Authorization scheme not working.

My requirement is I want to allow access only to few people for some pages, buttons.
I am using Authorization scheme with scheme Type as "Exists SQL Query"
Working Query
SELECT p.EMP_ID FROM people p where emp_alias=:APP_USER and p.EMP_alias = 'ABC'
Not Working query
SELECT p.EMP_ID FROM people p where emp_alias=:APP_USER AND p.EMP_alias in ('ABC','XYZX)
Error: ORA-00907: missing right parenthesis
ERR-1082 Error in executing authorization scheme code.
Can anyone say what am I missing.

Thank you, adding braces and putting OR condition worked.
SELECT p.EMP_ID FROM people p WHERE emp_alias = :APP_USER AND (p.EMP_alias = 'ABC' OR p.EMP_alias = 'XYZX')
But not sure, how it is working some times and not working some times, if I have new lines, it doesnt work and if I have multiple conditions, it doesnt work.
This doesnt work..
SELECT p.EMP_ID FROM people p WHERE p.EMP_alias= :APP_USER and (emp_alias='ABC' or emp_alias='XYZ') and (p.EMP_ROLE='DBA' or p.EMP_ROLE ='DBAMGR')

Similar Messages

Page 0 security: authorization scheme not applied to other pages

the page 0 security: authorization scheme not applied to other pages (neither as an override for existing pages nor as a default for new pages).
how is this intended to work?

mcstock,
Can you clarify your question please? Can you give specific steps to reproduce this issue that you are inquiring about?
Thanks.
Joel

ME21N Material group level authorization is not working in ECC 6.0

Dear Security Experts,
We have created a role Z_ME21N with one Tcode ME21N. The role has to restrict users in the material group level.
For that, we added Authorization object M_MATE_WGR.
1. When we are trying to add field values for {M_MATE_WGR, BEGRU}, generally it should show me the list possible values to be used based on the MM configuration related to Material Authorization Group. We have correctly configured the authorization groups from V_TBRG for M_MATE_WGR. But itu2019s not showing any possible values.
2. However we are able to add values manually, but I guess these are not being considered during authorization check and our restriction on Authorization group level in ME21N is not working.
Test Scenario: We have manually added values 005,007,009,010,013 (which is pointing to specific material group) to BEGRU of M_MATE_WGR. We already assigned this Authorization Object to role Z_ME21N and this role has been assigned to u2018testuseru2019, but the authorization check with the M_MATE_WGR authorization group is not happening. It allows operations on all the material groups.
Anybody came accross same scenario?
SAP Prodcut version : ECC 6.0
Database : SQL Server 2005
Support pack level : 15
Please share your views, thanks in advance.
Regards,
Abu Sandeep

Dear All,
I got a reply just now from SAP regarding the same issue.
I coudnt understand what SAP and you are saying.
Dear Abu
*Apologies for the delay. This message has been turned on to application*
*area of MM from the Basis side just now.*
*Unfortunately, authorization object "M_MATE_WGR " is not checked*
*in the purchasing transactions (PR & PO), the system works as standard*
*functional designed.*
*Only the following objects are checked in PR/PO:*
*M_BEST_BSA Document Type in PO M_BANF_BSA Document Type in PR*
*M_BEST_EKG Purchasing Group in PO M_BANF_EKG Purchasing Group in PR*
*M_BEST_EKO Purchasing Org. in PO M_BANF_EKO Purchasing Org. in PR*
*M_BEST_WRK Plant in PO M_BANF_WRK Plant in PR*
*Setting in check/maintain on in SU24 only means that the profile*
*generator will propose the object when creating a user, however is*
*does not mean that M-MATE_WGR will be checked.*
*Please close this message by pressing the confirm button at your*
*earliest convenience.*
*Many thanks in advance for your understanding.*
So, how can I resolve this problem? John, are you sure that, you implemented this successfully?
SAP says, this cant be done.
Regards,
Abu Sandeep.

ISE authorization Policy not working

Hi ,
I have configured the ISE as per the belwo link
https://supportforums.cisco.com/document/110031/central-web-authentication-cwa-guests-ise
but my authorization policy is not working as when user get connected to guest wlan it get authneticated but when it look for authorization
it going to default policy it should hit on above policy created screen shot as below

What version of ISE + patch are you running?. Could you please send an screenshot of AUTH policies including the default --- > USE part?. Are you using customized portal for the first authentication process?
CWA is pretty straightforward. Only issues I faced was multiple VM (ISE Personas) running on one single server was not replicating properly the AUTHZ policies so I added the PSN persona into the PAN Node and everything worked fine immediately. In addition to that, I realized that I needed at least ONE ENTRY into the ISE PAN Internal Endpoints DB so I could hit the AUTH Policy for MAB & user not found condition which sent me to the AUTHZ = User Unknown + Redirect. Once I authenticated the user using the Default Portal that meant I hit the GUEST FLOW policy. If you are using customized portals for the first authentication process, check: web portal mgmt. --- > Guest --- > MultiPortal Configurations --- > Customized Portal -- > Authentication part.

