Content authorizations

Hello ,
we've got the problem that somebody reset the authorizations for slave objects in the portal content directory!
So if you don't have admistrotions right, you couldn't log on, You would get an error:
"portal_content/every_user/general/defaultDesktop". The Object doesn't exist or you don't have access rights  for this object..
Could anybody give me some advice to correct this error or how can I see the old authorizations of the folders / objects slave of portal content directory?

Thats because the pcd permissions have now been set explicetely - meaning only a user with super_admin access will be able to access it.
If you are desperate for urgent access give the pcd node portal_content the Authenticated Users group - Administrator None, End User ticked.
Once you have saved this - push these permissions to the child nodes.  That will sort your user access but it a BIG security risk as anyone in theory can access anything.
Better you should sort the permissions first.  You dont necessarily have to do this at the portal_content node level but it will catch everything so eliminating your access problems.
Haydn

Similar Messages

  • Webdynpro ABAP content authorization object in SAP portal ?

    Hi
    We are on EHP 6.06 , we have an authorization problem in sap portal for the webdynpro abap content. our standart users got the error "page can not be found" for the services provided from webdynpro abap. when I assign the user to administrator group in sap portal the services working fine. I also checked the SAP ERP roles no problem is there.  I guess I should create a new portal role for them cause its the only difference between users who can reach or not but have no idea what to put in it in SAP portal. Any idea ?

    in portal content directory => double click on the Content provided by sap folder. Than you should have a dropdown somewhere where you can select "Authorizations". You should add the group endusers and check the checkbox.

  • HELP!  Problems with iTunes purchased content authorization...

    I have many computers and between the wife and myself we have a lot of music. I just recently upgraded my windows partition on the Mac Pro to Windows 7 64 bit. Everything works great with the exception of iTunes. For example I will double click on a song to begin and it will tell me that my computer is not authorized to play the song... I will fill out the form with user name and password it will then access the store and tell me that the computer was already authorized (I have 3 of the 5 authorized...) However it will not let me play the song... when I click it again the same annoying dialog box pops up??
    Another issue I am having is that none of the videos play... for example if I click on a video (that it actually thinks is authorized) I just get a gray box where the video is supposed to be and no audio...
    I have tried uninstalling and re-installing I even tried using a restore point. Any ideas?? Thanks. Matt.

    I just recently upgraded my windows partition on the Mac Pro to Windows 7 64 bit. Everything works great with the exception of iTunes. For example I will double click on a song to begin and it will tell me that my computer is not authorized to play the song... I will fill out the form with user name and password it will then access the store and tell me that the computer was already authorized (I have 3 of the 5 authorized...) However it will not let me play the song... when I click it again the same annoying dialog box pops up??
    Just doublechecking, Matt. In the course of your troubleshooting to date, have you worked through the following document?
    [iTunes repeatedly prompts to authorize computer to play iTunes Store purchases|http://support.apple.com/kb/TS1389]

  • Authorization for BEX Query

    Hi all,
          I badly need your help.i need to give authorization for a particular query.As of now when i execute that query it gives me "No Authorization" message. what authorization object i need to include in that role? Am sure that there should be some business content authorization object for the current situation.
    Thanks in Advance

    Hi Nanda,
    you need:
    s_rs_comp    -- for querries
    s_rs_comp1   -- for querries including the username, this is usefull if you would like to allow a user to change and create only his/her querries
    s_rs_hier    -- if hierarchies used in the querrie
    s_rs_icube   -- if autorization is switched on for the Cube
    s_tcode for rrmx of course
    s_gui and s_rfc for workbooks
    you can check the authorization process for a user with su53 and rssm
    Regards
    Pierre

  • Two mac laptops, one iPhone and an iPod touch. Sync apps?

