Creating a 'read-only' group for Worklist app

Hi,
Is there a simply way of creating a group with 'read-only' access to the Worklist ? e.g. through a combination of BPM roles ?
I want to be able to create a class of user who can view the details of Worklist items but have absolutely no other rights (skip, retry, assign etc).
Regards
Bob

One simple way to achive this task is by using FYI pattern.
Remove the actions from taskconfigvariablename.xml (for ex accept and reject).
in case you are already using any pattern in your project, FYI pattern should extend that already created pattern.
Regards
Sudhir

Similar Messages

How to create a read only access for database

I am developer but willing to lear some of the dba tasks. I would like to know the steps that i need to take to creat a read only access database that is going to be used for the report development.
I really appreciate if you tell me all the steps I need to create that. I have a full right to do this in the develpment database. thanks

thank you for your reply but it does not tell me how i can set up a read only access acccount for the user. Do i need to create a role and assign the role to the users?

Want to create a Read Only user for a given app owner user

Hi Folks,
We have an application owner schema, lets call it OWNER, which has different objects living under it.
Now, for certain reasons, the app group wants a read only user which should be able to view objects living only in OWNER. It would only be able to read things, and have no create or alter types of priv to be able to change anything.
The first idea was to create a new user (e.g. RO) and give this explicit grants (select only) for all objects in OWNER. Though this works, is a maintenance havoc, since everytime there is a new object in OWNER, you have to remember to give explicit grants to all RO (or RW ) kind of users.
What i am looking forward to is, some sort of privilege or role concept that apply on the user level, and not on object level. something that allows me to say, all objects of this schema (e.g. OWNER) are visible to user RO. Other restrictions on RO would control read or write behaviour.
Does this thing exist ? please point me to the documentation/example..
regards
raghav..

CREATE OR REPLACE TRIGGER myTest.trg_mytest
AFTER DDL
ON myTest.SCHEMA
DECLARE
     lv_obj_type VARCHAR2(20) := TRIM(UPPER(ora_dict_obj_type));
     lv_evt_type VARCHAR(20)      := TRIM(UPPER(ora_sysevent));
     lv_obj_name     VARCHAR2(30) := trim(UPPER(ora_dict_obj_name));
     lv_role_name     VARCHAR2(30) := 'myTest_RO';
     lv_stmt          VARCHAR2(4000) := NULL;
     ln_job_nr     NUMBER;
BEGIN
     IF lv_evt_type != 'GRANT' --lv_obj_type <> 'OBJECT PRIVILEGE' --
     THEN
          DBMS_JOB.SUBMIT(ln_job_nr,'begin execute immediate ''grant ' || ' select on ' ||
                                   lv_obj_name || ' to ' || lv_role_name || '''; END;');
     END IF;
   INSERT INTO TB_EVT_LOG(d_date, description)
   VALUES(SYSDATE, lv_obj_name || '~~~~ created ' || lv_obj_type || '~~~~' || lv_evt_type );
   EXCEPTION
     WHEN OTHERS THEN
       RAISE;
END trg_mytest;
/This works. But, my problem is that it is not able to filter out the Grant statement itself, Its logging an entry for the grant (as a ddl operation as well).
what am I doing wrong here ?
regards
raghav..

How to create mandatory (read-only) profile for Terminal Services user (HP Thin Client) on Server2003... aaarrgghhh!

I've been tearing my hair out for a couple of days now...
I'm trying to create a mandatory profile for users logging in from hp thin clients on a 2003 server at a school.
I've set up a prototype user, then copied the proto user's NTUSER.DAT to NTUSER.MAN and renamed
NTUSER.DAT to NTUSER.DAT_unused.
At that point, logging in as the prototype user looks ok. It was my understanding that renaming NTUSER.DAT to NTUSER.MAN would make it a mandatory profile, and the user (in this case the proto user) would be unable to change it. However, in this
case the user can still modify the desktop and those modifications are preserved across logins. The NTUSER.MAN file is being updated, judging by the timestamp changes.
What am I missing?
I've tried putting the NTUSER.MAN in the user's dir on the server
(C:\Documents and Settings\ProtoUser),
in the DefaultUser, and in AllUsers.
Right now I'm getting a default, unmodifiable profile which I have no idea where it comes from.
In case it matters, the original user and directory tree from which the NTUSER.MAN I'm trying to use has been deleted, but I wouldn't think that should matter.
For example, I have the option to not show the security tab set in the group policy, but it is showing up.
The Start menu is showing as the classic start menu, and I had it set for the "new" (2 column) one.
I've got hide network places on the desktop set, but it's showing up.
Is there a way to tell where a profile is coming from?
I'm pretty confused at this point; any clarifications / tips would be much appreciated.
Related questions:
If both an NTUSER.DAT and an NTUSER.MAN exist, which is used?
If no profile is found for a user in the normal place, what happens?

