Assigning Users to a Role in a BPM Task
Hi,
Is it necessary to have User Admin access to add Users to a Role in a BPM Task ?
Is there any work around to it ?
Regards,
Utsav
Hi Utsav,
Yes you require User Admin role to search and add UME Users.
A workaround can be using the 'Use an Expression' :
User: getPrincipalByUniqueName(string uniqeName,"user")
Role: getPrincipalByUniqueName(string uniqeName,"role")
Regards,
Unni
Similar Messages
-
Error assigning users to application Role in Obiee 11.1.1.7.0
Hello
I installed Obiee 11.1.1.7.0 both on Windows and Linux platform and after that, I successfully set Active Directory integration. I have a problem assigning users to Application Role in EM. When I'm trying to search a user on Display name, the Principal userName returned is blank and the error is : Java Null Pointer Exception
After that I install a fresh copy of 11.1.6.0. After AD Integration, I was able to assign users to Application Role. I made 11.1.1.7.0 upgrade and same error has come. I think this is a bug because same AD settings on 11.1.1.6.0 works.
The error:
ava.lang.NullPointerException
#{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException
Hide Additional Trace Information
javax.faces.FacesException: #{viewScope.emas_pagemodel_security_EditAppRole.searchPrincipal}: java.lang.NullPointerException at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:118) at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:190) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:103) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361) at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96) at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:97) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1086) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:434) at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:207) at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emSDK.license.LicenseFilter.doFilter(LicenseFilter.java:101) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:128) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271) at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177) at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.emas.fwk.MASConnectionFilter.doFilter(MASConnectionFilter.java:41) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:180) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.AuditServletFilter.doFilter(AuditServletFilter.java:179) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.EMRepLoginFilter.doFilter(EMRepLoginFilter.java:203) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.model.targetauth.EMLangPrefFilter.doFilter(EMLangPrefFilter.java:158) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.core.app.perf.PerfFilter.doFilter(PerfFilter.java:141) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.sysman.eml.app.ContextInitFilter.doFilter(ContextInitFilter.java:542) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) at java.security.AccessController.doPrivileged(Native Method) at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:324) at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:460) at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:163) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209) at weblogic.work.ExecuteThread.run(ExecuteThread.java:178) Caused by: javax.faces.el.EvaluationException: java.lang.NullPointerException at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:51) at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:102) ... 67 more Caused by: java.lang.NullPointerException at oracle.sysman.emas.model.security.DialogAdminBean$1.compare(DialogAdminBean.java:567) at java.util.Arrays.mergeSort(Arrays.java:1270) at java.util.Arrays.mergeSort(Arrays.java:1281) at java.util.Arrays.sort(Arrays.java:1210) at java.util.Collections.sort(Collections.java:157) at oracle.sysman.emas.model.security.DialogAdminBean.fetchPrincipals(DialogAdminBean.java:563) at oracle.sysman.emas.pagemodel.security.identity.EditAppRolePageModel.searchPrincipal(EditAppRolePageModel.java:496) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at com.sun.el.parser.AstValue.invoke(Unknown Source) at com.sun.el.MethodExpressionImpl.invoke(Unknown Source) at org.apache.myfaces.trinidad.component.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:46) ... 68 more
Any suggestion?
Thx
Gabriel
Edited by: Gabbriel on Apr 23, 2013 10:46 PMWe received from Oracle a work-around of this problem.
It seems to be related to the virtualize flag set to true. I f you set it to false the problem disappear (it works for me).
(rif. http://docs.oracle.com/cd/E28280_01/bi.1111/e10543/privileges.htm#BABDCJBH)
There's an open BUG on this problem: Bug 16808088 - 11G JAVA.LANG.NULLPOINTEREXCEPTION ADDING USER TO ROLE AFTER UPGRADE TO 11.1.1.7.
Hope this works.
S. -
How to assign Users to process roles?
Hi All,
I have designed a process and I have consolidated all the roles,
when I intiate the process from the runtime workset it asks to assign users to these roles(I have consolidated all the roles to three mail roles). The problem that I am facing is that the user should not see this screen, depending upon the user login id the approvers should be automatically assigned to the respective roles.
Is this possible...
Kindly guide me
Thanks in Advance
SivaprasathHi Sivaprasath,
assuming that I've got you wright you could try to model the following using the callable object "business logic" and the callable object "assign user to process role".
