Change permissions for UME repository

Dear friends,
Is it possible to change permissions for the ume repository. By default, it has "Allow" permission for List Children and Read properties. I dont see any options to change permissions under Settings -> permissions. Does anyone here in this forum knows how can I achieve the same? I am actually trying to index the ume repository and the crawler fails. I was wondering if the repository needed to have a full control. So, I am trying to change the permissions.
We are on EP6 SP13 (all components)
Any help is appreciated,
Thanks,
Mandar

Hello experts,
any ideas?
I need aswell to change the permission in the UME repository...
Thanks in advance!
Greets
Thomas

Similar Messages

I Changed permissions for every enclosed folder in my Library (not Home)

I wanted to change permissions on a fiie in my root Library (not Home Library) and clicked apply to enclosed items for the entire Library folder. Once I realized what happened (after the fact) I tried to repair permissions but things aren't working right obviously. I have a backup of the Library on my Time Machine drive that is before the snafu.
Is is possible to restore just this Library folder, and if I restored just this folder using Time Machine would it also restore the permissions as they were before I screwed up.
I'm backing up the altered Library folder to another drive just to be safe if I do need to restore.
Always learning,
Thanks
Message was edited by: Thor Stevens

Thor Stevens wrote:
I wanted to change permissions on a fiie in my root Library (not Home Library) and clicked apply to enclosed items for the entire Library folder. Once I realized what happened (after the fact) I tried to repair permissions but things aren't working right obviously. I have a backup of the Library on my Time Machine drive that is before the snafu.
Is is possible to restore just this Library folder, and if I restored just this folder using Time Machine would it also restore the permissions as they were before I screwed up.
no, that's not possible because many of those items are in use while you are booted normally. you need to do a full system restore from TM from before you did this. from your last post you seem to be doing just that. and in the future NEVER ever use "apply to enclosed items" on ANY system created folders. that applies btw to things like your home folder, the library in your home folder, your desktop folder etc. use it only on folders you made yourself. apart from messing up permissions on system files like those in the root library, many system created folders like your home folder have hidden ACLs and using 'apply to enclosed items" propagates those ACLs to everything inside.
I'm backing up the altered Library folder to another drive just to be safe if I do need to restore.
Always learning,
Thanks
Message was edited by: Thor Stevens

Changing permissions for /home

Hi,
I have a problem with my /home directory. It has no write permissions and I can't change that. The owner of the directory is root but even if login as root I can't change the permissions for the /home directory. When looking at the properties for the /home directory in the File Manager it says that the file is a NON_WRITABLE_FOLDER. When trying to remove the directory I get a message saying that the "Directory is a mount point or in use".
Does anyone know what I have to do to be able to change the permissions of the /home directory.
Thankful for all help!
/Johan

Hi,
It seems to be /home directory is a NFS mounted directory from the other system. To change its ownership you need to login to the system as root and change the permission for mount options as -rw.
Hope it helps !
Regards,
Dharani
SlashSupport india Pvt Ltd.
Hi,
I have a problem with my /home directory. It has no
write permissions and I can't change that. The owner
of the directory is root but even if login as root I
can't change the permissions for the /home directory.
When looking at the properties for the /home directory
in the File Manager it says that the file is a
NON_WRITABLE_FOLDER. When trying to remove the
directory I get a message saying that the "Directory
is a mount point or in use".
Does anyone know what I have to do to be able to
change the permissions of the /home directory.
Thankful for all help!
/Johan

Solved - How to take ownership and change permissions for blocked files and folders in Powershell

