BI Webtemplate access to End user.

Dear All,
My BI team asked me the answer for this scenario. They have to give the webtemplate (created/executed by BI) URL to end user access. Please advise me what are all the access need for end user. What kind of the access we have to give to the end user and tell me about configuration part of the BASIS consultant.
Thanks for your help.
Regards,
Senthil Kumar.C

Prabodh wrote:
You should always state the Apex version. And this case, because this is related to authentication, the Authentication scheme you are using.
Assuming that you are using the Apex Built-in Auth scheme, you can achieve this by using User Groups feature and the APEX_UTIL.CURRENT_USER_IN_GROUP API.
Here are the high level steps:
a. Apex Builder > Administration > Manage Users and Groups
b. Create 2 users UAT1 and UAT2
c. Create 2 Groups UAT1Group and UAT2 Group
d. Assign UAT1 user to UAT1Group and UAT2 to UAT2Group
e. On the Home page of both the applications create a "Before Page Header" Branch that goes back to the Login Page. Make this branch conditional.This does not work, because in APEX you can go into any page after login bypassing the home page (like this http://apex.oracle.com/pls/apex/f?p=46417:9 where 9 is not home page)
So this branch will not run.
f. In "A" application you want only UAT1 to access , so use PL/SQL Expression type of condition in the above created branch that has the following code
return NOT APEX_UTIL.CURRENT_USER_IN_GROUP('UAT1Group')So the user UAT1 will return False and the branch will not execute, but for others it will return True and send the user to Login page, which is access denied.
Similarly, make the branch in B application condition for UAT2Group.
Regards,

Similar Messages

  • How do I access the End User Licensing Agreement? I clicked on it and it gives me a message that I need to launch Adobe Reader, accept and close and reopen. Trouble is I can't get to an icon for file to launch. I am working on a Mac and have installed Mac

    I am using a Mac and have installed Adobe Reader for Mac, latest version. I cannot access the End User Licensing Agreement. I clicked on it and it gives me a message that I must launch Adobe, check that I agree, close and reopen. The problem is I can't find any way to launch Adobe because it appears nowhere on my launch pad, nor in my document files or on the control panel. Because of this, I cannot print bank statements nor can I get into my insurance companies billing department to make a payment. HELP!

    How about in your Applications folder?

  • What is the tool to be accessed by End user in version 7

    Hi all,
    Could any body give a good ppt or explanation about the way the end users can access the BW Queries in version 7.
    Priror to version 7 we used to give access to Browser to the end users . Now what are the different options with EP and with out EP for that.
    With rgds,
    Anil Kumar Sharma .P

    hi Anil,
    in version 7, Portal is a must to run web templates, and the new bex tools WAD, query designer, report designer, bex web analyzer all will need Portal (and Java usage type), you can still use old 3.x bex tools and have the 3.x webtemplates run on bw's WAS.
    check Prakash's ppt 'publishing strategies'
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70e18305-2356-2910-4bbe-9c1ebd751032
    and
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a5067965-0901-0010-6f8a-bbf0b7424283
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6fe0f064-0901-0010-d4b2-86ac9f952cc2
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/5f243d6d-0601-0010-2aae-abe0a4dcfadb
    hope this helps.

  • Disable Query Builder Tool access to end users

    Hi,
    Did any of you block the Query Builder Tool access to your end users?
    In our Netweaver 2004s BI implementation, we have a special need to restric the access to Query Builder Tool. Mostly our users are using BEx Analyzer tool (Front end service pack- SP12). Any ideas in this regards would be highly appreciated? Of course I can restrict access on the back end that our end user is only able to read the Query. What I am looking what is, how to stop the user even from launching Query Builder tool?
    Thanks
    Jay Lakshmanan

    Hi Altera,
    If the role doesnt give access to transaction RRMX and if none of the Reporting Auth Objects (S_RS_COMP, S_RS_COMP1, S_RS_FOLD)  exists, than the user will not have access to Query Builder.
    Hope it helps.
    Please award points if it is useful.
    Thanks & Regards,
    Santosh

