Business Object Security Issue - With the Modify Option

Hi all;
My issue is Im trying to restrict all access on Info View that are related to the Modify option for a Read Only user. When I test the user I right click and the Modify option still there.
Please help thanks.....

Basically the solution was on the Application tab... I verify the privs related to the group and I change a few things. Plus still have the Modify option when I right click. Something helpful was that I can still change the column width or the color of the text or bold the text etc, but I can not change the data, which is good. Also when you right click and select view on the report your are not able to change the width of the columns. But it work ok...
Thanks for your help and support.

Similar Messages

Security Issues with the BP Internet user role creation--SU01

Hi All,
We are implementing the B2B Internet sales scenario using CRM 4.0. we
have contact persons who logs in and chose the distributor and then
start placing orders or look at product catalog .... Now contact person
is created as a BP in CRM and relation ship is maintained to sold to
(bp). During this process the contact person should be created under
the Internet user role which uses the SU01. so we will be able to
change password or change the roles of the users while creating BP
under the internet user role -- same as what we do in SU01.
This is now a security Issue because who ever can access the BP
(create/change) will be able to do the things we can do under
transaction SU01. But we still need to access the Internet user role in-order to assign the user id to the contact person . Is there any other
way of doing this.
Please advice ASAP.
Thanks
Vasu

Hi Ashwini,
you need to modify the logon routine and then in the user management (isauseradmin application) to do this. Then there are likely changes to the catalog identification, and very likely to most processes in the shop. I really wouldn't advise doing so. As accounts usually have contact persons: Why does your client insist in providing a login for the organization and not for a person?
To achieve something that looks almost like the desired solution you, e.g., could model a dummy contact person for each account that shall get a logon, that then does the job. The contact person could be named like the company and then you are back to plain standard.
Rgds
Thomas

Security issue with the SGA and multiple installation group.

