BPS layout access control - need flexibility

Hi,
Is there any way to control the access to layouts in the web at a given point in time ? We are using web layouts and we would like one of our users to be able to control if a layout is accessible or not (to all the other users, like by switching them from input to output in the web apllication designer) with a function pushbutton for instance.
Using BW/Portal security or BPS variables to control access is not flexible enough for us.
As anyone developed a flexible way to do that ?
Thanks
David

Dear David,
if you need it very flexible I would check out the capabilites of the Web Interface Extension (Examples on how to use them are described in current how to's like How to Run Planning Sequences on Save and other events (WEB) or How to Validate Key Figure Values in Manual Planning ).
The idea: step in the method for load, get a handle to the layout you like to tread and set the properties e.g. to display only. As you are in ABAP you could derive the property value from one of you custom customizing table.
Here is coding sample:
lLayout2 ?= CL_UPWB=>GET_COMPONENT('Layout1').
if myCustParam eq 'X'.
lLayout2->SET_READ_ONLY('X').
else.
lLayout2->SET_READ_ONLY('-').
endif.
Regards, Olaf

Similar Messages

Powerbook not on access control need to access AEBS

I have a powerbook but my MAC address is not on the access control list and i need to add it how can i do this with the powerbook without resetting or is it not possible

Turn off Airport and connect via Ethernet to make your configuration changes.

Check user manual input in excel BPS layouts

I have some problems for manual input characteristics checks on an excel bps layout.
I need to assign the value of an header characteristic to a detaild characteristic. How can I do ? I have already tried with characteristic rels. (exit, attributes, etc.) but without results.
Thanks in advance.

Hi Mario,
I am quite sure, that if a char is in an P.Level, and there is a char relationship for it, the char relationship will not be called (somebody correct me if am wrong).
So, in your case, you want to derive SALES ORG from Company code using char rel. The sales org is in the p.level, since it is in your layout. Threfore the char rel will be not called.
If you want to have it works, do not select sales org in your level. I assume that you filter your comp code in level with a bps variable. Get this variable value (using API_SEMBPS_VARIABLE_GETDETAIL function) and assign it to char SAles org in your char rel exit. Everytimes when you save your plan data, the char rel exit will be call and sales org will be derived.
If you want to show and derive the sales org in your layout based on selected company code, create a bps variable type exit for it, and read and derive the value from comp code variable.
Best Regards,
Suan Liono

Formulas in BPS Layout

Hi,
I have a BPS layout, I had needed to include formulas with visual basic to some columns, and these are saved in the transactional cube. My problem is, with the time, the data for the column that has the formula can change. When that occurs, data changed by the formula is not shows in the cube, is like there werent changes in this column. What would it happens? This occurs when the user doesnt insert any data in other columns.
Thanks
Victoria

Victoria,
I'm not clear on your problem & it would be great if you could elaborate more on that.
But, I've couple of questions.
--> How data gets changed in columns? Is someone planning/changing values in the column?
--> as soon as column data gets changed, if SEM macros are enabled in the layout, changed data gets changed by VB formuals. Are SEM macros enabled in the layout while changing the data?
--> final question. Once column data is changed by VB formuals, how you are expecting these changes to be written to the cube? Is some one clicking on "SAVE" button?
Hope it gives some ideas.
Hari Immadi
http://immadi.com
SEM BW Analyst

HT3477 Why would a Guest network need an Access Control List?

I have an Airport Extreme running software 7.6.4 and I have figured out today, to my dismay, that because I have an Access Control List active on my main network (with MAC addresses of my devices), the Guest Network feature, as implemented, becomes simply useless.
Essentially any friend coming at my place, to whom I want to share my internet connection for a while (say, a couple of hours) with an easy password, either provides me with the MAC address of his device, or has no access at all. And if he has to give me the MAC, then I could just simply add him to the main network in the first place and, BTW, I need to give him also the (complicated) password of my main network.
What is the purpose of a Guest Network then, if it is subject to the same access restrictions of the main one? I need to remove the access list on my main one, to offer quick and easy access to friends and family defeating the purpose of protecting my main network with MAC addresses and a separate guest network?
I don't get it. This is a bug. It has to be. I see no logic in it, in the way it is implemented. Or it should have 2 separate access lists, for flexibility. But a *Guest* network, should be by definition open, or easy access (with password, sure, if necessary) - and in case it should have restricted access, it should be by time maybe, not by MAC address....!

