Attachment Permissions

When adding attachments to a task,there is an option to choose the access rights.
By default the value is "Read Only". But when I attach a document, all rights are applied (Read, Edit, Delete) irrespective of the permission selected.
What could be the problem?
Nith

Hi,
Thanks for your reply.
I tried this attachment permissions with different users. It seems to be working as you explained.
But in my case i'm claiming a task from other or the administrator re-assign a task to me which has some attachment added by me (with readonly permission). Now i'm able to delete or modify the attachment. Is there a way to prevent deleting attachments once attached?
Thanks,
Nith

Similar Messages

How to Attach permit automatically to an work order using abap

how to Attach permit automatically to an work order using abap
Moderator message : Not enough re-search before posting, show the work you have already done, thread locked.
Edited by: Vinod Kumar on Jan 30, 2012 2:16 PM

At least make sure that you have a default method 'browse' in your class. I mean that make a method for "displaying" or "browsing" or whatever you want to happen when you click the object, and make it default. OR actually if I remember correctly there is a default method existing already, but put your code to there.
Also try this:
-Create a container element of type 'sales order' into your task
-Bind the sales order object from workflow to the the task
Regards,
Karri

Removing modify/sync NTFS permissions using removeaccessruleall in Powershell

Hi,
I've got a script together which removes all non-inherited groups from a user's home folder. It's working fine until I run into groups which have modify/sync permission. Even though I'm using the removeaccessruleall permission, those groups just don't
remove. I've attached the code I'm using below and I can provide the full script if needed.
$objAccessRule1 = New-Object System.Security.AccessControl.FileSystemAccessRule($strAccount,"FullControl","ContainerInherit,ObjectInherit","None","Allow")
$objACL.RemoveAccessRuleAll($objAccessRule1)
I'd appreciate any insight anyone can provide.
Cheers,
Ed Narayan

Hi Rohn,
Still no luck. The modify/sync permission still remains. Here's my code:
import-module activedirectory
$StrInvocation = (Get-Variable MyInvocation).Value
$strRunDir = Split-Path $StrInvocation.MyCommand.Path
$strDate = get-date -format "dd-MMM-yyyy-HHmm"
# Set everyone to list folder contents - this folder only and remove extra groups on folder
function phase1
$strSharePath = $args[0]
$objACL = Get-Acl $strSharePath
# Define permissions
$strPermission1 = "Everyone","ListDirectory","None","None","Allow"
# Attach permissions to access rules
$objAccessRule1 = New-Object System.Security.AccessControl.FileSystemAccessRule $strPermission1
# Attach access rules to ACL object
$objACL.SetAccessRule($objAccessRule1)
$objACL.PurgeAccessRules([System.Security.Principal.NTAccount]"AccountAdmins")
$objACL.PurgeAccessRules([System.Security.Principal.NTAccount]"SHR-MDRIVE")
$objACL.PurgeAccessRules([System.Security.Principal.NTAccount]"SYSTEM")
# Set access rules on ACL object
Set-Acl $strSharePath $objACL
# For each folder processed, turn on inheritance if it's off, remove orphaned acls and non-inherited groups
function phase2
[CmdletBinding()]
Param([Parameter(Mandatory=$True,ValueFromPipeline=$True,ValueFromPipelinebyPropertyName=$True)]
[string]$strFolder)
PROCESS{
# Set variables
$strLog = "$strRunDir\Logs\log-$strDate.txt"
$arrGroups = @()
$objACEs = @()
$objACL = get-acl $strFolder
$objACEs = $objACL.Access | Where-Object {!$_.IsInherited} | select-object IdentityReference -unique
[bool]$blnIsInherit = [bool](get-inheritance $strFolder | select-object -expandproperty inheritanceenabled)
[bool]$blnGroupExists = $false
$objChildObjects = Get-ChildItem $strFolder -recurse
write-output "`n" | Out-file $strLog -append
write-output "FOLDER:$strFolder `n" | Out-file $strLog -append
write-output "Inheritance enabled - $blnIsInherit `n" | Out-file $strLog -append
# If inheritance is turned off, enable it
if(!$blnIsInherit)
write-output "Enabling inheritance for $strFolder`n" | Out-file $strLog -append
$objACL.SetAccessRuleProtection($False, $True)
# If non-inherited permissions exist, process each of them
if(($objACEs| Measure-Object).Count -gt 0)
foreach($objACE in $objACEs)
[bool]$blnIsGroup = $false
[string]$strAccount = $objACE.IdentityReference
if($strAccount -like "*\*")
$arrSplit = $strAccount.split("\")
$strAccount= $arrSplit[1]
# Check if permission is for a group
$blnIsGroup = [bool](get-adgroup $strAccount -erroraction silentlycontinue)
# If permission is for a group, create an acl entry for removing it. Multiple remove entries can be created depending on the number of groups found
if($blnIsGroup)
Write-output "Removing:$strAccount`n" | Out-file $strLog -append
$objACL.PurgeAccessRules([System.Security.Principal.NTAccount]$strAccount)
if($strAccount-like "*SYSTEM*" -or $strAccount-like "*CREATOR OWNER*" -or $strAccount-like "*USERS*" -or $strAccount-like "*Administrators*" -or $strAccount-like "*S-1-5-*")
Write-output "Removing:$strAccount`n" | Out-file $strLog -append
$objACL.PurgeAccessRules([System.Security.Principal.NTAccount]$strAccount)
Set-acl $strFolder $objACL
Phase 1 changes the everyone group to list folder contents on this folder only and removes a bunch of groups from the root folder.
Phase 2 removes all orphaned sids and non-inherited groups from the folder and turns on inheritance if it's turned off.
At this stage, this feels like a bug within the ACL cmdlets.
Cheers,
Ed

