Controll user access with internal attribute date

I all.
i've created an internal attribute called Date-of-validity  of type Date.
the objective is to controll user access based on the date configured in this attribute and permit acces only when the date as not been reached.
who do i control-it, putt the acs looking to the date in an autommated way.
thanks in adv
Antero Vasconcelos

It is possible to define an internal user whose password is taken from an external store.
In internal user definition select "Password Type" to be the LDAP database and then define the rest of the user definition, including identity groups, as desired

Similar Messages

  • Exam 1Z0-007 and questions from Controlling User Access

    Hi,
    I am preparing for exam 1Z0-007 and going to give this exam in two weeks. I like to confirm if "Controlling User Access" topic is part of this exam 1Z0-007? I have checked on Oracle website and this topic is not a part if this exam anymore unless they add it later.
    Has anyone recently given this exam and were there any questions related to "Controlling User Access" or user Privileges?
    Thanks

    user10878991 wrote:
    Hi,
    I am preparing for exam 1Z0-007 and going to give this exam in two weeks. I like to confirm if "Controlling User Access" topic is part of this exam 1Z0-007? I have checked on Oracle website and this topic is not a part if this exam anymore unless they add it later.
    Has anyone recently given this exam and were there any questions related to "Controlling User Access" or user Privileges?
    ThanksI recommend people are very very very careful in answering this question as it could be very easy to breach one's certification candidate agreement.
    Rgds - bigdelboy.
    Edited by: bigdelboy on 27-Dec-2009 04:26
    It is certainly true the topic you mentioned is in ISBN: 007-219537-1 printed in 2001.
    It is also apparent, unless bigdelboy's eyeball is deceiving him, the topic does not appear in [http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=41&p_org_id=28&lang=US&p_exam_id=1Z0_007] which is authorative.
    I have not followed these things that closely until recently, however this will not be the only example of an OraclePress/Sybex book being left behind because of errata/topic updates etc. These often occur when the exams are update for new releases, eg from 10gR1 to 10gR2; or for when the exam moves from beta to production (sometimes these books are prepared and even pulbished while exam is in beta). In your case I suspect the change quite probably have occured when the exam moved from 9gR1 to 9gR2 or to better accomodate the WDP programme. The exam may also be influenced by the content of Oracle training courses that are being taught and from time to time these will be chaged for a variety of reasons.
    How you handle it is up to you ..... you may:
    - ignore these topics. IMHO you are always entitled to complain if questions asked did not sigificantly match the published topics and you feel this caused you to fail. (I assume the remedy would be a retake voucher). You can hit a comment button on the question and also a comment button the the end of the exam. This is a sort of negative approproach.
    - Go over these topics. If your're serious about Oracle you really need to understand this anyway. See it as an opportunity. A few hours revision ought tosee you able to answer 50% of he topics. This is a positive approach. And this if how certification study ought to be .... sometimes it good to investigate a non examined topic that is interesting.

  • Control user access to FBL3N by cost center

    Hi Expert,
    Need your advice.
    Our user wish to control the staffs access to FBL3N by cost center.
    This is due to the FBL3N contains salaries posting for different department. 
    However the FBL3N GL listing report also contain documents without cost center.
    Any ideas how can we perform the control ?  If the FBL3N can amend with include cost center as checking, for the rest of GL without cost center, is it accessible by all users ?
    thanks.
    rgds,
    tee

    Hi Experts,
    Sorry for misleading.  Initiate the request was to retrict the access with cost center object, since it is not possible.  So we will advice the user to restrict the GL access.
    Just need to confirm, can we modify the FBL3N object F_BKFP_BES : Account authorization for G/L accounts from Check to Check/Maintain ?  So that we can assign certain GL only accessible by normal users.
    And any impact on this once the changes is make ?
    thanks.
    rgds,
    tee

  • Problems controlling Microsoft Access with ActiveX

    I have done quite a bit of searching on this topic, and have found several answers that are close, but do not address my actual problem.
    I would like to use ActiveX to control Microsoft Access, specifically to create new database files without having to copy a blank file I have stored somewhere. I also can't stand it when I can't get something to work, so this is now a personal thing too.
    Anyway, when I run a simple VI to open the creatable reference Access._Application, I get the error: "Error 3005 occurred at Automation Open: Object specified is not creatable in Access.vi". I have tried a lot of the common answers to this problem, like browsing for the library in the ActiveX window, and trying to register it with regsvr32, but the file is msacc.olb, which cannot be registered with regsvr32.exe. I have attached the original VI and I have tried this on 3 different PCs, all with slightly different installs of Office, but all with Access 2007. If anyone can help me figure this out, I would greatly appreciate it.
    Thanks 
    Eric
    "When I see an adult on a bicycle, I do not despair for the future of the human race."
    -H.G. Wells
    Solved!
    Go to Solution.
    Attachments:
    Access.vi ‏6 KB

