Authorization control on different subdirectories in content manager

hi All,
IHAC, in a GS, administrator defines content manager taskflow and assigns authorization for different roles on content,customer needs to control authorization on different sub directories, for example: dir1 has 2 sub directories, dir1_1 and dir1_2, customer wants to assign u1 to manage dir1_1, assign u2 to manage dir1_2.
Use different GS is not a solution in this case.
While I can define multiple pages for each subdirectory, content manager has different subdir defined, each page has it's own access control, page_dir1_1 will deny u2 to visit, page_dir1_2 will deny u1 to visit, but this disables u1 to query dir1_2 and u2 to query dir1_1.
Security group and account has been assigned for dirs in ucm, seems I can't use them to refine the control.
Is there any sulotion on this?

Hi,
C_PROJ_VNR
PS
PS: Project Manager for Project Definition with ACTVT 01
C_PRPS_VNR with actvt 03
Provide above object to Dept. A users to let them create project definition with activity 01.
C_PRPS_VNR
PS
PS: Project Manager Authorization for WBS elements with ACTVT 01
C_PROJ_VNR with ACTVT 03
Provide above to Dept B users to let them create WBS element for specific project with activity 01
Is it not working with above, could you try this?
BR,
Mangesh

Similar Messages

Unable to view external webcam content. I'm using IE11 with Windows 7 64 bit. I've tried deactivating Activex control, tried different browsers etc, tweeked the tools for trusted sites etc, but am totally stuck. I know the cams are working as i can view

Unable to view external webcam content. I'm using IE11 with Windows 7 64 bit. I've tried deactivating Activex control, tried different browsers etc, tweeked the tools for trusted sites etc, but am totally stuck. I know the cams are working as i can view them on mobile phone via puffin browser. I can play Youtube videos etc just fine. So why not the webcam?

First, confirm that ActiveX Filtering is configured to allow Flash content:
https://forums.adobe.com/thread/867968
Internet Explorer 11 introduces a number of changes both to how the browser identifies itself to remote web servers, and to how it processes JavaScript intended to target behaviors specific to Internet Explorer. Unfortunately, this means that content on some sites will be broken until the content provider changes their site to conform to the new development approach required by modern versions of IE.
You can try to work around these issues by using Compatibility View:
http://windows.microsoft.com/en-us/internet-explorer/use-compatibility-view#ie=ie-11
If that is too inconvenient, using Google Chrome may be a preferable alternative.

Authorisations in Content Management folders..Controlling viewing

Hi All,
Need some advice over a situation that I have here in controlling access in Content Management...I am a bit stuck here.
CM Structure
                                            User 1
Folder 1                            Group1 Read
            Folder 2
                       Folder2.1
            Folder 3
                       Folder3.1
            Folder 4
                       Folder4.1
            Folder 5
                      Folder 5.1 Group51 FC
                      Folder 5.2
1) User 1 has FC over folder 5.1
2) Created a group 51 and attached the user to the group
3) For the user to see the entire folder structure, he needs to have a read access to the top Folder. Hence created a Group1 in the top. Attached Group 51 to group1.
Now when the user logs in, he sees the entire structure, but when he clicks on Folder 2, Folder 3 etc...he does not see any content in it, this is because these folders inherit permissions from the top folder.Hence all this folders gets a "read" access. and when the user clicks on to 5.1, he is allowed full control.
However, my client does not want users to see the Folder 2,3,4..If I give Read access in the top...it gets inherited down..if I dont give read access in the top, no one can see anything below.
Since I have a large number of folders in the next level, it is not practical for me to delete read access in the next level.
Any advice on how I can solve this problem.
Regards,
Rajan.K

Is it feasible in your scenario to simply set the unwanted folders to "hidden" or is it completely ACL-based? With the regular end-user explorers (e.g. ConsumerExplorer), hidden folders won't be shown (this is a setting of the corresponding collection renderer). Administrative Explorers (e.g. Admin Explorer) do show hidden files, though. Note that you can only modify the hidden state with such an administrative explorer. This makes sure that you have at least one way to reset that state and to not hide it in an explorer that afterwards does not show the file and thus would not allow you to reverse that step (in principle this means that users with no administrative accesses whatsoever will never be able to hide resources).
Regards, /-/ans-Juergen

