Custom Access over msmdpump

Hi,
Lets say we have two SSAS Databases. In each we have Dynamic Dimension Security implemented. The Database are only accessable to Users by the msmdpump.dll. We have some Standard Reports in Xlcubed which can be accessd by Sharepoint.So far so good.
Now our customer wants a custom security for the cubes in that way, that some Users whcih have access to cube and can use the Standard Reports are NOT allowed to use the Client Excel or other Analysis Tool for Adhoc Analysing. So they are only allowed to
use the Standrd Reports.
My first idea was to use a Proxy (as described here:
SSASProxy) doesnt meet our needs.
My second idea was to implement a Custom Module for IIS, but "unfortunatly" the messages between client and server are encrypted. for details:
XMLA over TCP/IP.
Could you imagine a possible way of implementing that?
Thanx in Advance for your Creativity

Hi. Thanx.
My actual solution looks like this: 1 Role on the cube for all users which are allowed to analyze. So these users can access the cube by the normal way over the datapump.
A second role which includes only 1 Sys User. Then I use the Proxy by which everybody can connect. In this proxy I check out the user and from where it comes(Web, Excel,..) and where ihe wants to connect and open a new Webrequest to the Datapump by the Sys
User. In the CustomData Property I add the Username. So all our Standardreport will use the Proxy.
Cons:
ensure to determine from where the user is coming
performance? when all user connecting to the cube with one sys-user
if a new Standardreport is published, we must ensure that this report is using the proxy (while in design, some connectionmapping,..)

Similar Messages

I transferred files from a NAS server to the Mac Mini Snow Leopard Server and now some of the files have Custom Access and can't be opened by some users. How do I fix this?

We're setting up our Mac Mini Snow Leopard Server, and in the process transferred files that had been stored and accessed from our Blackarmor NAS server over to the Mac. These files were all created on PC's and are Office Excel files, WordPerfect files or PDF's. When you look at the files on the Mac from the Mac and bring up Get Info for the affected file, it says that the file has Custom Access. The files that work properly don't have that configuration. I can access and open the files on some computers, but some users can't open the files from their computer even though they can see it. We're all using PC's and they get the Error: Access Denied-Contact your administrator--or something similar. I've seen on the web similar issues and it may have something to do with ACL permissions. I don't know enough about Mac OS to understand this, but what is baffling is that they can be opened from some PC's but not others, and all of the Users have the same accessibility to the files. Thanks for a solution!!

Oh, on the losing Internet, try this...
Make a New Location, Using network locations in Mac OS X ...
http://support.apple.com/kb/HT2712
10.7 & 10.8…
System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.
10.5.x/10.6.x/10.7.x instructions...
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list.
Instead of joining your Network from the list, click the WiFi icon at the top, and click join other network. Fill in everything as needed.
For 10.5/10.6, System Preferences>Network, unlock the lock if need be, highlight the Interface you use to connect to Internet, click on the advanced button, click on the DNS tab, click on the little plus icon, then add these numbers...
208.67.222.222
208.67.220.220
Click OK.
PS. Your English is quite good & completely understandable.

Change Custom Access Level on a personal folder

Hi All,
This is about Business Objects XI 3.x
I'm looking for a solution to change the security settings on a personal folder.
Within 3.x it isn't possible to "overide" the user settings on a personal folder with the use of an usergroup.
So what I'm looking for is a way to overide the user settings Access level (by default this is Full Controll) with a custom Access level so I can take away some privilige on the personal folder.
Is there a Java script allready be developed by some one that I can use?
Thanks in advance.
Cheers,
Jan

Hi Jan,
You can use the following code snippet:
// folders is IInfoObjexts collection that contains the personal folders.
folders = oInfoStore.query(query);
          if (folders.size() > 0)
// query for the user for whom you want to set custom access role over the personal folder.
query = "select * from ci_systemobjects where si_name ='" + testUser + "' and si_kind ='user'";
users = oInfoStore.query(query);
// set the custom role.
folder = (IInfoObject) folders.get(0);
user = (IInfoObject) users.get(0);
IExplicitPrincipals explicitPrincipals = folder.getSecurityInfo2().newExplicitPrincipals();
IExplicitPrincipal explicitPrincipal = explicitPrincipals.add(user.getID());
// customRoleID is SI_ID of te custom role. You can retrieve custom role just as you retrieve any other
//info objet. You can use the query like : select * from ci_systemobjects where si_name='custom role
//name' and si_kind='customrole'
IExplicitRole explicitRole = explicitPrincipal.getRoles().add(customRoleID);
oInfoStore.commit(folders);
I hope this helps.
Thanks
Aasavari               }