SharePoint 2013 Delete old AD-securitygroup, create new one: No permission

Hello there
Im currently stuck with this issue - i had Group A, Group B, Group C in my AD. Group B to C and forth were members of Group A. Now i deleted Group A to recreate Group A and added the other groups as a member. However, if i assign permissions to Group A,
the users are not allowed to enter the site. If I attach permissions to Group B and forth, it works.
I believe its a sync issue and I've tried various things such as http://sharelockpoint.wordpress.com/2013/11/14/access-denied-for-ad-group-users-in-sharepoint-2013/. It didnt help though.
Any idea?
Best regards

How long has it been since you recreated the AD Group? After recreating it did you remove it from the SharePoint group and re-add it?
You could have one of two problems.
First, like users AD groups are identified by Security Identifier (SID) not by name. So if you delete Group A and recreate it SharePoint won't see it as Group A anymore. So you need to remove and replace any instances of Group A in SharePoint
after recreating it.
Second, Users and Group membership are used in SharePoint as Claims tokens. Claims authentication has a could caching mechanisms that can prevent Group membership changes from showing up in the system for up to 24 hours. So if its been
less than 24 hours you might want to wait and see if the change works after that.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

User status with reference to characteristic value of the Functional locati

Hi,
For a Functional location for which a characeteristic values is maintained as"1",i want "user status of the mainteance order,when created to be updated as "XXX".Can any one of you tell me the user exit and code changes for this.Please reply at the earliest.
EX:A functional location(XXXX) has a Characteristic(xxx) has value as "1"
we have created an user status as"xxx" for the order(through status profie).Now,My requirement is
When i have created a maintenance order for the functional location(XXXX),upon on saving of the order,or Assigning the priority for the maintenance order,i want the user status has to be modified as "XXX".
Could you please tell us what to do?
is our requirement will be fulfilled with the exit"IWO10009".If so,please tell us the code to be made>
Can we map our requirement through "Object dependencies" or any other means to meet our requirement
you will be highly appreciated
with regards,
Joshita

HI joshita,
I had a similar issue in the past where i wanted to attach permit to an order based on some characteristic of functional location at user exit 'IWO10002 - Customer check for order release'.
This will solve your purpose during release of the order.
You can also use the exit 'IWO10009 - Customer Check for 'Save' Event', this will check irrespective of the status of the order.
Regards,
Deepak

Multiple tasklist on single maintenance item

Hi gurus,
How can I attach multiple task list to a maintenance Item.
- I want to attach a general task list and a equipment/functional location tasklist to a equipment/functional locations in a maintenance Items
- Is there any way to attach permit to maintenance task list / plan ??
regards
saby

Hello,
You need to create the two maintenance item for the assignment of equipment task list & General Task List and assign it to One maintenance plan.Or You can Use The Object List Tab in aintenance Item Where you can assign the more than one Equipment for One maintenace Item having the Equipment Task List or general Task List.
Maintenace Object List-->You can assign several technical objects to a maintenance item. The maintenance operations that you define for a maintenance item, using the link to a maintenance task list, are due for all the technical objects assigned.
Use of Permit in Task List & Plan not possible as per my knowledge.
Regards,
Rakesh

SMB Sharing User?