Why would a Guest Network need an Access Control List
The short answer would be that it would not need an Access Control listing......if you used the default settings in Timed Access.
Sorry, but I do not understand how you have constructed your Timed Access control list.
Normally, you would use the default settings and leave the "main" (and "guest") networks set for Unlimited Access.....and then only list the devices that you want to limit separately, establishing "rules" and timeframes for each device that you want to control.
When you do it the default way, a user would be able to connect to the Guest Network at any time, provided that he/she had the password for the guest network. No MAC Address needed at all.
If you wanted to limit the time that the "guest" could connect to the guest network, you would have to set up a "rule" for the guest. I would not normally think of limiting the time that a guest could connect.....(unless the guest were one of the grandkids).
It sounds to me as if you might have set the default network setting to No Access, and you have then set up each device with the times that they would be allowed to connect.
If you did it this way, then the default No Access would also apply to the Guest Network....and any guest would have to then be set up by MAC Address with a rule set for the times that they were allowed to connect.
Personally, I have changed the default rule for the "main" (and guest) networks from Unlimited Access to Everyday between 7:00 AM and 11:30 PM. So no one on either the main or guest network can connect before 7:00 AM or after 11:30 PM.
Then, there are a few rules that I have for devices that connect to the guest network to further limit them to certain times each day. You could do this as well for devices that you want to control on the "main" network.

RABAX_STATE type of error while accessing SEM-BPS layout

Hi
I was trying to access SEM-BPS layout from CRM web UI. But i got following error:
CRM: Function Module "UPX_KPI_API_SET_PROP_TIMELINE" not found
The termination type was: RABAX_STATE
Can anyone please tell me how to resolve this problem?
Thanks,
Smruti

Hi Smruti,
I don't know about your problem, as I don't know CRM, sorry.
But for you info: It seems this RABAX_STATE occurs at every WD4A error.
Kind regards, Matthias

File structure and Multi-user access/control

Hi All
Currently evaluating RH. Our plan is to use RH HTML with RoboServer and either SourceSafe or Team Foundation for source control. We will be producing the "printed" manual (PDF) and publishing online help (hopefully html via RH server) from the single source layout
Given that we will edit content in RH's XHTML editor, I'm not clear on when we should create new files or the granularity of multi-user access. We have 17 apps and I plan to use a master project and merging (because we need to link to related topics in other apps).
I'm really not sure what should constitute a file in RH. First off, is access controlled at the file level?
I want to have multiple authors editing the same manual at the same time, so do I need to break the manual into multiple small files (currently it's a single word doc)?
If I do break it into multiple files, what's the best approach: 1 file per topic (or is this a requirement)?
Finally, when I come to generate the PDF, will the files be combined. (i.e. can I have different page-breaks than I have in the RH project)?
Any pointers greatly appreciated
Regards
Mark

Hi,
First off, is access controlled at the file level?
Not sure what you mean by that. In source control, you can check in/out ever file independent. Sometimes dependent files will be automatically checked out, for instance images used in the css when you check out the style sheet.
I want to have multiple authors editing the same manual at the same time, so do I need to break the manual into multiple small files (currently it's a single word doc)?
That be the idea. Anyway, it's not a good idea to have an entire RoboHelp project in a single topic. You probably want to cut up your contents into the small chunck: topics.
If I do break it into multiple files, what's the best approach: 1 file per topic (or is this a requirement)?
In RoboHelp a topic is a HTML file. RoboHelp doesn't force you to split up content into one or more topics. If you are creating help for the web, you want the information to be organized in relatively small chunck so users can quickly scan through it.
Finally, when I come to generate the PDF, will the files be combined. (i.e. can I have different page-breaks than I have in the RH project)?
Not sure what you mean by page breaks. As RoboHelp creates HTML files, there are no page breaks such as in paper manuals. When you create a PDF, you combine the topics you need into a single document.
If a PDF is required for you, you may want to consider not using RoboHelp for your sources. A PDF created by RoboHelp is useful for internal use, but it never seems to get good enough to give to customers. Personally, when a PDF version of a manual is required, I create the manual in FrameMaker and link or import the book into RoboHelp. You can also link Word documents, so you may want to play around with that before deciding whether to use Word, RoboHelp or FrameMaker for your source.
Greet,
Willam