    Your vi gave the same error on my machine.  Then I deleted the Access._Application reference, right-clicked on the reference input and selected Create Control.  Then I changed the Active-X Class by browsing to my computers version of the reference ("Access._Application.12").  The same vi ran without error.
    The class still shows as Access._Application, which indicates that there may be an incompatibility which is not visible.  
    When and activeX node fails to run when copied from any other machine, it is recommended to Replace each node that generates the error and reselect the properties and methods.
    Michael Munroe, ABCDEF
    Certified LabVIEW Developer, MCP
    Find and fix bad VI Properties with Property Inspector

  • How can i control background colors with items (registry.dat)

    Hello Evry one.....
    plzzzzzzzzz help.
    how can i control background colors with display items
    in registry.dat
    like app.ui.requiredFieldvABGCOLOR=255.0.0
    how can i control background colors with others items ????
    thanks.

    The iPhone has a "remote" app that lets you control Keynote on a Mac, but not on another iOS device (iPhone/iPad/iPod Touch).
    There are some apps that let you control limited content on another iOS device - but the content has to be within the app. You might check out SyncPad - perhaps you can import the presentation into it and then control it on the iPad.

  • ACS 5.5 External User with Internal Attribute

    Hi Guys,
    i'm wondering, if i using LDAP for external authentication, can i use the internal identity attribute?
    for example :
    i create an user X , his password type is LDAP, but the identity group is "Group 1"
    can i define rules
    Idenitty Group in "Group 1" permit access ?
    or i need to do group mapping first?
    Thanks,
    Regards,

    It is possible to define an internal user whose password is taken from an external store.
    In internal user definition select "Password Type" to be the LDAP database and then define the rest of the user definition, including identity groups, as desired

  • App-V 5 SP2 and Office 2013 - How to control user access?

    What is the best way to control access to the Office 2013 application shortcuts?
    Because it must be published globally, how can we only allow certain users to access Office 2013 on RDS servers when the default action would mean all users can access it?
    Can removing the shortcuts using the DeploymentConfig file (see
    here) followed by setting up something using the UserConfig file linked to an AD group work?
    If so how would this be done?

    See these threads:
    http://social.technet.microsoft.com/Forums/en-US/a455d7e2-e0e6-4843-b07b-42afc18623e2/office-365-proplus-appv-50-package-installs-lync-outlook-infopath-and-onenote-even-though-they?forum=mdopappv#6fbcf59b-351c-48d1-8e63-539550a88b56
    http://social.technet.microsoft.com/Forums/en-US/f4b47f1e-e494-4477-97e9-6942c4f8ec2d/office-2013-vl-appv-5-packages?forum=mdopappv#7f63bea4-57c3-40a7-bdf4-6f25320e5b68
    Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
    answer your question). This can be beneficial to other community members reading the thread.
    This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
    Twitter:
    @stealthpuppy | Blog:
    stealthpuppy.com |
    The Definitive Guide to Delivering Microsoft Office with App-V

  • Accessing Account Marketing Attributes data in the studio

    Hello Experts,
    There is a tab "Marketing Attributes" on the Accounts contains an embedded component. When I look at the embedded component it consists of a HTML Custom Components link. I want to access this data in the studio and copy it on a custom field on the customer extended BO.
    Could you please help on how this could be achieved.
    Thanks and Regards,
    Sumeet Narang

    Hi Alessandro,
    Thanks very much for your response.
    I will raise this to SAP now.
    Though I was wondering what would prompt SAP to use such an approach of using the visual studio when they would be aware that this would have a lot of limitations along with it. Probably for achieving dynamic labels as in the case of Marketing Attributes.
    Regards,
    Sumeet

