Allowing user to access only documents created by him.

Hi!, is there a way to allow users to read only the documents created by them?, so when they click on the browse data buttons on top they navigate through the documents created only by the specific user?
Thank you!

Hi,
Please check Data Ownership Authorisation if the same is of help in your case.
[Data Ownership Authorisation|https://websmp201.sap-ag.de/~form/sapnet?_FRAME=CONTAINER&_HIER_KEY=701100035871000371280&_OBJECT=011000358700004490662004E&_SCENARIO=01100035870000000183&]
Regards,
Jitin
SAP Business One Forum Team

Similar Messages

RMS stopped. Users told "only documents created in a signed application can be opened in a signed application"

Hi
I hope you can help and that this is the right forum.
We have a RMS 1.0 sp1 server which has stopped working.
Users get "only documents created in a signed application can be opened in a signed application" when trying to protect a document in word or Outlook, and are unable to open previously protected documents.
C:\Users\username\Local Settings\Application Data\Microsoft\DRM - only has the one file in it which is DRM-Machine. the .eul .CLC and .Gic files are missing from this folder.
The server running the rms has an event id 82. " the callers machine certificate has a certificate chain that is not valid"
I ran an irmcheck on the local machine which showed " No user Certificate"
I can connect to the rms server urls , both licensing and certificate with no errors and IE shows the zone to be local intranet.
Can anyone see what my problem might be and suggest why the workstations are not getting their certs and allowed protection? What else should I be checking?
Best Regards
Steen

Hi
Here is the answer which resolved my situation, I hope it helps yours.
Guybrush-Threepwood I've marked your post as helpful as we had installed SP2 but it was not installed correctly and installing correctly was part of the solution.
PROBLEM:
Client began seeing the error:
“Only documents created in a signed application can be opened in a signed application”
On the server we were getting events:
“The callers machine certificate has a certificate chain that is not valid”
CAUSE:
Servers running RMS before SP2 can no longer get a valid Server Licensor Certificate.
RESOLUTION:
1. Install RMS v1 SP2 from:
http://www.microsoft.com/en-us/download/details.aspx?id=14329
2. Locate and then click the following key in the registry.
For the enrollment URL on x86 versions of Windows Server 2003:
HKEY_LOCAL_MACHINE\Software\Microsoft\DRMS\1.0\
For the enrollment URL on x64 versions of Windows Server 2003:
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\DRMS\1.0\
3. On the Edit menu, point to New, and then click String value.
4. Type EnrollmentURL, and then press Enter.
5. On the Edit menu, click Modify.
6. Type
https://activation.drm.microsoft.com/enrollment/enrollservice.asmx, and then click OK.
7. On the Edit menu, point to New, and then click String value.
8. Type CloudGicURL, and then press Enter.
9. On the Edit menu, click Modify.
10. Type
https://certification.drm.microsoft.com/certification/certification.asmx, and then click OK.
11. Go into the RMS Web interface and renew the SLC
HTH

Restricting the user to access only one view in or database

A user wants to create a database link , so that he can view one of our views. We want to restrict permission, so that he can access only that view, and not any of our tables. What is the best way to proceed?
Thanks in advance,
Gayatri

Pl do not post duplicate threads - Restricting the user to access only one view in or database

How to get list of users with access of MM01 (create & change)

Hi all,
i have to take out list of user having access for MM01 (create material), when i use SUIM to get the list it shows all the list of users including the users with DISPLAY & CHANGE, but i want only those users who had the access of CREATE & CHANGE.
please help out me, its very urgent.
Thanks & Regards
Syed..

Hi Syed,
You can try to get it from S_BCE_68001398. Key in the required transaction code.
Thanks and Regards
Points reward is much appreciated

What is the minimum permission level that allows users to view draft documents, other peoples' draft documents?