Impliment GRC Access control in difffrent landscape

Hi Friends,
In our company we have different landscapes in SAP and now we are planning to implement Access control in all landscape.
R/3 landscapes with out any Java stack( both ECC6 and 4.7 EE)
Solution manager landscape
XI landscape.
BW
and EP.
Our first target is R/3 Landscape. Can you please guide me. what will be the best approach to implement AC in R/3 systems as they don't have any Java stack.
I will appreciate if you can guide me with other landscape also.
Thanks,
Satyabrat

Satyabrat
The GRC landscape is technically separate from the different SAP Application components you mention so technically, you can connect the GRC system to any of the other components but creating the appropriate JCOs and SLD entries.
You will need to instal the RTAs in each of the required source systems (ERP, ECC, BW, XI, SM, CRM, SRM etc!) but they can all link to the sepearate GRC systems.
The exact landscape setup is dependant on what you wish to use GRC for. For example, you may wish to only link production GRC to production backend systems for Risk analysis and SoD. However, if you wish to use ERM or use Role bases analysis, you may find it useful to connect your production GRC system to your development backend systems where the roles are actually defined!
The architecture is deliverately flexible to allow you to do this.
For the initial use cases, it may make sense to keep Production segregated away from Pre-production systems but in the future, you may find that you wish to re-assess this as your useage grows.
Regards, Simon

Ugrent help. User exit- Read data from BW BPS layout and write to ODS

Hi,
I am new to BW BPS and have a req. where i need to read data from BPS layout (EXCEL) and write it to ODS.
Is there any function module or user exit which read data from excel layout and upload it to ODS. Or can any one help me out how can i write a code for this.
It is urgent and i need your help.
Appreciate any kind of input.
Thanks
Mamatha

Dear Mamatha,
read following documents. i hope it will work for you.
[http://www.geocities.com/cynarad/reference_for_bps_programming.pdf]
[Accessing BW Master Data in BPS Functions using ABAP ( Exit Function )|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d3dcc423-0b01-0010-4382-aa3e0784b61e]
Regards,
Malik
Give me points if its helpful for you.

CRM fields not populating in BPS layout for opportunity Planning 0crm_order

Hello Support,
We are using SAP CRM 5.0 SP09 with BW 7.0 SP 09.
When creating an opportunity in CRM, the product data ( quantity ,
values) are not appearing in Planning tab( SEM-BPS Layout) .
Kindly let us know what needs to be done to resolve this issue.
Thanks and regards,
Rajiv Jain

In your CRM system, check your mapping from CRM to BW are correct.
You can do this in transaction SPRO. Menu path 'SAP Implementation Guide --> Integration with other mySAP components --> SEM --> Change mapping between CRM fields and InfoObjects'. Select planning application 'OPP' and click on 'Mapping table - system entries' on the left.
In here you should see the mapping from the InfoObject to the CRM field (eg. Infoobject 0CRM_EXPREV uses structure CRM_BW_OPPT_H and field name EXP_REVENUE).
In order for the value to be passed to planning you must tick the 'Empty' checkbox on.
Regards,
Adrian

Time Capsule Access Control and Extended Network Question

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Thanks for any help…this doesn't seem clear from what I've read/seen.
James

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Unfortunately, they are not automatically applied to each base station in an extended network. You would have to manually enter the exact same list in each base station.

SharePoint Provider Hosted App (401) Unauthorized Microsoft.SharePoint.SPException: The Azure Access Control service is unavailable

