Allow certain records a user can view

Hello,
Which method is best to implemet a solution to allow certain records from a table to be selected from a particular user? I can build a view and grant select on that view to the user but I like to know if there is a better solution? (lable security?) Thank you.

You can look into Virtual Private Database (VPD), achieved by Fine-grained access control
http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/apdvpoli.htm#sthref2179

Similar Messages

How to user can view only allow sessions in operator

dear all
how to user can view only allow sessions in operator, user has a right to execute only one package.
kindly help asap.

What Database privilege (not EM privilege) does the new user have?

There is the possibility of making all my itunes podcast so that users can view a repertoire?

There is the possibility of making all my itunespodcast so that users can view a repertoire?

If you mean you have several podcasts and would like them all to be listed on the same page, you may be able to get the Store to set up what they call an 'Artist Page' which does this.
http://www.apple.com/itunes/podcasts/creatorfaq.html says:
How can I create a page that aggregates my podcasts?
If you have multiple podcasts listed in the iTunes Store, the iTunes staff can create a single page that lists all of them in one place. We call this page an “artist page.” Note that a podcast can only appear on one artist page.
To request an artist page, navigate to one of your podcasts, click on Report a Concern, and select Remove a Podcast. In the dialog box, explain that you would like an artist page, give us the exact name of the artist (please don’t include “Inc,” “LLC,” etc.), and list the exact feed URLs or links to your podcasts.

How many users can view the same report at the same time in obiee answers

Hi All,
How many users can view the same report at the same time in obiee answers..?
What is max and minimum number of users.
Do we need to increase any system configuration.
Thanks,
Jagadees.

Hi,
Many users can view report at same time.It depends on the server if it can accept those many users at same time.If number of users increases OC4J may not work properly.
Refer : http://www.artofbi.com/index.php/2009/10/what-is-oc4j-an-oracle-application-server-distribution-really/
Regards,
Srikanth

Create a lightbox of PDFs users can view and or download

I would like to create a directory of PDF's that end users could see a thumbnail image of the first page of the pdf
and when they click on it it would expand to allow them to view the pages of the pdf, and or download them.
I have 40+ years of old newsletters that I am trying to publish.
I was able to make this much easier using iWeb for the Mac, it was just drag & drop a pdf and the
thumbnail was automatically generated - however I can't seem to find a way to do this in Muse.
My attempt in Muse...
(what i did in iWeb)

You can use compositions for this , with triggers insert thumbnail images and target containers should include the text content , add another text in same container and link that to pdf document where users can download the file.
Thanks,
Sanjit

SharePoint 2013 allows downloaded even for users with "view only" permissions

I have a new on premises SharePoint 2013 server and assigned a single user "view only" rights to a document library. In the "permission levels" window, this permission is described as "Can view pages, list items,
and documents. Document types with server-side file handlers can be viewed in the browser but not downloaded."
Once I gave the user that permission, I noticed he was able to view documents in the library but the "but not downloaded" part does not seem to be working. The user can still download documents to his local desktop and SharePoint does not prevent
it. The "download a copy" option appears and the user can use it.
My goal is to make all documents in this library such that users can only view them in the browser and not download a local copy. How I do that?
Thanks for your help.

Not entirely positive :-)
However, you have no server-side handlers in place today without WAC installed, so that portion of the View Only permission wouldn't be applicable.
Note that WAC must be installed on its own server and if your SharePoint server is extranet or public facing, it needs to have a valid, public SSL certificate. Also, WAC should always be run over SSL regardless if it is public facing or not as the token
sent between the SharePoint server and WAC is the same as having a username and password for the user making the request.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

OLS Label Security: how users can view own level/compartment/group choices?

I have an application using OLS (Oracle Label Security) Virtual Database (VDB) for security; to allow users to only view rows to which they have access.
I'm creating a list of values (LOV) to allow the user to change the level or compartment of a database record to a different value for which they still have access. The views that show these values is DBA_SA_USER_LEVELS (and COMPARTMENTS, GROUPS) but this view is only visible to DBA users, not the regular user. We are considering giving regular users access to this view, or granting SELECT_ALL_TABLES as suggested in an article I read. However, this approach seems to loosen security, not maintain it.
How can I allow a user to get a list of levels, compartments or groups available to them without loosening the security on the DBA_* views?
thanks,
Scott

Bump

Firefox is not allowing certain websites to load can sign in remotely to make sure it is installed correctly and completely?

Can you sign into my computer remotely to make sure that I've installed firefox correctly and completely. I seem to be missing plugins, adobe, java, fire fox won't allow me to download them. On certain websites I'm getting error messages.