Hi,
Documentation ARE WRONG:
http://download.oracle.com/docs/cd/E11882_01/rac.112/e10743/preparing.htm#TDPRC131
# useradd -u 1100 –g oinstall -G dba -d /home/oracle -r oracle
http://download.oracle.com/docs/cd/E11882_01/install.112/e10816/typinstl.htm#CWSOL156
# useradd -u 1100 -g oinstall -G dba oracle
The "-g" and "-G" must be exchange!
In an advanced installation with multiple Oracle users call them ( ora1, ..., orai, ..., oran )
with multiple OSdba group defined users call them ( dba1, ..., dbai, ..., dban)
Associate each oracle user to a dba group with the same number and the install group as oracle told it.
User ora1 group dba1
User orai group dbai
User oran group dban
Now make the software installationS with the group OSinstall ( install) as written in the documentation, in 3 Oracle_home
Call the oracle_home1, oracle_home2, oracle_home3
Now check semaphores, Sharedmemory and files!
ipcs -msa
IPC status from <running system> as of Thu Apr 29 12:14:06 CEST 2010
T ID KEY MODE OWNER GROUP CREATOR CGROUP NATTCH SEGSZ CPID LPID ATIME DTIME CTIME
Shared Memory:
m 16777246 0x6525858 rw-rw-- oracle2 install oracle2 install 36 5368725504 3479 4298 12:10:01 12:10:31 16:30:45
T ID KEY MODE OWNER GROUP CREATOR CGROUP NSEMS OTIME CTIME
Semaphores:
s 50331701 0xb7892c1a ra-ra-- oracle2 install oracle2 install 202 16:30:47 16:30:45
s 50331700 0xb7892c19 ra-ra-- oracle2 install oracle2 install 202 no-entry 16:30:45
s 50331699 0xb7892c18 ra-ra-- oracle2 install oracle2 install 202 12:13:48 16:30:45
ls -l $OSD/oradata/*/*/* | sed s/oracle/oracle2/
-rw-r----- 1 oracle2 install 11600384 Apr 14 18:30 /app1/oracle/admin/ora11g/oradata/ORA11G/changetracking/o1_mf_5wcsdcfh_.chg
-rw-r----- 1 oracle2 install 11600384 Apr 15 15:08 /app1/oracle/admin/ora11g/oradata/ORA11G/changetracking/o1_mf_5wf7787k_.chg
-rw-r----- 1 oracle2 install 11600384 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/changetracking/o1_mf_5wg8jggf_.chg
-rw-r----- 1 oracle2 install 16695296 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/controlfile/o1_mf_5wg4j9go_.ctl
-rw-r----- 1 oracle2 install 524296192 Apr 29 03:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_aud__dol_5wg4mntr_.dbf
-rw-r----- 1 oracle2 install 104865792 Apr 29 03:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_aud__dol_5wg4mp3v_.dbf
-rw-r----- 1 oracle2 install 209723392 Apr 29 03:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_example_5wg4ml5z_.dbf
-rw-r----- 1 oracle2 install 419438592 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_stat_dba_5wg4mmhg_.dbf
-rw-r----- 1 oracle2 install 2097160192 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_sys_undo_5wg4kf8n_.dbf
-rw-r----- 1 oracle2 install 2097160192 Apr 29 03:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_sys_undo_5wg4lss2_.dbf
-rw-r----- 1 oracle2 install 1363156992 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_sysaux_5wg4k1xf_.dbf
-rw-r----- 1 oracle2 install 1048584192 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_system_5wg4jp26_.dbf
-rw-r----- 1 oracle2 install 209723392 Apr 28 22:01 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_temp0_5wg4l302_.tmp
-rw-r----- 1 oracle2 install 209723392 Apr 15 16:06 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_temp1_5wg4lsod_.tmp
-rw-r----- 1 oracle2 install 104865792 Apr 29 03:05 /app1/oracle/admin/ora11g/oradata/ORA11G/datafile/o1_mf_users_5wg4l33f_.dbf
-rw-r----- 1 oracle2 install 104858112 Apr 29 13:05 /app1/oracle/admin/ora11g/oradata/ORA11G/onlinelog/o1_mf_1_5wg4jb44_.log
-rw-r----- 1 oracle2 install 104858112 Apr 28 21:00 /app1/oracle/admin/ora11g/oradata/ORA11G/onlinelog/o1_mf_2_5wg4jdn6_.log
-rw-r----- 1 oracle2 install 104858112 Apr 28 22:00 /app1/oracle/admin/ora11g/oradata/ORA11G/onlinelog/o1_mf_3_5wg4jgw8_.log
-rw-r----- 1 oracle2 install 104858112 Apr 29 03:00 /app1/oracle/admin/ora11g/oradata/ORA11G/onlinelog/o1_mf_4_5wg4jk64_.log
-rw-r----- 1 oracle2 install 104858112 Apr 29 13:01 /app1/oracle/admin/ora11g/oradata/ORA11G/onlinelog/o1_mf_5_5wg4jmcd_.log
ls -l $OH/bin/oracle | sed s/oracle/oracle2/
-rwsr-s--x 1 oracle2 install 256263032 Apr 14 13:54 /app1/oracle/product/11.2.0_64/db_1/bin/oracle*
That the evidence the documentation provide you a wrong way to do it!
François LANGE

The right document syntax for this is:
UNIX: Do I Need To Use The "oinstall" Group? (Doc ID 463052.1)
FRançois

Is Apple or anyone aware of the security issue with the iPad 2, iOS 5, and Smartcover?!

See here for a demonstration of what I'm talking about...makes me very nervous:
http://www.youtube.com/watch?v=NLgQ22naQhE&feature=player_profilepage#t=139s

They most likely know and will be addressing the issue Ina bug fixing patch to iOS 5.
To submit this to Apple, please visit
http://www.apple.com/feedback

Severe Security Issue with Sharing Permissions and Windows

I recently discovered a severe Security issue with the windows sharing an permission settings:
I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
1. I set the Drive checkbox "ignore ownership" off.
2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
3. I apply to enclosed Items
4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
5. I apply to enclosed Items
6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
7. I delete all previous shares
8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

I recently discovered a severe Security issue with the windows sharing an permission settings:
I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
1. I set the Drive checkbox "ignore ownership" off.
2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
3. I apply to enclosed Items
4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
5. I apply to enclosed Items
6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
7. I delete all previous shares
8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

HT1918 How do you solve an issue with the card? I don't get the option of 'none' :(