Permission problem that won't die: You have custom access

After upgrading from Tiger to Leopard I had so many permissions problems that I backed up all my docs, erased my Macbook Pro hard drive (first time since I bought a Mac in 1985 that I have EVER had to do this), and installed a 100% clean Leopard install (no upgrade from Tiger). I updated everything through Software Update. Then I copied back several folders from my backups.
Permissions problems declined, but only from 100% to 80%.
The problems fall into three categories.
ONE: A folder seems to have normal permissions:
jimw(Me) Read and Write
staff Read only
everyone Read only
but at the top it says "You have custom access." (It should say "You can read and write.") That turns out to mean I can't edit, trash, or even move any of its contents without an Admin password. Copying the file into a virgin folder with correct permissions, then Applying them to enclosed items works sometimes but rarely. An ls command results in lines like this:
drwxr-xr-x+ 11 jimw staff 374 Feb 14 10:09 jimw's old home folder
0: group:everyone deny delete
TWO: Same as above, but there is no staff entry in the table and "everyone" has "Read & Write" instead of "Read only".
THREE: "everyone" appears twice in the table under Sharing & Permissions.
Other threads suggest that one of these "everyone"s is left over from Tiger, but they have scary suggestions on how to fix the problem (see below).
Yes, I have run "Repair Permissions".
So I logged onto these discussions and discovered that I have company -- LOTS of company. And there are about 1,334,786 different proposed solutions, including some hairy ones with typos (like putting in single quotes where double quotes should be -- in Terminal).
Carefully I tried a couple of these, and have wrestled the problem down to maybe 40% of its original size. And my heart leapt when one solution seemed to work on one of my biggest folders: sudo chmod -R -a# 0 FOLDERNAME.
But trying it on a bunch of other folders only solved the problem for the documents inside, not their intervening enclosing folders. If I create a virgin folder structure I can copy all the docs inside folder by folder, then throw out the bad folders en masse. But that's too much work! And prone to error.
How can I strip a bunch of ORDINARY folders of their inappropriate permissions so I can get on with my life?

I HAVE FOUND GOD AND HE WORKS AT APPLE IN THE APPLECARE TECH SUPPORT DEPARTMENT!
(First, let me apologize to people who find the above offensive on religious grounds... OK, now on to the details.)
I am posting here the steps that a certain support guy (accessed through 800-APL-CARE) stepped me through. The solution is so simple that I am beginning to doubt my sanity. It may not work for everyone, but it seems to have worked for me. I'm leaving this thread "not yet answered" for a couple of days just to be sure, but I can say that MUCH of my problem is definitely different and is apparently 100% gone. I'll follow up later to be sure.
Here are the steps this wonderful fellow stepped me through.
1.
Make sure things are not REALLY REALLY messed up. Click on your desktop so Finder becomes the active program. Create a new folder. Rename it from "Untitled folder". Throw it in the trash. Empty trash. If all these steps work OK with no demand for an Admin password, then your permissions and Users and Groups and all that are not TOTALLY messed up and you can proceed.
2. (step by step for the inexperienced)
Open your hard drive icon. Open the Users folder. Find your particular user folder (the one that looks like a house). Click on it ONCE to select it.
3.
Do a Get Info on your user folder (the house). Under Sharing & Permissions it should say "You have custom access" (which is normal for this folder and certain others, but not normal for an ordinary folder you created, say, on the desktop in step 1).
The little table underneath that should have 3 entries. Mine reads:
jimw (Me) Read & Write
wheel Read only
everyone Read only
As you've guessed, my username is jimw, so of course your username should be there instead of the jimw.
4.
Click on the little lock in the right-hand corner waaaaay at the bottom of the Get Info window. (You may have to scroll down.) Enter your Admin password and click OK. The lock icon will turn into an unlocked icon.
5.
A little popup menu somewhat to the left of the unlocked icon will now become active (rather than its previous state of grey). It has a little cog wheel in it, and a teeny triangle indicating it's a popup. Click on it and hold: you should see one or two greyed-out choices in that popup, and one active choice reading "Apply to enclosed items". Choose it.
Step 5 was the one that had messed up my drive on previous occasions, because (I think) it applied hidden things called ACLs to enclosed folders and files. But my support guy assured me that this step was OK and would fix my problem.
6.
You will probably get a dialog box asking for your Admin password again. Enter it and click.
7.
Wait. Breathe deeply. A progress bar will start spinning. Depending upon the size of your hard drive, it may take awhile.
8.
When the process finishes, close the Get Info window.
9.
GET ON WITH YOUR LIFE! THE PROBLEM IS FIXED!
At least mine is, so far. For you techies, the proof to me that a huge step in the right direction has been taken is that an ls -l command in terminal NO LONGER produces entries like:
drwxr-xr-x+ 11 jimw staff 374 Feb 14 10:09 jimw's old home folder
0: group:everyone deny delete
but instead produces entries like:
drwxr-xr-x 11 jimw wheel 374 Feb 14 10:09 jimw's old home folder
I am uncomfortable in Terminal and I don't really understand permissions and ACLs, but I think the significant differences are: no plus sign after the initial string of permissions, "wheel" instead of "staff", and NO SECOND LINE CONTAINING DENY DELETE.
Apple: Can't you produce a tech note explaining this process?? It's really simple! Even a grown-up could do it! (Apologies if you already have and it was posted a month ago and it's highlighted in flashing red text on the discussions.apple.com website and somehow I missed it...)

