fine (I think).
Now I want to use 1 group, let's call the group ApplicationGroup, and all it's users to give them access to my ADF Application.
But I can't find proper/up-to-date info about how to do this.
I tried 2 major things:
1) I configured ADF Security to use Authentication and Authorization. Defined an Enterprise Role with the same name as in my WL server (so ApplicationGroup) then defined a
Application Role with a custom name and added the Enterprise Role to it. That Application Role I gave access to all my TF's and Web Pages. When I deploy this, It just doesn't work (Migrate Users and Groups is not checked).
2) Used the Authentication option in the ADF Security and the rest is the same as in 1). This works +-, I can login with all users so the role mapping isn't configured right I guess?
Any help or documentation that could help me?

Since we aren't using EM I had to find an other way. And I found it.
In web.xml ADF Security (I suppose) automaticly adds 'valid-users'. In my weblogic.xml I added my enterprise role as a principal to 'valid-users' and this works for me.
Thanks for the help.

Restrict permissions to use the groups/users/roles in User Administration

Hello gurus,
I want to find out if there is a way we can restrict permissions to use the GROUPS in User administration. We want to assign the user administration role to the users, but do not want the users to have permissions to DELETE groups from User administration page.
Please also let me know, if we can just have users use the NWA to do the user administration instead of from the Portal?
Thank you,
~~MK

Hi MariaKutty,
Koti is right, you need to create custom User administration role from standard role and restric the access in the custom role and assgined to the users.
>Please also let me know, if we can just have users use the NWA to do the user administration instead of from the Portal?
Then can to do from NWA also, if the user not required to have the portal access.
Hope it helps
Regards
Arun

AE 5.2: Using user groups as a dropdown function

Similar Messages

Maybe you are looking for