  • Controlling Access of end users on Categories and Activity versions

    Dear All,
    I am having end users who are having full access in learning Administrator for Creating Categories and Activity versions , Offerings and Classes in using Learning Administrator responsibility.
    As per the business needs i need to create a new responsibility where end users can not create categories & Activity version but they can create only offerings & classes on selected Activity version.
    your guide lines will be greatly appreciated.
    Thanks & Regards,
    Edited by: user1113648 on Apr 28, 2011 11:55 AM

    Hi CDA
    You're not understanding the way Discoverer works. The lowest level of security control that can be applied inside Discoverer is at the business area level. Thus if a user has access to any part of a business area then they have access to the whole business area. This is done by your administrator using TOOLS | SECURITY from the Administration menu bar.
    The privileges that can be set using TOOLS | PRIVILEGES control what a user can do with the data that they have access to (remember that access itself is at the business area). Thus if a user has the Create / Edit workbook privilege and they have access to two business areas then they have that privilege for both business areas and create or edit workbooks to their heart's content in both of them.
    Further, and I think this is where you may be getting confused, you have to understand that an end user cannot grant the privilege for another end user to have access to their business area simply by sharing a workbook. The act of sharing a workbook does not share the access rights. In order for one user, aka the Registrar, to be able to run a workbook that was created by another user, aka the HR director), the Registrar must already have been granted access to the HR business areas by the Discoverer administrator. If a user does not have access to a business area but does have access to a workbook from that business area then they will not be able to execute the workbook.
    It therefore sounds like you do not have security under control.
    Best wishes
    Michael
    BTW: Are you using the SunGard Banner system by any chance, and are you using the ODS? If this is the case, you may be interested in knowing that my company has partnered with SunGard Higher Education to bring Discoverer training and consulting to their customers.

  • Query Builder access for end users

    Hi,
    I have a group of users who would like to have 'Query Builder' access.
    Is it possible to directly access query builder without actually login-in into application builder.
    Thanks in advance
    Aali

    No, but you could build a form to mimic it... Check out this thread from a few days ago: Query Builder functionality
    Thank you,
    Tony Miller
    Webster, TX
    On the road of life...There are 'windshields', and there are 'bugs'
    (splat!)
    "Squeegees Wanted"
    If this question is answered, please mark the thread as closed and assign points where earned..

  • END USER accessing only the Output of report

    Hi,
    I'm creating reports based on queries, right now we are planning to give view access to end users, but my doubt if end user hits view on the report the query runs everytime and produces the report, what I want to achieve is that the we schedule the report before night and end user will only view the PDF output the query produces by the scheduling, How can I achieve this?

    So do we need to give the user access to schedule button as well? and Do you mean run report online option?
    Any update please?
    Edited by: user8937215 on Aug 5, 2010 7:55 AM
    E

  • How to restrict end-user from not using certain movement-types in MB1B

    Dear Gurus,
    My client wants that end user has access to only particular movement types in MB1B.i.e only to 311 and 412,421E.
    They do not want any other movement types to be access by end-users in MB1B
    How to go about this requirement?
    Thanks in advance
    Regards
    Ram
    Edited by: RAMKUMAR WARIYAR on Jun 27, 2009 2:14 PM

    hi,
    This is possible you can restrict and allow user for movement type which they can do through any t code.
    Contact yours BASIS consultant for that
    Regards,
    Vishal
    Edited by: VS on Jun 27, 2009 5:46 PM

  • How to implement Oracle user/role security with Access front end?