Access control for different user groups in APEX 4.0

Hi guys,
in Apex 4.0, is there any way to use the access control page to configure access control for different user groups?
The access control page currently only has an access control list by users with 3 privileges namely, Administrator, Edit & View where Administrator has the highest access level & View the lowest. Therefore 1 user cannot have more than 1 different privilege, however if the user belongs to 2 or more different groups then we can control what access he can have in a more fine grained manner. We also want to have more than the 3 privileges given.
Can we assign different groups to different users and let them have different privileges to be configured by page, region, process or item level?
Now Apex will create 2 tables, Apex_Access_Control & Apex_Access_Setup to store the application access control mode & access control list. It will also create 3 authorization schemes "access control - administrator", "access control - edit" & "access control - view" based on the 2 tables.
Does this mean we have to change the table structures & edit the authorization schemes to suit our usage? We are reluctant to do this because if we upgrade to a newer version of Apex then we would have to merge our pl/sql coding with Apex's updated code.
How can we auto-configure more than the 3 authorization schemes in the access control page? Is there any way to achieve a finer grain of access control based on the current access control administration page given by Apex without writing it ourselves?
We are afraid that we may have missed something on Apex access control & do not want to reinvent the wheel.

Hi Errol,
to build your own application authorization scheme around the security model supplied by Apex for administration of the Apex environment would be a bad idea.
This was never intended for authorization scheme management in custom built Apex applications, it was solely intended to control access in the Apex environment overall. The API for it is not published, and making changes to it, such as adding more roles, would run the risk of breaking the overall Apex security model. It would not be supported by Oracle and Oracle would not guarantee the upwards compatibility of any changes you make in future versions of Apex.
In short, you should follow Tyson's advice and build your own structure. As he indicated, there are plenty of examples around and provided your requirements are not too complicated, it will be relatively simple.
Regards
Andre

Is RoboHelp a content management system?

I know RoboHelp can use conditional tag to manage file
content. RoboSource control can do version control. Then what is
the difference between RoboHelp and Content Management system?
Thanks.

Well, the basic unit of information in RH is the topic. There
are features to modify a topic and to exclude it from the final
output. But you can't re-use part of a topic in another topic.
In a real CMS, you are writing building blocks from which the
output is generated. Talking about online help, you can have one
building block appear in a multitude of different topics. If you
change one block, the changes propagate through all topics using
this building block.
And don't get me startet abour robustness, reliability and
the ability to handle large projects...
RH has several features which emulate a CMS, but the basic
concept is completely different.
---Dirk Bock

New development in Flash Captivate and Content Management

My compay currently uses Serena Collage for Content
Management along with Macromedia Studio MX 2004 for web site
development. We have an upcoming e-learning project that we are
considering developing in Captivate and Flash. We are mandated that
all development be Section 508 compliant and e-learning must be
SCORM compliant as well.
Can I continue to use Collage to manage content developed
from Captivate and Flash or will I have to use a different product?
According to documentation Captivate SCORM and 508 compliant and is
Flash 508 compliant is this correct?
Please advise.

I am not familiar with Collage or its requirements, but Flash
MX 2004 is 508 compliant, I have had to make partial and full
compliant courses with it. That being said, it took us a decent
amount of time and effort.

I can't delete a file in the Content-Management

Hello,
I can't delete a file in the Content-Management, altough I have full control.
I get the following error message:
System error (com.sapportals.wcm.repository.ResourceNotFoundException): null
Many thanks for the help.

Dear SAPMuffel ,
As far as we can see the error "com.sapportals.wcm.repository.ResourceNotFoundException" is telling that the resource you are trying to delete could not be found, that is also to say, it might not exist any more.
So please let me know exactly how you can reproduc this issue?
and what kind of file it is? under what kind of KM repository?
Is there any other file under the same KM folder?
Also you can reproduce the issue and then check the lastest defaulttrace file under this folder:
../j2ee/cluster/server0/log/defaultTrace.*.trc
here you can find the detailed exception.
Best Regards,
Thunder

How to get the url of a document in content management?