'''ADOBE FLASH'''
-> Adobe Flash Player 10.3.183.5 (2.95 MB)
* http://get.adobe.com/flashplayer/
* Remove Checkmark from also Downloading other Optional Softwares (e.g. McAfee, Google Chrome, etc.)
-> click '''Download Now''' button
-> How do I install the Flash plugin?
* https://support.mozilla.com/en-US/kb/installing-flash
'''JAVA'''
-> Download & Install Java SE on your system:
* http://www.java.com/en/
* click '''Free Java Download''' button
-> Using the Java plugin with Firefox
* https://support.mozilla.com/en-US/kb/Using%20the%20Java%20plugin%20with%20Firefox
Clear Cookies & Cache
* https://support.mozilla.com/en-US/kb/Template:clearCookiesCache
Clear the Network Cache
* https://support.mozilla.com/en-US/kb/How%20to%20clear%20the%20cache#w_clear-the-cache
Troubleshooting extensions and themes
* https://support.mozilla.com/en-US/kb/Troubleshooting%20extensions%20and%20themes
Check and tell if its working.

How to display Issues for the projects which user can view in the Project Center View

Hello All,
In the project center view, at the bottom, we need to add one table, which can show the Issues for the projects that are displayed in the project center view.(Projects visible to the current user).
Example: A resource 1 can see the Projects Project 1, Project 2,Project 3 in the project center view. So resource 1 should be able to see all the issues that are entered against the Project 1, Project 2, Project 3, irrespective of the issue that has
been assigned to any resource.
Please help.

Hi,
You could simply edit the page and add the risks and issues webparts. This will display risks and issues assigned to the user.
Click on edit page, then add webpart. In the Project We App section, pick up the risk webpart and then the issue webpart. Finally drag them to the bottom of the page and close the page.
Hope this helps,
Guillaume Rouyre, MBA, MVP, P-Seller |

Viewing swf from HTML- user can view only once

Hi,
I have my swf files which are getting called in browser when user opens its corresponding page.
To ensure my swf is not used by user for his other purposes, i had to strict it to view from HTML page which has a variable. Same variable is passed from swf to this HTML.
if both variables does match then only swf starts preloading. this works fine for first time.
But when user open the same page second time, he is only able to view preloader which does not progress further.
When i delete my temp file then user is again able to view the swf only once.
Can anyone tell me;
1. what is reason the swf from temp file cannot access variable of its HTML
2. am I doing it wrongly?
3. do i need to clear cache everytime or their is another method to do it?
Thanks.

hello following is the code used;
import flash.text.TextField;
import flash.events.ProgressEvent;
import flash.events.Event;
import flash.display.MovieClip;
//////////STAGE PROPERTIES//////////
stage.showDefaultContextMenu = false;
this.tabChildren = false;
Mouse.cursor = "arrow";
//////////CALL & SET VARIABLES//////////
var Progress_txt:TextField = new TextField();
var theFlashVar:String;
var ver:String;
var paramObj:Object = LoaderInfo(this.root.loaderInfo).parameters;
for (ver in paramObj)
                theFlashVar = String(paramObj[ver]);
//////////START USER VERIFICATION//////////
checkFlashvar();
//////////HTML VERIFICATION//////////
function checkFlashvar():void
                //trace("CHECKING Flash VAR");
                if (theFlashVar=="mystring01")
                                InternalPreloader();
                                //trace("pass var found");
                                //InternalPreloader();
                else
                                //trace("VAR NOT FOUND");
                                gotoLocalVar();
//////////LOCAL VERIFICATION//////////
function gotoLocalVar():void
//////////LOAD LOCAL DATA//////////
                var keyLoader:URLLoader = new URLLoader();
                keyLoader.dataFormat = URLLoaderDataFormat.VARIABLES;
                keyLoader.addEventListener(Event.COMPLETE, chkLocalVar);
//////////CHECK ERRORS//////////
                keyLoader.addEventListener(IOErrorEvent.IO_ERROR, onLoadError);
                keyLoader.load(new URLRequest("C:/code.txt"));
//////////CHECK LOCALLY LOADED DATA//////////
                function chkLocalVar(event:Event):void
                                if (keyLoader.data.passKey == "mycode")
                                                //trace("pass key found");
                                                play();
                                else
                                                //trace("Local VAR NOT FOUND");
                                                stop();
                                                parent.removeChild(root);
//////////LOCAL FILE ERROR HANDELLING//////////
function onLoadError(evt:IOErrorEvent):void
                //trace("TXT FILE NOT FOUND");
                stop();
                parent.removeChild(root);
//////////INITIATE PRELOADER STATUS//////////
stop();
function InternalPreloader():void
                stop();
                Progress_txt.x = 400;
                Progress_txt.y = 300;
                addChild(Progress_txt);
                //trace("load progress event");
//////////CHECK PRELOADER STATUS//////////
                if (this.loaderInfo.bytesLoaded == this.loaderInfo.bytesTotal)
                                //trace("checking if condition");
                                finishedLoading();
                else
                                progressLoading();
//////////PRELOADER PROGRESS EVENT LISTENERS//////////
function progressLoading():void
                //trace("progrss loading is running");
                this.loaderInfo.addEventListener(ProgressEvent.PROGRESS,onProgress);
                this.loaderInfo.addEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER PROGRESS STATUS UPDATE//////////
function onProgress(p:ProgressEvent):void
                Progress_txt.text = String(Math.floor((p.bytesLoaded/p.bytesTotal)*100))+ "%";
                preloader_mc.bar_mc.scaleX = (p.bytesLoaded/p.bytesTotal);
                //trace("checking progress");
//////////PRELOADER STATUS COMPLETE-REMOVE LISTENERS//////////
function onComplete(d:Event):void
                //trace("Fully loaded, starting the movie.");
                play();
                //removing unnecessary listeners
                removeChild(Progress_txt);
                loaderInfo.removeEventListener(ProgressEvent.PROGRESS, onProgress);
                loaderInfo.removeEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER STATUS 100% (LOCAL CONDITION)//////////
function finishedLoading():void
                //trace("loading completed");
                removeChild(Progress_txt);
                play();