Search using second categorization schema not working

Hi.
We're currently using SolMan 7.1 for quite some time now and we've successfully set up 2 categorization schemas. However, we recently noticed that the second categorization schema doesn't seem to work when we try to search for transactions using categories from this schema. Can you pls. give us an idea on what configurations we could be missing out on? Will greatly appreciate your help. Thanks in advance.
Regards,
Theresa

Theresa Viña Ng wrote:
Hi.
We're currently using SolMan 7.1 for quite some time now and we've successfully set up 2 categorization schemas. However, we recently noticed that the second categorization schema doesn't seem to work when we try to search for transactions using categories from this schema. Can you pls. give us an idea on what configurations we could be missing out on? Will greatly appreciate your help. Thanks in advance.
Regards,
Theresa
Hello, Theresa. I don't know if this problem is still actual for you - but may be SAP Note 2060164 (Category search criteria is not working for 2nd MLC schema) will help you...
BR,
Artem

URI Scheme Not Working - Windows

The URI scheme is not working on Internet Explorer or any browser in Windows 8. I am using the URI scheme from the microsoft technet site. Oddly enough, it works flawlessly on apple computers - it launches the microsoft remote desktop app when i click on
the link that contains the URI scheme. On Windows 8, it says that no apps are installed to read that file type (rdp). I really need the use of this. Why is it working on macs but not on pc's running windows?
Here is the URI scheme i am using - obviously the server name and domain have been replaced
rdp://full%20address:s:servername&domain:s:domainhere

Hi,
Yes, this URI Scheme only works for Android, Mac and IOS devices.
Remote Desktop Client URI Scheme Support
http://technet.microsoft.com/en-us/library/dn690096.aspx
For Windows Client, you need to register an application to a URI Scheme, such as associate mstsc.exe with rdp://
Registering an Application to a URI Scheme
http://msdn.microsoft.com/en-us/library/aa767914(v=vs.85).aspx
Hope this helps.
Jeremy Wu
TechNet Community Support

Custom url scheme not working (for first time) IOS applicaiton

i have created one distribution application also register custom URL scheme. First time after I installed application, and try custom URL link, it does not work.
However if I lunch the application manually it will prompt me below mentioned message
Are you sure you want to open the application ... from the developer iphone distribution ... ?
i will click on continue, and after that custom URL link works fine with my application.
Can Custom url link launch the application directly on installation (without manually launch application and contiue)?
is there any settings, so we can make the prompt message off. So it will not prompt message.
also i had tried to create new application from another enterprise account, and deploy on other server; then it do not prompt that message, but unable to figure out the reason .
Thanks

Are you exactly following the guidance in the iOS App Programming Guide for Implementing Custom URL Schemes? Do you get the same message the first time, no matter whether app has been loaded or not? Are you really using iOS 4 per your profile?
"If your app is not running when a URL request arrives, it is launched and moved to the foreground so that it can open the URL. The implementation of your application:didFinishLaunchingWithOptions: method should retrieve the URL from its options dictionary and determine whether the app can open it. If it can, return YES and let your application:openURL:sourceApplication:annotation: (or application:handleOpenURL:) method handle the actual opening of the URL.

Authorization CRM_BPROLE not working

Hi Experts,
We need below authorization for business partners in CRM 2007 UI,
Accounts - Only Edit & Display
Contacts - Create, Edit, Display
Employees - Only Display
For that we are using CRM_BPROLE authorization object as suggested in SAP Note 1129682 we also activated the BADI as mentioned in the Note. But the authorization object is still not working, is there anything else that we must do to make this object active.
We tried using CRM_BPROLE along with B_BUPA_RLT also, but that too is not working in CRM UI.
Appreciate you help.....
Regards,
Vikas

