Assign application to user

I have a workspace with multiple applications.
How do i control which application a user logs into?
For example: i have an order entry application and an inventory control application. I want user A to go to the order entry app., and user B to go to the inventory app. whenever they log in.
Right now, after having created the users, when they log in, all they get is the htmlbd welcome page with out the
Application Builder, SQL Workshop, Data Workshop, and Administration buttons.
I guess somehow i need to direct them to my custom login page?
Christoph

Christoph,
Generally speaking, the applications you build for end users should be completely separate from the HTML DB development environment in terms of the authentication and authorization mechanisms they use. There is no need for end users to log in to the HTML DB development environment in order to run your applications.
Each application should have a home page URL that you communicate to users, e.g., the home page for Order entry might be ../f?p=ORDER-ENTRY:1, the home page for Inventory Control might be ../f?p=INV-CONTROL:1, etc., where you use application aliases as shown or numeric application IDs. You will have created an authentication scheme and a login page in each application (see http://otn.oracle.com/products/database/htmldb/howtos/how_to_change_auth_method.html and http://otn.oracle.com/products/database/htmldb/howtos/how_to_create_login_page.html), such that when a user visits the home URL of an application, the user is initially redirected to the login page in that application. After authentication, the user is shown the page originally requested. How your login page authenticates the user is a choice you must make (custom tables, LDAP, HTML DB developer accounts, SSO). Of course, applications that use a Single Sign-On method won't use internal login pages, but users would still access different applications by using URLs to each application's home page.
In a development/demonstration environment, it is often convenient to have small numbers of users authenticate to your applications (using login pages in those apps) using the HTML DB developer account repository. During this phase, account creation/maintenance chores are your problem. For production deployment, this is not recommended because of the numerous security and administrative issues attendant to user account management involving a local user repository within a larger IT environment.
Your application design should also address the problem of authorization, i.e., which authenticated users are allowed to use which applications and which components within each application.
Scott

Similar Messages

APP-FND-01929: This responsibility has already been assigned to this user

Dear All,
While adding a new responsibility in the User Screen, I am getting the following Error:
APP-FND-01929: This responsibility has already been assigned to this user. Please eneter a different responsibility.
But in the list of responsibilities this particular responsibility is not added before..
What will be the cause of this problem..
How can I overcome this situation.. Please update...
Many Thanks in advance.....

Hi,
As per your other thread, I believe you have restored couple of tables from your backup and this is not supported. In order to have everything running properly, then a full database restore should be done.
Unable to login to application..
Unable to login to application..
Regards,
Hussein

Assigning roles to users by code without SecurityAdministration permission

Hello!
I'm a begginer working with VS Lightswitch and all the ASP.NET stuff.
Here is my problem:
I have an application where users follow a certain hierarchy: we have employees, Area Managers, Department Managers, ...
When creating a new employee he will be assigned a role automatically according to his level on the hierarchy: employee role, area manager role, and so on...
None of the application users is going to have the SecurityAdministration privilege, so how could I handle this by code?
The only thing that I've tried until now is trying to access this data through SecurityData, but it's not possible without the SecurityAdministration permission...
I have read a little about creating custom membership, role and profile providers but I'm not sure if this is gonna work in my case, and if it's neccesary to do it this way.
Any help will be appreciated! :)

It was just as simple as addind this code into a method that runs on the server side (_deleted, _deleting, _inserted, _inserting, ...):
if (!Application.Current.User.HasPermission(Permissions.SecurityAdministration))
Application.Current.User.AddPermissions(Permissions.SecurityAdministration);
And then do whatever that needed the SecurityAdministration permission to get done.
Once the method finishes, the permissions return to their original values.
The article where I get the info:
http://blogs.msdn.com/b/lightswitch/archive/2011/04/07/how-to-elevate-permissions-in-server-code-ravi-eda.aspx

Assigning roles to users programmatically

Hi,
I want to programmatically create roles, assign roles to users etc.
I saw at this thread
ADF Security Policy Store
the folowing scriptlet by Frank Nimphius
try {
IdentityStore idstore = JpsCommonUtil.getValidIdStore("idstore.xml.provider").getIdmStore();
try {
UserManager userManager = idstore.getUserManager();
RoleManager roleManager = idstore.getRoleManager();
Role adminRole = idstore.searchRole(Role.SCOPE_APPLICATION,"admin");
// create user
//TODO check for empty username and password
User newUser = userManager.createUser(this.username,this.password.toCharArray());
roleManager.grantRole(adminRole,newUser.getPrincipal());
} catch (IMException e) {
// TODO
} catch (JpsException e) {
// TODO
return null;
this is a TP3 scriptlet, is it still working on the 11g production?
I try it and i get a JpsException
oracle.security.jps.JpsException
at oracle.security.jps.internal.common.util.JpsCommonUtil.getValidIdStore(JpsCommonUtil.java:1004)
do I have to replace "idstore.xml.provider" with something else depending on my configuration?
thanks
Tilemahos

