Controlling Supplier Access Using AML / Manufacturers tab

Hello,
We are investigating the use of Manufacturers tab (AML) to control which assemblies and components each of suppliers can see. For example, if an Item has "Mfr A" and "Mfr B" on the Manufacturers tab, we would like to configure roles & privileges so that any supplier user from Mfr A or Mfr B can access that particluar item; however a user form Mfr C would not be able to access (or even see) the item.
The problem that we are facing is that in order to do this, it would require us to set AML at all levels of an assembly (from assembly down to the sub-assemblies & sub-components). Is there a way to achieve this without developing a Process Extension to proprogate/push the AML details from the assembly all the way down (parent-to-child)?
Also, are there any guidelines / best practices for setting up AML based privileges for supplier access? Is this type of roles & privileges model not advised? Currently, the suppliers that have access to log into our Agile system are set up using the "User" subclass (with restricted privileges)... is there a better way to control this?
Thanks!

This forum is for the Agile PLM for Process product suite, not for the Agile A9 suite.
For Agile A9 or Primavera questions, you can use Oracle Support, Support Communities, Yahoo Groups for Agile API or WRAU.
This forum is for Agile PLM for Process, which is part of the same Agile family but a different product.
Thanks.

Similar Messages

After time capsule 7.6 Firmware upgrade I can't set up Access Control / Timed Access using mac adresses.

After time capsule 7.6 Firmware upgrade I can't set up Access Control / Timed Access using mac adresses.
I have a Time Capsule and an Airport express and when I change access control parameters on whatever one of those
two devices through Airport Utility its duplicating the same setup on the other device !
What a mess !
I had to choose "Not Enabled" in the Access Control stup window.
Has anyone experienced same problem ?
Jean.

I did downgraded firmware to 7.5.2 ...
and the Acess Control Setting from Airport Utility is back to normal behaviour.
Jean.

Control Internet access using machines names

Hello to all, I have some machines (> 100) that are DHCP client and are on different subnets. I need that users that work on these machines don't access Internet. Is a there a way on TMG 2010 to create any
kind of control to accomplish this need?
Regards, EEOC.

Hi,
You can only control the traffic with IP addresses not computer names. A other way to limit internet access is to use users and groups in TMG firewall policy rules. The clients must be Webproxy or TMG clients
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3276?GPP=MarcGrote

How can i use the ACL file to control the access from the other website?

Hello all~
My Sun one is 6.1 sp3 on Windows 2003 SE, and I am try to use the ACL file to control the access.
My ACL file is below:
version 3.0;
acl "path=my_path_on_HD";
deny absolute (all)
(user = "anyone") and
(dns = "*.my_site.com");
deny absolute (all)
(user = "anyone") and
(dns = "*.other_site.net");
Once I add the "deny", anyone include my site is decline for vist the path specify in the ACL file. But if remove the "deny", everyone include other one's website can access the file.
Can anybody tell me how to make it work?

I think you've misunderstood what the dns attribute is for. The dns attribute returns the hostname of the client accessing your website, not the hostname of the website that linked to your website.
For example, when someone using the Comcast ISP goes to a malicious website at example.com that loads images from your website at www.amigoo.net, the dns attribute will be something like "c-1-2-3-4.ca.comcast.net", not "example.com". ACLs are used for authentication and authorization of clients (not the websites those clients chose to visit), and they don't provide the functionality you're looking for.
If I understand correctly, you want to prevent websites other than amigoo.net from linking to files in your d:/webserver/imat/pics_upload directory. You can achieve this adding the following lines to your obj.conf configuration file:
<Object ppath="d:/webserver/imat/pics_upload/*">
<Client referer="*~*amigoo.net">
PathCheck fn="deny-existence"
</Client>
</Object>

Mavericks: "System Events" would like to control this computer using accessibility features?