What is the minimum permission level that allows users to view draft documents, other peoples' draft documents?
Normally a person creates a draft document and when they are ready they publish it and the Approver approves it. However, what if a power user needs to be able to see all draft documents. Not just their own but other peoples'. What is the minimum permission
level that allows then to do this?
Cheers,
Mark
Learning SharePoint

Hi Mark,
Per my knowledge, there is no minimum permission level that allow users to view their own and other people’s draft documents.
This is based on the Draft Item Security setting you choose for your list in Versioning Settings:
You can follow the detailed steps in the link provided by Avni.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

How to restrict a User to access only 2-3 views in MM01/MM02 ???

Hi,
Can anyone tell me how can I restrict a User to access only 2-3 views in MM01/MM02 and also the User should not be allowed to change the View selection by clicking on the Select Views button ?.
Regards,
Lucky

Hi Prashant,
Can this only be done through changes in Authorization Objects ? Is not there any setting which can be done in SPRO for this ?
Hi Sheshagiri,
I could not exactly understand how the access to MM Views can be restricted to User through TCode OMT3B i.e. in SSeq. 01 and Screen 07 ? Subscreen 2154 is for Mat. Groups ? Please explain your answer in detail.
Regards,
Lucky

"This document was created with an unsupported version of Excel. Only documents created with Excel '97 or later can be opened.

I keep getting this message when I try to open an Excel file "This document was created with an unsupported version of Excel. Only documents created with Excel ’97 or later can be opened.

You could try opening the Excel document with LibreOffice and then resaving it in a compatible version before opening in Numbers.
Jerry

Recording video/audio files using Flash Meida Server through rmtp, and allow users to access the recorded files through http.

As titled, what is the way to record video/audio files using Flash Meida Server through rmtp, and allow users to access the recorded files through http?
What I am trying to do, is to record a user's microphone's input and save it to the server. Afterwards, I would like other users to be able to access the recorded files and mainuplating the audio data, by computeSpectrum(), to do some visualization of the audio. As I know computeSpectrum() cannot work on streaming files, so I think I need to access the recorded files using http instead of rmtp. Is that true?
How can I redirect the http request to the files I was recorded into my applications/appName folder? Or I need to somehow moved the recorded files to the /webroot folder?
Thanks!

I probably have asked a stupid question.
My recorded streams are still saved in the applications/appName/streams folder.
And I redirect the www.mydomain.com/streams to point to the applications/appName/streams folder.
And the rmtp recorded streams are abled to connect through http now.

How can I allow users to access SQLPLUS?

Hi everyone,
I have been charged with the task of creating an Oracle server on a CentOS VM. Installation and configuration is complete and SQL is working fine for the database admin user "oracle." I copied the environment variables to the .bashrc file for "oracle" and SQLPLUS starts without a hitch.
Here is where I need a little guidance...
I need to create basic Linux user accounts that will have access to the database, so they can then in turn log into their SQLPLUS accounts. The problem is, all of the database files and software are in located in the user "oracle's" directory. This means that no one but "oracle" and root have access to these files because they are the only ones with proper permissions.
Before I put a ton of time into this, I thought I would pose these questions to the Oracle Linux community:
1) Could I enable a specific Linux group (ex. "Oracle Users") to have access to the main database folder or possibly all folders along the path? I am hoping this would allow any users I put in the group access to the folders, and essentially the SQLPLUS application. (here is ORACLE_HOME=/home/oracle/app/oracle/product/11.2.0/dbhome_1)
2) If that is not an option, will I need to make a completely new database and locate it in a location that all users can access?
I understand that my first idea may not be the SAFEST method, but this is only for a small class of students learning how to use SQL and writing queries. There will be no sensitive information at risk. This would be a quick fix until I learned more about Oracle and how to use it.
Thank you everyone.