Hello,
I'm attempting to get a SharePoint 2013 Provider Hosted Application working in a brand new SharePoint environment. I've created snapshots of both my dev and the sharepoint environments along the way and have meticulously documented every step of the
way. I've followed these instructions (among many other resources found along this journey) :
http://msdn.microsoft.com/en-us/library/fp179923(office.15).aspx
http://technet.microsoft.com/en-us/library/fp161236(office.15).aspx
http://msdn.microsoft.com/library/office/fp179901%28v=office.15%29
Upon package and publish of my application to SharePoint, I get a 401 Unauthorized error. I use Fiddler to obtain the SPErrorCorrelationID to ultimately obtain the following ULS Viewer Output. Please explain how to fix if you're able.
Please Note: I was under the impression that a Provider Hosted Application does not use the Azure Access Control service, so I'm confused as to why my system is attempting to make this connection?
Also Note: I've used a self signed and godday obtained certificate to successfully f5 debug my basic web.title (out of the visual studio 2012 box) sharepoint provider hosted application... so I know my certs are good.
Here's my ULS output:
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   Name=Request (GET:http://portal.cltenet.com/_layouts/15/appredirect.aspx?instance_id=22d5252f%2D392c%2D4f68%2Db820%2Da3053b9d4f24)
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Authentication Authorization   agb9s   Medium   Non-OAuth request.
IsAuthenticated=True, UserIdentityName=0#.w|cltenet\sp.apps, ClaimsCount=25   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   Site=/   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.84   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Deployment   acjjg   Medium   The current user has System.Threading.Thread.CurrentPrincipal.Identity.Name
= 0#.w|cltenet\sp.apps, System.Security.Principal.WindowsIdentity.GetCurrent().Name = NT AUTHORITY\IUSR, System.Web.HttpContext.Current.User.Identity.Name = 0#.w|cltenet\sp.apps.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.84   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsrv   Medium   redirectLaunUrl after getting it from query
string, web or app instance: https://hightrust31.cltenetapps.com/Pages/Default.aspx?{StandardTokens}   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   General   aib0n   High   trying to get app tokens for site: 888b71f7-51ee-40f5-8344-8de4869d37d0
Unable to load app tokens from appInstanceId: 22d5252f-392c-4f68-b820-a3053b9d4f24   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsrw   Medium   redirectLaunUrl after getting token replacement:
https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http%3A%2F%2Fportal%2Ecltenet%2Ecom&SPLanguage=en%2DUS&SPClientTag=0&SPProductNumber=15%2E0%2E4420%2E1017   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsry   Medium   m_oauthAppId after NormalizeAppIdentifier()
i:0i.t|ms.sp.ext|[email protected]8df36d5d. Now getting app principal info.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr0   Medium   decided that we need to do a POST to the
app.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr1   Medium   m_redirectMessage: EndpointAuthorityMatches
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr2   Medium   realm matched attempting to get app token
using GetAccessToken()   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   advzm   High   Error when get token for app i:0i.t|ms.sp.ext|[email protected]8df36d5d,
exception: Microsoft.SharePoint.SPException: The Azure Access Control service is unavailable.     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)
at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext
userIdentityContext, String applicationId, Uri applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr3   High   App token requested from appredirect.aspx
for site: 888b71f7-51ee-40f5-8344-8de4869d37d0 but there was an error in generating it. This may be a case when we do not need a token or when the app principal was not properly set up. LaunchUrl:https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http://portal.cltenet.com&SPLanguage=en-US&SPClientTag=0&SPProductNumber=15.0.4420.1017
Exception Message:The Azure Access Control service is unavailable. Stacktrace:    at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)
at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext
userIdentityContext, String applicationId, Uri applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenFromThreadIdentityOrUserToken(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPApplicationContextAccessTokenType tokenType, SPAppPrincipalInfo appPrincipal, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.ApplicationPages.AppRedirectPage.ValidateAndProcessRequest().
Since this is a nonfatal error, it will be sanitized and posted to the app as part of the app launch.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   General   ajlz0   High   Getting Error Message for Exception Microsoft.SharePoint.SPException:
The Azure Access Control service is unavailable.     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext
serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext userIdentityContext, String applicationId, Uri
applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext serviceContext,
String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenFromThreadIdentityOrUserToken(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPApplicationContextAccessTokenType tokenType, SPAppPrincipalInfo appPrincipal, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.ApplicationPages.AppRedirectPage.ValidateAndProcessRequest()
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   aib0p   Medium   Doing appredirect from appredirect.aspx:
in site: 888b71f7-51ee-40f5-8344-8de4869d37d0 with RedirectLaunchUrl: https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http%3A%2F%2Fportal%2Ecltenet%2Ecom&SPLanguage=en%2DUS&SPClientTag=0&SPProductNumber=15%2E0%2E4420%2E1017
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Monitoring   b4ly   Medium   Leaving Monitored Scope (Request (GET:http://portal.cltenet.com/_layouts/15/appredirect.aspx?instance_id=22d5252f%2D392c%2D4f68%2Db820%2Da3053b9d4f24)).
Execution Time=26.5933938531294   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
Your help is very much appreciated.
With Respect,
Larry

Yes, actually - I was able to resolve it.
However I don't know how, unfortunately. I suspect it was because I needed to have the names of the certificates, defined during the certificate registration (to sharepoint) process, different.
I have a complete document that shows step by step instructions on the exact process I took to complete the provider hosted application creation, deployment and publishing. It was a daunting task, but I finished it successfully.
If there's a way to send private message on this forum, please do so and I'll respond with a way to obtain my document.
NOTE: I'm not all impressed with the way this forum works. This is supposed to be a Microsoft resource and I'll be damned if I ever get a response to highly technical questions. Completely lame. Boooooo Microsoft.