  • Control user access in SOA Suite 11.1.1.2 Console

    Hi All,
    We recently migrated our application from SOA Suite 11.1.1.1 to 11.1.1.2 . In 1.1 we had an end user account assigned to the Monitor group which could access the middleware console and view composite flows but could not deploy/undeploy or retire/activate processes. However the same user in 1.2 can log in to the console but cannot view a composite flow.
    In the dashboard we get the following error:
    Unable to retrieve composite details.
    Error retrieving Composite CompositeName (1.0) details from soa-infra runtime. This could happen due to the errors in soa-infra initialization. Please view the log files for details.
    EJB Exception: ; nested exception is:
    java.lang.RuntimeException: Caller doesn't have enough permission to call this method.
    My question is... how do we create a user in weblogic which will allow a user to view process flows but wont not deploy/undeploy or retire/activate privileges?
    Thanks in advance,
    Shaf
    Edited by: soa_adf on Jul 15, 2010 11:44 AM

    So the reason is, you need to add users/groups to the SOAMonitor Application Role for them to be able to view instance data. Below are the instructions.
    Here are the instructions on how to create Monitoring Roles:
    Instruction to add SOA application role SOA Monitor to user "monitoruser":
    1. log in em as weblogic user
    2. right click on SOA/soa-infra(soa_server1) on the left panel and select Security => Application Roles.
    3. click on the "play button" to select "Role Name". A list will appear and you select SOAMonitor. The page "Application Roles > Edit Application Role" appears.
    4. Click Users/Add Users, a "Add User" popup appears. Click on the "play button", select user "monitoruser" from left column and move it to the right column. And click on "ok"
    If you have your WebLogic environment set up per EDG Guidelines (where your admin servers and managed servers are on different hosts or same host, different directories) you may not be able to see the list of Application Roles in the above instructions. First you would need to copy your JAZN Policies to the Admin Server or move to LDAP. The SOA Application Roles and policies will likely be stored in your mserver configuration (if you deployed SOA there). A restart is not required afterwards.
    As per the docs EDG deployment requires OID for policy store because there are two copies of policy store file, system-jazn-data.xml:
    $ORACLE_BASE/admin/soaedg_domain/mserver/soaedg_domain/config/fmwconfig/system-jazn-data.xml
    and
    $ORACLE_BASE/admin/soaedg_domain/aserver/soaedg_domain/config/fmwconfig/system-jazn-data.xml
    EDG states in section 11.1.1
    http://download.oracle.com/docs/cd/E14571_01/core.1111/e12036/oam.htm#CACJADGI
    "...The Oracle Fusion Middleware SOA Suite EDG topology uses different domain homes for the Administration Server and the Managed Server, thus Oracle requires the use of an LDAP store as policy and credential store for integrity and consistency..."

  • Is there a way to protect the iCloud control panel access with a password in Windows 7?

    I have MS Outlook sync'd with my iCloud services in my Windows7 office PC (I'm pushing for Macs, but quite there yet, unfortunately!), and I have it password protected so nobody else can access my files. However, the iCloud app in Control Panel doesn't have any password protection so it can be messed with at any moment. Is there any way to protect it, or are there any plans to include this feature in future updates?

    Same here, I use iCloud on an office PC.
    I would like to password protect the access to the iCloud Control Panel. Is there a way to do that? I can either "Sign in" or "Sign Out."
    if I sign out I can't add iCloud calendar to Outlook. If I stay signed in, IT could easily activate my personal iCloud mail.
    Ideally, there should be a checkbox to just add calendar and leave mail, contacts and task out all together.
    Thanks.

  • How to control user input with a button?

    How do I control a user input from a dialog box by activating it with a button. I am saying "press zero", then when the user does press zero, it should zero the scale.

    The user has only one button they can press.  You should enable the cancel so that the dialog can output an F.  
    What you have works, but the zero will not occur until the case is activated.  If the insides of the case do not work, that is another story.  Put a pop up in the active case to convince yourself that the case is being entered.
    This, what you have, always returns T.
    Mark Ramsdale

  • Logging user access with IP..?