    Hi there, between my wife and I, we have two Mac laptops, one iPhone and an iPod touch.  The iPod touch is new- is it possible to get the apps that have already been purchased for the iPhone, onto the iTouch?

    schmjorgen wrote:
    but can i then only ever use both the iphone and itouch with that particular mac?
    you can use home sharing to transfer media files (incl. apps) between the two Macs. if you and your wife use separate Apple ID's to purchase content, authorize the wife's machine for yours and yours for hers.
    is there a way to make both portable devices work with both macs?
    by design, iOS devices sync with only one library at a time.
    i am hoping the "home sharing" feature will be the answer but so far i have not been able to make it work.
    these links may prove helpful:
    Setting up Home Sharing on your computer
    Troubleshooting Home Sharing

  • Seeburger BIC problem

    Hello experts,
    I'm facing a nasty Seeburger BIC problem in my receiver adapter when converting from XML to EDI.
    The error is:
    - SEEBURGER BICXIADAPTER.MODULE Message could not be forwarded from the Module (CallBicXIRa) to the JCA adapter.
    Adapter Framework caught exception: BICMODULE:Adapter call failed. Reason:
    - Delivering the message to the application using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error in BICMODULE-module:Adapter call failed. Reason: .
    As you can see, the reason is not mentioned.
    When I look into the message monitoring, I see the message does not have a payload. On the SOAP ducument is provided with this content:
    authorization:Basic UElJU1VTRVI6SUQzaW5zdGFsbA== accept-encoding:gzip
    sap-xi-messageid:4BA11A89186666D8E1000000C0A8A310 content-
    length:2916349 host:id3-ma-dwh1.mrco.be:51300 user-agent:SAP NetWeaver Application Server (1.0;711) content-
    type:multipart/related;boundary=SAP_001E0BFD21001DEF8CBF15AFFC885B07_END;type="text/xml";start="" soapaction:"http://sap.com/xi/XI/Message/30"ApplicationMessageasynchronous4ba11a89-1866-66d8-e100-0000c0a8a3102010-
    03-17T19:07:56ZID2CLNT001SteriaVANBC_UTILMDToSteriaVANMDSnapShot_In_AExactlyOnceInformationOffID2CLNT001XI4ba11a89-1866-66d8-e100-0000c0a8a3103.0is.13.id3-ma-dwh1XI4ba11a89-1866-66d8-e100-0000c0a8a3103.0af.id3.id3-ma-dwh1XIRA4ba11a89-1866-66d8-e100-0000c0a8a310MainDocumentApplication
    The Seeburger modules used in my receiver adapter:
    1. localejbs/CallBicXIRaBean -- BIC
    2. localejbs/Seeburger/Zip -- ZIP
    The Module Configuration:
    BIC - destEncoding - ISO8859_1
    BIC - destSourceMsg - MainDocument
    BIC - destTargetMsg - MainDocument
    BIC - mappingName - X2E_....
    BIC - srcEncoding - ISO8859_1
    ZIP - mode - zip
    ZIP - sourceDest - MainDocument
    ZIP - targetDest - MainDocument
    ZIP - zipFormat - gzip
    Messages fail at random. ABAP mapping and data are ok.
    I think there is a problem with capacity or memory or something.
    Anyone any idea?
    Thanks a lot!
    Dimitri

    >
    Dimitri Sannen wrote:
    > Hello experts,
    >
    > I'm facing a nasty Seeburger BIC problem in my receiver adapter when converting from XML to EDI.
    >
    > The error is:
    >
    > - SEEBURGER BICXIADAPTER.MODULE Message could not be forwarded from the Module (CallBicXIRa) to the JCA adapter.
    >
    > The Seeburger modules used in my receiver adapter:
    >
    > 1. localejbs/CallBicXIRaBean -- BIC
    > 2. localejbs/Seeburger/Zip -- ZIP
    >
    Dimitri,
    The reason that you are getting this error is because you are missing the exit module bean. add this module after the zip module
    Processing sequence
    3. localejbs/ModuleProcessorExitBean        Local Enterprise Bean     Exit
    Module configuration
    exit     JNDIName     deployedAdapters/SeeXIAS2/Shareable/SeeXIAS2
    There is an exit entry missing which actually is used to pass the bic data to PI box.
    Regards,
    Pavan

  • ERM overwrites backend role without warning.

    We are on version 5.3 - SP13.
    I have uploaded roles to our ERM installation. The upload was performed with the bulk download file collected via the /VIRSA/RE_DNLDROLES - program in backend in combination with the role information file which we have maintained with relevant role attribute data. The Org-level file is not relevant for us since our security concept does not include derived roles.
    When we took the tool into use we discovered that even though the upload was completed successfully there are examples of roles which are created with non-identical content (authorization objects and field values) from the actual backend roles.
    When we started performing changes to those roles, not identical in ERM and backend, via ERM, the system did not give a warning of the inconsistency but just directly overwrote the backend role with the incorrect ERM version of the role. 
    Anyone else with experience with the same error?