Hi Frank thanks for the answer,
I check this functionality at WLS embeded LDAP and I shaw your "How-to configure OID for authentication in WebLogic Server" post.
I manage to add users and assign them roles that i created at my application.
But what if I want to have a super user that can create new roles and assign them member roles?
eg.
Developer created roles (policy store):
accessPage1 ( granted all the necesery principals to access page1 )
accessPage2 ( granted all the necesery principals to access page2 )
Super user created roles
Role1 member roles :accessPage1,accessPage2
If i want my application to have that functionallity i must create roles programmatically wont I?
If there another way?
By the way I followed the advices at the following useful links
Chris Muir: http://one-size-doesnt-fit-all.blogspot.com/2008/12/configuring-wls-with-ms-active.html
Frank Nimphius's How-to configure OID for authentication in WebLogic Server
Edwin Biemond's Using OpenLDAP as security provider in WebLogic
Andrejus Baranovskis: Practical ADF Security Deployment on WebLogic Server
And I manage to add users of the Microsoft LDAP at the WLS
but I could't mekae them group members of my application groups (roles)
is this possible?
Thanks

Query on using Spaces feature to assign applications to spaces

I like the new Spaces feature, having been a user of VirtueDesktops before.
I have an issue with assigning an application to a particular Space.
The instructions from Help are below. I was able to do this for 4 applications, which seems to be as many as fit into the window available for listing them. Then, I hit the "+" to add other applications that are already running. When the pop-up menu appears, it does not list those applications (it does list Finder and the System Preferences that is running). So I go ahead and pick the application off the list from my Applications/ directory. It doesn't then appear in the list of applications in Spaces so that I can assign it to a particular space.
I assume that there isn't a limit to the number of applications I can assign in this way. Or is there a limit of 4.
In addition, when I use the Help feature on the Spaces assignment preferences panel, this text appears:
"To choose a space for the application, click the current space and choose from the pop-up menu."
However, it is not clear what "click the current space" means. One of the little numbered box images for the spaces that I have? Nothing happens when I click them.
Thanks for help.
(Optional) To assign an application to a particular space, click the Add button and choose the application.
■
If you want the application to always open in a particular space, click the pop-up menu and choose the number for the space you want.
■
If you want an application to always be available, no matter which space you’re in, open the pop-up menu and choose Every Space.

You cannot add the same application you already assigned to a Space.
When you click the + sign, the pop-up menu shows the running applications which have not been assigned to a Space. If an application has been assigned to a Space, it will not be shown in that menu because the System Preferences/Expose/Spaces preference pane is used only for assigning applications to Spaces. If it is already assigned, there is no need to show it because it cannot be assigned to another Space. In that menu if you select “other” it will open your Applications folder, but any apps that have been assigned (and others that are not applications) will be grayed out. Perhaps what you are trying to do is assign the same application to two different Spaces. This cannot be done with the virtual desktop in Leopard, Spaces.
You said you had experience with other virtual desktops. Those often let the user assign an application to two or three or more desktops. Spaces does not allow that. An application can be assigned to one Space or all Spaces, but not anything in between.
I have interacted with other users who have experience using other virtual desktops and see this as flaw in Spaces. Perhaps it is. I have not worked with other virtual desktops. But this is how Spaces operates as a virtual desktop: an application can be assigned to one Space or all Spaces, but not 2, 3, 4 or any other number.
If you see this as a big drawback with Spaces, you should notify Apple. I don’t remember the website for reporting bugs and suggestions, but you should be able to find it on these forums.
If you are trying to navigate to the application running in Space 5, hold down the Control key and press the number 5 key. If you want to move the application in Space 5 to an adjacent Space, grab a window of the application in Space 5 and drag it to the any of the four edges of that window and it will switch to that Space. However, if you quit that application and open it again, it will open in its assigned Space, Space 5.

