Authorization Issue with Custom Pending Value Object and Anonymous Users

Hi,
I am just converting my demo from version 7.1 to 7.2. I am not doing upgrade. The demo uses a custom pending value object USER_REQUEST. The idea is that new employee goes to Java AS as anonymous user and enters her details and store where she will work. After submitting request there is an approval process using custom entry type USER_REQUEST. If the request is approved then IdM converts USER_REQUEST into MX_PERSON entry. This works nice in 7.1 but I am having problems with replicating this in 7.2. I created new UI task accessible by anonymous that creates new USER_REQUEST entry. I also assigned role idm.anonymous with UME action idm_anonymous to UME built in group Anonymous users.
My problem is with the field STORE. This field is a reference field to another custom entry type STORE (this entry type will be used in context based assignment). Every new employee must selects a store where she will work. The problem is when user clicks on button "Select". Web dynpro terminates and returns authorization error. I also tested this with entry type MX_ROLE. I added attribute MXREF_MX_ROLE and same issue. So it seems that just assigning UME action idm_anonymous is not enough to list objects from identity store. I found a workaround for this issue. When I assign also UME action idm_authenticated to Anonymous users then it does not dump and I get a pop up window where I can search for store. It does not seem right to assign idm_authenticated to anonymous users.
Another issue is with display task for entry type USER_REQUEST. I assigned a display task to entry STORE and I set that Anonymous have access to this task in Access control tab. I assigned default value to the field store. So when a user opens page she can see a hyper link to display already assigned store. When user clicks on this hyper link it opens a new pop up window and user must authenticate against Java AS. After successful authentication the display task for entry STORE is displayed. I would assume that anonymous user can display it without authentication.
So to me it seems like authorization checks have been changed in 7.2 versions and are more strict for anonymous tasks. Hence my question is how can I implement my scenario. Am I missing some configuration or what's the proper solution to my two issues? I don't count assigning idm_authenticated to Anonymous users as a solution. This workaround does not solve my second issue.
Thanks

Some of the folks from Trondheim labs check, but rather infrequently. There's another person who I guess is in consulting that also checks from time to time.
Sorry I can't help you with your main question...
Matt