It certainly is rather a question for the General Database forum, though I doubt you will get a lot of happy replies for such a basic question.
You can use / as sysdba OS authentication through SSH or using the server console, provided the user's account belongs to the "dba" user group. For remote connection through sqlnet you need create a $ORACLE_HOME/dbs/orapw$SID password file.
If you would like to know more about this:
Connecting / as sysdba is used for OS authentication. It ignores password credentials stored in the database and allows any user belonging to the OSDBA system group to connect to the database. Connections as sysdba will always connect to the SYS schema of the database, regardless of any username or password specified. Using OS authentication relies on the BEQ protocol, which connects to the database directly, without using the Oracle Listener process.
The "oinstall" group will give access to the database software repository. There could be different oracle home installations, each with a different oracle user/owner like "oracle_prod1" and "oracle_prod2", but both users must be able to read/write the shared oraInventory, in which case both users must have read and write access to the oraInventory directory, hence the oinstall group.

Allow user to access /edit/delete/add specific items in list

Hi
I have one custom list.
every month department head is creating some activity because of which some items are getting added in that list pragmatically.
like-
departmentID item1
item2
DEPT001 item001
item002
DEPT001 item003
item001
DEPT002 item004
item001
After that User want to edit or delete or add new entries only related to their department only.
How can allow user to edit/delete or add entries (full control) only related to his department in the same list?
How can I assign users for this?
Should I create another list having department id and user mapping?
please suggest any soln.

The flow is like,
User(Dept head/department user)will select department from drop down and clik on button to add some entries against the department.
once the entries done he just click on save button.
after some time if department head/department user want to add/edit/delete some entries against his department then he should able to view only his deapartment entries.
Also the email is generated to his manager.
So my question is how should I allow user to view his own entires only which should be available for him to add/edit/delete.?
If I create one list of department and on adding the entries against each department I will add departmentID for every entry so that I can filter them by department.
but how to allow users for those entries? If I added user for each entry and if any department user changed then I have to change his name from all entries for that department.If the entries are more than 50 or 100 then it will be very difficuelt to handle.
Also for multiple users for single department this is very difficuelt to provide access.
is there any alternate solution for it?

User cannot access redirected Documents folder, but can connect to share in Windows Explorer and access folder on server

I am in the final stages of a cross-forest migration. Users have Windows 7 workstations with redirected folders on a Windows Server 2012 box running in the old forest. User accounts were not migrated. The accounts in use have always
been in the "new" forest. One of our challenges was the large volume of data in redirected folders. I made sure users in the target forest had continued to have access to their redirected folders in the old forest and robocopied
the entire users share, copying the permissions with the files. By doing incremental robocopies, we can get a final copy done now in about six hours. The plan was simple: copy the files, do an incremental copy every night, on the night of the cutover
change the folder redirection policy Documents path from
\\oldserver\users\%USERNAME% to
\\newserver\users\%USERNAME%. The policy is configured to NOT copy user files from the existing folder to the new redirected folder. Everything was going well until I tested the policy change. After the folder redirection policy is updated
and applied, the user cannot access the private Documents folder. For example, user Chester Tester logs on as ctester. I open Windows Explorer and click the Documents shortcut. I see one subfolder, which is subfolder of Public Documents.
So I can look at Public Documents but when I click on the Documents folder (Under the Documents library link) I get an access denied error. Now for the kicker, if I open another Windows Explorer window and edit the address bar to
\\newserver\users\ctester, I can navigate the Documents folder tree and see my thousands of documents. What the ....?
I'm hoping this is something really simple to fix!
TIA

HI Vivian,
Thank you for your reply. Yes, the path in Group Policy Folder Redirection Root Path was updated to
\\NEWSERVER\users. I had planned to point this to the distributed file system, so the first used was actually
\\domain\dfs\users. To simplify things I have backed off to copying to just a normal share
\\newserver\users.
We are using BASIC folder redirection and we create a folder for each user under the root path.
We did not want the policy to move content, as we were seeing users requiring 15-20 minute logon times (or higher) after the policy is changed.
Grant the User exclusive right to Documents - Disabled
Move the contents of Documents to the new location - Disabled
Related folder settings
Video - Follow Documents
Music - Follow Documents
Pictures - Follow Documents
Now when I change the folder redirection from old server to new server I now have TWO My Documents folders in the user's redirection folder on the server. The redirected Documents points to an empty folder set. The copied folders with all user
data are there, but folder redirection refuses to recognize the original folder.
I am looking at the full view of the folder, nothing hidden, so I'm wondering how a folder can have two subfolders with the exact same name. For now, I just want the redirection to move from the old server to the new server properly. I deleted
the new My Documents folder, rebooted the user's workstation and tried again. The behavior repeats itself, i.e., a new My Documents folder is always created when the redirection policy is changed from the old server to the new server. The environment
has about 1500 users with approximately 1.3TB of data in the redirected Documents folders. OUCH!

