Attribute Level Security on Portal Tabs

We are using a set of tabs on a single portal page. We need the ability to
display each tab based upon either an attribute or a PL/SQL result set.
Currently the only options for tab level security are person and Group. This
does not meet our needs.
For Example, we have two tabs on the page (employee and manager). Everyone is
an employee and only some are managers. We want only the managers to view the
content on the manager tab. The only option we have is to create a manager
group which will not work due to performance reasons (over 20,000 managers
identified). We cannot manage this in groups.
We need to know how to display the tabs by either a person level attribute or
SQL query.
Thanks,
Rich

Hi,
ADF Security and ADF Business Component security both provide this functionality.Both use JAAS permissions for authorization that can be assigned to user roles. You find information in the developer guide
http://download-uk.oracle.com/docs/html/B25947_01/toc.htm
Frank

Similar Messages

Item level security, workflow and tab problems

was wondering if someone could help us out with some problems we are having. We need to up and running over the next two days so anyone who could get back to us pretty quickly would be greatly appreciated.
We are actually having a couple of issues which all revolve around three
groups we have created (for simplicity we have only attached one user to each group). Here are the steps we took:
Problems adding content:
a) Added the three groups to the page group and gave them view access.
b) Turned on approvals and set group3 as the approver.
c) Added the three groups to the page and gave them view access.
d) In the page properties, I enabled item level security.
e) Added an item content area to the page.
f) Added three pieces of simple content
g) For content item1 I granted granted full access to group1(Own, manage, view), for content item 2 I granted full access to group2, etc.
h) WHen I log on as a user in group1 I only see content item1. HOwever, when I edit the page I find I cannot add any items as user1.
i) I went back to the page properties and changed the access of all three groups to "manage items with approval" but let the item level security as it was.
j) When I logged on as user1 I found I could see all items now when I should only have seen content item1. What the hell? Can anyone tell me what I did wrong?
Problems with item level security on tabs:
a) Repeat steps a) through d) above.
b) Create a content region and add three tabs: Home, Work, Life.
c) On the Work tab changed portlet region to item region.
d) Added three items with security exactly as I did above.
e) When I signed on as user1 I saw all three items when I only should have seen item1. What the hell?
f) I monkeyed around with the secutiry at the tab level but it didn't seem to make much difference. ANyone have any ideas what is going on here?
Thanks in advance.

Does the library have versions enabled? Also are these logins occuring within word/excel etc?
If there's multiple login prompts which occur even if entering valid credentials what does hitting escape (after the first prompt) achieve, does the document open anyway?
There's a situation where Office will prompt for credentials if you open a document when you've only got read access but there's a version history (to which you don't have access). This is to allow you to enter more highly privelidged credentials if you
want to.

Item Level Security, Portal 10.1.4, Search

I'm working on a project that uses ILS (item level security) in portal 10.1.4.
I need a custom search portlet that retrieves all the items that can be viewed by a certain group.
Explicitly, if there are 3 items: I1, I2, I3, and 3 groups G1, G2, G3, having the view permissions distributed like below:
for I1 - any user from G1 and G2
for I2 - any user from G2,
for I3 - any user from G1, G3
I want to be able to select all the items for a certain group - say G1 will retrieve I1 and I3 ; or G2 retrieves I1 and I2;
Can this be done in a custom jpdk portlet ? If not, is there any other alternative to achieve this ?
Thank you,
Claudiu

Well the URl is relative to the initial path and as a result you do not get the fully qualified URL.
This is done in this way to help create human readable URL's and thus should not be tied to a machine name and port and could be just xyz.com/.....

Item Level Security - 9.0.2.2.22.

Is there a problem with setting item level security? My scenario is one multitabbed page within a page group. My settings are shown below. I want some items on the page to be seen by the public and some to only be seen by certain groups - basically welcome messages, one for employees, one for customers.
Page Group properties - nothing to set for item level security.
Page Level properties - On Access tab set both 'Display Page to Public Users' and 'Enable Item Level Security'
On 'Welcome' Tab properties for above page (not page group) - On Advanced Options tab set 'Inherit Access Settings from the Page' and 'Display tab to public users'.
On subtab 'About Us' on 'Welcome' tab properties - same as above, i.e. On Advanced Options tab set 'Inherit Access Settings from the Page' and 'Display tab to public users'.
On 'About Us' subtab region 1 - an item region - there is no access settings to make.
On text item added to region 1 - On Access tab set 'Define Item Level Access Privileges' then added my EMP group; view item privilege. Only other grantee is PORTAL.
The text item still shows up for public (without login) and everyone else that logs in; that is when no one signs in! Item Level Security settings seem to have no affect whatsoever. What did I set incorrectly?

isn't there just a bugfix available?
9025 isn't out yet - when will it be available ?
markus