Hi,
at my current customer I have implemented OSS note Note 1259940 - Authority check for accounts depending on roles
Symptom
You use the authorization object B_BUPA_RLT and the activity 02 to control whether the user has the authorization to change data, depending on the roles that are assigned to an account, contact or employee. If the user has no change authorization for at least one business partner role, then the user is not authorized to lock the business partner.
Other terms
CRM WebClient UI
B_BUPA_RLT
PFCG
PARTNERROLE
Solution
Implement the method IF_UIU_BP_AUTHORITY~CHECK_EDIT of the BAdI BADI_CRM_BP_UIU_AUTHORITY in the enhancement spot CRM_UIU_BP_ENHANCEMENT. For this, implement the source code contained in the correction instructions. This note cannot be implemented using SNOTE.
I have setup my roles in that sense that I have maintained the same values in both objects, meaning CRM_BP_ROLE and B_BUPA_RLT. This works pretty well so far...
Kind regards
Davy Pelssers
SAP CRM/SAP Security consultant
www.dasap.be

Custom URL Scheme not working? (as supposed)

Hey,
I went into investigate about the "optional URL scheme" setting you can set up during building an app in the viewer builder.
Quote from the Viewer Builder help:
Optional URL Scheme
Specify the custom URL scheme that launches the viewer app from Safari and other apps. […]For example, suppose you specify “com.sportspub.kayaking” as the URL scheme. If you embed a “com.sportspub.kayaking://” link on your webpage, clicking the link from the mobile browser opens the viewer app. […]
The possibility sounds good, to link to the app from any web page you view on the iPad.
But during testing this, I found out it's not that easy and/or not working as documented.
Bob set the URL scheme for his app supposedly to
com.dpstips.may5
a link with
<a href="com.dpstips.may5://">
will not open Bob's app on the iPad ("invalid URL").
I looked into the compiled app from the viewer builder and found out the actual URL scheme used is completly different, it is
dps.7f80a0ffed3a4ff08734bc905aac4a29
and the correct link would be
<a href="dps.7f80a0ffed3a4ff08734bc905aac4a29://">
that will open Bob's app (you can try it here if you are on an iPad).
And if you know your interal folio and article names, you can even deep link into one article from a specific folio:
<a href="dps.7f80a0ffed3a4ff08734bc905aac4a29://v1/folio/DPS%20Folios/01_Folio_TOC">
you see these links in the landing page of the web viewer on the iPad.
I collected all links and tests in this jsFiddle, that you can open on your iPad to test yourself: http://jsfiddle.net/YRUGj/15/
Unfortunately, you cannot find out your real URL scheme without extracting your .ipa file and investigate the content's of the viewer, it is listed in the info.plist file.
Is this supposed to work this way or is this currently a bug that might be fixed soon?
—Johannes

Felipe, I suspect you have some basic knowledge about nerdy stuff, follow
the pink rabbit:
(extract your developerviewer.ipa on a mac using extractor or sth.)
1st http://download.nordsueddesign.de/skitch/viewer-20120527-163947.png
(open the viewer bei right mouse click > Show Package Content)
2nd http://download.nordsueddesign.de/skitch/viewer-20120527-163947.png
(find your values in the info.plist file, try opening it with Textwrangler,
some other text editor cannot keep it readable)
—Johannes

Analysis Authorization Object not working

Hi Gurus,
I m working on BI 7.0, I have created an analysis authorization object zz_div for 0DIVISION characteristic.
For a given report i want a given user to view only data for '32' and '33' 0DIVISION.
I have followed the below steps but still the report shows all data instead of restricted one.
1)RSECADMIN -> Maintenance ->zz_div ->Create
2) Add 0DIVISION in Auth structure , and in details
I     EQ     32
I     EQ     33
3) Add 0TCAIPROV with I     EQ     0SD_C03
4) Add 0TCAACTVT, 0TCAKYFNM, 0TCAVALID, this having details as
I     CP     *
5) Then in User tab -> Assignment -> User -> Change-> Inserted ZZ_DIV-> Save
6) In Query created a Authorization variable(with no input prompt) and restricted 0DIVISION.
Following are the authorization object in that user's Role (Reporting Only)
S_RFC
S_TCODE
S_GUI
S_BDS_D
S_BDS_DS
S_OC_SEND
S_RS_AUTH - only having zz_div
S_RS_COMP
S_RS_COMP1
S_RS_ICUBE
S_RS_RSTT
S_RS_TOOLS
S_RS_PARAM
I have surfed lots of thread for this issue but not getting a solution
Tell me what i m missing in above or any additional setting need before creating analysis authorization
Edited by: Sonal Patel on Apr 18, 2009 8:10 AM

Hi
Thanks a Ton for ur reply
I have checked in SPRO : Analysis Authorization
where the authorization mode is " OLD obsolete Concept With RSR Authorization Objects "
We have to do the same in Production system .Can u please how its going to effect to others authorizations if change it to New Concept
Thanks
Sonal....