With the help of the first CO you can implement the logic to assign the respective approvers to the users (initiator) and let the processflow go on directing it to the appropriate step where the above mentioned second CO assigns the user to the process role (using the result states of the bussiness logic CO)
At least you are supposed to need an appropriate Parameter that you can consolidate with the User ID.
Just a quick idea, hope this will work with you.
Greetings
Berndt -
USER MANAGEMENT-CO "Assign users to process role"
HI,How can I assign the CO "Assign users to process role" to one or more users inside of a process?
Thanks.
Regards
David ValenzuelaHi David,
I am not sure whether a callable object can be assigned to more than one user or not, but for assigning one single user to a callable object inside a process, follow the following steps:
1)Put the callable object in an action.
2)Put the action in a block.
3)In the block, under the <b>Roles</b> tab, you will be able to see an item called <b>Processor of <<i>name of action containing this callable object</i>></b>. You don't need to do anything. If you wish, all you can do here that you can consolidate roles of more than one action under a single name such that one user is assigned to all those actions. For the time being, don't do anything.
4)Put the block in the process.
5)In the process, under the <b>Roles</b> tab, you would be able to see the same item <b>Processor of <<i>name of action containing this callable object</i>></b> and a drop down in front of it. Choose <b>Initiation Defined</b> from the drop down.
6)In the process itself, open the <b>Default Roles</b> tab, and now you would be able to see the same item <b>Processor of <<i>name of action containing this callable object</i>></b>. Just click the <b>Add Default</b> button, search for the user, and assign him to this <b>Processor</b>.
These steps will make sure that when you run the process, the CO <b>Assign users to process role</b> could be opened by only the user you assigned this CO to.
Bye
Ankur
Do reward points if it helps!! -
Hi
I am looking for auditing feature in Portal. I created a portal role,say ABC in portal and added an iView to that role. When ever I create any user, I am assigning this role to that user. Now I want to know the users associated to this role ABC. Under User Administration tab, when I look at Assigned Users for this role, I don't see any users. But when I see the roles assigned to any user, I can see this role assigned to this user. I don't want to go to all users and check whether this role is assigned or not.
Also, I want to know the users who all are accessing the iview in role ABC currently. Can you please help me with these points.
Thanks in advance
TejoHi Tejo,
check below thread
Read all the users assigned to a portal role
Koti Reddy -
Assign User for Process Role Callable Object
Hi,
I have a doubt in the Callable Object Assign User for Process Role.wat is the use of this callable object.This Callable Object is used to reterive any portal user information?can any one give description about this Callable Object.
Regards,
SatheshkumarHi,
Take a look at the following [wiki page |https://wiki.sdn.sap.com/wiki/display/BPX/GuidedProceduresCallable+Objects] and look for the callable object you need. There is a link to a tutorial.
Dick -
Hi all,
How can i assign the user group to Role.
Regards
ganeshHello Ganesh,
User groups cannot be directly assigned to a role. Only users can be asigned. If I understand correctly then you want to assign a role to a user belonging to a particular group. For this goto SU10 then to Authorization DATA. Give the user group in the filed Group for Authorization ane execute it. You wil get a list of all the users. Select all of them using SELECT ALL option and press the transfer pushbutton. Now you have the list of all users. Press the change button go to roles tab and add the role you want and then save the changes. I hope it solves the issue for you.
Please award points if the answer was useful.
Regards.
Ruchit. -
More than one user "using an expression" in a BPM Task
Hello,
I want to send a notification step for multiple users. I see two options
1. Choose one or more UME principals.
2. Use an expression.
However I have to send the notification for more than one user using an expression. I'm using this expression,
getPrincipal(DO_xyz)
but this only works for one user. I need something like this
getPrincipal(DO_xyz); getPrincipal(DO_xyz2); getPrincipal(DO_xyz3)
But this is not possible. I can't use a group because all this information is dynamic and it's born within the process.
Please, How can I solve this?
Best Regards
SUHello Abhijeet,
I've seen that I can use the getPrincipals adding in the XSD an string with 1..* cardinality. However I don't know how to map an attribute from the UITask to that new attribute in the XSD because in Web Dynpro I can't create an string with cardinality 1..*
I've tried to create a node (1..*) with a String inside in the UI but I couldn't map it to the process context, it shows me an error that I cannot map a node to a String.