How do you solve an issue with the card? I don't get the option of 'none'

I had this exact same problem with the new iPhone I bought on 1/4/13. The walk through they provide on how to do this is useless because it fails to explain that if you are already having the problem of not getting the "None" payment option with an Apple ID then you will need to create a completely new Apple ID.
I had to do this 7 times since I bought my iPhone on Friday until this morning to figure out how to finally be able to use the Home Sharing option in iTunes to put my music collection on my brand new $500.00 iPhone. Pretty pathetic if you ask me but since it made me so angry I want to make sure other know how to do this so you don't get as upset as I did.
#1 If your current or soon to be "old" Apple ID is not providing the option for "None" as a payment option then you need to make a brand new one. But you have to make it specifically how I tell you.
#2 You will need to use an email address that has not already been used for anything related to a previous Apple ID. You might need to make a brand new email address.
#3 Open iTunes, then open iTunes Store (upper right corner of iTunes).
#4 Click on App Store (upper center of screen).
#5 Scroll down the screen page until you see Top Free Apps on the right side.
#6 Choose any one of the FREE apps.
#7 You should either get the option to create a new Apple ID box, either that, or it will pop up with some kind of disclaimer and then it does the create new Apple ID.
Either way just create a new Apple ID when it gives you the option to and then when you get to the page that looks like the payment page the "None" payment option will finally be available.
Note: You will still have to fill out the information on the payment page. As long as you choose the "None" option it will not request any credit card information.
#8 You will be sent a confirmation email to the new email account. Just follow through with what ever it tells you and viola now you can use your Apple Device.
What a pain in the keester, eh?

Why does FF save files to desktop, when I have "downloads" checked in options? This is a new issue with the latest version 3.6.3 Windows XP Thanks.

Why does FF save files to desktop, when I have "downloads" checked in options? This is a new issue with the latest version 3.6.3 . Using Windows XP Driving me nuttier! Thanks.
(Is is that MicroNetFrame Asst thing?)
== This happened ==
Every time Firefox opened
== When I installed latest version

Thanks for your reply. I appreciate your help.
It was just a hunch that MircoNetFrame was causing the problem. I disabled it as you suggested, and I still have the problem.
I just changed under Tools>Options> General - had checked "ask me every time" under downloads, so instead of asking me, FF saved the download to I know not where. It no longer saves it to the desktop, leaving a duplicate in "my documents".
In windows, I have found unless one knows the entire name of the document, one can never find anything. It isn't listed under recent ''''''__. I can't recall the nomenclature, but the
capability is ridiculous. So, I don't know where that file I just downloaded is!
I downloaded a PDF file, but this happens with all DL's. It was so easy to have them all stacked in one place and I could recall
what I had and when I downloaded it easily.
Do you have any other suggestions other that going back to the old version of FF, which I would rather not do?
Thanks again for your time, it is very considerate to help a complete stranger, I must say. Sounds like something I might do! Cheers!

Oracle Business Intelligence Discoverer with the OLAP Option 11g

Is it also possible to use Oracle Business Intelligence Discoverer with the OLAP Option 11g ?
I read this article but the OLAP Option is 10g.
Thanks.

Hi,
Yes, I think so, see this article.
Rod Wets

Re : Issue with the column display in Bex reports

Hello Gurus,
I have an issue with the reports in Bex, this is a bit confusing scenario I would try to explain in more details. A query was already built for monthly Report in Sales and Billing for which the variable were Calender month/year range 1 (mandatory), range 2 range 3 range 4. These 4 variable were created and moved to column rows in query.
Later the user wanted the copy of same report but he wanted the variables to be Calender date range 1 (mandatory), range 2, range 3 , range 4. I have created them with 0calenderday as reference and moved to the columns.
for the monthly report text variables were already existing for the Calender month/ year, but for the daily report text variable were not existing for Dates. I have created a text variable for the date in the following way processing by
" replacement path" and reference characteristic as 0calday and in the replacement path tab.. in replace variable the selection is info object, the next option Replace with " External charactersitic value key " .
By creating this text variable the dates were being displayed in the colum header like 11/01/2013 - 11/30/2013 which satisfies the requirement.
But the user wanted to see the report same like monthly report when the mandatory variable Calender year/ month is selected, the rest of the columns range 2, range 3, range 4 are displayed as unassigned in the report. but coming back to the daily report when the user is giving the Calender date rage 1, he is finding that Calender date range 2, range 3, range 4 are also being displayed with values. He want to see the Calender date range 2,3,4 as unassigned in the report just like monthly. Please find the images attached.
As Calender month/ year is predefined, if the calender range values are not given it would show up as not assigned default. I have created a separate text variable for Calender day, I believe that could be the reason rest of the columns are not showing up as unassigned. The user want to see them as unassigned like monthly report columns.
I tried different ways changing the text variables but I could not change the display of the columns in Calender date report by the option - replace with ----> External characteristic value key, key, label. when I chose the option external characteristic value then the date was showing up in the text of the column when report is run ( Please find the image for the reference in the attachment ). . I request you to help me out in this. Please find the images of the variables and output below.