Hello,
Since a good long while i've been working with a Macbook. Being a long term windows user i gradually took the opportunity to study on more OS's than just Windows. However, one of the few things i still havn't figured out is the SMB Sharing capability.
Let me sketch you an environment.
Leopard 10.5.5 (And somewhat below) Allows you to share folders, much like windows with policies on what a user can do in a folder et cetera.
When sharing a folder with Leopard, you go to File Sharing, toggle SMB on, and define an account you want people to use to get into the shared folder. Here, exactly lies my problem. With a guest account i am perfectly able to see the folder on a Windows computer.
Once i define a user account, let's take "Test" as a subtle one for now. The password would be easily set to "test" aswell. In the User Management interface i've defined a sharing account under the name Test.
This account will now show up at the File Sharing preference pane. I can select it, and attach permissions to it, such as "Test" may write in folder "X" but, "Everyone (also known as Guest, i suppose?)" May not see anything at all.
Once i did this, i am unable to at all get connection to the shared folder through Windows, but when i toggle "Everyone" to Read or Read/Write, i can see the folders perfectly clear once again.
My question is, How so i solve this problem. So that only an account "I" Define, may have access to the shared folder with the credentials "I" once again define?
Thanks in advance, and i hope to see your responses soon.
Rene

Can't solve your problem as we are in the middle of setting up a mac mini snow leopard server with a couple of macs (absolutely fine!) and a couple of PC's both running XP. One will connect but one won't. How do you connect/have your's set up to connect. The problem PC will see the share point in workgroups and allow to enter username and password, but won't mount the volume. so annoying!

PDF User Issue.

Adobe reader opens up a file and closes it within 3 - 5 seconds,
The other issue is that this is only happening on 1 of 2 user accounts,
A. being an old account with lots of infomation and B. the one with admin rites.
I have tried switching machines and logging onto user A and Reader works fine but log back on the old machine and the problem is thill there.
can anyone help?

Interesting; something seems to be corrupted. There may be a chance that the permission can be granted using SubInACL.
Download and install SubInACL from http://www.microsoft.com/en-us/download/details.aspx?id=23510
Download and unzip the attached permissions.bat file into C:\Program Files\Windows Resource Kits\Tools (or C:\Program Files (x86)\Windows Resource Kits\Tools on a 64-bit system). Double-click to run it.
I suggest that you create a System Restore Point before proceeding with the above.
Attached is also a reg file that will add the Protected Mode value into that reg key.

Console and system log help please

During boot-up I get these errors in the system log:
During shutdown (power then restart option) 2-4 times in a block
Aug 15 11:31:16 EPsMBP kernel[0]: (63: coreservicesd)tfp: failed on 0:
During restart 5 times in a block
Aug 15 11:31:20 EPsMBP kernel[0]: (1183: ps)tfp: failed on 0:
Later 5 times in a block
Aug 15 11:31:24 EPsMBP kernel[0]: (1219: ps)tfp: failed on 0:
Later
Aug 15 11:31:59 localhost kernel[0]: USBF: 9.640 Errata bits for controller 0x8086/0x27cc(rev 0x2) are 0x5800
Aug 15 11:31:59 localhost kernel[0]: USB caused wake event (EHCI)
Aug 15 11:31:59 localhost kernel[0]: USBF: 9.659 Errata bits for controller 0x8086/0x27c8(rev 0x2) are 0xe800
Aug 15 11:31:59 localhost kernel[0]: USBF: 9.659 Errata bits for controller 0x8086/0x27c9(rev 0x2) are 0xe800
Aug 15 11:31:59 localhost kernel[0]: USBF: 9.659 Errata bits for controller 0x8086/0x27ca(rev 0x2) are 0xe800
Aug 15 11:31:59 localhost kernel[0]: USBF: 9.659 Errata bits for controller 0x8086/0x27cb(rev 0x2) are 0xe800
Then general under 5 times in a block:
Aug 15 11:32:03 EPsMBP kernel[0]: (49: SystemStarter)tfp: failed on 0:
Also in the console log during boot-up:
NOTE: ignoring this component:
Discovered 0 component = 0x64e6f6 type = imdc subt = 1Bt2 manu = Domi flags = 0
NOTE: ignoring this component:
Discovered 0 component = 0x64e104 type = imdc subt = 1Bt3 manu = Domi flags = 0
NOTE: ignoring this component:
Discovered 0 component = 0x64e154 type = imco subt = 1Bt3 manu = Domi flags = 0
What does this mean? I'm running on a brand new install or 10.4.7 with all firmware updates for my macbok pro. No hardware attached, permissions repaired, disk repaired, memtest checks out OK.
should I be worried?
Thanks
Edd

Exact same issue here!
I think it has to do with some third party app. I've used Kuvvo to automatically get wallpapers from the net en change them.
After I decided to go back to my own wallpapers and removed the Kuvvo app, my wallpaper prefs is crashing.
I tried to reinstall Kuvvo with the hope of fixing broken links / references but to no avail!