I just installed Mavericks on my MacBook Pro and was in the process of exploring changes when suddently this message popped up:
- "System Events' would like to control this computer using accessibility features. Grant access to this application in Security & Privacy preferences, located in System Preferences.
The two choices offered are "Open System Preferences" and "Deny."
Any idea why this would be triggered? I don't like clicking to grant access without understanding what's going on.
Thanks.
Message was edited by: Bob Mayo

Dribble666 wrote:
Why would I want to do this?
Only if you want intrusive, incompatible, memory hogging software on your Mac.
Would this open a back door up to Google?
Yes. More than one.
Google software (Chrome, Google Drive, and Google Keystone Agent in particular) is bad news for Macs, and a frequent flyer on these discussions.

I turned off Internet access, using airport timed access control. Now, I can't turn it back on. The base station can't be found. Please help.

I turned off Internet access, using airport timed access control. Now, I can't turn it back on. The base station can't be found. Please help.

Can you take a look at this one and offer your opinion please?
https://discussions.apple.com/message/21889032#21889032

Which controls to use to create tabbed UI?

I am creating a app using sapui5 and wanted to create something like this(visible in the background):
How could do this? Which controls should be used? Would be really glad if some one could help out.

Hi,
you can use TabStrip control. refer SAPUI5 SDK - Demo Kit
and example TabStrip - sap.ui.commons
Regards,
Chandra

Use of Parameters tab in SU01

Dear Experts,
Can anybody please provide information about the exact use of Parameters tab, user groups tab in SU01.

HI,
Parameter has fields that a user wants to get auto filled when he open some Tcode. This field can be filled with proposed values from SAP memory using a parameter ... According to SAP User parameters supply defaults to SAP fields. If a field is indicated,the system automatically fills in the default value. Depending on the field definition, the entry can also be replaced with a value entered by the user.The two input fields on the parameter maintenance screen are described briefly below.
Parameter: Enter the parameter ID for which you want to define a default value. You can display all of the parameter IDs defined in the system by choosing F4.
Value: Enter the default value for the parameter.
In other words, you can use it to create defaults for that user specifically. The challenge now is to figure out which parameter do what and for that I don't have much information. If anyone has it please share
with us.
User group can be used for different reasons and in different way.In the latest versions of SAP, actually two types of usergroup exist, the authorization user group and the general user groups. User Groups also allow segregation of user maintenance, this is especially useful in a large organisation as you can control who your user admin team can maintain - an example would be giving a team leader the authority to change passwords for users in their team. The most important factor identified is that the lack of user groups is an indication that there may be problems with the user build process. This is very "fuzzy" but is a bit of a warning flag
For more info check the below links:-
SU01

Greetings,Currently I am having a big issue to access the "Shop section(tab)" of the website.

Greetings!
I need assistance from you wonderful mac techies out there.
Currently I am having a big issue to access a website's "SHOP section(tab)" within this website.
While in the process of paying for my items in my cart, I received a website message saying something
To the affect that this website is being updated. Your items in your cart will be in your cart.
Then the website's screen kicked me out the door.
A few days later I accessed the main page of this website with no problem.
I can read the information on the main web page pertaining to items I need to purchase, etc., with no problems.
I click and maneuver from on one tab to another from the main page within this website with no issues.
When I click on the "SHOP section(tab)" within this website to complete my purchase.
Part of this website an error occurs on this "SHOP tab".
"Safari can't connect to the server".
Safari can't open the page "https://and the name of this website" because Safari can't connect to the server "www.the name of this website".
I click on the reload from the view of the toolbar and I can't access this website's "Shop section(tab) at all.
I e-mailed the webmaster of this website a few times, but no response.
In the past I was able to access the "Shop section(tab") within this website many times to purchase items with no issues.
Now I am at my wits end as I really need to complete my purchase from this website.
I cannot purchase these items from other websites. Only this website. Good Grief( :
I am at my wits end as I really need to complete my purchase with this particular website.
So, I really need anyone's tech expertise to help me access the "SHOP" tab within this website.
I can't figure this out (:
No issues with:
* My modem and ethernet connections
* My network provider connection
* Cables and wires
* Power strip unit to protect my electronics.
* Utility bill is up to date.
I have a Mac Desktop 23 inch screen (Purchased 01-01-2013)
                                                  Lion: OS X
                                                  Version 10.8.2
                                                  Processor: 2.7 GHz Intel Core i5
                                                  Memory: 8 GB 1600 MHz DDR3
I use Safari: Version 6.0.2 (8536.26.17)
I use the Mail app that shows a postage stamp with the picture of an eagle
                                                  It is the Version 6.2 (1499)
I really need help access the "Shop section(tab)" of the website to complete my purchase.
What is the next step to fix my dilemma?
Thank-you all in advance with your expertise, and patience.
Very Much Appreciated.
With Kindest Regards