Anshu,
Thank you very much for above code I made minor changes to the code that finally worked. I created 4 different text variables needed for Calender date range 1, 2 ,3 ,4. Please find the code below for the text variable that worked in the system
WHEN 'ZTEXT_CAL1'.
   READ TABLE I_T_VAR_RANGE INTO loc_var_range
   WITH KEY VNAM = 'ZCALDATE1'.
    IF loc_var_range-LOW = '#'.
      dt_low = 'Not Assigned'.
      dt_high = 'Not Assigned'.
      CONCATENATE dt_low '-' dt_high INTO l_s_range-low.
    ELSE.
      CONCATENATE loc_var_range-low+4(2) '/' loc_var_range-low+6(2) '/' loc_var_range-low+0(4) into dt_low.
      CONCATENATE loc_var_range-high+4(2) '/' loc_var_range-high+6(2) '/' loc_var_range-high+0(4) into dt_high.
      CONCATENATE dt_low '-' dt_high INTO l_s_range-low.
    ENDIF.
        L_S_RANGE-SIGN = 'I'.
        L_S_RANGE-OPT = 'EQ'.
        APPEND L_S_RANGE TO E_T_RANGE.

Security Issues with 8.1 Pro

I have had several security issues with Windows 8.1 Pro.
I am curious if the following apps should be loaded by default:
CheckPoint.VPN
JuniperNetworks.JunosPulseVpn
SonicWALL.MobileConnect
F.vpn.client
These programs are installed on a fresh install of Windows 8.1 Pro but I do not think they should be. They are present prior to the install of any 3rd party programs or apps.
Thanks

I found them in my firewall list on my Windows 8.1 Pro installation and posted a question on a forum as well, though I don't think it was here. I don't believe anyone ever answered.
It looks as though these are parts of the bundled virtual private networking clients.
Note, for example, the "distributed by Microsoft as part of Windows 8.1" wording on this page:
http://www.sonicwall.com/app/projects/file_downloader/document_lib.php?t=PG&id=605
-Noel
Detailed how-to in my eBooks:
Configure The Windows 7 "To Work" Options
Configure The Windows 8 "To Work" Options

[svn] 4488: Attempt to fix the heap-space issue with the doc target.

Revision: 4488
Author: [email protected]
Date: 2009-01-12 12:10:58 -0800 (Mon, 12 Jan 2009)
Log Message:
Attempt to fix the heap-space issue with the doc target.
Also removing some unused code.
QE Notes: None
Doc Notes: None
tests: checkintests
Modified Paths:
flex/sdk/trunk/frameworks/projects/airframework/build.xml
flex/sdk/trunk/frameworks/projects/flash-integration/build.xml
flex/sdk/trunk/frameworks/projects/flex/build.xml
flex/sdk/trunk/frameworks/projects/flex4/build.xml
flex/sdk/trunk/frameworks/projects/framework/build.xml
flex/sdk/trunk/frameworks/projects/haloclassic/build.xml
flex/sdk/trunk/frameworks/projects/rpc/build.xml
flex/sdk/trunk/frameworks/projects/utilities/build.xml
flex/sdk/trunk/frameworks/projects/wireframe/build.xml
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/AsDocAPI.java
Removed Paths:
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/PumpStreamHandler.java

1. Tell more about it, e.g.: OS, a sun jdk or a ibm jdk? 32-bit or 64-bit?
for ibm jdk, look for *.hpd file within the dir.
for sun jdk, add startup option -XX:+HeapDumpOnOutOfMemError
Then analyze them with heap analyzer.
2.MaxPermSize=1024m so big space for class files, really necessary?