    Hi,
    We have successfully migrated our Access database tables to Oracle 10g using SQL developer. We've recreated all the users and roles(i.e., access groups) in Oracle and granted rights to tables.
    In the Access front end database, in the Database window we have saved linked Oracle tables which replaced the Access tables. The forms, reports, queries run fine with the linked Oracle tables. All the linked table use one ODBC DSN to the Oracle database with the same Oracle user id.
    We need to be able to authenticate users into the Oracle database and RE-link the tables based on their own unique user id. By during so we can allow users to use the Oracle standard user id/role and system privileges to control select, update, ect. rights to the database.
    I've been able to use the VB code within Access to logon into the database with a unique id, but I have not been able to find out how to RE-link the tables to the unique user id using VB. There should be some way to relink tables dynamically, based on users login into the Access front end.
    I don't know a great deal about Access projects, but I do know with SQL server allows login into your Access project and link tables dynamically.
    Can someone give me some assistance or point me in the right direction?
    Thanks in advance,
    Larry

    We had one of our programmers here come up with a VB code solution for re-linking table within Access. However the relinking takes 3-4 minutes for 100+ tables.
    In an effort to help you understand the situation better, I will attempt to elaborate on the problem:
    We have an Access 2003 application which currently has a front end using Access(forms, reports, queries, & VB code) and a MS Access 2003 backend.
    We have migrated the backend tables to Oracle. However, we still have a need to maintain the front end in Access, since we have over 60 forms, 40 reports, 200+ queries in Access. Its easy to understand, we have a significant investment in the front end(Obviously, the plan is to migrate the front end also at some future date).
    In order to utilized the existing front end, we have to validate and modify the current front end connections to the new Oracle backend. One of the features of Access is that you can "link" tables and save the link for runtime. Each Access table can have its own link which is a separate ODBC/JET connection. As such, each separate link has its own userid/database information.
    The other issue with using the Access front-end is that Access utilizes a workgroup file to implement user and group security. The workgroup file contains all the users and which groups the users belong to in Access. Then within Access, you allow users access to object(tables, queries, ect) by their userid and or group. When users open an Access database with Access security enabled, they are required to log into Access. The login is authenticated by the workgroup file. Once, logged into Access, users have rights to Access objects based on their rights granted to their userid and groups they belong. The problem here is that when you remove the linked Access tables and replace them with linked Oracle tables, Access has knowledge about Oracle table rights granted to users; nor would you expect it to.
    The dilema is the disconnect between Access and the fact Oracle utilizes a similar but much more sophisticated security model. It creates users and roles(which are similar to Access groups), and again this is independent of Access security.
    Our solution was to still use the Access workgroup file security along with the Oracle security model. By using the Access userid and then creating a similar Oracle userid with similar table rights granted in Access, you could apply security within Access and also with the Oracle database.
    For example, a user BOB logs into Access via the workgroup file, using VB code, Access then establishes a Oracle connection logining into Oracle using the same unique userid BOB into Oracle.
    After connecting and validating user BOB into Oracle, then the Access tables are relinked to Oracle using the user BOB userid and table rights.
    This Oracle userid has been granted table rights specific for this userid.This allows the user BOB to use the Access application and still be authenticated into the Oracle database.
    The problem with this solution is that the relinking of the saved Access tables takes 3-7 minutes for about 100+ tables. This is not acceptable for users each time they log into the application.
    Our current alternative is to use one Oracle userid to login each user, and use Access form restrictions/security to allow/prevent users from updating/viewing data. Obviously, this is not the optimal solution in respect to security, but it at least allows us to control access to the data(via the forms) by using one logon required for each user, and quick startup time for the application.
    I understand SQL server does a better job in integration, but we use Oracle which is what I am trying to work with.
    Larry

  • Is there a way for end users to give their manager access to change their Out of Office, without an admin involved?

    Our end users need to be able to give their managers access to enable their out of office. 
    question 1.  Can this be done without giving them full access?
    question 2.  If they need full access, can the end user themselves give this access? (I've tried giving another user "owner" rights, but the user still can't seem to open my calendar from OWA to adjust my out of office)
    question 3.  Can this be done without an Sys Admin being involved?