Distributing Flash player so user can view Embedded Capt video?

We are thinking of including embedded Captivate (*.swf) files in our RH 8 WebHelp files. Our customers will not have access to the internet. So we thought we should include the latest flash player executuble in the software distribution. What do we have to do to provide them with the Flash player? Are there costs associated? Licensing fees, etc?
Thanks in advance.

If it is like Acrobat, and I'd say it is, you can freely distribute Flash provided you have registered you are doing so with Adobe. When we started distributing Acrobat Reader in a previous life, this was as simple as filling in a web form on the Adobe website. Try there for further info.
Read the RoboColum(n) for a tips, tricks and musings on the Technical Communication Suite products.
Follow the RoboColum(n) on Twitter

Non-admin users can't view GAL with Outlook Connector

Non-admin users are unable to view the Global Address List with Outlook Connector. When I give a test user admin rights (in our portal), the user can view the GAL. The VLV index is setup and functioning correctly for admin users. My versions are Directory Server 5.2 Patch 4, JES 2005Q4, Outlook Connector 7.1.222.4.
I've reviewed the ACIs on o=cp per http://docs.sun.com/app/docs/doc/819-5200/gbnse?a=view and verified that they are getting passed down to the child entries. I added a new ACI for a specfic test user, but I see no effect when I run an ldapsearch as that user. Here are the ACIs:
1. Allow Calendar Administrators to proxy
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow Calendar administrators to proxy - product=ics,class=admin,num=2,version=1";
allow (proxy)(groupdn = "ldap:///cn=Calendar Administrators, ou=Groups, o=cp");)
2. Allow Calendar users to read and search other users
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow Calendar users to read and search other users - product=ics,class=admin,num=3,version=1";
allow (read,search)(userdn = "ldap:///uid=*,ou=People,o=pcc.edu,o=cp");)
3. Allow test users to proxy
(targetattr = "mail || uid || icsCalendar || givenName || sn || cn")
(targetfilter = (|(objectClass=icscalendaruser)(objectClass=icscalendarresource)))
(version 3.0;acl "Allow test users to proxy - product=ics,class=admin,num=2,version=1";
allow (proxy)(userdn = "ldap:///uid=299899598658566,ou=People,o=pcc.edu,o=cp");)
Here's the log for an ldapsearch as a non-admin user:
-bash-3.00$ grep "conn=386080 op=1 msgId=2" access
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - SORT cn
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - VLV 1:1:dpelinka 2964:11852 (0)
[02/Jan/2008:15:15:44 -0800] conn=386080 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
When the same search is run by an admin user, nentires=3.
Here is the test ldapsearch:
ldapsearch -h vmpt1 -p 389 -D "uid=299899598658566,ou=People,o=pcc.edu,o=cp" -w {password} \
-b "ou=People,o=pcc.edu,o=cp" -x -s "sub" -S "cn" \
-G "1:1:dpelinka" "pdsRole=Employee" uid
David,