Thanks
Regards
SU -
Assign SQ03 Abap Query User Group to role
Please advise how to assign SQ03 Abap Query User Group to a role. Thanks.
Moderator message: please do more research before asking.
[Rules of engagement|http://wiki.sdn.sap.com/wiki/display/HOME/RulesofEngagement]
[Asking Good Questions in the Forums to get Good Answers|/people/rob.burbank/blog/2010/05/12/asking-good-questions-in-the-forums-to-get-good-answers]
Edited by: Thomas Zloch on May 12, 2011 5:40 PMHello Sunil,
The problem is that I have hundreds of users to maintain user groups.
found out that it is possible to assign user group to role and role to user groups. implementing hr authorization with in-direct assignment of auth. So if I could use sq10, user groups could also be link to position in the org chart.
sq10 does allow you to assign a user group to a role but when you assign the role to a user and the user runs a query, it reports that no user group has been assigned.
Suspect that there must be a parameter or switch that is not turned on
Regards -
Assigning user roles in my application in a programatic way
Hi,
How can I assign user roles in a programatic way when I am using the Sun One 7 server? Is that possible?
Thanks,
Wanderley.Sorry, but I need to know HOW can I assign roles( RolesPrincipals) to the container Subject (using JAAS)?
When I am using, for instance Tomcat, I assign the roles to the container's Subject defining the Roles Principals in server.xml. Like this:
<Realm className="org.apache.catalina.realm.JAASRealm"
userClassNames="br.com.caf.security.auth.LoginPrincipal"
roleClassNames="br.com.caf.security.auth.RolesPrincipal"/>Doing that, Tomcat will know which Principal to return when I call "request.getUserPrincipal()".
In JBoss I implement a LoginModule (org.jboss.security.auth.spi.AbstractServerLoginModule) that defines who is my User (LoginPrincipal) and his Roles (RolesPrincipal).
How can I assign user and his roles to the container's subject in Sun One?
Thanks,
Wanderley. -
Hi all.
Could I assign users to a role by web dynpro callable object?
I mean , there is a inputfield in web dynpro view,if I enter a name ,will call some methods to assign the name to a role.Hi
Ya it is possible through IRole and IUser API, take help form following thread and code
1.[GP|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e3f07a7a-0601-0010-ebbd-b9cfb445b814]
2.[example how to Call to IUSer and IRole|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e0957cb6-5103-2a10-6d9d-a0a4d68c8bf1]
3. In second thread the user data is populated here you have to put your code
example IRole role;
role.addUserMember(arg0)
role.removeUserMember(arg0)
Hope you will come to the solution.
Best Regards
Satish Kumar -
Hello,
I want to assign an Action dynamically in the following scenario:
The first action(with CO GP Interface) decides the user ...which I have mapped to the User Item of the Second action (with CO Assign user to Process Role).....then this user should carry out the 3rd Action (with CO Visual Approval)....after mapping I consolidated the 2nd and the 3rd actions to one role .....but still the workitem does not go to the right userid for Approval....
I followed the document:
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0c451f8-0dc2-2b10-e286-f5be915a07f7
Any help would be highly appreciated.
Regards,
AnilHi Anil,
I think you need to use the option 'Assigning Users using context parameter" for both actions 2 and 3 if u don't go for consolidation of actions 2 and 3.
Other option can be, you can create a block in which you can have actions 2 and 3. In this block you can do the role assignment using "Assigning users using built-in callable object".
Do let me know how this worked for you.
Regards
Aanchal -
Performance tab not working in Enterprise Manager for user with dba role
Database: 11g2
New to Oracle. Don't want share SYS user account among dbas. Tried to create user with dba role to perform all tasks.
1. Removed DBMS_JOB, DBMS_LOB, UTL_FILE, UTL_HTTP, UTL_SMTP, and UTL_TCP from PUBLIC
2. Created user dbauser1 with dba role
3. Log in as dbauser1 in Enterprise Manager
After click Performance tab, it just went straight to "Database Login" page. No error message.
Any suggestions or advice will be appreciated.
piaomaHi Gourav,
This is the wsdl url:
http://hostname:8000/sap/bc/srt/wsdl/bndg_E04711310A0E55F1A0E3005056B03D6F/wsdl11/allinone/ws_policy/document?sap-client=450
Kind Regards,
Richard -
UWL configuration on EP Server to show BPM Tasks
Hello Experts,
I have implemented a federated network between 2 portal systems; EP portal as a consumer and BPM server as a provider.