Hello,
I have used API 'SKWF_PHIO_CONTENT_URL_GET to get the url of a file in CRM content management. But when I tried to open this url in explorer got error message "SSF error: Decoding not possible". Could any one please help me to resolve this problem.
Thanks
Nisha

Thanks for replying - unfortunately, there is not much
support on these forums.
I wish there was some way to emulate the mouse from
Javascript to click the play, pause, and slider buttons... but one
would't even know, programmatically, the location on screen of the
play, pause, and slider buttons.
quote:
Originally posted by:
davexnet
You'll notice that questions like this don't get answered on
this
forum. The Flash player has a philosophy that skews the power
over almost everything about it to the content providers,
and precious little control, if at all, to the client player.
It's a crappy situation - I use Flashblock in Firefox and
only view the
content *I* want to see.
It works for me, particularly since I'm using an older
(slower )
computer that really gets bogged down by aggressive Flash
content.

Error while trying to edit in Bea Portal Administration Content Management

Hi,
we are exploring the weblogic portal administration 9.2 and we encounter an exception when editing a content in the Content Management feature. We use the weblogic default workflow, we create a user attached to a group, add that group to a role, then delegate the edit and view capability of a content node in the Content Management to that role, we login using the respective user, check out the content, try to edit the property but then the exception occurs.
It says "A Repository Exception was thrown: User does not have view privileges on the node"
the detail exceptio on the property page was:
"javax.servlet.jsp.JspException: Could not find a node at the key: nodeReqAttr
at com.bea.jsptools.content.node.ViewPropertyTag.doStartTag(ViewPropertiesTag.java374)
at jsp_servlet._contenet._node._nodeselected._properties._listpropertiescheckout._jsp_tag46 ...."
Could u help us what step we went wrong, because we previously try this in the WLP 8.1.4 portal administration the exact same step but never encounter this error before.
And is there anyway I can atteched screenshots to help better explain this problem?
Thank you for your help.

Hi,
You have to set your activex control properly. then only edit locally in KM will work.
Also check the below wiki
https://www.sdn.sap.com/irj/scn/wiki?path=/display/KMC/HowtotroubleshootproblemswithLocalEditing
Hope that helps
Raghu

I can no longer edit my custom content management system using Firefox

Hello,
I work for the University of North Carolina. We have a very old custom content management system that is built in Oracle (UCM). When logged in, it has little edit buttons that allow you to click on items and launch edit windows. I don't know what's behind that -- it's not Java. I'm thinking javascript? All I know is that since the Firefox upgrade to 13.0.1, the edit buttons no longer display, and the sites are not editable.
So far, the only way we've been able to allow people to edit their sites is by forcing them to use IE9 in compatibility mode. All other browsers fail for various reasons. Firefox is our workhorse browser, but we're desperate to have Firefox back.
I understand we also have some problems with our Remedy application -- not sure what's happening, but it's also no longer functional in Firefox. I'm wondering if there is a patch in the works that will address these issues?
BTW, it sounds a lot like this issue here: http://support.mozilla.org/en-US/questions/930042

Drat... So, we tried taking out the javascript entirely. No real change, except lightbox actions would not function. Then, we tried referencing a different javascript version. No difference, except that lightboxes and Carousels still would not function.
To see if the $ error was universal across all of our sites, I logged into four or five other UCM sites. None of them threw the $ error, only the Art site. What's interesting is that for all sites, you can see editable areas if you look for them (e.g. mouse randomly around the areas where there used to be buttons to click on), but the icons continue to not show up.
The warnings coming from the console seem fairly benign, and it's only the Art site that throws a definite error. The only thing that seems consistent across all sites is the warning: "server does not support RFC 5746, see CVE-2009-3555".
Any other thoughts? I'm not sure a guest logon would help, but I can certainly pursue that line of action if you'd like to dig a little deeper.
Thanks in advance,
- Veda