    I want oto add some user logging for my site and since it requires authentication I believe most of the heavy lifting has already been completed. I'm hoping someone can give me some direction as to how to incorporate the pieces I need into what I have already existing.
    Currently I believe the following is the php for granting access on my site:
    <?php
    if (!isset($_SESSION)) {
      session_start();
    $MM_authorizedUsers = "";
    $MM_donotCheckaccess = "true";
    // *** Restrict Access To Page: Grant or deny access to this page
    function isAuthorized($strUsers, $strGroups, $UserName, $UserGroup) {
      // For security, start by assuming the visitor is NOT authorized.
      $isValid = False;
      // When a visitor has logged into this site, the Session variable MM_Username set equal to their username.
      // Therefore, we know that a user is NOT logged in if that Session variable is blank.
      if (!empty($UserName)) {
        // Besides being logged in, you may restrict access to only certain users based on an ID established when they login.
        // Parse the strings into arrays.
        $arrUsers = Explode(",", $strUsers);
        $arrGroups = Explode(",", $strGroups);
        if (in_array($UserName, $arrUsers)) {
          $isValid = true;
        // Or, you may restrict access to only certain users based on their username.
        if (in_array($UserGroup, $arrGroups)) {
          $isValid = true;
        if (($strUsers == "") && true) {
          $isValid = true;
      return $isValid;
    $MM_restrictGoTo = "../logon.php";
    if (!((isset($_SESSION['MM_Username'])) && (isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'], $_SESSION['MM_UserGroup'])))) {  
      $MM_qsChar = "?";
      $MM_referrer = $_SERVER['PHP_SELF'];
      if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
      if (isset($QUERY_STRING) && strlen($QUERY_STRING) > 0)
      $MM_referrer .= "?" . $QUERY_STRING;
      $MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar . "accesscheck=" . urlencode($MM_referrer);
      header("Location: ". $MM_restrictGoTo);
      exit;
    ?>
    I believe some of the pieces I'm missing are the IP address for the user and the sql needed for the INSERT into mySQL which I believe are as follows:
    $ip_address = $_SERVER["REMOTE_ADDR"];
           $sql = "INSERT INTO  user_tracking
                  (username, ip_address)
                  VALUES ('MM_Username', '$ip_address')";
    mysql_query($sql, $maxdbconn) or die(mysql_error());       'Is this the command for executing the SQL???
    My problem is I'm still green and don't understand the php routine well enough to be able to plug in these pieces and whether I'm missing something else so I'm hoping someone can help shed some light.
    Thanks.
    A JM,

    I found the original page and again I realize that I was missing some original code, I realize it makes it tough to follow - my appologies. I tested this source below and all is back to normal.
    So, back to trying to add the user to the tracking DB.
    I think the pieces I'm missing are as follows- not sure though...????
        //SQL string for user logged in
        $insertSQL = "INSERT INTO user_tracking (username, ip_address) VALUES ('maxadmin', '192.168.1.100')";
        mysql_select_db($database_maxdbconn, $maxdbconn);
        $Result1 = mysql_query($insertSQL, $maxdbconn) or die(mysql_error());
    However, when I add the lines before ( header("Location: " . $MM_redirectLoginSuccess ); )  I get an error message in Dreamweaver, "The Server Behavior panel cannot determine whether "Log In User" or "Log In User" is applied to your page. Please select Edit Server Behaviors and change one of the two behaviors to ensure that each is uniquely identifiable."
    A JM,
    <?php require_once('Connections/maxdbconn.php'); ?>
    <?php
    if (!function_exists("GetSQLValueString")) {
    function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
      if (PHP_VERSION < 6) {
        $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
      $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
      switch ($theType) {
        case "text":
          $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
          break;   
        case "long":
        case "int":
          $theValue = ($theValue != "") ? intval($theValue) : "NULL";
          break;
        case "double":
          $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
          break;
        case "date":
          $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
          break;
        case "defined":
          $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
          break;
      return $theValue;
    ?>
    <?php
    // *** Validate request to login to this site.
    if (!isset($_SESSION)) {
      session_start();
    $loginFormAction = $_SERVER['PHP_SELF'];
    if (isset($_GET['accesscheck'])) {
      $_SESSION['PrevUrl'] = $_GET['accesscheck'];
    if (isset($_POST['username'])) {
      $loginUsername=$_POST['username'];
      $password=$_POST['password'];
      $MM_fldUserAuthorization = "";
      $MM_redirectLoginSuccess = "dbpages/claimroot.php";
      $MM_redirectLoginFailed = "failedlogin.html";
      $MM_redirecttoReferrer = false;
      mysql_select_db($database_maxdbconn, $maxdbconn);
      $LoginRS__query=sprintf("SELECT username, password FROM users WHERE username=%s AND password=%s",
        GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text"));
      $LoginRS = mysql_query($LoginRS__query, $maxdbconn) or die(mysql_error());
      $loginFoundUser = mysql_num_rows($LoginRS);
      if ($loginFoundUser) {
         $loginStrGroup = "";
        //declare two session variables and assign them
        $_SESSION['MM_Username'] = $loginUsername;
        $_SESSION['MM_UserGroup'] = $loginStrGroup;         
        if (isset($_SESSION['PrevUrl']) && false) {
          $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];   
        header("Location: " . $MM_redirectLoginSuccess );
      else {
        header("Location: ". $MM_redirectLoginFailed );
    ?>

  • User feedback with maxChar attribute on TextInput

    I have a textinput with maxChars=6
    i would like to have some sort of user feedback when they attempt to type the 7th char.  (red border, tooltip, etc...)
    what would be the ideal way to achieve this?
    I don't see where there is an event dispatched when a user tries to type the 7th char ?