Function module to release a work permit attached to a service order.

Hi,
We have a requirement of automating the process of work permit release attached to service order.
I am looking for a function module / BAPI for releasing the work permit attached to a service order by passing service order number and permit ID/Name.
If any of you have come accrose such one please share.
Thanks
Achuthanandan

Hello Philip
The following function modules should be useful:
   - CY_PRIMARY_SELECTION            - Function module for selection of orders for the work center
   - CY_SECONDARY_SELECTION          - Check for additional criteria
   - CR_CAPACITY_AVAILABLE_PERIODS   - Reads the available capacity from work center
   - HR_PERSON_READ_TIME_INFO        - Reads the available capacity from person (modification)
   - CY_GET_PART_CAPACITY            - used only for the first period to read backlog
   - CY_LOAD_DISTRIBUTION            - Distribution key
Please observe that these are simple function modules, not BAPIs, That means, they were developed to be used on the SAP internal programs and they are not supported by SAP when used in custom programs.
BR
Caetano

Ssd died with wife's data on it only able to salvage ,mdf file - Save a man's life ... how do I restore / attach / recreate log file - no permissions on new drive

         My wife asked me if I could create a VB program for her - load her data onto SQL Server to test her for some medical exams. Since I have been "playing" with both Visual Studio and SQL for over 10
years, I said sure. Copied her Excel file, transferred the data to SQL and started "playing".
       Play time ended abruptly the other day when my Solid State Drive died. I was only able to salvage the .MDF off the disk. Lost the log file and lost the Excel file. Yes, for all of my databases I had regularly scheduled
backups to another disk. I hadn't set that up for hers yet, thinking that the data was available on another computer altogether.
       No big deal, right? Just get the original Excel file back from the wife("Offsite backup") and reload the data from Excel. Problem ... she deleted the file 2 months ago thinking I had the data, and there is no
recovery as the sectors where that data was located on her hard disk have since been overwritten.
      As to my situation: I told here that things were "going fine" and that I just had a couple more things to recover and we would be back up in business. Thinking that Dangling from a bar over a tank of great whites
with a freshly cut hand might be preferable to telling her that I just fried over 300 hours of her hard to come by, time, by assuming the data was safe.
       From what I can tell, the .MDF file is intact. I have nothing else, and that was attached to a database on what was essentially another computer. Yes, I "Assumed" I had good backups. Yes, I have learned my lesson.
Please save a man's life and help me out.

                   I had my disk die with the only copy of my wife’s medical “Question and Answer”
(Q_And_A) database on it. She thought it was safe and sound on my computer, and I thought we had an “Off site” backup of the data on hers and hadn’t set up backup for it.
1.)
The bad things are, only the .mdf file was intact.
2.)
All of the permissions based on the old copy of Windows 7 and SQL 2005 or 2008 ( I am not sure which the .mdf was created in.) have gone the way of the dodo.
       Bought a new disk. Reloaded windows 7 64 bit. Loaded SQL 2014 (Thought now was a good time to upgrade.) Problem
… so far I have not been able to attach and recreate the log file …
          Just to finish up the data I have, the database was closed properly and is NOT in a read
only state according to file properties. That said, I still don’t have a solution.
So far I tried these three sets of commands:
CREATE DATABASE
Q_And_A
ON
(FILENAME
=
N'E:\Mikes 128GB\SQL2014\MSSQL12.SQL2014\MSSQL\DATA\Q_And_A.mdf')
FOR
ATTACH_REBUILD_LOG
GO
And this set of commands:
CREATE DATABASE
Q_And_A
ON
FILENAME
=
N'E:\Mikes 128GB\SQL2014\MSSQL12.SQL2014\MSSQL\DATA\Q_And_A.mdf')
FOR
ATTACH
GO
EXEC
sp_attach_single_file_db
@dbname='Q_And_A', @physname=N'E:\Mikes 128GB\SQL2014\MSSQL12.SQL2014\MSSQL\DATA\Q_And_A.mdf'
GO
         So far this is the computer’s reply to everything I have thrown at it. I haven’t told my wife that 600 hours
of her work is inaccessible, and I would really rather not do so. Anything anyone can offer would be great.
File activation failure. The physical file name "E:\Mikes 128GB\SQL2014\MSSQL12.SQL2014\MSSQL\DATA\Q_And_A_log.ldf" may be incorrect.
The log cannot be rebuilt because there were open transactions/users when the database was shutdown, no checkpoint occurred to the database, or the database
was read-only. This error could occur if the transaction log file was manually deleted or lost due to a hardware or environment failure.
Msg 1813, Level 16, State 2, Line 1
Could not open new database 'Q_And_A'. CREATE DATABASE is aborted.
          Is there anything else anyone out there can offer as help? My wife has often said that
she doesn’t believe in divorce. But murder she will consider. If she loses 600 hours of her data this could be my last post. I am joking … I think … That said, any help is extremely welcome. Thanks in advance.