Accessing Work Items assigned to other users from end user page

Hello Experts,
We are using Sun IDM 6.0 SP1 at our client place. Most of the applications integrated with IDM are manually provisioned, in the sense, once after all the necessary approvals are received the request will be assigned to a group of provisioners, they will manually connect to the requested application and create the account in native system. There are more than 100 such provisioners in the organization.
Current design is to assign a work item to all the provisioners (like Multi approval) and once a provisioner assigns the request to himself then the corresponding work item will be taken out from other provisioners approval queue. These provisioners login to end user page of Sun IDM to access their approval queue as only the end user page is SSO enabled.
Because of the large number of requests in the system (more than 50k) and each request having 100 work items, the number of work items in the system is huge and thus the performance of the system is very poor so we are working to change the design to bring down the number of work items in the system.
Customer is not convinced to have a dedicated person who can get all these work items in his queue and assign it to the appropriate provisioner, they are looking to have a solution something similar to the current one in which all the provisioner can see all the requests in the system and they can pick from it and assign to them.
So we are thinking to create a generic id in the system and assign all the work items to that id, and make changes to the “end user work items list” file so that all the provisioner can see the work items that are assigned to them as well as that generic id.
But for some reason I’m not getting the work items assigned to other users in the end users page. I have tried assigning all the capabilities to logged in user and tried some code changes in “end user work item list” page.
Please share if you have any sample code which can list the work items assigned to other users in end user page. Also please let me know if there is any better alternate to this problem.

Hi,
There is a option to find and get other user's workitems. Please check the attestation and remediation tab. Use the form portion from attestation page and add it in the Work item list form. This will enable to the user to search for another user's workiteams and assign it to him/her manually. (The user needs to be assigned proper admin rights)
To get all the workitems, in the system, you will need to query the repository for all the workitems.... but not sure it will be a good idea in your case as the volume is very high.
Hope it helps
Regards
Arjun

How to assign profiles at user level ?

hello every body.....i have created 2 users say x , y
and i have assigned them general ledger responsibilty.....
.at site level profile Gl set of books name is vision operation..
.now i have assigned Gl set of books profile to user x at user level
as vision china...and to user y as vision germany.....when i login with
different user name with gl responsibilty ......after navigating
to----journal-->enter--->new journal----for both users iam getting the
same currency which is at sit level...i thought for x user the currency
will be china currency
and for y user it will be germany curreny which i hav assigned at user level....
please help me regarding this.......
thanks and regars
imran

Hi,
i have assigned it at user level then why iam i
getting the currency code of site level ?Did you user to logout and login again after setting the profile option at the user level?
What if you set this profile option at the site/application/responsibility level, can you reproduce the issue then?
Thanks,
Hussein

How to realise a point track application with user-defined original point?

hi,
I am developing a simple point track application, it is not the same as the traditional mouse cursor tracking problem and i get really confused.
there are two pictures to describe my application：
the first one descirbes the default state of my application：
1.red circle is the point that user can move;
2.white cross is the original point;
3.blue circle is the range of red circle motion
the second one describes the track process of my application：
1.user can move the red circle with a click of mouse button in any place within blue circle;
2.application should show coordinates of red circle relative to white circle in real time;
3.once user release the red circle(or the button of mouse), the application should return to its default state.
I realy do not know how to realise the key parts of this application, like showing a circle in panel and connecting the points within it to the labview code? can anybody give me some suggestions? thanks a lot
Attachments:
default state.png ‏10 KB
action state.png ‏12 KB

Attached is a very rough implementation of what you're looking for. Add a "draw (white) line" after the "draw circle" function to make the crosshairs persist when the circle is near the center. Prob want to delete the crosshairs from the blue circle picture (currently contained in a constant) to avoid drawing them twice and them not quite lining up. All of the constants are empirically determined and need slight adjustments (e.g. centering of the red circle when mouse is up, etc.). They will need further adjustment if you resize the blue circle picture.
Not sure what you mean by connecting the points within the LV code. I suspect you're using the eyeball to drive an XY stage or such and need to use the red circle coordinates to moderate the travel speed?
Attachments:
Untitled 1.vi ‏25 KB

No portal roles are assigned for this user.If this problem persists, contac

I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
iam using abap+java enginee how config in abap enginne ,iwant which role to assign j2ee_admin user
i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO but it show same problem
please help me..
Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

Balu,
Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
Check this thread in [here|J2EE Failed to start , after changing UME datasource;.
Good Luck!
Sandeep Tudumu