    Hi there,
    The change event would be a solution but a slightly more efficient solution would be to simply listen for a keyDown event. Here's a fast example that hopefully will help you get on the right track:
    <?xml version="1.0" encoding="utf-8"?>
    <mx:Application
        xmlns:mx            ="http://www.adobe.com/2006/mxml"
        backgroundColor     ="#FFFFFF"
        layout              ="absolute">
        <mx:Script>
            <![CDATA[
                import mx.controls.Alert;
                import mx.events.FlexEvent;
                import mx.controls.TextInput;
                private static const ALLOWED_MAX_CHARS:int = 6;
                private function onInputFieldFill(event:KeyboardEvent):void
                    if (event.charCode != Keyboard.LEFT &&
                        event.charCode != Keyboard.RIGHT &&
                        event.charCode != Keyboard.UP &&
                        event.charCode != Keyboard.DOWN)
                        var target:TextInput = event.currentTarget as TextInput;
                        if (target.text.length > ALLOWED_MAX_CHARS - 1)
                            target.text = target.text.slice(0, ALLOWED_MAX_CHARS);
                            Alert.show("You tried to add 7 characters!", "ERROR");
            ]]>
        </mx:Script>
        <mx:VBox
            width               ="100%"
            height              ="100%"
            horizontalAlign     ="center"
            verticalAlign       ="middle">
            <mx:TextInput
                id              ="userInputField"
                keyDown         ="onInputFieldFill(event)"/>
        </mx:VBox>
    </mx:Application>
    The code I posted is not perfect, it's an older file of mine that I have found and edited a bit so don't use it as it is.
    Blog: http://blog.wisebisoft.com
    With best regards,
    Barna Biro

  • Can we create a Budget & Availability Control for revenues with internal orders?

    Dear SAP Gurus,
    I have created an expense budget with the help of an internal order and have assigned the same to an expense GL (cost element). I have done all the necessary system settings and the system gives an error message when the F-02 document posting exceeds the budget.
    My query is, I want to replicate the the above for revenue postings. I have done the same system settings for revenue posting however the system does not give an error when the budget amount is exceeded.
    Can I please get some assistance with this requirement?
    Best Regards,
    Akshay

    Hi Akshay,
    System will not give the error in the case of Revenue GL. Because all the revenue GL will be hit for credit. It means it will update negative against the budget available. It means
    Current Budget-(-Revenue Budget)= Current Budget + Revenue Budget= Available Budget
    Because of this system will never give the error.
    Regards,
    Ankit Agarwal

  • Software for controlling internet access with Airport Exreme

    I'd like to find software that let's me control what pc's in the house have internet access at certain times. My iMac is my main computer, and I use Airport Extreme as my router.

    You probably need to set the card up in OSX. Verizon should have a modem script that needs to be installed. (Hard Drive>Library>Modem Scripts). Then you need to set up the card from Network Preferences. Then it should work on both platforms.

Maybe you are looking for

  • Complex object as parameter from BPEL PM to Web Service

    Hello, I'm having a problem with being able to invoke a method on my web service from BPEL PM. It's a 'create' method, so I'm sending a complex object as the input parameter of the method. I'm encountering the same kind of problems I have at differen

  • Is the 17 inch better than the 15 inch mac book pro?

    Which one is better to get and use? 15 or 17 inch?

  • F110 ,Banking payment.

    Hi!! Actually different company's having the different payment formats depending upon the country.All these payment formats to be converted into intermediate format & should be stored to SAP server. what is the format in which payments are stored in

  • Idoc for purchasing order

    can any1 explain the steps needed to send a purchase order through ALE/IDOCS pls explain it with reference to PURCHASE ORDER

  • Hyper-V 2012 R2 QoS for a specific set of VMs?

    I'm trying to figure out how to setup SCVMM 2012 R2 with a Logical Switch to support QoS for a specific set up VMs. Specifically, I have a subnet that will have a variety of VMs running, but within that subnet I have a handful of VMs that need a uniq