    Thanks Raghu and Frank for your replies!
    What I did was:
    1. Yes: I imported roles into ERM.
    I made the assumption that the roles would be created correctly contentwise in ERM since the upload is done from a file which is directly downloaded from the backend system. I probably have some issues in this department as you have both already pinpointed.
    Maybe the lack of including the OrgData file in the upload is the source for the error...?
    Sorry about my stupid question Raghy, but how do I maintain the Org Data file? I see that the data columns are:
    Rolename - Derived Org Level - From value - To value
    Do I really have to maintain this manually when I do not have derived roles....?
    (I see that there is a lot of org level values included in the system already from the initial upload.)
    Do you have any general advise on how I can easily verify that my roles are created with correct content in ERM compared with the backend system?
    2. Yes/No: I agree that if you generate a role from ERM, then you must know what you do and expect the backend role to be overwritten.
    What I did was that I opened PFCG from ERM to make changes to the role.
    I have in earlier test scenarios received a system messages at this point in the process asking me if I really want to overwrite the backend role. To my understanding this message is supposed to appear in any case when the ERM role is different from the backend role. Then I have the possibility to cancel the opening of PFCG and synchronize the role from backend to ERM before I continue with actually opening PFCG and performing the role changes.
    I do not know why I get this message sometimes, but not always.....
    Best regards
    Kari

  • Cannot purchase movies from itunes Canada

    How come I am unable to purchase movies from the Canadian Itunes Store?

    Until the movie studios & other copyright holders of movie content authorize Apple to release this content outside of the US, there's nothing Apple can do. When Steve Jobs announced the availibility of movies a couple of weeks ago, I believe he stated that movies would probably be available outside the US sometine in 2007. He gave no other time frame.

  • Calibrate two sensors for one runner and one iPod?

    in my quest to find a way to get an accurate reading for flat runs versus my hilly-course runs, I bought a second Nike+ Sport-Kit. I calibrated the new Sensor#2 on the gradually rising course, leaving the Sensor#1 calibrated to the flatter courses and (I thought) also stored.
    When I switched back to Shoe Sensor#1, lo and behold, the calibration from Sensor#2 remained.
    So, I then calibrated the flat course for sensor #1.
    But the next day when I switched to Sensor #2, then the one and only calibration was from Sensor #1 and was totally inaccurate for the hilly course
    Is there then any way to have one runner, using one iPod and two sensors, to have calibration runs retained and used and identified WITH the respective sensor?

    schmjorgen wrote:
    but can i then only ever use both the iphone and itouch with that particular mac?
    you can use home sharing to transfer media files (incl. apps) between the two Macs. if you and your wife use separate Apple ID's to purchase content, authorize the wife's machine for yours and yours for hers.
    is there a way to make both portable devices work with both macs?
    by design, iOS devices sync with only one library at a time.
    i am hoping the "home sharing" feature will be the answer but so far i have not been able to make it work.
    these links may prove helpful:
    Setting up Home Sharing on your computer
    Troubleshooting Home Sharing

  • My computer died and I have a new one. How do i Authorize my new computer to synch the content of my iPod?

    My computer died and I have a new one. How do i Authorize my new computer to synch the content of my iPod?

    Authorization
    iTunes Store- Authorize or deauthorize your Mac or PC.
    In iTunes you use the Authorize This Computer or De-authorize This Computer option under the Store menu in iTunes' menubar. For Windows use the ALT-S keys to access it. Or turn on Windows 7 and 8 iTunes menus: iTunes- Turning on iTunes menus in Windows 8 and 7.

  • Authorization issue to view cube contents

    Hi Gurus,
      I am getting Authorization issue to view cube contents in Production server, When I execute the cube it is showing me the following statement.
    "You do not have sufficient authorization for the infoprovider ZMMG_C05".
    Please provide me a possible solution for this.
    Thanks,
    Jackie.

