Assign User to public sharing grouosps

Hi all,
I have to assign a large number of users to a public sharing group. I wanted to do this via import/update, but I miss the "Primary Group" field in the mappings. Is there a way to perform this task atomatically?
BR
Michael

Hi Bob,
additional last questions...
I have some problems to find sth. on visibility in reports for groups. As I do have owner access on group records: Are these records treated as owned records in reporting, too?
Am I right, that it is not possible to use groups on SR records (according to bookshelf)?
In total we can state that there is no benefit in using groups vs. books of business?
Thank you, your help is very much appreciated!
Best regards
Michael

Similar Messages

Easiest Way to Share Files Between Users? -- Public, Shared, Drop Box.. .

We have five family members (and so five user accounts) using our Mac. What is the easiest way to copy files between / share files with / ... files from one user to the other?
Shared ... Public ... Drop Box ...
I do this so infrequently that I forget -- or have never figure it out properly.
Any advice would be great.
Thanks!

The Shared folder is fine, but anything a user puts there will be read-only to all other users. If other users want to be able to edit such a file they can make a copy of it and edit the copy. If you want all users to be able to edit one of your files without them having to make a copy of it first, you must change the file permissions to allow that.
There are a few ways to have new files automatically set so that others can write to them. Storing such files on an external hard drive on which file/folder ownership is set to be ignored is one way. You can also use ACLs - see this page for an example.

Unable to see assign users or groups option under a groupin Shared services

I have a bizzare issue related to Shared services.
In Application 1 (on PROD env), after I select the group, right-click and go to properties, under "group members" and "user members" tabs, I do not see the options to assign access to any of the existings groups (we have about 50+ groups). I can only view the existing users/groups, even though I have been given admin/proviosioning rights, while the other admin can assign access to the same application.
While for Application 2 (on DEV) I am able to see all these options and I am able to assign users and groups to any of the groups. I do not see them as a browser issue, as I have opened both these links on the same IE window, but on different tabs.
Unfortunately, I can't test App1 on TEST/DEV, as we do not have its copy on here, it is all on PROD and App2 is only on DEV.
Any ideas?
Thanks,
Paul

I would of thought it was provision related, can you try setting up another user as a test with the correct provisioning such as provisioning manager of the different product areas and see if the new user works.
If it does then it points an issue with your account or the way it has been provisioned.
Cheers
John
http://john-goodwin.blogspot.com/

Shared Services 11.1.2 Unable to remove assigned user from a security group

In Shared Services 11.1.2 - trying to remove a user from the assigned users list of a security group. Initially, I am able to remove the user and the assigned users total decreases by one - but when I relaunch the group properties - this user is still in there? The change does not hold. Any suggestions would be appreciated - thanks,
Paul

Hello Paul,
Not sure if this is related to yours, but it might be worth having a look at the following articles on Oracle support --
External users in EPM Shared Services (e.g. MSAD users) cannot be removed from Native groups if they have multiple IDs in the external user directory. [ID 1526569.1]
Users from External User Directories Cannot be Removed from Native Groups [ID 1272309.1]
Thanks,
hyperionEPM
Please mark answers as correct or helpful for others to find them easily.

Convergence, still no public shared folders!?!

Is Convergence supposed to support public folders or not. I have set public folder up and they work brilliantly in Thunderbird. But not having them in Convergence is disappointing. Assuming convergence uses IMAP behind the scenes there's no reason it shouldn't work along side private shared folder.
Quote from Convergence Product Features from way back: [http://wikis.sun.com/display/CommSuite6RR072208/Sun+Convergence+Product+Features]
Q. Does Convergence support public folders?
A. Yes, public folder support is the same in Convergence as it is for
IMAP, Messenger Express, or Communications Express. You need to
configure a special user as the owner for such folders. Users then need
to subscribe to such folders to view them.
For more information on public folders, see [To Create a Public Shared Folder|http://docs.sun.com/app/docs/doc/819-4428/fxbuv?a=view].
It doesn't work in Comms Express, and it doesn't work in Convergence. How the heck does a major feature get into a product feature document like this when it's clear there is no intention for the feature. Pointing me to a guide to enable a feature which does not exist. Who writes this documentation.