Content Management using WLP Vs using a Third Party CM Tool

Hi All,
In our Application we have a Workflow which we earlier implemented using WLI and stored the Content in File System ( The Dis advantages with this is no versioning capability , hard to manage the Content etc..)
Now we are plannning to use WLP's Content Management Capabilities.
Does the Library Services support a workflow ?? Does Workflow Definitions conform to any standard ?? (Like BPEL etc)
The Content we have is a set of forms ( XML Based) and are unique for each user Task . Might be using the goal technology to capture the data from the Users..
I would like to know the pros and cons of using WLP Content Management Features vs Storing the Content in a Full fledged CM tool and accessing it from the Portlets Deployed.
Features we are looking for are..
Versioning , Search Capabilities , History info
Thanks
Sateesh

How do I create plan.xml for every env Im not sure what you mean. Use vi/notepad if you want! See the section 'Using an Existing Deployment Plan to Configure an Application' in the link. You simply need to create this plan once with the value you want and you can use the same one with a different path value(the one you want to change) for each environment. Whether you want to create a template plan.xml whose value is replaced by an ant build is upto you.
Plan.xml is similar to a WLST script, you'd only need to parameterise the actual value you want to use as the path(and you'd have to run both for every deployment) - Im not sure this value is accessible over WLST though..
regards
deepak

Oracle Universal Content Management 11gR1 'download file1' is corrupt

Hello,
I am at http://www.oracle.com/technetwork/middleware/content-management/downloads/index-085241.html and downloaded the part 1 and 2 of the Oracle Universal Content Management 11gR1 software. The part 2 looks good but part 1 is corupt (it is only 4mb). I tried this download from different computers and browsers which doesn't help
Does everyone have the same problem?
Thanks

Workflow for document approvals and routing is supplied out of the box without the need for separate software or installs.
What you can do is described here:
http://download.oracle.com/docs/cd/E10316_01/cs/cs_doc_10/documentation/admin/workflow_guide_10gr3en.pdf
The more complex integrated processes can use BPEL Manager which does require addditional component and software
Tim

Oracle UCM (Universal content management)

Hi Friends,
I would like to know the Details on Oracle UCM (Universal content management)
Please tell me the different versions and the installation and configuration documents.
Regards

Hi Eduardo:
I'd would like to know about ORACLE UCM, can you please tell me where can I find a tutorial about this. I've been read the manuals of Oracle page.
Do you know if there are spanish tutorials?
thanks,
Vilma

Binary values corrupted in Content Manager

Hello,
When I copy and paste (or move) a content that has a property binary, in the second instance (the copy) these properties are corrupted. When I try to access to these properties, I receive the next exception:
com.bea.content.RepositoryException: No binary value could be found for property.
I'm working with WLPortal 10.3.
Is this a bug of Portal?
Is there any way to do this and the data are not corrupted?
Thanks.