Custom Access File Permissions

I"m using Snow Leopard Server 10.6.8, and we've been having some permission problems. If you go into a folder that has read-write access and open a file and make a change in the file, the system requires you to save it as a new file rather than just letting you save it and replace the existing files. I've found that the files that have this issue are setup with "Custom Access" showing in their permissions section under "Get Info". I don't know why or how it creates Custom Access but I'd like to be able to change it or make the server stop doing it. Any solutions? Thanks.

I've just upgraded to Snow Leopard (don't laugh...I know I'm a dinosaur..) and sometimes I need to over-write a file 10 or more times when I'm doing corrections. It saves as a new file and adds another '.' at the end which is extremely frustrating!
Any help on how to go back to the old 'do you want to replace this file' box would be gratefully received!
Thanks...
Take care
Marianne

Permissions = "Custom access" ? ? ?

How I got into this mess is a sorry tale, which is hardly worth recreating. What I need is a way OUT of the mess.
SYMPTOMS:
My G5 has a 500 GB boot drive, and a 500 GB internal data drive (only data; no OS). The permissions are so bolloxed up that Get-Info shows Sharing & Permissions as follows:
John (Me) = Custom
John (Me) = Custom
(unknown) = Custom
everyone = Custom
If I open a Finder window, andlocate the offending drive in Column View -- and click on it -- I get the following dialog: "The folder "DATA" could not be opened because you do not have access privileges."
If I run Disk Utility, and click on Veryfy Disk, or Repair Disk, the result is "The volume DATA appears to be OK."
But it's not OK. I cannot get access to the drive, or to the data on it.
I want to regain access to this data drive. Will someone please tell me, what buttons can I press, to make the devil go away?
TIA.
John