Jay,
Here's a full set of logs. The first set is from my test search; the second from an actual OC search. I don't see anything different between the admin and non-admin except for the number of entries returned.
ADMIN TEST SEARCH
-bash-3.00$ ./test_vlvindex.shl
version: 1
dn: uid=375308679900788,ou=People,o=pcc.edu,o=cp
uid: 375308679900788
dn: uid=534616896694744,ou=People,o=pcc.edu,o=cp
uid: 534616896694744
dn: uid=506947161967075,ou=People,o=pcc.edu,o=cp
uid: 506947161967075
index 2973 content count 11893
DS log-bash-3.00$ grep "conn=1964292 op=1" access
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - SORT cn
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - VLV 1:1:dpelinka 2973:11893 (0)
[07/Jan/2008:16:36:02 -0800] conn=1964292 op=1 msgId=2 - RESULT err=0 tag=101 nentries=3 etime=0
NON-ADMIN TEST SEARCH
-bash-3.00$ ./test_vlvindex.shl
index 2973 content count 11893
DS log-bash-3.00$ grep "conn=1973983 op=1 msgId=2" access
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid"
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - SORT cn
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - VLV 1:1:dpelinka 2973:11893 (0)
[07/Jan/2008:16:37:53 -0800] conn=1973983 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
ADMIN OC SEARCH
-bash-3.00$ grep -i vlv access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - VLV 0:10:9:0 10:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - VLV 0:17:20:0 21:11893 (0)
-bash-3.00$ grep "conn=1000785 op=14 msgId=15" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=14 msgId=15 - RESULT err=0 tag=101 nentries=9 etime=0
-bash-3.00$ grep "conn=1000785 op=15" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - VLV 0:10:9:0 10:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=15 msgId=16 - RESULT err=0 tag=101 nentries=11 etime=0
-bash-3.00$ grep "conn=1000785 op=16 msgId=17" access
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - SORT cn
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - VLV 0:17:20:0 21:11893 (0)
[07/Jan/2008:16:42:58 -0800] conn=1000785 op=16 msgId=17 - RESULT err=0 tag=101 nentries=18 etime=0
NON-ADMIN OC SEARCH
-bash-3.00$ grep -i vlv access
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - VLV 1:1:1:0 2:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - VLV 0:8:0:0 1:11893 (0)
-bash-3.00$ grep "conn=2220710 op=1" access
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="cn mail uid objectClass"
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - SORT cn
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - VLV 1:1:1:0 2:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=1 msgId=2 - RESULT err=0 tag=101 nentries=0 etime=0
-bash-3.00$ grep "conn=2220710 op=2" access.20080107-171147
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - SRCH base="ou=people,o=pcc.edu,o=cp" scope=2 filter="(pdsRole=Employee)" attrs="uid mail cn title company telephoneNumber physicalDeliveryOfficeName objectClass"
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - SORT cn
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - VLV 0:8:0:0 1:11893 (0)
[07/Jan/2008:17:26:04 -0800] conn=2220710 op=2 msgId=3 - RESULT err=0 tag=101 nentries=0 etime=0
-bash-3.00$
David.

How can i block others to view my bookmarks if the master password is not entered correctly? Now user can cancel startup password & view bookmarks belongs to me

I've setup master password and it's asked to enter at the start up screen. Other users can view my bookmarks by canceling the password prompt. I want others to prevent seeing my bookmarks if they don't know the master password

''nagubandigopal [[#answer-711782|said]]''
<blockquote>
''isharamahesh [[#question-1055086|said]]''
<blockquote>
I've setup master password and it's asked to enter at the start up screen. Other users can view my bookmarks by canceling the password prompt. I want others to prevent seeing my bookmarks if they don't know the master password
</blockquote>
if you are setted up master password to bookmarks there is no chance to see your bookmarks
</blockquote>
How can i setup pasword for the bookmarks. According to the below it's not possible
https://support.mozilla.org/en-US/questions/972664

CE10 how to prevent user from view hostrical instance

hi,
We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came back with all the crystal reports on the server that started with employees, even the one the user doesn't have access to. My greatest concern about this is that users can view historical instance and it is sensitive data. Does anybody know whether or not this is a bug in CE10? Is there a patch/fix for this? Is there any configuration change that I can make to
prevent users from being able search all the reports on the server rather just their own reports? Any help is greatly appreciated.
Regards,
Susan

hi,
I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS. If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder? When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal. What am I missing?
Thanks for your help!
Regards,
Susan Johnson

HT2688 Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function. Can you then connect an iPod touch and copy music from a shared librar

Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function. Can you then connect an iPod touch and copy music from a shared library?

Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

Allow certain records a user can view

Similar Messages

Maybe you are looking for