ethoms wrote:
Is Convergence supposed to support public folders or not.I see no reason why they shouldn't be supported.
I have set public folder up and they work brilliantly in Thunderbird. But not having them in Convergence is disappointing. Assuming convergence uses IMAP behind the scenes there's no reason it shouldn't work along side private shared folder.A quick test shows there is a problem at the Messaging Server level related to public shared folders. This is preventing public shared folders from showing in the "Subscribe to Folder" interface and being displayed when they have been subscribed to using another IMAP client (e.g. Mozilla Thunderbird):
bug #6907767 - "listfolders.mjs doesn't return Public shared folders"
bug #6907765 - "list.mjs doesn't return Public shared folders"
It doesn't work in Comms Express, and it doesn't work in Convergence.There are known bugs preventing it from working with Communications Express as we have discussed previously. Why have you not raised these bugs with Sun support to have them fixed?
How the heck does a major feature get into a product feature document like this when it's clear there is no intention for the feature.It seems clear to me that other customers do not consider public folders as a "major" feature otherwise this issue would have been raised before now.
Regards,
Shane.

Assign user external dir to group using MaxL

Hi
I have my essbase security sync with Shared services.
Now i want to assign user to groups using Maxl
Groups exist as Essbase native Groups
Users exist as corporate directory and are NOT native users
Now when i try to execute the following statement i get error saying 'user does not exist'
Alter user 'username@corporatedir' add to group 'nativegroup';
Is it not possible to assign users from external directory to native groups using Maxl?

Not specifed your version.
For 9.3.1 refer to page 103 for details. http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
The file looks like
#group_children
id,user_id,user_provider
myNativeGroup,User1,myProvider
myNativeGroup,USer2,myProvider
myNativeGroup,nativeUser3,Native Directory
For better understanding, add one external user to a native group manually in shared services and then export using the utility.
Then the exported file format can be used for your import.
Hope it helps.

Multiple Users One Computer sharing photo's

Hi,
I have two user's on my computer, both with different log on's etc. How can another user look at my photo's that are currently in iPhoto with out having to move folders around.
Can this also be done with iTunes so that we can share music without having to make duplicates?
Thanks.

Hi Fancy,
The first group of links will tell you how another user can view your iPhoto Library.
SHARING IPHOTO LIBRARIES
Sharing libraries between users on the same local network
You can also share a library on the same machine between users the same way.
Sharing libraries between users on the same machine...
-both users must have sharing enabled in their iPhoto Preferences
-both users must be logged in and have iPhoto running
-Remember that you can only view the other library. You can't edit the photos or play the saved slideshows or view the made books or burn them to CD or DVD. The books and slideshows will show up as an album. You can play that album as an "on the fly" slideshow. You can drag images from the sharing library to your library in the source column to import them to your library. You can then edit, add to albums, books, slideshow, etc.
Sharing links from Apple....
Sharing your photos between computers
About shared photos
Turning off photo sharing
Looking for shared photos
SHARING ONE IPHOTO LIBRARY BETWEEN USERS ON SAME MACHINE
You can try one of these three methods:
1- Use iPhoto Library Manager-the paid version
The documentation page will give instructions on how it is done.
2- Sharing one iPhoto library between several users on one machine
3- Share an iPhoto Library in tiger Using ACL's
4- I have also read about ShareAlike
There is no other info on the site about how it works.
I strongly urge anyone wanting to try any of the methods for sharing one iPhoto Library folder among more than one user to backup all iPhoto Library folders before attemptin anything.

Error assigning users to application Role in Obiee 11.1.1.7.0

Hello
I installed Obiee 11.1.1.7.0 both on Windows and Linux platform and after that, I successfully set Active Directory integration. I have a problem assigning users to Application Role in EM. When I'm trying to search a user on Display name, the Principal userName returned is blank and the error is : Java Null Pointer Exception
After that I install a fresh copy of 11.1.6.0. After AD Integration, I was able to assign users to Application Role. I made 11.1.1.7.0 upgrade and same error has come. I think this is a bug because same AD settings on 11.1.1.6.0 works.
The error:
ava.lang.NullPointerException
#{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException
Hide Additional Trace Information
javax.faces.FacesException: #{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:190) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:103) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1086) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:434) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:207) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emSDK.license.LicenseFilter.doFilter(LicenseFilter.java:101) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:128) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177) at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emas.fwk.MASConnectionFilter.doFilter(MASConnectionFilter.java:41) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.AuditServletFilter.doFilter(AuditServletFilter.java:179) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.EMRepLoginFilter.doFilter(EMRepLoginFilter.java:203) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.model.targetauth.EMLangPrefFilter.doFilter(EMLangPrefFilter.java:158) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.app.perf.PerfFilter.doFilter(PerfFilter.java:141) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:542) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) at java.security.AccessController.doPrivileged(Native Method) at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324) at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460) at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209) at weblogic.work.ExecuteThread.run(ExecuteThread.java:178) Caused by: javax.faces.el.EvaluationException: java.lang.NullPointerException at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:51) at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) ... 67 more Caused by: java.lang.NullPointerException at oracle.sysman.emas.model.security.DialogAdminBean$1.compare(DialogAdminBean.java:567) at java.util.Arrays.mergeSort(Arrays.java:1270) at java.util.Arrays.mergeSort(Arrays.java:1281) at java.util.Arrays.sort(Arrays.java:1210) at java.util.Collections.sort(Collections.java:157) at oracle.sysman.emas.model.security.DialogAdminBean.fetchPrincipals(DialogAdminBean.java:563) at oracle.sysman.emas.pagemodel.security.identity.EditAppRolePageModel.searchPrincipal(EditAppRolePageModel.java:496) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.el.parser.AstValue.invoke(Unknown Source) at com.sun.el.MethodExpressionImpl.invoke(Unknown Source) at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:46) ... 68 more
Any suggestion?
Thx
Gabriel
Edited by: Gabbriel on Apr 23, 2013 10:46 PM