Hi,
I see you guys have got some insight into the whole "custom access" issue... and I desperately need your advice... in terms I can understand (I'm baffled by a lot of this talk about which permissions I need, etc.).
Here's the back story...
1) I had recently updated my Macbook Pro to 10.5.5. And I noticed that my Internet connection would either drop or run glacially slow. Meanwhile, my wife's Macbook ran fine. So I figured something was up.
2) I tried turning the Airport connection on and off, demanding a new IP, and all that. No luck. Zapping the PRAM once seemed to help. But very shortly we were back to slow speeds. Then I saw something online about trashing many network related preferences and the 'SystemConfiguration" file.
3) I moved the recommended items out of their locations in the System folder, parked them in a new folder on the desktop (instead of trashing them) and rebooted. No change. And then I thought maybe it would be best instead to just put the files back and look into it later.
4) When I put the files back, I noted that the system had created a new "SystemConfiguration" folder... which then moved out... and placed in the original SystemConfiguration folder. And that's around about where the real trouble seemed to begin.
5) I rebooted and discovered that my Airport card was 'Not configured" or something like that. It was as if the card didn't exist. Same seems to be true of Bluetooth. The system just doesn't see it. What's more, I get a "Network Pane" that's completely blank. NO ports listed in the column on the left... NO user name.. etc. Even my "local host" name had disappeared.
6) That sent me online and I found this article an on folders that have defaulted to a "custom access" discussion. And sure enough... the systemconfiguration folder I had dragged back in had the "custom access" label. So does the main folder/wrapper for my home directory. Plus, the same with many folders inside.
7) I have "Batchmod" but don't know, in layman's terms, what I should change the permissions to. Am I "user"? Do I "strip the ACLs" or forget about them? Is there some other better option?
8) I've seen people suggesting to go get a piece of the system network stuff from the pre-upgrade files. But I ran into another problem... related, I think, to all this. And that's simply that my Time Machine can't see the backup versions I did over a week ago.
9) I'm wondering if I need to do an "Archive & Install"... but then worry it won't work because the busted network settings would come over with it. (This computer was upgraded to Leopard with Archive & Install.)
10) So then I wonder if I should do a clean install... but I don't quite understand how to "just port back in the contents of your home folder." How does one do that without breaking the applications away from all the little things they installed so they could run?
I'm sure there's information I'm not providing, simply because I don't know what you'd need.
But what can I do?
Hope to hear from you soon!

I am a customer Verizon customer of over ten years...I am notgettingany assistance from the customer service department. Since September I am being charged for a Samsung phone that I returned based on the process that verizon has set.return the defective

turn my phone to send Verizon wireless and those instead of the stuff found. I'm not in charge $600 for the for the phone. I'll talk to multiple customer service reps and nothing has really been done about anything other then we'll keep looking or so for stretching it out. since September I've been dealing with thison a month-to-month basis they cut my services they reinstate me and tell me that they're going to knock off the reconnection charge as I have four lines. Unfortunately my main reason for this phone is my work emails which I need to do because I do work and to contact my mother who is 85 years old and I'm the sole caregiver. I don't know what else to do. I have spoken to a supervisor by the name of William or Will oats in that he said he was going to look into it and was going to help me out. Never heard from him again- just original email to quiet me down. I've been sending him emails just about every day trying to make sure that I get my message across. Seems like Verizon Wireless really doesn't care about the long-term customers. Looking forward to hearing from someone that can help me with my plight.process is faulty for returns. You don't accept them in the stores because as one customer service rep stated you can't get your own employees to send the devices back. Now the responsibilities is on the customer the paying customer the one that keeps you alive. And it's not fair that I there's no way I can prove that I put it in the mailbox. So what are my next stepswhat is it that I need to do to clear up this charge of $600. It's about economy as $600 to me at this very point it's a lot of money. I've been your customer for 10 years I've got four lines I've given will my mothers telephone number home number..number but now she's got to sit by the phone to make sure that she picks up all the calls. And nobody can hear what I have to sayand nobody has been able throughout all these months and check your notes check your notes to see how many times I've called how many time you cut my services how many times you reinstated me and how many times that I spent an hour and a half to two hours on the phone going through this process. I think the stress level is to know thqt I did exactly what you asked...I am now paying the price for your faulty process I'm all I'm asking is review my account tell me what I did wrong I follow your procedure so I don't understand....to top it off...my wife hasa per diem job...and she too is affected by loosing out on work leads...
as you can see, the cel is no longer a commodity. It's a way of life.
PLease se call me at -----just remembered....I don't have a service line.