You can try basic steps like these in case of issues with web pages:
Reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.
*Hold down the Shift key and left-click the Reload button
*Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
*Press "Command + Shift + R" (Mac)
Clear the cache and only cookies from websites that cause problems.
"Clear the Cache":
*Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox/Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Firefox/Tools > Add-ons > Appearance).
*Do NOT click the Reset button on the Safe Mode start window.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

I bought an iPhone 4S at a supplier who uses Talkmobile. When I called to port my number to GiffGaff they said the phone did not need to be unlocked even though the guy who sold my husband the phone at the Warehouse place said you did. Now I have an ac

I bought an iPhone 4S at a supplier who uses Talkmobile. When I switched to GiffGaff and asked the Talkmobile people to port my number and the code which they gave me, they told me my iPhone was never locked and did not need to be unlocked. Now my GiffGaff seems to be up and running and my husband can even leave new voicemail messages but I cannot access my phone. Everytime I put the SIM in it says it's not a valid SIM and that I need a supported carrier SIM. To me that sounds like the phone is locked.

My husband (who set this up) is going over to Carphone Warehouse right now. He seemed to think that it was locked. But when we asked the carrier we picked, they said it was not locked so they could not unlock it.
Are all of you answering these questions familiar with the UK carriers? I am from the US but this was bought and serviced in the UK--nothing to do with the US.
Maybe the vendor who sold the phone can/will unlock it for us no problem. I guess I will know in the next 5-6 hours. I have just been without a phone for almost an entire day now and it's very frustrating and I thought someone might have had this exact problem and could answer the question for me outright.
Thanks for everyone's help. Sorry to take up your time.

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.
Do you think this product is possible?

In general theory, one now has the Edit button for their posts, until someone/anyone Replies to it. I've had Edit available for weeks, as opposed to the old forum's ~ 30 mins.
That, however, is in theory. I've posted, and immediately seen something that needed editing, only to find NO Replies, yet the Edit button is no longer available, only seconds later. Still, in that same thread, I'd have the Edit button from older posts, to which there had also been no Replies even after several days/weeks. Found one that had to be over a month old, and Edit was still there.
Do not know the why/how of this behavior. At first, I thought that maybe there WAS a Reply, that "ate" my Edit button, but had not Refreshed on my screen. Refresh still showed no Replies, just no Edit either. In those cases, I just Reply and mention the [Edit].
Also, it seems that the buttons get very scrambled at times, and Refresh does not always clear that up. I end up clicking where I "think" the right button should be and hope for the best. Seems that when the buttons do bunch up they can appear at random around the page, often three atop one another, and maybe one way the heck out in left-field.
While I'm on a role, it would be nice to be able to switch between Flattened and Threaded Views on the fly. Each has a use, and having to go to Options and then come back down to the thread is a very slow process. Jive is probably incapable of this, but I can dream.
Hunt