I can not list BPM tasks on EP Worklist but if a grant a BPM's core role to user i am able to use BPM Tasks and use them on a different UWL,
So basicly, the user (user_a) has the following roles;
(This role comes from BPM Server with FPN)
NAME = pcd:portal_content/com.sap.pct/every_user/com.sap.bpem/com.sap.bpem.roles/com.sap.bpem.Enduser
DESCRIPTION = BPEM End User
SOURCE = pcd:portal_content/every_user/general/eu_core_role
(Standart User role on EP Portal)
NAME = pcd:portal_content/every_user/general/eu_core_role
DESCRIPTION = Every User Core Role
SOURCE = Portal Role
(This role comes from BPM Server with FPN)
NAME = pcd:portal_content/every_user/general/eu_core_role
DESCRIPTION = Every User Core Role
SOURCE = BPM_AND_EP_PORTALS
And I see two UWL's, one shows tasks within EP the other one shows BPM Tasks from BPM,
How can i merge these two ?
Thanks in advance,
Yasinhi Dave,
cpl of questions are you on a federated network or are you using any proxy to access the portal? usually it will be slightly delayed some times based on the proxy cache. how are you adding the reports to role through delta link or copy?
When using the portal cache, data updates can appear with a delay.
pls go through the following link it may help you.
http://help.sap.com/saphelp_nw70/helpdata/EN/25/8c174082fe1961e10000000a155106/content.htm
Jo -
Assigning users to role using Security API
Hi,
I am trying to assign portal users to portal role using the IRoleFactory and IRole class of Secutiy API from my web dynpro application.
For getting the role , i can use either the uniqueId of the role or the uniqueName of the role.(Using methods of IRole class, getRole(uid) or getRoleByUniqueName(uname)).
The UniqueId of roles contains some hash values and cannot be used. For example ROLE.PCD_ROLE_PERSISTENCE.6dT95vZpyNWQHm59z7B9FxAM/fg=.
And the for getting the role using the uniqueName, i need to give like pcd:portal_content/other_vendors/<folder name>/<my prefix>.<rolename>. Which is also not feasible.
Is there any way to get the role only using the role name that we give while creating it?
Thanks and Regards,
VenkatHi,
Check if this helps.
try {
IRoleFactory rfact = UMFactory.getRoleFactory();
IRoleSearchFilter isf = rfact.getRoleSearchFilter();
isf.setDisplayName ("*",ISearchAttribute.LIKE_OPERATOR,false);
ISearchResult rit = rfact.searchRoles(isf);
while(rit.next()!=null){
String roleName = (String) rit.next();
IRole role = rfact.getRole(roleName);
response.write("nRole:" + role.getUniqueName());
}catch(Exception e){
response.write("exception");
U will get list of roles. U can pass these directly or use String tokenizer to separate the role name alone using '.' as separator.
Regards,
Vijai
Maybe you are looking for
-
Can anyone explain this error??
This program splits an int array to two arrays: one containing only even numbers, and the other only odd numbers. The two arrays are returned by the split method as array of two arrays, with the first containing only the even numbers and the second c
-
Compare two tables on different server without using Linked Servers
I have an SSIS package that needs to compare a table to another table on another server. Then only delete data from the first table if it exists in the second table. I know this is possible with Linked Servers but we are doing away with them in my
-
What specific technology are older macs bluetooth missing that will not allow handoff to work?
What specific technology are older macs bluetooth (that is built in) missing that will not allow handoff to work? Will apple allow people to buy third party bluetooth 4.0 to allow it to work?
-
Dynamic Time Series - Consolidation
<p>Hello</p><p> </p><p>I verified that time balance attribute allow control the memberconsolidation for differents time periods.</p><p>I have a time and accountsdimension on outline. My Time dimension is dividedin Year and quarter without months.</p>
-
How do I configure to use X windows apps like "ssh -X" or Tk?
I am trying to configure my machine as an X windows server so that I can use X programs remotely via "ssh -X" or run local Python scripts that use Tk. I'm currently unable to do this an am not sure what I'm doing wrong. I have set my DISPLAY=".0". If