    You can create a RBAC role for each manager scoped to each of their employees that lets them run the Set-MailboxAutoReplyConfiguration cmdlet on the exchange server. Otherwise they will need full access to the users mailbox which an admin would have
    to grant, the end user can not grant this permission. Then they can open the other users mailbox in OWA and set the OOF
    DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

  • End User Rule View Access Denied

    Hi,
    This has been discussed here, but after trying all possible options it still doesn't seem to be working.
    I am using a rule in a end user task, which throws "View Access Denied to Subject on Rule" error.
    I've set the rule authType to "EndUserRule" and
    <ObjectRef type='ObjectGroup' id='#ID#All' name='All'/>
    for MemberObjectGroups.
    Still it would keep throwing same error. I even used:
    <RunAsUser>
    <ObjectRef type='User' id='#ID#Configurator' name='Configurator'/>
    </RunAsUser>
    Still not success.....??? Any idea what could be wrong?
    I am using IdM Version 5.5
    -Thanks

    Hmmm...
    Seems to be working now...all I did was a restarted the application server??? Tried the same steps again in a different environment, and worked without a restart. Must be something odd with one particular environment.
    -Thanks though for the reply!
    -\

  • "Adobe Acrobat is blocked" - Where to I accept the end user agreement which will enable me to access Pdf documents on the web?

    I keep getting this message when trying to open documents from the web:
    "Adobe Acrobat is blocked" - 
    Where to I accept the end user agreement which will enable me to access Pdf documents on the web?
    The Adobe website recommends this: (did not solve the problem)
    Safari 7 and 6.1 block PDFs | Acrobat, Reader
    Thanks for any help solving this annoying problem!
    OSX 10.9.3
    Safari 7.0.4
    Acrobat Pro 11.0.0

    Hello Isakten:
    Thanks so much for your reply!
    I already have Adobe Reader 11.0.7 and Adobe Acrobat Pro 9 installed.
    Following your instructions, I then selected Reader as the desired Adobe product to open all PDFs. and save that choice. Still no difference, the same black screen and statement about the EULA shows up…
    http://www.nhgastro.net/patients.html
    BTW, this is the website that I was accessing……note the link to download and print the pdf which triggers the EULA page.
    and also downloaded the latest version of Reader via their link….but to no success…..
    This all started by itself months ago, I did no newer installs or settings changes, none……
    Any other thoughts?
    Thanks so much,
    Steve

  • Appraisal - tcode access to core and end users

    Hi Experts,
    Please let me know which transaction code access is to be given to Super Users, Core Users and End users from the list below.
    And also, Please let me know if I have missed out any transaction codes related to Appraisals.
    T codes for PMS Basic Setting
    OOHAP_BASIC           Basic Appraisal Template Settings
    OOHAP_CATEGORY           Appraisal Category Settings
    OOHAP_CAT_GROUP     Category Group Settings
    OOHAP_SETTINGS_PA    PA: Settings
    OOHAP_VALUE_TYPE     Standard Value Lists
    T codes for PMS Process
    PHAP_ADMIN     Administrator - Appraisal Document
    PHAP_CATALOG     Appraisal Template Catalog
    PHAP_CHANGE     Change Appraisal Document
    PHAP_CREATE     Create Appraisal
    PHAP_PREPARE     Prepare Appraisal Documents
    PHAP_SEARCH     Evaluate Appraisal Document
    This is very urgent..Your immediate response is highly appreciated.
    Thanks!

    Hi,
    End users are authorized with
    PHAP_CHANGE Change Appraisal Document
    PHAP_CREATE Create Appraisal
    PHAP_PREPARE Prepare Appraisal Documents
    the T.codes
    where they can prepare appraisals, if mistakenly entered wrong appraiser or appraisee they can edit
    For other activities administrators must have autorization
    Regards
    Ratan Puli