We received from Oracle a work-around of this problem.
It seems to be related to the virtualize flag set to true. I f you set it to false the problem disappear (it works for me).
(rif. http://docs.oracle.com/cd/E28280_01/bi.1111/e10543/privileges.htm#BABDCJBH)
There's an open BUG on this problem: Bug 16808088 - 11G JAVA.LANG.NULLPOINTEREXCEPTION ADDING USER TO ROLE AFTER UPGRADE TO 11.1.1.7.
Hope this works.
S.

Error while assigning user for release approval path for payment release

Hi everyone,
     I am trying to assign user for payment release in SPRO. I have defined upto 'Define relevant document types for release for payment', after that while assigning user in terms of position for release and save it, i am getting error 'Program error: ASSIGN with length 0 in program "MP120800" '.Because of it i can t proceed further.
The data in details below;
1. Create Workflow Variant for Release for Payment
   1000     SAP
2. Assign Company Code Workflow Variant for Release for Payment
1000     1000     SAP
3. Define Release Approval Groups for Release for Payment
0001     Vendor A
0002     vendor B
0003     Vendor C
0004     G/L accounts
4. Define Release Approval Paths for Release for Payment
0001     Vendor high
0002     Vendor middle
0003     Vendor low
0004     G/L accounts
0005     Other
5. Assign Release Approval Paths for Release for Payment
1000     KZ     0001     0001
1000     KZ     0002     0002
1000     KZ     0003     0003
6. Assign Release Approval Procedure for Release for Payment
1000     0001     20,000.00     KES     1     WS10000052     WS00400011
1000     0002     50,000.00     KES     2     WS10000052     WS00400021
1000     0003     1,000,000.00     KES     3     WS10000052     WS00400022
7. Define Relevant Document Types for Release for Payment
     1000     KR
1000     KZ
8. Define Users with Authorization to Payment Release
1000     0001     1     20,000.00     KES
1000     0001     2     50,000.00     KES
1000     0001     3     100,000.00     KES
here i have selected the option and tried to create Orgobject, i am getting following error
Program error: ASSIGN with length 0 in program "MP120800"
If any corrections in the definitions, Please let me know.
Thanks in advance!!

Hello,
Please start the report RSWOGIND, set also the checkbox "generate all
ObjTypes from new". This should solve the problem.
Best regards, Hana

Error while assigning user through users_gen t code

Dear Experts,
While assigning user to the org structure,i am getting below error message.Please guide me.
many thanks

Hi Ganesh,
Thank you for the update,i was on leave.I could not update the issue.
Issue has been resolved,issue is due to the last name is not maintained for the user in SU01 then user trying the assign to org through users_gen t code.
Then issue raised.
Thank you.

How to set "Allow external users who accept sharing invitations and sign in as authenticated users" programmatically?

Sharepoint 2013 online/office 365.
I am creating site collection programmatically using sharepoint Auto hosted app.
Now i want to set "Allow external users who accept sharing invitations and sign in as authenticated users" programmatically after site collection creation.
Is it possible through code? If yes please let me know how to do it?
Najitha Sidhik

For SharePoint 2013 Online, check below links:
http://office.microsoft.com/en-us/office365-sharepoint-online-small-business-help/manage-sharing-with-external-users-HA102849862.aspx
http://office.microsoft.com/en-us/office365-sharepoint-online-enterprise-help/manage-external-sharing-for-your-sharepoint-online-environment-HA102849864.aspx
https://www.nothingbutsharepoint.com/sites/eusp/Pages/SharePoint-Online-2013-Sharing-with-External-Users.aspx
http://blogs.office.com/2013/11/21/sharepoint-online-improves-external-sharing/
Please ensure that you mark a question as Answered once you receive a satisfactory response.