Access Control Lists on USB drive connected to AirPort Extreme

I have a Seagate 320GB drive mounted in a NexStar 2 IDE drive enclosure and connected via USB to my AirPort Extreme Base Station, running version 7.4.1 firmware upgrade.
Every time I restart the computer or unmount the network drive, an access control list appears to be written to the drive when there should be none, according to Disk Utility. I can tell when there are problems with the drive because the desktop icon turns from bright blue to grey-blue. I have to unmount the drive from the base station and connect it directly to the computer via firewire in order for Disk Utility to examine it. Generally, Disk Utility will report "Incorrect number of Access Control Lists (It should be 0 instead of (whatever number found) )
Does anyone know why these Access Control Lists are appearing? Is there any easy way to locate them and remove them, other than disconnecting it from the base station and connecting to the computer?
This problem happens with several different drives, in various NexStar 2 and NexStar 3 enclosures.

Same problem for me, exept that it happends after copying a file to the drive. It don't happend if I just mount and unmount the disc. The same for all discs I have tryed.
2009-03-04 12:59:30 +0100: Disk Utility started.
2009-03-04 12:59:43 +0100: Verifying volume “UltramaxB”
Starting verification tool: 2009-03-04 12:59:43 +0100
2009-03-04 12:59:43 +0100: Checking Journaled HFS Plus volume.
2009-03-04 12:59:43 +0100: Checking Extents Overflow file.
2009-03-04 12:59:43 +0100: Checking Catalog file.
2009-03-04 12:59:43 +0100: Checking multi-linked files.
2009-03-04 12:59:43 +0100: Checking Catalog hierarchy.
2009-03-04 12:59:43 +0100: Checking Extended Attributes file.
2009-03-04 12:59:43 +0100: Incorrect number of Access Control Lists
2009-03-04 12:59:43 +0100: 2009-03-04 12:59:43 +0100: 2009-03-04 12:59:43 +0100: (It should be 5427 instead of 5430)
2009-03-04 12:59:43 +0100: Checking volume bitmap.
2009-03-04 12:59:44 +0100: Checking volume information.
2009-03-04 12:59:44 +0100: 2009-03-04 12:59:44 +0100: The volume UltramaxB needs to be repaired.
2009-03-04 12:59:44 +0100: Error: Filesystem verify or repair failed.2009-03-04 12:59:44 +0100:
2009-03-04 12:59:44 +0100: Disk Utility stopped verifying “UltramaxB” because the following error was encountered:
Filesystem verify or repair failed.
2009-03-04 12:59:44 +0100:

Access Control up grade from 5.2 to 5.3

Hi,
One of my client have
1. Earlier Access control 5.2 was installed but only FF are configured and is in use.
2. After some time Access Control GRC 5.2 server (front end) have some problem so they have
installed 5.3 to front end level
--no back end patch was updated
--no connector are created.
Now the situation is as follows
Front end -access control 5.3 -
Back end -RTA is access control 5.2(they are only using FF)
No connector are created
From this situation how can we take it forward to access control 5.3.
I have following question
1. can we update back end to 5.3 and start configuration --what is the impact?
2. Do we need to take back up of table FF as client is using only FF.
Thanks,
Digambar

Hi
5.2 RTA will not be compatible with with GRC 5.3 RTA .
So best would ne to upgrade your backend RTA to 5.3 and SP level shoul;d be in Synch with level of SP of front end i.e SA P GRC 5.3 .
Thanks & Regards
Asheesh