How can we see previleges assigned to all users using database query

I am using the follwoing query to see previleges assigned to all users , but the suprising thing is that it shows GP_APP_ID as null for a large number of user , even though in discoverer administrator I can see the previleges assigned to those users. I do not understand why it does that. Can someone please help so that I can see the previleges of all users
select unique EU_USERNAME, decode (GP_APP_ID ,1000, 'Desktop / Plus Privilege (U)',
1001, 'Create / Edit Query (U)',
1002, 'Item Drill (U)',
1003, 'Drill Out (U)',
1004, 'Grant Workbook (aka Sharing) (U)',
1005, 'Collect Query Statistics (U)',
1006 ,'Admin Privilege (A)',
1007, 'Set Privilege (A)',
1008, 'Create / Edit Business Area (A)',
1009, 'Format Business Area (A)',
1010, 'Create / Edit Summaries (A)',
1011, 'Not used as far as can be determined',
1012, 'Schedule (U)',
1013, 'User is never required to schedule workbooks (U)',
1014, 'Save workbooks to database (U)',
1015, 'Managed scheduled workbooks (A)',
1016, 'to 1017 Not used as far as can be determined',
1018, 'Change Password',
1019, 'to 1023 Not used as far as can be determined',
1024, 'Create Link (U))') from
EUL5_ACCESS_PRIVS A,
EUL5_EUL_USERS U
where A.AP_EU_ID=U.EU_ID
order by EU_USERNAME
thanks

Hi,
This is probably because the business area security is stored in the same table. So you will probably find that where GP_APP_ID is null then GBA_BA_ID holds the value of the business area. You should change your query to just select where GP_APP_ID IS NOT NULL.
Rod West

Word 2007 - Save as Pdf gives error - This file is in use by another application or user

I have MS Office 2007 Small Business.
For months I have been using the "Save as PDF/XPS" option to save my word documents as PDF files.
All of a sudden, when I click on the publish button within the "save as PDF dialog", I get the error:
"This file is in use by another application or user."
- I have tried creating a new word document and I still get this error when I try to save-as pdf.
- I have tried opening a document that previously was able to be saved-as-a-pdf, and it no longer works either.
- I have tried saving from other office applications (excel, powerpoint) that also get errors now.
I have not personally installed any new software that I recall between when this worked and stopped working for me.
As far as I can tell there have been no updates explicitly for save-as-pdf in office.
Is anyone else seeing this problem all-of-a-sudden?
Thanks.
jlk

I just encountered this problem while trying to save a pdf from Excel 2007. I had recently updated to Adobe Reader 9.1.
I received the same error message you're reporting here when I went to Word 2007 and tried to save a pdf file from it as well.
I uninstalled Adobe Reader 9.1.
Reinstalled the Office 2007 pdf plug-in
Successfully created pdf files from word and from Excel (which is what I needed to do in the first place).
I then reinstalled Adobe Reader 9.1 so I could read the PDF files I had just created in Excel and word.
I then tried to create pdf files from word and excel. Error messages are back and I'm unable to create pdf's from word or excel.
So.. why does Office 2007 pdf plugin not work when Adobe Reader 9.1 is installed?
Frankly I'm getting tired of uninstalling Adobe Reader 9.1 every time I need to create a pdf file in Word or Excel.
Bry

Problem in assigning roles to users

Hi
I created Role in EP, which i want to assign to the users. i assigned that role to user. the user i not able to access the particular iviews. i attached some R/3 transactions iviews to that role. it says unable to lookup the system or system alias. when i assign that role to me, i'm able to access that iviews(R/3).
i have superadmin role permissions.
what default roles and permissions need to assign for users.
suggest me
thx
pradeep

Hi Pradeep,
In SP9 apart form creating a System, we need to assign permissions for users.
Follow this path:
System Administration -> Permissions -> <select your System in Portal Content> -> Open Permissions <on right click>. This would take you to the Permission Editor.
Here you need to add the user and assign permissions.
Please check this and let me know if its working.
Awaiting Reply.
Warm Regards,
Ritu

'Business Partner Assigned to the User' Access Sequence don't work

Hello.
I use access sequence 0008 (Business Partner Assigned to the User) in my Partner determination procedure. But it doesn't work. Corresponding Partner field in service document is empty. But I need that BP linked with logon user filled it.
I've made the same settings on another incstanse of SM and it's work. And what the difference between I don't understand.
Edited by: Dmitry Udot on Feb 13, 2011 2:31 AM