When I copy or move there isn't exception, but when I access to the binary property of copy, it log this exception:
An error occurred while attempting to download the file. Use the browser back button to continue working.
com.bea.content.RepositoryException: No binary value could be found for property. Repository: catsrv Repository Property ID: 510536002/Docu_relacionada.archivo/510540053 at com.bea.content.manager.internal.InternalNodeOpsBean.getPropertyBytes(InternalNodeOpsBean.java:1853) at com.bea.content.manager.internal.InternalNodeOpsBean.getPropertyBytes(InternalNodeOpsBean.java:2023) at com.bea.content.manager.internal.NodeOpsEJB_ihurl6_ELOImpl.getPropertyBytes(NodeOpsEJB_ihurl6_ELOImpl.java:181) at com.bea.content.manager.internal.NodeOpsImpl.getPropertyBytes(NodeOpsImpl.java:748) at com.bea.content.federated.internal.NodeManagerImpl.getStream(NodeManagerImpl.java:990) at com.bea.portal.tools.content.controls.ContentNodeControlImpl.getStream(ContentNodeControlImpl.java:281) at com.bea.portal.tools.content.controls.ContentNodeControlBean.getStream(ContentNodeControlBean.java:1223) at content.node.nodeSelected.download.DownloadContentController.begin(DownloadContentController.java:184) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:879) at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:809) at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:478) at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:306) at global.internal.AbstractBaseController.internalExecute(AbstractBaseController.java:360) at org.apache.beehive.netui.pageflow.FlowController.execute(FlowController.java:336) at org.apache.beehive.netui.pageflow.internal.FlowControllerAction.execute(FlowControllerAction.java:52) at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:431) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.access$201(PageFlowRequestProcessor.java:97) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor$ActionRunner.execute(PageFlowRequestProcessor.java:2044) at org.apache.beehive.netui.pageflow.interceptor.action.internal.ActionInterceptors.wrapAction(ActionInterceptors.java:91) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processActionPerform(PageFlowRequestProcessor.java:2116) at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:236) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:556) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853) at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631) at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158) at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at com.bea.jsptools.servlet.PagedResultServiceFilter.doFilter(PagedResultServiceFilter.java:82) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at com.bea.p13n.servlets.PortalServletFilter.doFilter(PortalServletFilter.java:336) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at weblogic.servlet.internal.RequestDispatcherImpl.invokeServlet(RequestDispatcherImpl.java:503) at weblogic.servlet.internal.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:251) at org.apache.beehive.netui.pageflow.internal.DefaultForwardRedirectHandler.forward(DefaultForwardRedirectHandler.java:128) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.doForward(PageFlowRequestProcessor.java:1801) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processPageFlowRequest(PageFlowRequestProcessor.java:741) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.processInternal(PageFlowRequestProcessor.java:474) at org.apache.beehive.netui.pageflow.PageFlowRequestProcessor.process(PageFlowRequestProcessor.java:853) at org.apache.beehive.netui.pageflow.AutoRegisterActionServlet.process(AutoRegisterActionServlet.java:631) at org.apache.beehive.netui.pageflow.PageFlowActionServlet.process(PageFlowActionServlet.java:158) at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:414) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292) at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at com.bea.jsptools.servlet.PagedResultServiceFilter.doFilter(PagedResultServiceFilter.java:82) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at com.bea.portal.tools.servlet.http.HttpContextFilter.doFilter(HttpContextFilter.java:60) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at com.bea.p13n.servlets.PortalServletFilter.doFilter(PortalServletFilter.java:336) at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3502) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) at weblogic.security.service.SecurityManager.runAs(Unknown Source) at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2186) at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2092) at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406) at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201) at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)

Authorization control- WBS specific

Hi Experts
My client handles major projects.
Each WBS is owned by a management personnel like:
DGM Mehanical: Mechanical activities
DGM Electrical: Electrical engg activities
DGM Civil: Civil engg activities
Like wise various other responsible teams handle each work package (WBS).
In this context, can we ensure authorization control WBS wise?
It means, the WBS owned by Mech DGM should be editble to him only, and rest users should not be allowed for editing the sub objects of Mech WBS?
Or, if this can be managed using user status, please suggest how the required functionality can be achieved.
warm regards
ramSiva

Hi,
You can use Person Resposible field in the WBS master data for the purpose.
In T-code OPS6 you enter Person Responbile , Name , Office User.
Create Three roles , DGM Civil (12), DGM Elec (13) , DGM Mech (14).
For Authorization object C_PRPS_VNR enter for field PS_VERNR = 12 and PS_ACTVT = 01,02 & 03 for DGM Civil Role.
Similarly for other roles.
Key in 12 in person responsible field of the WBS belongs to DGM Civil.
Assign DGM Civil role to DGM Civil user.
Then he can only edit and ret can only view.
Option 2 :
You can also use Project Type.
Object = C_PRPS_ART
Create three project types Civil, Elec, Mec . In respective WBS select the project type as desired and assign that project type to the concerned role.
You can take help of Basis consultant for clear understanding.
Thanks
Saikishore.Ganga

Authorization control on different subdirectories in content manager

Similar Messages

Maybe you are looking for