  • Accessing Work Items assigned to other users from end user page

    Hello Experts,
    We are using Sun IDM 6.0 SP1 at our client place. Most of the applications integrated with IDM are manually provisioned, in the sense, once after all the necessary approvals are received the request will be assigned to a group of provisioners, they will manually connect to the requested application and create the account in native system. There are more than 100 such provisioners in the organization.
    Current design is to assign a work item to all the provisioners (like Multi approval) and once a provisioner assigns the request to himself then the corresponding work item will be taken out from other provisioners approval queue. These provisioners login to end user page of Sun IDM to access their approval queue as only the end user page is SSO enabled.
    Because of the large number of requests in the system (more than 50k) and each request having 100 work items, the number of work items in the system is huge and thus the performance of the system is very poor so we are working to change the design to bring down the number of work items in the system.
    Customer is not convinced to have a dedicated person who can get all these work items in his queue and assign it to the appropriate provisioner, they are looking to have a solution something similar to the current one in which all the provisioner can see all the requests in the system and they can pick from it and assign to them.
    So we are thinking to create a generic id in the system and assign all the work items to that id, and make changes to the “end user work items list” file so that all the provisioner can see the work items that are assigned to them as well as that generic id.
    But for some reason I’m not getting the work items assigned to other users in the end users page. I have tried assigning all the capabilities to logged in user and tried some code changes in “end user work item list” page.
    Please share if you have any sample code which can list the work items assigned to other users in end user page. Also please let me know if there is any better alternate to this problem.

    Hi,
    There is a option to find and get other user's workitems. Please check the attestation and remediation tab. Use the form portion from attestation page and add it in the Work item list form. This will enable to the user to search for another user's workiteams and assign it to him/her manually. (The user needs to be assigned proper admin rights)
    To get all the workitems, in the system, you will need to query the repository for all the workitems.... but not sure it will be a good idea in your case as the volume is very high.
    Hope it helps
    Regards
    Arjun

  • Minimal access for the end users to access a page sharepoint.

    I have a list Projects which i have put in a different aspx page by the name ProjectPage.
    I have end users accesing that page where i have applied certian styles for dsplaying in a customized way.
    However, i need to configure their permissions in such a way that they should be able to access any page other than the project page.
    They should not even see the site actions bar and should not be able to access the _layouts/viewlsts.aspx page as well as settings page form the address bar.

    Hello,
    To restrict application page, either you can hide them from UI (but still be accessible by putting direct url) OR create a custom permission and uncheck "view application page" option. Refer this link for more info:
    https://social.technet.microsoft.com/Forums/office/en-US/bc3e9e2e-e606-47a1-ace3-94aadd860e44/is-there-any-way-i-can-disable-site-actions-menu-for-readonly-users?forum=sharepointgeneralprevious
    Hemendra:Yesterday is just a memory,Tomorrow we may never see
    Please remember to mark the replies as answers if they help and unmark them if they provide no help
    (On vacation from 16th Oct to 28th Oct 2014)

Maybe you are looking for

  • Database Connection Problem in Oracle9i Lite Web-to-Go

    Hi I am having problem in the Database Connectivity. I am using the OracleDriver class for the connection and have defined the DataSource in the struts-config.xml as <data-sources> <data-source> <set-property property="driverClass" value="oracle.jdbc

  • Cannot override Ctrl + C in JDialog

    Hey guys I cannot override the Ctrl+C function in JDialog for some reason. I can get other combos to work (Ctrl + O) but no cigar with C. Below is the code I'm using, Im wondering if anyone has any suggestions? Thanks           KeyStroke ctrlCKeyStro

  • Solution: Closing Oracle Graphics Batch icon

    I found a solution to a problem, so I'll share it with others who may encounter the same problem. The problem: When executing a report from forms(via run_product)that contains graphics, the Graphics Builder Batch icon appears on the user's Windows de

  • ADF BPEL Deployment setup

    I need to design a BPEL human taskflow which would be triggered from an ADF page. I suppose the BPEL taskflow (SOA server) & the ADF page (Application server) in real-time could be deployed in two separate servers (probably these servers could be run

  • Numbers and Spaces not working well together

    I'm having a problem with Numbers while using spaces. When I have multiple spreadsheets open between two different Spaces, Numbers jumps to the spreadsheet that was opened first when trying to enter data into the second... I hope this is clearer than