Sorry, but I don't quite get it. My purpose is to have 9 policies all working all the time (they did at in one version of firmware). I don't care about time entries for these. All 9 policies are full of keywords and websites to block webpages related to porn to one degree or another. The 10th policy is time-based to prevent internet access altogether for one or two computers through the wee hours of the morning. This, all in leu of having no parental controls.
Again, it would help if there was more detailed documentation on how this all works. This is the first I am aware that time settings in one policy could affect or impede the operation of other policies. How am I supposed to know this?
In any case, I appreciate your assistance and looking into this for me. But can you now tell me how to make it work so the policies will work as I want - the first 9 around the clock all the time, and the 10th one only from 1:30 am to 8:00 am (every day). Please instruct me on how I am supposed to configure this to work, and what specific settings I am supposed to enter... if it is even possible. Or is there another way of accomplishing this on my WRT54G (Rev. 2) product? Thanks.
Perry

SECATT for assigning roles to users

Hi All,
How do we make the ECATT to work for the below scenario:
Users already have roles assigned to them. We need to add a new roles to the users which can vary in number based on the users job.
A simple ECATT script that was developed to add a single role to a new user does not work in the above case and gives an error of invalid batch input. How do I create a ECATT to assign role to user who already has a set of roles assigned (number of roles assigned to users differ, so I cannot assume to train the ECATT to assign a role on line X). Is there something I am missing while the ECATT script creation?
We are doing this from a CUA and its very difficult to assume how many roles a user could have.
Thanks,
Jay

Thanks Alex for the insight. For some reason SU10 is slow in the CUA environment and I wanted to avoid it but yes I finally had to use SU10. Talking to one of our ABAPer I came to know that even in their BDC recordings they get the error which I receeived, but he changes his program to skip all the lines with data and then fill the empty line.
In CUA environment, how do we create ECATT to delete a role from many users?
Thanks,
Jay

How to properly partition separate Root, Applications, and Users volumes?

Wondering if there's an official Apple recommended method to set Applications and Users directories on different physical Volumes (be it a separate partition or separate physical drive).
The bottom of this Apple document alludes to this by stating, "Divide hard disk space into partitions and then, for example, keep your applications in one section and your documents in another."
http://docs.info.apple.com/article.html?path=Mac/10.5/en/8769.html
I'd like to do this, but there seems to be issues with symbolic linking from some of the solutions out there. Not sure if Apple has a sanctioned method that won't be incompatible with some Applications and/or future upgrades.
Thanks in advance for anybody's insight.

ArborWoody,
The concept of using separate volumes and/or drives to store system, HOME folders, applications, and even swap files separately has been debated, tested, then debated some more time and time again for many years. The findings are that, without doubt and in all realistic cases, jumping through convoluted hoops doesn't get you anything. Nothing at all.
Given the lack of any real benefit, plus the complexity of making the attempt, to do so is folly. The best advice we could give you would be to forget all about doing this, or in fact doing anything but keeping things just as they are in the default configuration of OS X.
Notice, however, that one thing I mentioned above is "HOME folders." I specifically did not mention "user data." While one's HOME folder typically contains user data, the two things are not the same. In very many cases, it is in fact beneficial to store certain types of user data on a second volume or drive. What type of data, and where it would be best to store that data, would be determined entirely by one's workflow environment and the uses to which that data will be put.
It could be that a striped RAID array is the solution that would work best for you. Or, you may instead be best served by using a mirrored RAID array. In some cases, external storage is best. In others, not so much.
One of the important issues you mention is facilitation of backup and recovery. Absolutely! The answer is Time Machine. Or, perhaps Time Machine and the maintenance of a "clone" (not something I do, but popular nonetheless). But what does Time Machine do for us? Simple. It is designed to allow us to quickly and easily recover from potential disaster, up to and including the loss of a startup drive or even an entire machine (this second possibility assumes that the TM backup is stored externally or on a safe drive, of course).
What can we do to enable Time Machine to do its job most effectively? This, too, is pretty simple. Just keep our startup volume as "slim" as we can. Not by moving HOME folders or applications, but by common-sense file management, tailored to the specific usage to which this machine is dedicated. Perhaps more importantly, more pertinent to this thread, moving one's applications or HOME folders off the startup volume actually interferes with Time Machine's ability to do its job. For an example of the effects of this interference, just take a look at this fun thread.
Scott

Assign application to user

Similar Messages

Maybe you are looking for