Hello,
I was trying to take ownership & fix permissions on Home Folder/My Documents structures, I ran into the common problem in PowerShell where Set-Acl & Get-Acl return access denied errors. The error occurs because the Administrators have been removed from
file permissions and do not have ownership of the files,folders/directories. (Assuming all other permissions like SeTakeOwnershipPrivilege have been enabled.
I was not able to find any information about someone successfully using native PS to resolve the issue. As I was able to solve the issues surrounding Get-Acl & Set-Acl, I wanted to share the result for those still looking for an answer.
Question: How do you use only Powershell take ownership and reset permissions for files or folders you do not have permissions or ownership of?
Problem:
Using the default function calls to the object fail for a folder that the administrative account does not have permissions or file ownership. You get the following error for Get-Acl:
PS C:\> Get-Acl -path F:\testpath\locked
Get-Acl : Attempted to perform an unauthorized operation.
+ get-acl <<<< -path F:\testpath\locked
+ CategoryInfo : NotSpecified: (:) [Get-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.GetAclCommand
If you create a new ACL and attempt to apply it using Set-Acl, you get:
PS C:\> Set-Acl -path F:\testpath\locked -AclObject $DirAcl
Set-Acl : Attempted to perform an unauthorized operation.
At line:1 char:8
+ Set-Acl <<<< -path "F:\testpath\locked" -AclObject $DirAcl
+ CategoryInfo : PermissionDenied: (F:\testpath\locked:String) [Set-Acl], UnauthorizedAccessException
+ FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.PowerShell.Commands.SetAclCommand
Use of other functions like .GetAccessControl will result in a similar error: "Attempted to perform an unauthorized operation."
How do you replace owner on all subcontainers and objects in Powershell with resorting to external applications like takeown, icacls, Windows Explorer GUI, etc.?
Tony

Hello,
Last, here is the script I used to reset permissions on the "My Documents" tree structure that admins did not have access to:
Example: Powershell script to parse a directory of User-owned "My Document" redirection folders and reset permissions.
#Script to Reset MyDocuments Folder permissions
$domainName = ([ADSI]'').name
Import-Module "PSCX" -ErrorAction Stop
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeRestorePrivilege", $true) #Necessary to set Owner Permissions
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeBackupPrivilege", $true) #Necessary to bypass Traverse Checking
#Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeSecurityPrivilege", $true) #Optional if you want to manage auditing (SACL) on the objects
Set-Privilege (new-object Pscx.Interop.TokenPrivilege "SeTakeOwnershipPrivilege", $true) #Necessary to override FilePermissions & take Ownership
$Directorypath = "F:\Userpath" #locked user folders exist under here
$LockedDirs = Get-ChildItem $Directorypath -force #get all of the locked directories.
Foreach ($Locked in $LockedDirs) {
Write-Host "Resetting Permissions for "$Locked.Fullname
#######Take Ownership of the root directory
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
$Locked.SetAccessControl($blankdirAcl)
###################### Setup & apply correct folder permissions to the root user folder
#Using recommendation from Ned Pyle's Ask Directory Services blog:
#Automatic creation of user folders for home, roaming profile and redirected folders.
$inherit = [system.security.accesscontrol.InheritanceFlags]"ContainerInherit, ObjectInherit"
$propagation = [system.security.accesscontrol.PropagationFlags]"None"
$fullrights = [System.Security.AccessControl.FileSystemRights]"FullControl"
$allowrights = [System.Security.AccessControl.AccessControlType]"Allow"
$DirACL = New-Object System.Security.AccessControl.DirectorySecurity
#Administrators: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("BUILTIN\Administrators",$fullrights, $inherit, $propagation, "Allow")))
#System: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("NT AUTHORITY\SYSTEM",$fullrights, $inherit, $propagation, "Allow")))
#Creator Owner: Full Control
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("CREATOR OWNER",$fullrights, $inherit, $propagation, "Allow")))
#Useraccount: Full Control (ideally I would error check the existance of the user account in AD)
#$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked.name",$fullrights, $inherit, $propagation, "Allow")))
$DirACL.AddAccessRule((new-object System.Security.AccessControl.FileSystemAccessRule("$domainName\$Locked",$fullrights, $inherit, $propagation, "Allow")))
#Remove Inheritance from the root user folder
$DirACL.SetAccessRuleProtection($True, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#Set permissions on User Directory
Set-Acl -aclObject $DirACL -path $Locked.Fullname
Write-Host "commencer" -NoNewLine
##############Restore admin access & then restore file/folder inheritance on all subitems
#create a template ACL with inheritance re-enabled; this will be stamped on each subitem to re-establish the file structure with inherited ACLs only.
#$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked.name") #ideally I would error check this.
$NewOwner = New-Object System.Security.Principal.NTAccount("$domainName","$Locked") #ideally I would error check this.
$subFileACL = New-Object System.Security.AccessControl.FileSecurity
$subDirACL = New-Object System.Security.AccessControl.DirectorySecurity
$subFileACL.SetOwner($NewOwner)
$subDirACL.SetOwner($NewOwner)
######## Enable inheritance ($False) and not copy of parent ACLs ($False)
$subFileACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
$subDirACL.SetAccessRuleProtection($False, $False) #SetAccessRuleProtection(block inheritance?, copy parent ACLs?)
#####loop through subitems
$subdirs = Get-ChildItem -path $Locked.Fullname -force -recurse #force is necessary to get hidden files/folders
foreach ($subitem in $subdirs) {
#take ownership to insure ability to change permissions
#Then set desired ACL
if ($subitem.Attributes -match "Directory") {
# New, blank Directory ACL with only Owner set
$blankdirAcl = New-Object System.Security.AccessControl.DirectorySecurity
$blankdirAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankdirAcl)
#At this point, Administrators have the ability to change the directory permissions
Set-Acl -aclObject $subDirACL -path $subitem.Fullname -ErrorAction Stop
} Else {
# New, blank File ACL with only Owner set
$blankfileAcl = New-Object System.Security.AccessControl.FileSecurity
$blankfileAcl.SetOwner([System.Security.Principal.NTAccount]'BUILTIN\Administrators')
#Use SetAccessControl to reset Owner; Set-Acl will not work.
$subitem.SetAccessControl($blankfileAcl)
#At this point, Administrators have the ability to change the file permissions
Set-Acl -aclObject $subFileACL -path $subitem.Fullname -ErrorAction Stop
Write-Host "." -NoNewline
Write-Host "fin."
Write-Host "Script Complete."
I hope you find this useful.
Thank you,
Tony
Final Thought: There are great non-PS tools like
Set-Acl and takeown which are external to PS & can also do the job wonderfully. It may be much simpler to call those tools than recreate the wheel in pure
code. Feel free to use whatever best suits your time, scope & cost.