Permissions Mashup after mailing attachment

Ok, here's an odd one. Since installing SnowLeopard, I've experienced this problem.
I will commonly save a file as a PDF file from Adobe InDesign, to my desktop. I will then attached that PDF file to an email and send. Then, at a later date, I'll revise this file and attempt to save it as a PDF file on my desktop, overwriting the previous version of that file (saving by the same name).
Whenever I attempt to do this however, I receive the "Cannot save to the file "filename.pdf". You may not have permission or the file may be in use." error message. So I have to delete the file from my desktop in order to save it by it's intended name.
Now here's the kicker. This ONLY happens after the file has been attached to an email. I can save a pdf file to my desktop and overwrite it again & again, with no error. But once I attach that file to an email, it's as though the permissions to the file then change, and I can no longer re-write it again...thus the error message.
Anyone know what's going on here? Does mail change the permissions of a file if it gets attached to an email?

this is a known bug in snow leopard Mail reported by many people. (I can not reproduce it myself however). this has nothing to do with permissions on the file. somehow Mail process does not release the file after you attach it so its status is reported as busy and the system won't let you alter the file for that reason.
quitting and restarting Mail releases the file.
you can also file a bug report on the matter as this is something that should be fixed
https://bugreport.apple.com

"you don't have permission to open this file" when trying to attach in firefox ONLY. Works in other browsers and windows permissions are wide open.

Only a problem in Firefox. Works in IE and Chrome. I went thru support ideas of checking windows permissions (wide open and the user is the owner), starting firefox in safe mode and uninstalled/reinstalled firefox. Same problem. Any file in My Documents gives the same error, so it is not file related. Any directory under My Documents works the same. I can move files to Desktop and then they attach fine.

As mentioned in the original post, the user IS the owner and the permissions are WIDE open for the user. I have also tried to disable the anti-virus - no luck. The problem is ONLY happening in Firefox. Chrome and IE work perfect. There is also no problem in Windows. The user can add/remove/edit files in the directory. Right now the solution seems to be to use Chrome. I'm not excited about that, but at this point, the only option.

Assign permissions to iviews attached to a role

Is there any way to assign permissions to an iview that has been attachde to a role.

If an iview is attached to a role, it inherits the permissions from that role. You need not to assign any permission to the iview. If you want, assign the same to the role.
To assign permission, right click on your object > open > permissions
Regards,
Atul

File Permissions with Network Attached Storage

I have a simple NAS setup in my house with pictures and videos I drag and drop from windows 7 and OSX Snow Leopard. I have been using it for a year with both with no problems. I recently sold my Macbook and bought a new Macbook Pro. When I came to my new Macbook I noticed some folders on my NAS have a little red exclamation mark on it not allowing me access from OSX or windows.
I can only think that some how my old laptop gave it some permissions or something without me knowing? Can any one help me with how to change these permissions back or how not to let this happen again? I'm pretty computer savvy yet this just makes no sense to me at all!
I thought about doing the repair permissions but can't find the option to repair from a networked drive. Example: smb://nas1
Any help would be greatly appreciated!
Some Terminal Info (the one with d-------- is the problem one)
dr-xr-xr-x 5 rustyyow staff - 16384 May 6 16:14 .
drwxrwxrwx 5 rustyyow staff - 16384 May 14 23:34 ..
-r--r--r-- 1 rustyyow staff arch 6148 May 11 21:45 .DS_Store
dr-xr-xr-x 2 rustyyow staff - 16384 Apr 22 15:20 Final Cut Pro 5
d--------- 2 rustyyow staff - 16384 Apr 22 00:58 Microsoft Office 2008 Mac
Also there are random folders that have read only access to them which I can not change as well.

It sounds like you want a DAM (digital asset management) application like Media Expression which is cross platform and will do what you want, manage the folders that contain the photos, add and edit ITPC meta data and much more.
I use it as my principal DAM app and iPhoto to create books, calendars, galleries, and other special projects.

Attachment Permissions

Similar Messages

Maybe you are looking for