Item Level Security not working with Tabs

I've Portal 9.0.2.2.22
This issue is with Item Level Security with Tabs. Here is what I've have:
Page Group: MyPagegroup (Privs: portal => Manage All)
Page: MyTestPage (Privs: portal => Manage All,
testUser => View)
There is a tab called MyTab on page MyTestPage which has two items (simple images) image1 and image2. The tab's access privs have been set NOT to inherit from the page. The public check box has not been checked for the tab. I've specifically assigned access privs to the tab.
Now here are the two scenarios that I'm having problem with:
1) MyTab (portal => Manage All, testUser => view)
image1 (ILS enabled: portal => Manage All)
image2 (ILS enabled: portal => Manage All,
testUser => View)
When logged in as "testUser", I still see both the images on MyTab although image2 doesn't have view priv to testUser. My expected result is to see just image2 on the tab.
2) MyTab (portal => Manage All)
image1 (ILS enabled: portal => Manage All,
testUser => View)
image2 (ILS enabled: portal => Manage All)
When logged in as "testUser", I still see NO images on MyTab although image1 has view privs to testUser. I would expect to see image1 on the tab.
Question: In both the above cases, the tab privs seem to be dictating what the user sees regardless of what the item level privs are set to. Is this normal behavior or a bug? If a bug, is there a patch? Is there any way so that even after setting the tab privs, I still have finer control of what the user can access through item level privs?
If I don't put the items under a tab, then things work as expected.
thanks
Lalit Agarwal
Vienna, VA
703-521-5200 x3610

This is a known problem with the 9.0.2 release - fixed in 9.0.2.6.
Regards,
Jerry
PortalPM

Tab Level Security

Hi
I have a question around Tab level security.
We are deploying a Portal to 4 different parts of the organisation. Depending on which group the user is assigned will determine which Tab they are able to view. At present I am able to use the group to which the user is set up to allow them to view the correct tab. However I now need to only provide access to these tabs for certain users with a particular role/responsibility. So first the tab will only be available to users in Group A but I also now need to prevent some users in Group A without a particular role.
Do I need to create a new group for all persons in Group A with the correct Responsibility or is there another way of doing this. For example on assigning them to Group A and then interrogate this Responsibility when they click on the Tab.
I hope this makes sense ?
Regards
Kevin

Just off the top of my head, can you create another discrete group of the Group A users who need access to the other tab, and then give that group view rights? Haven't played with it myself, but we use a similar strategy for other items.

Portal tab security

I have a page with item level security enabled for the page.
I have added 5 tabs on one of the sections, and have set security for each of the tabs.
On one of the tabs I limited the access to 1 group, however anyone that has access to the page group can see that tab. Is there an overriding security for tabs somewhere I do not know about?
Thanks,
Peter

First, check the access for the PAGE GROUP properties since any access granted there will override specific access to a tab on a page in that page group. I've set up all the page groups in our portal to not have any access granted to any groups at the PAGE GROUP level but set it on the Root page of that page group (then sub pages can either inherit that access or I can specify different access at the page, tab, or even item level.)

Access Tab not showing for item level security

I have enabled item level security for the portal page I am working on, but the access tab for the items is not showing.
I have come accross exactly the same problem on this forum and the advice was:
Hi try the following :
go to page properties
set the item level security
clear the cache
clear your browser cache
it should work "
I have tried all that, closed and opened a browser but the access tab is still not showing. This is a 10.1.4 portal on LINUX. Starnge enough I have a testing environment installed on my Windows XP (AS 10.2.0.2 not upgarded to 10.1.4) and I don't have any issues with item security access tab at all.
I would appreciate any clues.
Regards,
Anna

There should be two icons shown for each item when you put the page in Edit mode - Edit and Actions. Click on the Actions icon and "Access" should be one of the links in the list of actions (like hide, expire, delete, move, etc.)

Tab level and column level security

Hi
Can anyone suggest a high level view of implementing a tab level security based on the user logged on? I have a form that has multiple tabs and within each of these tabs there are multiple fields displayed (in a multi record block). Based on the user, the relevant canvas tabs should be enabled and only those fields within each of these tabs to which the user is authorized to view should be displayed. I am looking for an approach methodology that can be implemented dynamically. There could be another form to maintain the user, roles and accessibility options.
Any suggestions are welcome.
Thanks

When the form loads, capture the username (network login ID).
Based on this username, in you when-new-form-instance trigger or when timer expired trigger(you have to create a timer for this), set the property that certain tabs/fields must be enabled/disabled depending on the user.
Say, you have two groups of users, admins and non-admins..
when the form loads, capture the username
compare this username with the tabular data to determine if that user is an admin or non-admin (you can do this using a select query)..
and using when-no-data-found exception you may set the appropriate previleges using set_tab_property('tab_name',ENABLED,property_true) and hence forth
hope this helps

Tab level security and customization privileges

Hi,
I've created a page that includes a tabbed region. I have given access to different tabs to different groups - when I do my demo, I'd like to show that we can secure data via tabs. This all works beautifully when my groups only have 'View Only' privileges. If I give the group 'Customization (Add Only)' privileges, when users of that group log into the page, they see ALL of the tabs, not just the ones their group has access to.
I am not sure this is the intended behavior, but please let me know if it is.
Thanks.