I have a similar problem with my fathers service, it wasns't $600 but what is rightfully your money, you deserve it back, I wrote this complaint on the Consumer Affairs website:
In August 2014, my son went to Target to get a new cell phone and was told his Unlimited Data would still be on his plan (he shared a line on his grandfathers account). Well it turned out that Target messed it up and my son immediately called Verizon to get it taken care of but they were not able to do anything about the lost unlimited data but the customer service rep did try to find the best offer for him. In the mean time Verizon was suppose to send him a new cell phone, they never sent it and he was without a phone so he took his business to another cell provider. Verizon DID charge him for the new service that they had spoke about. So when the new bill (Sept) came, the service he never used was on the bill and when we called to inquire about it we spoke to a Judy and told us we would be receiving a credit of the amount that was paid. Well, we got the next months bill (Oct) and still no credit, so called them again and spoke to a Nadine ** . She looked into the account and saw the amount that was paid and said she would submit it again for a credit and she would get back to me in 2 days, no call back.
The next bill (Nov) came and no credit again, call again but didn't get the girls name and she put me on hold to look over the previous conversations. She said she sees in the records about the credit and said it takes a while to get it thru the supervisor authorization and she would put it in as a "rush priority". On Dec. 5th my dad's cell was turned off, so I call yet again to Verizon, and explain the whole story to them again. This girl explained to me that the request was not put in correctly and that she would submit it right this time, they even turned the cell back on for him.
So here we are today, Dec. 30, 2014, I get the bill...NO CREDIT, call up and get a gentleman in billing, explain this whole thing again and he transferred me over to customer service where I spoke to a Jordan and yet again told him the story. By this time I was fuming, 3 almost 4 months of calling for this credit and he looks into the account and tells me there is nothing that states there is a credit so all the other customer service reps see it but now it is gone. He said he can only issue me a $25 credit to the bill, not even close to what the bill was that I paid. At this point I wanted to speak to a Supervisor and even that was a problem.
He did call me back after my phone died. He put me on hold again to speak to a supervisor himself and said that he can only offer me $100 credit for all my troubles for the past few months. I took the $100 credit because Jordan said if I spoke to the supervisor, the $100 credit might not be an offer anymore so it was either take it or leave it. Now where I stand, they get away with NOT giving the credit due to customers. I am done with Verizon.
today being March 12, 2015, he FINALLY got the said $100 credit...but because of their delay, he service was shut off and I refuse to pay the reconnection fee due to their neglect of a customer of over ten years. My father's service will NO longer be with a place that has NO VALUE in customer service....Verizon robs their customers anyway they can.

Ftp and http access over XDB repository is not allowed...

When I try to execute the following command on a reasonably fresh Oracle 11 installation:
insert into "XMLTEST" ( "name", "xmlfof" ) values ( 'small', DBMS_XDB.GETCONTENTXMLTYPE('/public/small.xml') );
-- The schema is correctly registered, the file "small.xml" is in the /public repository folder, the user has every conceivable role and priviledge
-- http access works fine from a remote location, tried to execute the command on the server and from remote system...
I get the following error message:
ORA-31020: Der Vorgang ist nicht zulässig, Ursache: For security reasons, ftp and http access over XDB repository is not allowed on server side ORA-06512: in "XDB.DBMS_XDB", Zeile 1915
Searching for an answer on the forum didn't produce any concreate explanation... Does anyone have any idea how to solve this problem?

As it turns out, the XML file contained a reference to a DTD at an external web-site, which caused the problem - it was identical to that described here:
Re: ORA-31020 when using XML with external DTD or entities
After removing the reference, everything works perfectly...

App not working properly when access over vpn

hi,
Strange behavior of application when access through vpn. The application keeps on reloading endlessly. And other application renders completely but when the tab is clicked it will reload the whole page displaying the same tab. Is ADF has an issue when access over proxy?
Both application is build using ADF 11g and is implemented through regions.
Thanks in advance.

I think there something to do with PPR or calling the region or am I missing something? The page that keeps reloading has taskflow with activation is immediate but the refresh is set to IfNeeded. Then the page with tabs, the content of the tab are taskflows as well.
Thanks in advance.