Hi,
Thank you for posting in Windows Server Forum.
A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. With mandatory user profiles, a user can modify his or her desktop, but the changes are not saved when the user
logs off. The next time the user logs on, the mandatory user profile created by the administrator is downloaded. There are two types of mandatory profiles: normal mandatory profiles and super-mandatory profiles.
User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) on the server to NTuser.man. The .man extension causes the user profile to be a read-only profile.
User profiles become super-mandatory when the folder name of the profile path ends in .man; for example, \\server\share\mandatoryprofile.man\.
More information:
Mandatory User Profiles
http://msdn.microsoft.com/en-us/library/windows/desktop/bb776895(v=vs.85).aspx
Using User Profiles in Windows Server 2003
http://technet.microsoft.com/en-us/library/cc776120(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki

Read-only user for Weblogic 6.1 sp2 console

Is there a way to restrict a user to read-only priv. on the weblogic
console? Either by using acl's or other means.
Thanks in advance,
Brown

"Seb" <[email protected]> wrote in message news:3f33c3e2$[email protected]..
>
Hello,
I'd like to create a read-only user for a customer that gives him acces tothe
Console only for reading all the configuration. I don't him to modifyanything
Is there a simple way to do this ?A previous post mentioned that this is not possible in 6.1.
Brown,
This functionality is not available in 6.1. The newest version of wls
8.1 has this feature depending on the role that the user is in.
~satya

Read only user for Weblogic Server Console (6.1)

Hello,
I'd like to create a read-only user for a customer that gives him acces to the
Console only for reading all the configuration. I don't him to modify anything
Is there a simple way to do this ?
Thanks in advance.
--Seb

"Seb" <[email protected]> wrote in message news:3f33c3e2$[email protected]..
>
Hello,
I'd like to create a read-only user for a customer that gives him acces tothe
Console only for reading all the configuration. I don't him to modifyanything
Is there a simple way to do this ?A previous post mentioned that this is not possible in 6.1.
Brown,
This functionality is not available in 6.1. The newest version of wls
8.1 has this feature depending on the role that the user is in.
~satya

Creating read-only calendars for syncing

How can I create a read-only or protected calendar?
Is it possible to create a calendar which, after syncing with the family computer, would be read-only, protected or non-editable, by the family computer user?
Thank you,
cj

You're mixing metaphors here: 'publish and subscribe' and 'synchronize' are two independent processes. You can do both, but most users generally limit sharing calendar information to one or the other.
Publication creates a read-only, public object to which others can subscribe if they know your calendar URL. Calendars can be published on .Mac or on a private WebDAV server.
Synchronization allows the sharing of calendar data in read-write fashion across multiple machines or devices, generally for a single user. Groups can, to a limited extent, share such data with a .Mac family pack, or can use SyncTogether to share data among mixed workgroups, on a single machine among multiple users, across a subnet or over the internet.
How you enable these technologies depends upon what you want to achieve. If you want a calendar to be viewable by someone but not editable, then you publish it and let them know that they can subscribe to it. If you want someone to be able to edit one or more calendars on a selective basis, then you use SyncTogether to synchronize them by allowing another user read-write access to a collection (but not necessarily all) of your calendars.
You are starting at the head end of the process and attempting to configure these tools to offer services. What you need to do is just the opposite: determine what outcome you want to achieve, then configure one or more of the technologies to support that specific outcome. With SyncTogether, you can do that on a different basis for each synchronized user in your workgroup.
Publish only if you are willing to let non-editable data exist publicly. Subscribe if you want read-only access to one or more calendars. Synchronize if you want multiple users to be able to add, change or delete event and task data.

Can an unique index be created on read only cache group

Hi
Can an unique index be created on read only cache group
Regards
Siva Kumar

No, I do not think so. Creating a unique index could cause autorefresh operations to fail if the data being refreshed contains duplicate values that would not be allowed by the index. You can create regular indexes on a table in a readonly cache group.
Chris

Read Only access for a Maintenance view

Hi All,
I have a requirement like this.
There is a Z Maintenance View (namely ZVHR_GRD_TARGET), for this i have to maintain the status as Read Only, and have to create a transaction code for this view with only SE16 access.
I am doing like this.
In the Z view, in the tab "Maint. Status", i have selected the radio button "Read Only" and saved it.
I have created a transaction code for this view with SE16 access with the inputs
Transaction                                                           SE16
Selected the check box "Skip Intial Screen"
Selected the check box for GUI status
Name of the Screenfield                                          DATABROWSE-TABLENAME
value                                                                      ZVHR_GRD_TARGET (i.e, view name)
But the transaction code is not executing.
So can any help me out in the requirement
Regards
Srinivas Kodukula

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

Read only access for a Database!