Issue while enabling Access Control for a Coherence server node

Hi
Im trying to enable access control for a Coherence server node, using the default Keystore login method shipped with Coherence. When i start the server i get the error "java.security.AccessControlException: Unsufficient rights to perform the operation". Please see below for the sequence of steps I've followed to enable access control. I just need to be enable Authentication (not authorization) at this stage
1. I have added the following entry in the Coherence Operational override file
<security-config>
          <enabled system-property="tangosol.coherence.security">true</enabled>
          <login-module-name>Coherence</login-module-name>
          <access-controller>
               <class-name>com.tangosol.net.security.DefaultController</class-name>
               <init-params>
                    <init-param id="1">
                         <param-type>java.io.File</param-type>
                         <param-value>keystore.jks</param-value>
                    </init-param>
                    <init-param id="2">
                         <param-type>java.io.File</param-type>
                         <param-value>permissions.xml</param-value>
                    </init-param>
               </init-params>
          </access-controller>
          <callback-handler>
               <class-name>com.sun.security.auth.callback.TextCallbackHandler</class-name>
          </callback-handler>
     </security-config>
2. The following is the entry in the Permissions.xml
<?xml version='1.0'?>
<permissions>
<grant>
<principal>
<class>javax.security.auth.x500.X500Principal</class>
<name>CN=admin,OU=Coherence,O=Oracle,C=US</name>
</principal>
<permission>
<target>*</target>
<action>all</action>
</permission>
</grant>
</permissions>
3. The following is the content of the Login configuration file "Coherence_Login.conf"
Coherence {
com.tangosol.security.KeystoreLogin required
keyStorePath="keystore.jks";
4. The following is the command line tag for starting the server
java -server -showversion -Djava.security.auth.login.config=Coherence_Login.conf -Xms%memory% -Xmx%memory% -Dtangosol.coherence.cacheconfig=PROXY-cache-config.xml -Dtangosol.coherence.override=FOL-coherence-override.xml -Dcom.sun.management.jmxremote.port=6789 -Dcom.sun.management.jmxremote.authenticate=false -Dtangosol.coherence.security=true -cp "%coherence_home%\lib\coherence.jar" com.tangosol.net.DefaultCacheServer %1
Following is the output on the Console when running the command. It asks for a username and password for the JKS store (If i provide the wrong password, it gives a different error, which shows that it is able to authenticate aganst the Keystore). After i put in the password, it throws the error as shown below "java.security.AccessControlException: Unsufficient rights to perform the operation"
D:\Coherence\FOL_CacheServer>fol-cache-server
java version "1.6.0_20"
Java(TM) SE Runtime Environment (build 1.6.0_20-b02)
Java HotSpot(TM) 64-Bit Server VM (build 16.3-b01, mixed mode)
Username:admin
Password:
Exception in thread "main" java.security.AccessControlException: Unsufficient ri
ghts to perform the operation
at com.tangosol.net.security.DefaultController.checkPermission(DefaultCo
ntroller.java:153)
at com.tangosol.coherence.component.net.security.Standard.checkPermissio
n(Standard.CDB:32)
at com.tangosol.coherence.component.net.Security.checkPermission(Securit
y.CDB:11)
at com.tangosol.coherence.component.util.SafeCluster.ensureService(SafeC
luster.CDB:6)
at com.tangosol.coherence.component.net.management.Connector.startServic
e(Connector.CDB:20)
at com.tangosol.coherence.component.net.management.gateway.Remote.regist
erLocalModel(Remote.CDB:10)
at com.tangosol.coherence.component.net.management.gateway.Local.registe
rLocalModel(Local.CDB:10)
at com.tangosol.coherence.component.net.management.Gateway.register(Gate
way.CDB:6)
at com.tangosol.coherence.component.util.SafeCluster.ensureRunningCluste
r(SafeCluster.CDB:46)
at com.tangosol.coherence.component.util.SafeCluster.start(SafeCluster.C
DB:2)
at com.tangosol.net.CacheFactory.ensureCluster(CacheFactory.java:998)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureServiceInterna
l(DefaultConfigurableCacheFactory.java:923)
at com.tangosol.net.DefaultConfigurableCacheFactory.ensureService(Defaul
tConfigurableCacheFactory.java:892)
at com.tangosol.net.DefaultCacheServer.startServices(DefaultCacheServer.
java:81)
at com.tangosol.net.DefaultCacheServer.intialStartServices(DefaultCacheS
erver.java:250)
at com.tangosol.net.DefaultCacheServer.startAndMonitor(DefaultCacheServe
r.java:55)
at com.tangosol.net.DefaultCacheServer.main(DefaultCacheServer.java:197)

Did you create the weblogic domain with the Oracle Webcenter Spaces option selected? This should install the relevant libraries into the domain that you will need to deploy your application. My experience is based off WC 11.1.1.0. If you haven't, you can extend your domain by re-running the Domain Config Wizard again (WLS_HOME/common/bin/config.sh)
Cappa

BPS layout access control - need flexibility

Similar Messages

Maybe you are looking for