Similar Messages

Small issue with custom table cell editor and unwanted table row selection

I'm using a custom table cell editor to display a JTree. Thing i notice is that when i select a value in the tree pop-up, the pop-up closes (as it should) but then every table row, from the editing row to the row behind the pop-up when i selected the value becomes highlighted. I'm thinking this is a focus issue, but it thought i took care of that. To clairfy, look at this: Before . Notice how the "Straightening" tree item is roughly above the "Stock Thickness" table row? When i select Straightening, this is what happens to my table: After .
My TreeComboBox component:
public class TreeComboBox extends JPanel implements MouseListener {
    private JTextField itemField;
    private TreeModel treeModel;
    private ArrayList<ActionListener> actionListeners = new ArrayList<ActionListener>();
    private Object selectedItem;
     * Creates a new <code>TreeComboBox</code> instance.
     * @param treeModel the tree model to be used in the drop-down selector.
    public TreeComboBox(TreeModel treeModel) {
        this(treeModel, null);
     * Creates a new <code>TreeComboBox</code> instance.
     * @param treeModel the tree model to be used in the drop-down selector.
     * @param selectedItem tree will expand and highlight this item.
    public TreeComboBox(TreeModel treeModel, Object selectedItem) {
        this.treeModel = treeModel;
        this.selectedItem = selectedItem;
        initComponents();
     * Returns the current drop-down tree model.
     * @return the current <code>TreeModel</code> instance.
    public TreeModel getTreeModel() {
        return treeModel;
     * Sets the tree model.
     * @param treeModel a <code>TreeModel</code> instance.
    public void setTreeModel(TreeModel treeModel) {
        this.treeModel = treeModel;
     * Returns the selected item from the drop-down selector.
     * @return the selected tree object.
    public Object getSelectedItem() {
        return selectedItem;
     * Sets the selected item in the drop-down selector.
     * @param selectedItem tree will expand and highlight this item.
    public void setSelectedItem(Object selectedItem) {
        this.selectedItem = selectedItem;
        String text = selectedItem != null ? selectedItem.toString() : "";
        itemField.setText(text);
        setToolTipText(text);
     * Overridden to enable/disable all child components.
     * @param enabled flat to enable or disable this component.
    public void setEnabled(boolean enabled) {
        itemField.setEnabled(enabled);
        super.setEnabled(enabled);
    public void addActionListener(ActionListener listener) {
        actionListeners.add(listener);
    public void removeActionListener(ActionListener listener) {
        actionListeners.remove(listener);
    // MouseListener implementation
    public void mouseClicked(MouseEvent e) {
    public void mouseEntered(MouseEvent e) {
    public void mouseExited(MouseEvent e) {
    public void mousePressed(MouseEvent e) {
    public void mouseReleased(MouseEvent e) {
        showPopup();
    private void initComponents() {
        setLayout(new GridBagLayout());
        itemField = new JTextField();
        itemField.setEditable(false);
        itemField.setText(selectedItem != null ? selectedItem.toString() : "");
        itemField.addMouseListener(this);
        add(itemField, new GridBagConstraints(0, 0, 1, 1, 1.0, 0.0,
                GridBagConstraints.WEST, GridBagConstraints.HORIZONTAL, new Insets(0, 0, 0, 0), 0, 0));
    private void showPopup() {
        final TreePopup popup = new TreePopup();
        final TreeComboBox tcb = this;
        final int x = itemField.getX();
        final int y = itemField.getY() + itemField.getHeight();
        int width = itemField.getWidth() + popupButton.getWidth();
        Dimension prefSize = popup.getPreferredSize();
        prefSize.width = width;
        popup.setPreferredSize(prefSize);
        SwingUtilities.invokeLater(new Runnable() {
            public void run() {
                popup.show(tcb, x, y);
                popup.requestFocusInWindow();
    private void fireActionPerformed() {
        ActionEvent e = new ActionEvent(this, ActionEvent.ACTION_PERFORMED, "TreeComboBoxSelection");
        for (ActionListener listener : actionListeners) {
            listener.actionPerformed(e);
    private class TreePopup extends JPopupMenu {
        private JTree tree;
        private JScrollPane scrollPane;
        public TreePopup() {
            initComponents();
            initData();
        private void initData() {
            if (treeModel != null) {
                tree.setModel(treeModel);
        private void initComponents() {
            setFocusable(true);
            setFocusCycleRoot(true);
            tree = new JTree();
            tree.setRootVisible(false);
            tree.setShowsRootHandles(true);
            tree.setFocusable(true);
            tree.setFocusCycleRoot(true);
            tree.addTreeSelectionListener(new TreeSelectionListener() {
                public void valueChanged(TreeSelectionEvent e) {
                    tree_valueChanged(e);
            scrollPane = new JScrollPane(tree);
            add(scrollPane);
        private void tree_valueChanged(TreeSelectionEvent e) {
            DefaultMutableTreeNode node = (DefaultMutableTreeNode) tree.getLastSelectedPathComponent();
            setSelectedItem(node.getUserObject());
            fireActionPerformed();
            this.setVisible(false);
}My TreeComboBoxTableCellEditor:
public class TreeComboBoxTableCellEditor extends AbstractCellEditor implements TableCellEditor, ActionListener {
    protected TreeComboBox treeComboBox;
    protected ArrayList<CellEditorListener> cellEditorListeners = new ArrayList<CellEditorListener>();
    public TreeComboBoxTableCellEditor(TreeComboBox treeComboBox) {
        this.treeComboBox = treeComboBox;
        treeComboBox.addActionListener(this);
    public Object getCellEditorValue() {
        return treeComboBox.getSelectedItem();
    public Component getTableCellEditorComponent(JTable table, Object value, boolean isSelected, int row, int column) {
        treeComboBox.setSelectedItem(value);
        return treeComboBox;
    public void actionPerformed(ActionEvent e) {
        stopCellEditing();
}Any thoughts?
Edited by: MiseryMachine on Apr 3, 2008 1:21 PM
Edited by: MiseryMachine on Apr 3, 2008 1:27 PM

As I said, you have to have empty context elements before additional rows will be open for input.
For instance if you want to start with 5 rows available for input do the following to your internal table that you will bind:
data itab type standard table of sflight.
do 5 times.
append initial line to itab.
enddo.
context_node->bind_table( itab ).
The other option if you need n number of rows is to add a button to the table toolbar for adding more rows. When this button is pressed, you add a new context element to the node - thereby creating a new empty row in the table.