Business Objects SAP Transports overwrite the BW 7.3 Upgrade Crystal Object

Hello All,
We recently Upgraded our BW environment to 7.3 from 7.0 NW. And we also implemented BI 4.0 SP2, and as part of Integrating BI with BW put in 8 SAP transports which I have listed below. After the 7.3 upgrade to BW we were asked to put in SP5 and then the SPAU comes back with a conflict with one of the BI transports. After doing a compare it seems the CRYSTAL namespace is now part of 7.3 and these BI transports for SAP were created in 2005, so by putting these transports in (for BI to BW connectivity) we have overwrtten some 7.3 code?
My question is do we have a new set of transports for BI to BW 7.3 connectivity? I couldn't find any such in the installation guide or OSS notes for BI
R21K900732        JJI                              Business Objects OpenSQL reporting obj
R21K900688        JJI                              Business Objects InfoSet reporting obj
R21K900689        JJI                              Business Objects Row Level Security To
R21K900690        JJI                              Business Objects Cluster Definition Ed
R21K900691        JJI                              Business Objects Security functions. U
R21K900722        JJI                              Business Objects Content Administratio
R21K900705        JJI                              Business Objects Personalization objec
R21K900695        JJI                              Business Objects ODS driver
R72K900047        ADMIN                            Business Objects BW MDX Driver
Thanks
Rommel

Hi Paul, I opened a message with SAP under the BI area, and it has been routed to the BEX-BW team now. I would suggest open a message for the BEX-BW group since your Upgrade is getting stuck during Enhancement. Also talking to the BI folks on phone I got the impression that althoguht BW 7.3/7.0x have most of the objects in the standard SAP namespace they still want us to import the 8 or 9 transports as mentioned in the BI Guide. It feels that the SAP BW development and SAP BI development are not at the same page and causing these conflicts. Sorry couldn't be of much help to you.

I forgot the password for the apple store, I try to restore it with the first option (email) but i have check my account and the email doesn`t arrive

I forgot the password for the apple store, I try to restore it with the first option (email) but i have check my account and the email doesn`t arrive
What can I do???

Apple ID security issues -
Call Apple Care and ask for the Account Security Team. They can assist you with your issue.

Frequent issues with the contacts

Hi,
Everyday I face issues with the contacts. It does not search the contact I wanted to look and stuck on the first page of the list for few seconds and then move to the searched contact. But when I open that contact, it shows the contact details of first name of my conact list, not the one I searched. It is irritating and happens everyday.
Only way to resolve this is by restarting the device or power off and ON it.
Does anyone face this. Is there any solution availble for this issue.

I am a real estate broker and I have 1200 contacts and when I transferred the contacts from my old BB Torch to z10, the transfer was successful and all my contact fax numbers are listed as fax. BB has announced that they are going to have USB Outlook sync in the future release of BB link. I am eagerly waiting just like you, it is important part of my business and online cloud sync is not an option for me. I currently email my contacts from my desktop to my z10 as a .vcard and update any new contacts.. Same with the calendar. You can also save it on your sd card. A temp solution until the feature is available. or use outlook.com or other cloud service.
To add a fax to your contact, open the contact in edit mode, click on add field and select fax.. You also have a choice to set fax work, home , direct or other.

Hp Envy X2 issues with the touchpad gestures

I am experiencing some issues with the touchpad gestures after every time it wakes up. I am already update the drives posted in the hp web site, is anybody out there with the same issues?

I couldn't find any graphic drivers for that notebook, but here is an updated chipset that is available for your notebook: http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?softwareitem=ob-114872-1&cc=us&dlc=en&lc=en...
It was released 6 days ago, so it might enable that option for you. It can't hurt to try it out. If not, you might just have to hold out a little bit until they update the driver.
-------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

Business Object Security Issue - With the Modify Option

Similar Messages

Maybe you are looking for