    Hi,
    Two things to be checked with respect to authorization for this one.
    1) Functional Roles: Check whether Info cube is present in the functional roles that are assigned to you.
                                  If not you need to get the functional role in which the Infocube is assigned.
    2) Data Access Roles: Check in the data access roles assigned to you, whether you have the access
                                      to the selection that you are using to see the data in the info cube. Else, request
                                      BASIS team to assign the appropriate data access roles to you.
    Hope this helps.
    Regards,
    Bharat

  • HT1373 I bought an ipod nano 5th gen and it came with 900 songs on it. How can i retain the music before i authorize this unit to my itunes account? It says it will erase all content once I sync with my imac7. Is there anyway to keep the music??? please h

    I bought a used ipod nano 5th gen and it came with 900 songs on it. How can i transfer, sync, and retain the music before i authorize this unit to my itunes account? It says it will erase all content once I sync with my imac7. Is there anyway to keep the music??? please help!!
    Thanks,
    Aaron

    The music does not belong to you.  You have no legal right to it and there is no way to keep it.
    Sorry

  • Content Server Error: 407 Proxy Authorization Required

    Hi Experts,
    I am new to Content Server and have recently installed Content Server 6.40 with MaxDB 7.8 database on a Windows 2008 server.
    The installation completed successfully and IIS server was configured as per guide. The Content server is running when checked through URL on server.
    Next, we created a new repository with following details, but are facing "HTTP error: 407 Proxy Authorization Required" while testing the connection.
    Settings in OAC0
    Content Rep.    A1
    Document Area: ArchiveLink
    Storage type: HTTP Content Server
    Version no.: 0046
    HTTP server: <IP of Windows server where CS is intalled>
    Port Number     1090
    HTTP Script     ContentServer/ContentServer
    Transfer drctry C:\temp
    HTTP Port 1090 is open from SAP system(HP-UX) to Content Server(windows) and there is no firewall between the 2 servers, but we still see the error in OAC0 and CSADMIN. I also tried setting the security parameter to 0 in contentserver.ini file, but that didn't help either.
    The content server was installed using administrator user.
    Would appreciate your inputs on what am I missing?
    Thanks.
    Regards,
    Varun

    Hi Varun,
    Please change Document Area: ArchiveLink .
    Remove Archive link and change it to Document Management system ( DMS)
    Check the results and post the output.
    Regards,
    Deepak Kori

  • Authorization issue while using business content objects

    Hi all,
    I am getting an authorization error while loading from DSO to Cube (for standard business content objects only). Even i am not able access the data in Bex reports from Standard cubes or DSO.
    The user is assigned to SAP_ALL .
    But there is no such issue while accessing user defined DSO or cubes.
    any solutions will be helpful.
    Regards,
    Varma

    Hi,
    Have you seen the error thru the SU53 t-code ? There you should see what is the missing authorization with the user.
    Regards, Federico

  • BI 7 Authorizations: Business Content and usage of which Objects?

    Good day
    I am busy with the BI 7 Analysis Authorizations concept. I have gone through SDN as well as other sites and obtained numerous guidelines for applying these authorizations. I will not be utilising the migration tool as I will be creating the new analysis authorisations from scratch.
    I have replicated the datasources in the myself system.
    In ALL documentation it is stated that business content must be activated for objects u20180TCAu2019 and u20180TCTu2019, which I have a problem with.
    I do not have a problem with the related InfoObjects and activation.
    What I have seen from the metadata repository is:
    InfoCubes
    u20180TCA_HIEu2019, u20180TCA_UAu2019 and u20180TCA_VALu2019 (These are all cubes without datasources, transfer rules, TRF or DTP etc)
    DSOu2019s
    u20180TCA_DS01u2019 to *DS05u2019u2026. (These are all templates without datasources, transfer rules, TRF or DTP etc)
    Also DSOu2019s u2018ZTA_DS01u2019 and u2018ZTA_DS02u2019, not part of the 0TCA* and 0TCT* selection. Are these two necessary?
    My question(s) are:
    1)     What I want to know is how many DSOu2019s and Infocubes must be activated to ensure complete installation?
    2)     Why do the Cubes and template DSOu2019s (0TCA* and 0TCT*,) not display any datasources, TRF, transfer rules or DTPu2019s at all?
    3)     Why are DSOu2019s u2018ZTA_DS01u2019 and u2018ZTA_DS01u2019 involved if no-one has ever mentioned them?
    Please assist. I am very confused at this stage!
    Thanks in advance
    Cj

    Hi Cornelius,
    as you already mentioned in a previous Thread, you're new in bi 7.0 auth, check this out:
    http://www.mariewagener.de/node/135
    and the famous note  Note 1000004 - Merging and optimizing analysis authorizations
    Best,
    Maik

Maybe you are looking for