Modification to Pending Value Object

Hi,
we have defined an Add Member Task for all Privileges, so that a Pending Value Object (PVO) is created and an approval step can be performed.
Within the approval step we would like the user to add additional information (a reference to an MX_PERSON object). However, when the user adds such an attribute value in the approval window, the attribute value is not written to the database.
Is it possible that a PVO cannot be modified within an approval step? Is there any workaround to this behaviour?
Thanks in advance for your help.
Best regards
Holger

Hi Dominik,
thanks for the hint - I was already considering to use a custom PVO, but so far I haven't found an easy way to implement this when only requesting new privileges or roles.
I can see two alternatives in using a custom PVO:
1. We still have the Add Member Task defined on the privilege. When a privilege is requested, I get a standard PVO. I would then have to start/create my custom PVO and perform the approval. The problem with that solution is that I need to make sure that the standard PVO Ordered Task Group is waiting for the completion of my custom PVO. So we would need to perform a tricky synchronization between the tasks.
2. We do not have an Add Member Task. In this case we need to make sure that the provisioning is not immediately started once the user has pressed the Submit button. So I would need to make sure that we do not use the MX_PRIVILEGE attribute on the interface, but rather another temporary attribute that shows all the available privileges. In that case I would lose some of the functionality when searching for privileges and showing the user's current privileges is not that easy.
Did you also implement requesting additional privileges with custom PVOs?
Best regards
Holger

Authorization Issue with ODS

Dear all,
I have an authorization issue with two ODS.
One I activated for BEx reporting --> Is working fine in Dev, but I get error with
missing authorization in QUA, althought some authorizations.
Same issue with a newly created ODS, which works in Dev, but gives an error
with missing authorization in QUA.
What can be the reason for this? Any input is highly appreciated!
Cheers,
Claudia

Hi,
check that the role(s) are transported from your DEV and your QA, and that the user has the correct role(s)
Check as well in your QA transaction RSSM for your ODSs objects; it might be that by transporting the ODS, some authorizations have been applied by default.
hope this helps...
Olivier.

Issue with retrieveing the Manager of a System User in a Custom workflow - CRM 2013

Issues with custom workflow activity in CRM 2013 On-prem
I'm trying to pass the Manager of the System
here is the code that I'm running, it gets to setting the MANAGER and stops
I put the ran the FetchXML seperatly and it does return a value so I know what bit works
public class CaseAccountManagerManagersLookup : CodeActivity
// Inputs
[Input("Enter Case")]
[ReferenceTarget("incident")]
public InArgument<EntityReference> CA { get; set; }
// Outputs
[Output("Manager Output")]
[ReferenceTarget("systemuser")]
public OutArgument<EntityReference> AMOUT { get; set; }
protected override void Execute(CodeActivityContext executionContext)
// Context
IWorkflowContext context = executionContext.GetExtension<IWorkflowContext>();
IOrganizationServiceFactory serviceFactory = executionContext.GetExtension<IOrganizationServiceFactory>();
IOrganizationService service = serviceFactory.CreateOrganizationService(context.UserId);
//Create the tracing service
ITracingService tracingService = executionContext.GetExtension<ITracingService>();
// get the account and renewals manager ID's
var CASE = CA.Get<EntityReference>(executionContext);
tracingService.Trace("Case ID = " + CASE.Id);
try
// FETCH
string fetchXml = string.Format(@"
<fetch version='1.0' output-format='xml-platform' mapping='logical' distinct='false'>
<entity name='incident'>
<attribute name='title' />
<attribute name='incidentid' />
<order attribute='title' descending='false' />
<filter type='and'>
<condition attribute='incidentid' operator='eq' value='{0}' />
</filter>
<link-entity name='contact' from='contactid' to='customerid' alias='ak'>
<link-entity name='account' from='accountid' to='parentcustomerid' alias='al'>
<link-entity name='systemuser' from='systemuserid' to='bc_dssalesperson' alias='am'>
<attribute name='parentsystemuserid' />
</link-entity>
</link-entity>
</link-entity>
</entity>
</fetch>", CASE.Id);
EntityCollection case_results = service.RetrieveMultiple(new FetchExpression(fetchXml));
//tracingService.Trace("fetch has run");
if (case_results.Entities.Count != 0)
foreach (var a in case_results.Entities)
//if (a.Attributes.Contains("ai_parentsystemuserid"))
tracingService.Trace("set manager id next");
var MANAGERID = (EntityReference)a.Attributes["parentsystemuserid"];
tracingService.Trace("manager id set");
AMOUT.Set(executionContext, MANAGERID);
throw new InvalidOperationException("Want to see trace");
tracingService.Trace("end ");
catch (Exception e)
throw new InvalidPluginExecutionException("Plugin - CaseAccountManagerManagerLookup - " + e.Message);
finally
throw new InvalidOperationException("Want to see trace");
Pete