CUSTOM DOCUMENT over internet file name convention

Hi ,
I am sending an OAGIS xml file(CUSTOM DOCUMENT over internet) through interal delivery channel to our supplier, I am getting an below error.
I got the same error while processing an EDI transaction, I change the file name, and then it processed successfully
ex: Penske_850_4010_1_25
in the same way for sending an file(CUSTOM DOCUMENT over internet) , do we have any file naming convention
I tried with Benchmark_850_4010_1_25, it showing a 2nd error.
Please help me to resolve this
Machine Info: (essapp000-u008.emrsn.com)
Description: Make sure the trading partner has name, type, and value information
StackTrace:
Error -: AIP-50548: Trading partner agreement lookup failed as From trading partner cannot be identified
     at oracle.tip.adapter.b2b.tpa.TPAIdentifier.identifyTPA(TPAIdentifier.java:199)
     at oracle.tip.adapter.b2b.tpa.TPAProcessor.processTPA(TPAProcessor.java:589)
     at oracle.tip.adapter.b2b.tpa.TPAProcessor.processOutgoingTPA(TPAProcessor.java:221)
     at oracle.tip.adapter.b2b.engine.Engine.processOutgoingMessage(Engine.java:1061)
     at oracle.tip.adapter.b2b.transport.AppInterfaceListener.onMessage(AppInterfaceListener.java:141)
     at oracle.tip.transport.basic.FileSourceMonitor.processMessages(FileSourceMonitor.java:903)
     at oracle.tip.transport.basic.FileSourceMonitor.run(FileSourceMonitor.java:317)
and Machine Info: (essapp000-u008.emrsn.com)
Description: Unable to identify the trading partner agreement from the given input values. Also verify agreement effectiveToDate
StackTrace:
Error -: AIP-50547: Trading partner agreement not found for the given input values: From party[NAME] "Emerson", To party[NAME] "Benchmark", Business action name "null"; also verify agreement effectiveToDate
     at oracle.tip.adapter.b2b.tpa.RepoDataAccessor.getAgreementNameByBaTPName(RepoDataAccessor.java:2345)
     at oracle.tip.adapter.b2b.tpa.TPAIdentifier.identifyTPA(TPAIdentifier.java:186)
     at oracle.tip.adapter.b2b.tpa.TPAProcessor.processTPA(TPAProcessor.java:589)
     at oracle.tip.adapter.b2b.tpa.TPAProcessor.processOutgoingTPA(TPAProcessor.java:221)
     at oracle.tip.adapter.b2b.engine.Engine.processOutgoingMessage(Engine.java:1061)
     at oracle.tip.adapter.b2b.transport.AppInterfaceListener.onMessage(AppInterfaceListener.java:141)
     at oracle.tip.transport.basic.FileSourceMonitor.processMessages(FileSourceMonitor.java:903)
     at oracle.tip.transport.basic.FileSourceMonitor.run(FileSourceMonitor.java:317)

Hi,
I used to get "Unable to identify the trading partner agreemen" due to below reasions,
1. Agreement is not deployed properly. Please check whether deployed agreement is in active state.
2. While creating the Operational Capability, please check whether initiator and responder defined correctly.
For Outbound, Please check Remote trading partner Is Initiator should be false and Host trading partner Is Initiator should be true.
As far as I know, File name convention should be folllowed for FTP/File and not for HTTP.

Using PowerShell to set Custom Access Rights on a Calendar Does not set Free/Busy Permissions

We recently discovered an issue where, if you use Exchange Management Shell to configure custom access rights, the Free/Busy permissions do not get set at all (they remain as "None"):
$temp = [Microsoft.Exchange.Management.StoreTasks.MailboxFolderAccessRight[]]("ReadItems","EditOwnedItems","DeleteOwnedItems","EditAllItems","DeleteAllItems","FolderVisible")
Add-MailboxFolderPermission -Identity "conf-company-test:\calendar" -User "Company Calendar Management" -AccessRights $temp
Add-MailboxFolderPermission -Identity "conf-company-test:\calendar" -User "mpinkston" -AccessRights Editor
If you use a pre-defined "role" such as Editor given to mpinkston6 in the above example it sets the Free/Busy permission to Full Details. It would appear that using Add-MailboxFolderPermission or Set-MailboxFolderPermission is generic for folder
objects, and doesn't explicitly set the Free/Busy permissions. In the case of the pre-defined roles either the command is doing something special/different, or the permission checks later accept pre-defined roles for determining Free/Busy permissions. No idea
which is going on. If Free/Busy permissions can be fixed through PowerShell by some other mechanism/command, that would be great. If not, how do we go about requesting a fix/feature change in Exchange?
http://technet.microsoft.com/en-us/library/dd298062%28v=exchg.150%29.aspx
(Please expand Parameters and read AccessRights to get a better understanding for what I'm describing.)

Did you try adding AvailabilityOnly or LimitedDetails in your $temp variable for Calendar folder? These would set it to "Free/Busy time, subject, location" or "Free/Busy time" respectively....
Add-MailboxFolderPermission - http://technet.microsoft.com/en-us/library/dd298062(v=exchg.150).aspx
The following roles apply specifically to calendar folders:
AvailabilityOnly View only availability data
LimitedDetails View availability data with subject and location
Amit Tank | Exchange - MVP | Blog:
exchangeshare.wordpress.com