Hierarchy Analysis Authorization does not work after transport

Hi Gurus,
I am facing a issue in hierarchy analysis authorization in quality system but the same authorization works perfectly fine in development.
All hierarchy authorizations works in Quality except for this one. I found one old sap note describing this as program error but this note is not applicable in BW 7.3.
I have checked the table RSECVAL, RSECHIER and authorization is active so everything looks good. Please advise if anyone faced this issue after transporting hierarchy auths to other systems
Regards,
Salman

Salman,
What I understood from your description is that you have same role+AA in Dev and QA, which provides access in Dev for all the nodes for said hierarchy but in QA, same role+AA provides access to the same hierarchy for all the nodes but one. Try to create a ZTEST analysis authorization in QA itself with access for the problematic hierarchy node and see if it works ? This will rule out the case if there is a difference in hierarchy in DEV & QA.
Regards,
Shivraj Singh

Xml schema not working in excel 2010 - xml corrupt

I originally posted this thread in Microsoft Answers but was suggested to post here...
I upgraded from xl2003 to xl2010. I'm trying to map xml schemas to xl2010 (using the source pane just as I did for xl2003) and the mapping works fine until I save the file and reopen it. Once I reopen the file and try accessing the map through the XML source
pane, I get an error identifying the xml map is corrupt as follows:
"The operation cannot be completed because the XML map is corrupt
To fix this problem, remove the associated xml map from the workbook and then add the XML map back to the workbook.
/schecma/element[1][@name = 'returnData']/complextype[1]/complexContent[1]/extension[1]Undefined <complexType>, '{http://www.....' is used as a base type."
I've tried this in xl2007 and it works fine. I also read some blogs about xl2010 xml features and in some I found that this new version has enhanced security xml features.
Any help would be appreciated.
"innovation is the key to success"

Interesting to note this is still a problem, but even more interesting is as to why Excel works fine the first time you bring in the xsd, but not after you save it. I found information that says it's related to resolving externally referenced xsds,
which is fine, but again, why does it work the first ime and not the second? If it were a problem with external xsds then it should never work at all so I think that answer is bogus.
Something has to be getting corrupted on the save and it's not important enough to MS to spend the time to fix it.

Authorization will not work only have one computer.

I have 100 songs that no matter how many times I try to authorize, my itunes will not play the song even though after I put my password in it comes back machine authorization was succesful. Then nothing happens. Also only have one computer that I have always had with itunes. Need Help.

Try getting rid of the SC Info folder mentioned in this article
http://support.apple.com/kb/TS1389
If that doesn't work, try DLing the free single of the week. You might need to agree to the new Apple store license agreement.

Report Pagination Scheme not working

I have a report and I'm using the Select List Pagination Scheme. When I select Next or Previous, I end up with a blank page stating, no data found. I've searched all the threads and I've tried all the suggestions but I still can't get it to work. If I do a reset to my filters, everything starts working as it should but until I do that, it won't. I've created a reset pagination process with no conditions. I've enterted number of rows and maximum row counts and I've even tried saying both yes and no to Enable Partial Page Refresh. I'm sure it's something really stupid that I'm missing but..... could anyone out there please help? Thank you! Paulette

Paulette,
Please put an example on apex.oracle.com. Provide the workspace/username/password. You can create a new user for this purpose. I'll have a look when it's up.
Regards,
Dan
Blog: http://DanielMcGhan.us/
Work: http://SkillBuilders.com/

Search using categories from 2nd cat schema not working

Hi,
We're currently using 2 categorization schemas in our transactions. However, the Category search criterion doesn't seem to work when we try to search for transactions using categories from the second categorization schema. The same search criterion works well with the first categorization schema. Can you pls. give us an idea on what configurations we could be missing out on? Will greatly appreciate your help. Thanks in advance.
Regards,
Theresa

Hi,
We're currently using 2 categorization schemas in our transactions. However, the Category search criterion doesn't seem to work when we try to search for transactions using categories from the second categorization schema. The same search criterion works well with the first categorization schema. Can you pls. give us an idea on what configurations we could be missing out on? Will greatly appreciate your help. Thanks in advance.
Regards,
Theresa

Authorization scheme not working.

Similar Messages

Maybe you are looking for