Hello,
Try to use am.parentsystemuserid instead of just parentsystemuserid.
Dynamics CRM MVP/ Technical Evangelist at
SlickData LLC
My blog

Issues with Custom Chart

Hi,
I am facing some issues with custom charts.
1. X Axis value is getting cut off. Given date as x axis parameter and last 2 digits of date is getting cut off. (format like 19-Apr-2011T00:00:00). And this value cut of happening only for custom chart.
2. On right click of the custom chart, when i am selecting Preview, it opens a new pop up window with and error as Error: "Application error occurred during the request processing.". No preview is being generated.
3. In Server Scaling, i checked Use global auto scaling, and many times it is showing improper y axis or mutiple y axis values with the same value or it is displaying improper global range
kindly help
Regards
Muzammil

Muzammil,
Without seeing your data and your chart configuration, it is difficult to understand exactly the issues you are encountering. I have the same JRE and the same version and build of MII as you. I have no difficulty with the scaling or with Global Range, but problems displaying the date in my tests.
I would suggest the you enter a ticket into the SAP Support System, and enclose a copy of your data (run the query, use Browser with Content Type = text/xml) and export a copy of you display template.
Lastly, what type of query are you using - sql, tag?
Kind Regards,
Diana Hoppe

Issues with Custom Settings

Is anyone else having issues with custom settings on 10.8.2?
I am trying to configure basic office 2011 settings based on the keys located at http://afp548.com/mediawiki/index.php/Office_2011_Settings using a device group.
However, when I log into an authenticated user's machine and load pref setter I can see that the customizations are not found on the newly managed machine. I know the push updates are working, but for custom settings I seem to be getting nothing.
My questions:
- Am I just flat our doing it wrong? (meaing, should the plist files be copied over)
- Are there common issues to look out for?
- Can anyone share basic custom settings they have that work?
Thanks!

Thats a bad idea. Office dos not react well to having it's prefences copied from one machine.
Check out: http://www.officeformachelp.com/office/administration/mcx/
It's a good guide for MS Office prefs.

OSX 10.9.1 Compatibility issue with Sharp Aquos PN-L702B and PN-L802B

I have Mac Mini's connected to the Sharp Aquos PN-L702B and PN-L802B touch screens and after updating to 10.9.1 am experiencing what appears to be a compatibility issue with the Sharp TPM driver and the OSX 10.9.1.
Everything works perfectly previously on 10.8.4 and 10.8.5. I did not test on 10.9.0 as I went straight to 10.9.1. Anyone else having this problem? Any thoughts on resolution?

OK so perserverance seems to have helped here - i used the cmd R function on start up to get to the page where i can re install OS X Lion - Safari now working.
However i have Office 2011 for MAC and now Excel wont start so i will post on another thread for help with this
Hope this helps if anyone has a similar issue

Issue with Acrobat 10.1.2 and Windows 7 64-bit Preview Handler

Hi. I work in an enterprise environment that is currently migrating to 64-bit Windows 7. The only version of Acrobat we have approved for Windows 7 is 10.1.2. We're seeing an issue with this version that causes the preview handler to not work. The preview panel in Explorer is just white and will eventually give the error "Preview handler surrogate host has stopped working." I've tried to fix listed on http://www.pretentiousname.com/adobe_pdf_x64_fix/index.html but that registry key is already correct. Our current work around for these users to just install Reader X1 and make it the default PDF handler, but I would like to find a better solution. Is there a known issue with Acrobat 10.1.2 and 64-bit operating systems? Or is there a way to change just the default preview handler?

Most of the info on the web page you link to is 2-4 years old. I doubt it applies. Your workaround is actually the best solution: It's always preferred to use the latest PDF viewer. Reader and Acrobat can exist on the same machine.
Also, why 10.1.2? There have been 6 releases since then with documented security enhancements (meaning there are also published vulnerabilities which are patched), bug fixesm, and feature enhancments.
I'll ping some folks about the error you are getting. . .
hth,
Ben

Are there any issues with using OS X Mavericks and Premiere CC?