No internet access using manual TCP/IP settings after 10.4.6

I stopped being able to access the internet with manual TCP/IP settings in the Network Preferences after updating from 10.4.5 -> 10.4.6.
When I change settings to use DHCP everything works fine, but I need to get the manual settings working as I use them quite often when configuring/setting-up routers.
This happens with both the AirPort and Ethernet interfaces, so it doesn't matter which interface I use to connect through.
My network Locations with manual TCP/IP settings have worked fine with 10.4.5, under the same networking hardware (routers, cables, etc...).
This occurs both at home (with my Linksys wireless router) and at work (with a DrayTek router).
At home, this problem occurs with both my PB12 and my wife's iBook12, after the 10.4.6 update was applied.
At work, all Windows laptops can connect to the internet using manual TCP/IP settings, but not my PB12.
Example of my settings:
- IP: 192.168.1.99
- Mask: 255.255.255.0
- Router: 192.168.0.1
- DNS: <empty>
- Domains: <empty>
Already tried, without success:
- verified disk -> no errors found on disk!
- repaired permissions, using Disk Utility, rebooted and tested -> no connection!
- tried with DNS=192.168.0.1 -> no connection!!
- tried with DNS=[my ISP primary dns] -> still nothing!!!
- even tried reapplying the combo update 10.4.5 -> of course, it didn't let me, as I'm now in 10.4.6!
Any thoughts or ideas to fix it and make it work in 10.4.6?
... other than archive&install, in order to downgrade!
PB12'' @ 1,33 GHz w/ 768MB RAM Mac OS X (10.4.6)

Yes, buy I also state in my original post that I:
- tried with DNS=[my ISP primary dns] -> still nothing!!!
but yes, I probably should have titled it "No network access using..." (posting as 4:30 AM was probably not the best idea :D)
I understand I might have been a bit clumpsy posting my problem and appreciate everyone's corrections to what I wrote, but trust me that I have done a lot of tests and spent many hours on this... Bear in mind that I am using a network Location with manual definitions that was working before the update!
Anyway, as it happens, the likely culprit now seems to be more of a 3rd party software's inability to deal with 10.4.6 rather than the 10.4.6 itself!
I've disabled/unistalled/turnned off/deleted (depending on the app) anything NOT Apple that had anything to do with networking, be it for monitoring, controlling or managing (just to name a few: Little Snitch, Menu Meters, BrickHouse, etc, etc, etc...).
The Location with the manual settings is now working fine (at least at the office).
Over the next week or so I'll incrementaly re-install those 3rd party tools (which were most likely not up-to-date anyway) and see if something breaks at some point... but won't put much effort into it -- just happy to see it working again!
I'm closing this for now, as I don't have any more time for it (work is pilling up!)... If I manage to find out which version/app combination was causing the problem I'll post it back here!

Access control - Restricted access not working

Hi
I have an application I have created an Access Control administration page in. I have set the application mode to 'Restricted access. Only users defined in the access control list are allowed'. I have defined two users one with administrator and one with edit privileges. I have a third workspace user who is not listed on the access control page.
I have added the authorisation scheme to the tabs, pages and page items I require. This appears to work fine if I change the privilege of one of the listed users to 'view' the items disappear and cannot be accessed.
The issue I have is that the workspace user who is not listed can still log into the application, and has the same access as 'view' privilege. My understanding is that the 'Restricted Access' application mode should prevent this user from accessing this application as they are not explicitly listed?
Have I missed some set-up, misunderstood the meaning of 'restricted access' or is it some sort of bug? I am assuming I have missed some set-up somewhere.
PS This is APEX 4.0.2 on 11g
Edited by: tlane on 15/02/2011 19:43

I have set the application up on apex.Oracle.com
http://apex.oracle.com/pls/apex/f?p=48123:101:506666493527664
four users have been defined :
control_admin
control_edit
control_view
control_na
The first 3 are defined on the access control page available on the user_admin tab when you login as control_admin user.
user control_na is not listed but can still access the application.
password for all users is : demo1234
Thanks in advance for all help with this issue.

Use of Authorizations Tab in User Account for Version 10

Whats the use of Authorizations Tab in User Account for Version 10. Please find the snapshot attached.