Boot loop after changing permissions for /applications directory

Hi there,
i have an imac with leopard OS. After a program install complained about missing priviliges for /applications directory
i adjusted the permissions for this folder. I changed admin user right from read to read/write and added another user, also with read/write rights.
After applying the permissions (including subdirectories) i rebooted.
Now the mac doesn`t come up anymore. It boots, shows the apple and the turning wheel and after 3-5 minutes boots again in a loop.
Any ideas highly aprreciated....
thx

Attempt to reboot in Safe Mode then try restarting normally.

Changing permissions for _QTSS user

Trying to change my streaming media directory from the default to another hard disk. Apparently I need to make the internal user qtss the owner of that directory, but am unable to do so. It does not appear in list of users when I try to change permissions on the new streaming folder. Unable to change it using get info, workgroup manager or even chmod. We are using an external active dir and only those users show up. Any idea how to do this?

Found the same trouble.
Try XRay. This utility allow easily change permissions via GUI interface.

How do I Change Permissions for a UME Role: UME.Manage_Users

I am trying to set up a helpdesk role that will allow a limited number of users to reset passwords and unlock users.
I do not want them to be able to change user data, delete or create users.
I created a user and assigned it the user administration content. I removed all except the search, previous search and locked users options. In the permissions I clicked on yes for the manage_users capability.
However, the manage_users option is set to all by default. How can I change it so they only have reset password and unlock capabilities?