Are there any issues with using OS X Mavericks and Premiere CC?

Official statement: http://blogs.adobe.com/premierepro/2013/10/premiere-pro-and-mac-os-x-10-9-mavericks.html
Peter Garaway
Adobe
Premiere Pro

Issue with Adobe Encore CS5.1 and Matrox MAX H.264 encoding on Windows

Here's some information on an issue that we've identified with Matrox products and Encore CS5.1:
"Issue with Adobe Encore CS5.1 and Matrox MAX H.264 encoding on Windows"

Still flickering on Encore even when rendered in MPEG-2 DVD in Pemiere Pro CS5.5. Looks perfect in Premiere Pro.
Any other ideas?
EDIT: Was looking for Google for people with similar problems to me and I came across this http://forums.adobe.com/message/3959757?tstart=0
I am currently re-rendering the video in PAL DV Widescreen MPEG-2 DVD and using maximum render quality.

Are there ANY compatibility issues with Itunes 12.0.1 and Mavericks? Don't want to download Yosemite. Not hearing good things about it.

Are there ANY compatibility issues with Itunes 12.0.1 and Mavericks? Don't want to download Yosemite. Not hearing good things about it. I'm on Mavericks 10.9.5.

one obstacle, quickly removed. thank you.
nomenclature aside for a moment, 10.6.8 is correct but maybe more is necessary about the MacBook Pro: it is 'old': Identifier: 1.2, Intel Core Duo, 2.16 GHz, 1 Processor, L2 2 MB, RAM 2 GB.
i hope that is enough to get an answer to this: is it unadvisable to update its OS; in other words, if i update to 10.9, will the machine be able to handle it, 'speedwise'?

I have Calendar v 7.0 and Entourage 12.3.6 2008 on OS X 10.9.2. I cannot import Entourage events into Calendar - this was never an issue with iCal. Whats happened and how can I import details into Calendar or do I need iCal back?

I have Calendar v 7.0 and Entourage 12.3.6 2008 on OS X 10.9.2. I cannot import Entourage events into Calendar - this was never an issue with iCal. Whats happened and how can I import details into Calendar or do I need iCal back?

adamboettiger wrote:
Sophos and MacKeeper
There are many reported problems with both these programs.
Run through this list of fixes in order, will tune you right up.
They are in order for a reason.
..Step by Step to fix your Mac

I am having multiple issues with syncing my iphone calendar and outlook There are often 1 hour time differences in the entries on the 2 devices and sometimes events that have been amended are not updated on iphone I mostly enter items on my laptop

I am having multiple issues with syncing my iphone calendar and outlook calendar on my laptop
I mostly enter the original items on my laptop
There are often 1 hour time differences in the entries on the 2 devices and sometimes events that have been amended are not updated on iphone

This sounds like an error in Time Zone support. The time zone needs to be the same in Outlook as well as the phone.

Issue with Visibility Settings for Backgrounds and Layers

I am using Acrobat Pro XI 11.0.10 (Windows) and having an issue with visibility settings for layers and backgrounds. I am attempting to get backgrounds to appear while viewing in Adobe Reader and Acrobat Pro but not be printed and so far have had no success.
When using a background the Appearance Options dialogue has "Show when printing" unchecked, but "Show when displaying on screen" is checked. This results in the background not showing on the screen, and the background will only appear once the box for "Show when printing" is checked. It looks like the option for printing is dictating whether or not the background is able to appear.
Using layers has not worked either. The background layer is set to "Never Prints", but will still show up when printed.
I was wondering if anyone else has run into this and has a solution, or has any recommendations.
Thanks in advance.

Hi setrev2012,
How are you adding the backgroud?
The only way I can think to accomplish this is via a watermark.
The basics...
Open PDF in Acrobat. Choose Pages > Watermark > Add Watermark.
Select a jpg or PDF of your background and adjust scaling options as desired.
Then click the Appearance Options.. and uncheck the Show When Printing option.
In this image the PDF is a blank page with the word "Test" on it. The watermark is the stamp and impression (a stock photo jpg).
If you want a solid color background, just create a flat image of the background color for use as the watermark.
If you have already followed the steps and still facing the issue then please share the file with me at [email protected] so that i can have a look.
Regards,
Rave

Authorization Issue with Custom Pending Value Object and Anonymous Users

Similar Messages

Maybe you are looking for