Nevermind...the trick is not the give the privilege at the Group level, but at the Page level. Works as expected. Thanks and sorry.
-melissa
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Melissa Blakeney ([email protected]):
Hi,
I've created a page that includes a tabbed region. I have given access to different tabs to different groups - when I do my demo, I'd like to show that we can secure data via tabs. This all works beautifully when my groups only have 'View Only' privileges. If I give the group 'Customization (Add Only)' privileges, when users of that group log into the page, they see ALL of the tabs, not just the ones their group has access to.
I am not sure this is the intended behavior, but please let me know if it is.
Thanks.<HR></BLOCKQUOTE>
null

Setting up item level security access

Hello,
I am new to Oracle Instant Portal and I'm trying to figure out how to set up item level security on a particular tab page. Can anyone give step by step instructions on how to make it work?
So, say that I have a tab page called HR. On that HR page, I have 3 items. For item1 and item2, I want user1 to have view access to these only, and for user2 they could have view access to item3 only.
I checked the option in the HR page's Page Access settings to Enable Item Level Security, saved the changes, and even cleared the cache, but it doesn't seem to give me any new functionality where I could specify that for item1 and item2, only user1 should have access to it, and for item3, only user2 should access it.
Can someone please help?
Thanks!

Please disregard--I figured out how to do this:
1. When you are editing the page, you must click on the "Edit Item" icon next to the item.
2. Then click on the Access tab in the upper right.
3. Select Define Item Level Access Privileges and click Apply.
4. In the Grant Access section that now appears just below, select the user id you want to grant access to the item and then click Add.

How programmatically "enable" the Page to have Item level security

Some body known how do we programmatically "enable" the Page to have
Item level security. - analogous to checking the box in the Page edit mode for "Enable item level security"

Hi, I only know portal.wwsbr_api.enable_ils_for_item.....
You can perform actions on multiple objects simultaneously.
Navigator > Page Groups(TAB) > PageGroup > Page > actions(link)
Click on actions link and in LOV, select "Enable ILS".
Hope this help.

Enabling item level security

Hi,
We are using portal version 3.0.9. We are trying to implement security at the item level and have super-user rights. According to <http://portalstudio.oracle.com/help/sblgrapi.htm>, if you scroll all the way to the bottom it says that "You cannot enable item level security for items in the Portlet Repository content area." I am assuming that this Portlet Repository content area is referring to the Administer->Display Portlet Repository ->Seeded Providers -> Portal Content Area -> Content Areas
The items that we want to secure are currently in the folder called "other providers" but I can also access the items from within the portal repository content areas.
So far I have been specifying access to the page, the category, the folder, and the item, and when I log in as a view only user I still can see things that I shouldn't. Perhaps, it is because it is somehow still in the repository?
I think that I am missing a step somewhere. I have cleared inherit privileges and enable item level security wherever I could find that option while editing. Has anyone successfully added security to even a folder?
Thanks in advance.
Best Regards,
Lindsay

Lindsay,
I'm not sure if this is what you are looking for, but you can secure access to portlets that are shown in the portlet repository
through the Access tab that is available when you "Edit" the portlet entry in the Edit Folder view of the Portlet repository.
[ol]
[li]Go to the portlet repository
[li]Navigate to the appropriate folder
[li]Edit the folder
[li]Click on the Edit link beside the portlet of interest
[li]Click on the Access tab
[li]Turn on access control and specify privileges on the portlet.
[ol]
See if this is what you are looking for, or let me know if I'm off base.

Menu item level security

How can I enable item level security on a menu?
I would like different users to see only parts of a menu.
Portal 3.0.8.9.2
I unchecked the "Inherit from Component" checkbox and can grant security to the menu as a whole, but not to a submenu or item. Is this possible?
Thanks,
Gary

Hi Gary
Although we are using version 3.0.9.8.1 I don't think that this makes the difference. For me there is a certain contradiction between your basic question and your actual answer.
My conclusion: In the matter of fact you didn't uncheck the 'inherit from component' checkbox in the develop tab, but the 'inherit from application' one in the access tab,
what is wrong and doesn't help to solve your problem!
Find the 'inherit from component' checkbox - by editing the top level menu - near checkboxes like 'inherit from component' under COMMON OPTIONS like e.g. 'Show Timing' or 'Log Activity' and uncheck it. The SECURITY 'multi select box' is shown immediately.
Hope this helps!
Thanks
Peter

Group Level Data Level Security not working

I'm trying to test the data level security at the group level.
Here's what I did
1. Went to the security -> Groups -> Permissions -> Filters
2. In Name added the Fact table on which I want to filter.
3. Selected "Enable"
4. In Filter Column I added a filter on a column in the dimension. (I didn't use any session variables in the filter)
When I create an answers query with the column from the dimension (Which I used in filter) and fact from the fact table where I defined the filter, the filter is not applied..
Am I missing something in the creation of filters?
Thanks in Advance.
Rama.

Hi,
If the user is member of both user defined and Administrator group no filter will be applied to them because Administrator group will take precedence and no filter can be applied to Administrator.Even if you ooen Administrator group, you will see that permission tab is disabled for Administrator group.
Hope this helps.
Regards,
Sandeep

Attribute Level Security on Portal Tabs

Similar Messages

Maybe you are looking for