Assign User Profiles and Web Interface Transactions to Users

Hi EM Gurus,
Has anyone worked with not standard scenarios in SCEM?
They are working well but I can't access them on interface web.
In selection page (search page after logon), where choose tracking scenarios, only standard scenarios appear although I have assigned both scenarios to the user and made same configuration; Assigned and Defined Web Interface Transactions, Configured Fields for User Profiles, Defined User Profiles, Assigned User Profiles and Web Interface Transactions to Users.
But only Standard Scenarios appear as choice of tracking scenarios that are displayed to the user as a dropdown box on the selection screen after logging on to the Web interface.
Has anyone accessed not standard scenarios on interface web??
Help, please!
Thanks a lot.
Rodrigo Freitas

Hello Rodrigo,
if you have assigned the scenarios to your user in transaction /SAPTRX/UCUSER you must go to the admin page and reload the profile manager.
/admin in the URL of the WCL instead /ehsearch.
Afterwards you should see them also in the drop-down box.
Best regards,
Steffen

Assign users to virtual organisations?

Hi,
I'm new to IDM and trying to work out how to use it effectively.
I have an LDAP directory with I've made a directory junction to to create virtual organisations mirroring the directory structure.
However, when I import users from resource they all go into the Top organization and do not appear under the virtual organization.
how can I fix this? I read somewhere that the Identity Template is used to assign users to organizations? Assuming I have mapped attributes to mail, ou and ouid is the following Identity template correct?
mail=${mail},ou=${ou},ouid=${ouid},dc=example,dc=comOr am I missing something entirely?
thanks for your help,
Toby.

You need to create a form and assign it to the reconciliation process. In the form, you need waveset.organization set to where you want the user objects placed. By default, waveset.organization is set to just "Top". You can get the DN, parse it into a list and write the xml code to use the list to place each in a different virtual organization.
Start off simple, say create a container called Top:newusers. Take a copy of Empty Form and save it as orgEmpty Form or something. Define a field waveset.organization and just set its value to "Top:newusers". Then in the resource, set the reconciliation form to your new form.
Try this, once you see new ids show up in Top:newusers, you then can enhance the logic to be more sophisticated in placing objects. That is, parse the DN into a list and walk the list for a IDM waveset.organization value.
BTW, a good question to ask prospective IDM so called experts. Of 8 or so, I only met one that new how to do this efficiently.

How to create groups and assign users thru program

Hi,
I am planning to create groups by program and assign users to them based on some condition.Once users are assigned to those groups we need to change the Language value for those users in User profile
We are using Central User Administration.
Please let me know the solution
Thanks
Bala Duvvuri

probably you can use this code to create a group
IGroupFactory groupFact = UMFactory.getGroupFactory();
IGroup group = groupFact.newGroup(wdContext.currentContextElement().getGroup());
group.commit();
for this required com.sap.security.api.jar

Performance of view wwsbr_all_folders very bad when user is public

I have some routines that build navigation components based upon selects from the view
wwsbr_all_folders
They work great after a user is logged in, but if the user is public, the performance is extremely slow. It is so slow that the page often times out and it affects other users on the site.
Is there a way to improve the performance of this view for public access?

I was able to cut the time a select takes for public to 1/3 of what wwsbr_all_folders by doing the following:
create or replace function return_1_not_logged_on return number
is
retval number(1) := 1;
begin
if wwctx_api.is_logged_on then
retval := 0;
end if;
return retval;
end;
and add the following line to the where clause of wwsbr_all_folders (I actually created another view, pg_v);
AND c.ispublic = decode(return_1_not_logged_on, 1, 1, c.ispublic)
-this is not a perfect answer, but it won't give access to pages that are public due to inheritance, only due to the checkbox on the page itself.
Still it has now gone from about 9 seconds to about 3 seconds for a public user, but a logged in user takes virtually no time (set timing on displays Elapsed: 00:00:00.00);
So, digging a little deeper, I see that wwsbr_all_folders is based on WWV_USER_CORNERS which is a view 2 pages long and has three unions, plus multiple calls to security packages.
Portal must do something else as it decides whether to display a page to a public user. Does anyone know what that might be?

Assign User to public sharing grouosps

Similar Messages

Maybe you are looking for