How do I access a document, created in iPages Beta, on my iPad?

I have iCloud (Pages Beta) on my iMac.
I created a document, now I want to access that document on my iPad.
How do I do that?
JVH

Hi j.v.fromnc,
One of the advantages of having Pages in iCloud beta is its ability to share with other devices, so it is not surprising you want to be able to access it on your iPad. To begin with you will need to install Pages for iOS on the iPad.
Pages
Once the document is created in Pages in iCloud, it automatically becomes available to devices using your iCloud account. On the iPad, go to Settings > Pages and make sure that Use iCloud is on. Of course you will want to be using the same iCloud account.
See this article for further information -
Pages for iCloud beta: Sync a document across your devices
http://support.apple.com/kb/PH12887
This page also has some good resources -
Share and edit a document with others - Pages for iCloud beta Help
http://help.apple.com/pages/icloud/1/#/gil785102e55
Thanks for using Apple Support Communities.
Best,
Brett L

Allowing user to see a newly created table

Hi ,
I have created a new table tbl1 in tblspace1 and grant select , delete , insert to user1
how can i allow the user1 to see the new table tbl1 ?
kindly advise
tks & rdgs

SQL>
SQL> SHOW USER
USER is "ADMIN"
SQL>
SQL> CREATE TABLE TEST AS SELECT * FROM TAB;
Table created.
SQL> GRANT SELECT,INSERT,UPDATE ON TEST TO MYTEST;
Grant succeeded.
SQL> CONN MYTEST
Enter password: *******
Connected.
SQL> DESC ADMIN.TEST
Name Null? Type
TNAME NOT NULL VARCHAR2(30)
TABTYPE VARCHAR2(7)
CLUSTERID NUMBER
Cheers

User Access- EP must allow user to login only once

Hi,
I have requirement similar to yahoo messanger.
In yahoo messanger you can only login with single user id only once. i.e if you try to login once again with the same user id in yahoo messanger it will noe allow to login.
the same functionality i need in EP.
user must login into EP with single user ID only once.
how can we do this??
please provide some documentation or steps on this
regards
srinivas

Sri,
It sounds like you need a custom logon module. There is no configuration that can be done in the portal to make this happen in the ume. Here is a starting point for customizing the login module...
http://help.sap.com/saphelp_nw70/helpdata/en/3f/1be040e136742ae10000000a155106/frameset.htm
One way it could be done is:
1. Set up a an LDAP for your users
2. Create a custom login module to authenticate the user credentials in the LDAP, then in the login module after a successful authentication, lock the account.
Regards,
Tom

Create Roles to allow users to see only what they have to see

Hi everyone,
I created a Menu using Forms 6i and I would like to know the steps to create a role and then assign those roles to my menu so users can only see the programs they use and not what the administrators are going to be using like some options under one of my menu called maintenance.

So you mean that I have to open Module Roles under Menu Security and write a name for each role on that small window that appear? For example I want a role to be called SHOW_MENU then I type that name on that window and that's it?No, thats just the definition that this role is relevant for the menu. In the next step, you have to assign that role to every menu-item which should be accessible with the role.
After that do I need a special command on Oracle to assign the user that role and tell the database that I want that user just to see that menu item?Do don't tell the database anything about the menu, the database doesn't even know what a menu is. You assign the role to a database user, and then forms checks which roles are assigned to the connected user and with that information checks, which of the menuitems should be shown to the user.
The command to grant a role to a dbuser is
GRANT <ROLENAME> TO <USERNAME>;

Allowing user to access only documents created by him.

Similar Messages

Maybe you are looking for