Hi All,
I need to create a user for my database who can have readonly access to the database and can work as *"Read Only Apps".*
Senario:-* I want to give access to development team through TOAD/ SQL* but that user can not delete/update any thing from apps schema.
Thanks,
Anchorage

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

Error ora-12028 while creating a read-only snapshot

Hi !
I'm in trouble creating a read-only snapshot of a simple table.
The Master table belongs to an ORACLE 7.3.4 database instance, while the snapshot site belongs to an ORACLE 8.1 database. The read-only snapshot should have a refresh type FAST, but while I'm running the CREATE SNAPSHOT statement in the snapshot site I receive the following message:
"ORA-12028 snapshot type is not supported by master site string
Cause: Pre-Oracle master sites are not able to support primary key or
subquery snapshots that are able to perform a fast refresh.
Action: Create a ROWID snapshot or use a master table from an Oracle8 site. "
This message doesn't help me enough. Is there anyone who can give me an advice ?
Thanks you all.
Laura

Well laura earlier version doesn't support snap shot based on primary key
u should disable primary key constraint from master site
and create snap shot on the basis of row id.
for further detail mail me at [email protected]

Tabular Form - Read only condition for certain users

Is it possible to make a select list field in a tabular form read-only to certain users? Here's the situation:
The tabular form lists the users who need to select "Approve" or "Reject" in that field (they are approving or rejecting an engineering change)
I want all of them to see the approval/rejection of their team, but only have access to edit the select list associated with their record.
Thanks in advance.
Apex 4.0.0.00.46

You could use either "authorisations" tab or "conditional display" for the relevant column attribute.
Report Attributes->Column Attributes->authorisationsIt would be better to have some more detail about what you are trying to get (maybe a quick mock up of the form, for example) but, I can envision something along the lines of the following:
For each approval/rejection field:
1. Create an authorisation appropriate for access to to each approval/rejection field e.g. authorisation scheme "FOO"
2. In the relevant fields column attributes, set the authorisation to "FOO"
3. now create a read only "public" copy of the above field, using the "display as text (based on LOV does not save state)" - set the authorisation for this field as "{NOT FOO}"
(if you don't want to use authorisations, you could build an equivalent using "conditional display" instead, which is basically the same thing, except column specific)
The downside is of course that you're duplicating fields in your query, which creates a bit of redundancy. There may be better ways to achieve this (maybe you could make use of the APEX_ITEM api, for example) but this is fairly easy to set up IMO.

Read Only Schema in Oracle APPS EBS R12 database

I want create a read only schema say apps_read in EBS database which have select access on all objects like apps. Kindly let us know how can I accomplish it or What is the best practice of doing it.

Hussein - I have gone through all the threads but No one solves my problem. Actually there is a table in applsys schema i.e table_name ecx_outqueue.
ECX_OUTQUEUE is having columns of type "User Defined Type Objects". I have highlighted these columns in Italics. Kindly help me How I can give select access on these user defined objects.on
SQL> desc applsys.ecx_outqueue
Name                                      Null?    Type
Q_NAME                                             VARCHAR2(30)
MSGID                                     NOT NULL RAW(16)
CORRID                                             VARCHAR2(128)
PRIORITY                                           NUMBER
STATE                                              NUMBER
DELAY                                              TIMESTAMP(6)
EXPIRATION                                         NUMBER
TIME_MANAGER_INFO                                  TIMESTAMP(6)
LOCAL_ORDER_NO                                     NUMBER
CHAIN_NO                                           NUMBER
CSCN                                               NUMBER
DSCN                                               NUMBER
ENQ_TIME                                           TIMESTAMP(6)
ENQ_UID                                            NUMBER
ENQ_TID                                            VARCHAR2(30)
DEQ_TIME                                           TIMESTAMP(6)
DEQ_UID                                            NUMBER
DEQ_TID                                            VARCHAR2(30)
RETRY_COUNT                                        NUMBER
EXCEPTION_QSCHEMA                                  VARCHAR2(30)
EXCEPTION_QUEUE                                    VARCHAR2(30)
STEP_NO                                            NUMBER
RECIPIENT_KEY                                      NUMBER
DEQUEUE_MSGID                                      RAW(16)
SENDER_NAME                                        VARCHAR2(30)
SENDER_ADDRESS                                     VARCHAR2(1024)
SENDER_PROTOCOL                                    NUMBER
USER_DATA                                          SYSTEM.ECXMSG
USER_PROP                                          SYS.ANYDATA
SQL>

Steps to create a read only schema

Plataform 11.5.10.2
Hi Guys,
Can someone provide me with the steps to create a read only schema in Apps please.
Thanks in advance

Check the following thread:
READ-ONLY APPS Schema in EBS
READ-ONLY APPS Schema in EBS.

Is BAM-reader only available for US IDs?

Is BAM-reader only available for US IDs?

I see it in the USA App store. If you can't from your store, I would assume it's not available in your country. AFAICT, all their physical stores are in the USA.

Creating a 'read-only' group for Worklist app

Similar Messages

Maybe you are looking for