Hi Pawan,
SAP Sourcing 10 allow custom script and query-based web services which support OAuth authentication so
client consumer application will consume this web service and if the OAuth handshake is done successfully, then we can verify by going to the Authroizations tab of the User Account of the user that signed on to Sourcing/CLM and allowed the external program to access the particular webservice.
For more insights please refer the Web services cookbook of SAP Sourcing 10.
Hope it helps to some extent.
Best,
Kushagra A

Best authentication method for controlling DEVICE access to wlan

Hello,
I have a similar question to this thread ( https://supportforums.cisco.com/message/3927713 ) but I'm interested about device control on top of user control. Just like that thread, we are using WPA2-AES Enterprise with PEAP MSCHAPv2, which allow users to log on with their domain credentials. We wanted something simple for our users, so MSCHAPv2 with "single sign on" was optimal to us.
Problem is, we have a new requirement and we need to implement it yesterday. We would like to allow only mobile devices and computers of our choice.
Since we are using MSCHAPv2 which allow every domain user to connect using any device as long as their domain credentials are valid, is there a simple way to control this ?
I guess we could go with MAC filtering, but we have about a thousand laptops. Not a big problem, we could do a regular MAC address inventory using SCCM. It's just that it looks like a brute force tactic to a simple problem. Would a Cisco ACE 4.1 RADIUS server tolerate well a MAC address table with a thousand entries ? What if it goes to two thousands ? Would this be easy to implement ? I'm a bit new to this, is there some documentation I could follow ?
How do people usually do this in an elegant way ? How do you manage and control WLAN access to thousands of device ? I guess they go with TLS with certificates ?
Thank you very much !
Konnan

Konnan,
Just saw your PM:)
Would it be possible to configure Access policies even if our Radius servers aren't joined to the domain ?
> I really don't know... typically all my installs have the radius server joined to the domain. I don't know what limitations you would have using the setup you currently are using.
Still wondering if it would be a good path for us, because of the computer authentication issue where it happens only at logon in Windows if I read correctly and our users don't have the habit to log off frequently and we use only manual connection mode when the user already has his session open. I guess MAR will have to be set to a stupid high value... if it even works.
> Well you need to sit down with everyone who is involved and really think out what works best for you. Machine authentication works well, but then people wonder what happens if someone logs in that isn't authorized and that because the computer is a domain computer it automatically gets on the network. Well your not going to get everything you want:) So PEAP has issue because IT wants to limit the user to only be able to access using a company owned device... well, then ISE is your fix. You can add a certificate that ISE can see and if that device has that or a registry value and the user is allowed to access the network, the authentication is allowed, or else it will not be. EAP-TLS... well more work since you need a PKI infrastructure and both the radius and the clients need a cert...
No matter what, you need to decide what works best and don't over complicate it with adding mac filter, etc.
I'm wondering if EAP-TLS wouldn't be better for the long term, maybe with MAC Address restriction on the short term...
> See above
I'm also wondering if we could stay with PEAP MSCHAPv2 but use an NPS Radius server from Microsoft which allow to use complex policies instead of the Cisco ACS Radius server...
> You need to know how to setup and configure the policies... either one will work, but if your on ACS 4.x, I would look at upgrading to 5.4. ISE is replacing ACS as far as the radius portion, but tacacs isn't yet available on ISE.
There's also the Cisco ISE, which seems to be equivalent to Microsoft NPS... a bit more costly OTOH.
> ISE allows you to profile devices so you know what device is accessing your network. Again, ISE is replacing ACS as far as the radius, but tacacs will soon be out and available for ISE. If you really want to create crazy profiles, then ISE is the way to go. You can specify that this user group is allowed wireless, but it has to be a domain computer. The user isn't allowed access if its not a domain computer. The same user group is allowed access with company iPads (certificate installed), but not have access with personal iPads, tablets or smartphones.
Hope this helps.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Controlling Supplier Access Using AML / Manufacturers tab

Similar Messages

Maybe you are looking for