Help - Lion "custom access" permissions mess

I should start with an apology... I know there are a lot of threads that dance around this very issue, but it's so much I can't make sense of it.
So I'm asking anew...
Here's the situation: After months of persuassion, I finally talked my wife into letting me upgrade her Macbook from Snow Leopard to Lion. After installing, I then ran software update and installed everything else recommended. Reboot and everythign seemed to go fine, but then when I tried to delete a few PowerPC apps, the computer kept asking for her password.
Wanting to find out why on earth I had to retype the password with every toss of a file, I looked online and found someone suggesting I had to log her out as an admin and then log back in. Why that would work, I don't know, but I tried it. Big mistake.
When I tried to log her back in to make her an admin again, I couldn't get the computer to accept her password. So I then logged out and tried to log back in with my admin account which is set up on the same computer. That worked to get me in, but still wouldn't allow me to upgrade her to an admin in the system prefs.
So I THEN found this "resetpassword" trick using the Lion Recovery partition and terminal. I did that and was able to restore her password and while there, I also "reset to default ACLs and Permissions" or whatever it says inside this utility, with the logic that repairing permissions has always been a decent failsafe fix.
Okay... after a reboot and we're back in... and I run into a new problem with not having permission to do much of everything.
So, I open the "Get Info" on the hard drive to look at the permissions at the bottom of the info window. It says I have "read only" access. I figure this must be an error so, perhaps foolishly (or should I say probably foolishly), I grant Read & Write access across the board, so it reads like this:
System - Read & Write
Wheel - Read & Write
everyone - Read & Write
And then, don't cringe, I apply to all enclosed items.
When this is done, I rebooted to the Lion Recovery partition and ran the Disk Utility "repair permissions" there, too.
Upon reboot... I remember Keychain First Aid and run that too. It has errors to fix but says it was able to repair them too.
Right now... it all appears to be working fine, though it says I have "custom access" in the Get Info window for my HD.
However, I can't shake the nagging feeling that I've just used a flamethrower to clean up the living room.
For instance, I look now on my own Macbook and see that "wheel" and "everyone" in the Get Info window and see it's Read Only. And yet, I have no permissions problems right now at all.
(Update: I tried setting hers back to match mine in the same way (via the Get Info window, apply, disk utility, reboot, etc.) and the permissions problems all came back. So I went and made it Read & Write for everyone again. However, this just can't be right.)
Can anybody tell me (in easy terms, please) what I can do to get it back to what it should be?
I've seen notes on a program on xnation.com that "fixes ACLs"... and a few posts with Terminal commands... but I'm hesitant to borrow somebody else's solution, just in case it's not so good of a fit or if I don't understand it.
What do you think?
P.S. I promise to rate good solutions offered to up your point totals.

Something like this?
System - Read & Write
Wheel - Read Only
everyone - Read Only
Yes.
...software from xnation.com that is designed to reset those ACLs?
I've never heard of it. You already know how to reset user permissions.
if the system seems to be working fine, does that mean something is still broken/in danger of corrupting or something?
You set wide-open permissions on all files. That's insecure, and some things won't work at all, maybe not anything you use.

Validation for Custom document over internet -Protocol

Hi all,
Could you please help me , what to configure in B2B
In protocols tab while configuring custom document over internet , do we need to swithc ON the validation or its SWITCH OFF the validation.
For both inbound and outbound transactions(PROCES PO, Change PO, Invoice, Acknowledge PO)
Regards
CNU

Hi CNU,
If your use case requires validation of incoming and outgoing documents, then you have to set the "Validation Enabled" to "Yes" in the doc definition and have to provide the XSD's/ecs against which validation should be done. If your use case does not ask for validation, then simply set the "Validation Enabled" to "No" and go ahead with the configuration.
Regards,
Anuj

Custom XML Over Internet

Where can i download the details reg the Custom XML Over Internet Document protocols information ?

Hello Saravana,
We have already send you the artifacts for implementing Custom XML Document over AS2.
1. Tutorial document (Custom Document):as2tutorial.zipp
2. Configuration export files attached: as2_export.zipp
3. Sample payload: Acme_ORDERS.xml.
While modeling the Document Definition parameters make sure the following(xpath)
IdentificationExpression(Xpath)= /*/*[local-name()='shipto']/*[local-name()='country']
for the attached payload(Acme_ORDERS.xml).
Please let us know if you require any clarifications
Regards
Nandagopal.S

Custom Access over msmdpump

Similar Messages

Maybe you are looking for