Hi,
Mangae_users action in UME is basically for delegated admin's. With this action an user can do all admin activities for the particular company.
If you want to give only password change permission assign the action
UME.Manage_all_user_passwords. With this action an user can view and change all user passwords.
Refer the link below also for more information.
http://help.sap.com/saphelp_nw70/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/frameset.htm
Thanks
R.Murali

How do I change permissions for the documents and files on my Mac Book Pro after I re-instaalled the HD using a Time Machine back-up?

I had to re-install the HD on my Mac Book Pro. I used a Time Machine back-up for all the apps and files. Most were restored, However, I cannot unlock a number of them. I tried changing the permissions using Get info but it is not working. I am using the latest version of Moutain Lion OSX.

Linc:
Very helpful suggestion and response, Thanks for pointing out that it is a permission issue. I am working through the issue and resolving my problem.

How do I change permissions for West Dig USB HD, how said "read only" and can't use it.

I have a West Did Hard drive from my PC that want to use on my Macbook. Looking at the permissions said "read only". I tried to move files on the drive and could not when attached to my Macbook. Where do I change these settings that will allow me to use this drive. Thanks for any help.
This is my first Mac so do not know much about the Mac process, moving slow and steady.
Donco

Was this drive in use with a windows machine previously?
If yes then I would guess that it is formatted as NTFS, Mac's can not write to NTFS discs.
If you have sufficient space on your Mac copy the disk contents to a folder on your desktop and reformat the drive for use with Mac and Windows, then put the files back.
Post back with some answers and I'll try to guide you through this

Can't change permissions for another account

I went to my admin user account and then went to accounts and unlocked it to be able to manage another account and want to change the permission to allow admin permissions but it isn't allowing me to click on the other accounts to change anything.... Am I in the wrong area to be able to change these permissions or is there something else I need to do?

Sounds like you're doing (or trying to do) it right, but just to be sure is this what you intend?
(may not be exactly the same - this is Snow Leopard)

Is there any kind of change log for UME?

Is there any kind of logging of changes to users or roles in UME? We are on GRC 5.3 SP13.
We have a strange situation in our production RAR system. The Change History shows some changes where made to a function on 7/8. However the userid indicated by the Changed By field currently shows as not havig access to make function changes in production.
They can make function changes in test, so I thought maybe they did an Rule Import. However they don't have the access in production to perform the Rule Import either. Also, the Change History in the test RAR system does not show any changes to the function in question by this userid on 7/8.
I am assuming that if you did a Rule Import and brought over the Change History records, the date on these records would be the exact same as shown in test. (i.e. they would show the date when the function change was made in the test system, not the date when the Change History was imported into production)
Also the Change History shows the last Rule Upload was on 7/2, and the last Rule Generation was also run on 7/2. This would seem to indicate that no one else performed a Rule Import on 7/8 either.
Any ideas on what happened?
The only thing I can think of is that this user did have the access back on 7/8, but that it has since been removed. But I don't have a way to prove this.
Thanks.

Hi Bob,
Looking at your explanation, it seems impossible situation. How ever I remember in early patches of GRC AC 5.3 there was an issue with RAR change log. The change history would show wrong IDs in Function/Risk change.
That was fixed in patch 9. Not sure whether the same issue is returned again.
Regards,
Sabita

Changing permissions for makepkg files

I'm made an exaile 0.2.9 package for x86_64 for myself since it's not in the x86_64 repositories yet. I was thinking of fixing it up and poping it in the AUR. I'm having a bit of trouble with it though.
When it installs, the executable looses the executable bit in it's permissions. The pkg directory that makepkg creates seems to get it right:
ls -l /var/abs/local/exaile/pkg/usr/share/exaile/exaile.py
-rwxr-xr-x 1 jon users 84642 2007-04-01 14:30 /var/abs/local/exaile/pkg/usr/share/exaile/exaile.py
But when I run install it, it looses the +x bit:
yaourt -S /var/abs/local/exaile/exaile-0.2.9-1.pkg.tar.gz
ls -l /usr/share/exaile/exaile.py
-rw-r--r-- 1 root root 84642 2007-04-01 14:30 /var/abs/local/exaile/pkg/usr/share/exaile/exaile.py
Is there some way to fix this?
I've noticed that a few other packages in AUR mess-up permissions too... One of them set my /usr and /usr/lib to be readable only by root!

Install fakeroot. That will ensure the correct permissions are applied.
If there are buggy packages in the AUR, report them to the maintainer immediately. If there's no response, report them to the tur-users mailing list so a TU can deal with them.
Always remember to read through the PKGBUILDs before building and installing packages from the AUR - or from anywhere other than the established repos, for that matter.

Changed permissions for a folder and items - now can't delete or open

Hello
I was recently playing around with the Get Info button when right clicking on a folder or icon. I was trying to lock the folder so it could not be accessed (except with a password). I ended up locking it with the check box, then changing the privileges to No Access at the bottom under Ownership and Permissions and Details (all drop down menus were set to No Access). Also, now the checkbox is greyed out, so I can't uncheck it...
I was working on an external drive and then transferred the folder to my G5. However, while I can access the folder, I can not open the items I locked down. I also can not delete the folder and I keep getting "You Do not have sufficient privileges". I tried switching the Owner back to my own name (since it got set somehow to System), but after clicking the little lock and entering my password, it says "The operation could not be completed...An unexpected error occured (error code 120)".
Basically, how can I delete this folder or move it to the trash? And also, is there any good way to lock down folders so you need a password to get in?
Thank you
Chris

Deleting sandvox does not delete the customizations like udfs, forms. The actions that you perform in sandbox results in creation of the same in OIM db and also in metadata db.
As a solution of the problem you can try creating a new sandbox and then create new versions of the application instance forms. Once done navigate the application instance and assign the newly created application instance form. This might work and you can ignore the earlier forms.

CC Team. Need to change permissions for users

I have installed CC Team on several computers, 15 so far or so.
I made install package to do this.
I used the default settings which among other things don't allow the users to update the applications. The Admin can only do it.
Now I am facing the problem that users who are using CC on their private computers cannot update some programs because the Admin has to do this.
Is there some simple way to change the permissions so they can update?

Hi Sigurdur Armannsson,
Please follow this Link to enable the updates feature in the applications.
http://helpx.adobe.com/creative-suite/kb/disable-auto-updates-application-manager.html
regards,
Abhijit

On my mac, when I try to import certain music CDs (not all) I get this message "You dont have write access for your iTunes media folder or a folder within it. To change permissions, select your iTunes media folder in the finder, and chose file get info"

I am not sure how to fix this and it is driving me crazy can anyone help?
Thanks.

Hi folks,
I've had this issue for a year now and I've read this and several similar articles on how to change permissions for you iTunes Media folder and all that enclosed stuff.
Well today, I got brave and dove into this issue once again and to my surprise I have it remedied.
Before I kept going to my side bar folder 'Music', then located the iTunes Media folder ( I have several libraries).
This time, I went from (your mac)HD, directly to the 'Library', scrolled to 'iTunes' and reworked my permissions there by creating a new user... (ME). While at it, I adjusted 'Administrator from and back to, 'read and write', gave myself, 'read and write' and left other users as 'read only.'
I then applied to all enclosed folders with the 'gear wheel,' locked the whole shabang up and proceeded to install several old CD's which refused to import in the past.
RECAP:
HD/Library/iTunes set permissions for YOU to 'read and write,' then apply to all enclosed folders.
BTW: those enclosed folders are likely to be all the albums you've collected previously.
Perhaps, the 'iTunes Media folder' description from previous instructions kept people looking in the wrong place.
In any case, I'm up and running and I hope you will be too.
Thanks,
PS

Change permissions for UME repository

Similar Messages

Maybe you are looking for