Different user privileges in Rules Author

In the Rules Author is there a way to specify users that have different privileges/rights? I want to create users that have the rights to create Rules using Facts and Variables, and other users who only have the rights to modify Variables but not Rules.
In all the docs I've read it seems as if you can only create users that have all-rule-controlling power.

Hi StrikeBT,
Please go list settings > Advanced Settings, here you change item view / edit permission for user.
Please go through the screen shot below
Thanks,
Vivek
Please vote or mark your question answered, if my reply helps you

Similar Messages

Book is Licensed to a Different User Account - AUTHORIZATION PROBLEM

Getting the error message... Document is Licensed to a different user Account after I authorized ADE (which prompted me to do after using the software for several months). So I have already de-authorized and still getting message. I am using Snow Leopard on a Mac. Many of the books are from school downloads. What is the fix?... very frustrated as I am trying to do homework.

Opening the WebCase turned out to be good advice (I think), although I can't be sure to what extent it was responsible for what happened. I received a form-type letter from Adobe by email. It contained instructions which I was unable to comply with fully in the order presented, but I carried out those steps which were possible, de-authorizing with Cmd-Shift-D the old version of Digital Editions (which I had previously restored without solving the problem). I then opted to Upgrade once more next time I started DE. (under Macintosh OS X 10.4 BTW). Everything went smoothly. It didn't ask for my AdobeID nor require that I authorize the newly installed version manually this time. (On my first attempt it had left me with no option but to start a new AdobeID since the online component refused to recognize my email address. The new (and apparently different) ID is what made it incompatible with my ebooks).
I do know by now that my original problem was caused by not knowing the original AdobeID (if indeed I was ever issued with one). I still can't find it, but at least I am no worse off than I was before upgrading. I am not sure if my new AdobeID will work if I ever try to upgrade again, but at least I now know what the problem is and how to fix it if it doesn't.
My advice to others experiencing similar problems: Remain positive. Don't give up. There is good relevant advice in thread "Error: document licensed for a different user account" (IIRC). Start your own Web Case if you reach a dead end.

I am getting a message with some songs in my itunes library that has a different user id and says my computer is not authorized to play this song. ***?

Since transferring my iTunes library to a new computer, my library is just a mess. There are lots of songs that are duplicated 2, 3 and 4 times although all but one of the songs will get a message saying iTunes cannot find the file. Now I am getting a messages with some songs that shows a different user id for iTunes and wants the password. I have spent lots of $$$ and time trying to resolve these issues but really want to know what the heck is going on here?

Maybe you purchased some of the other songs using a different itunes account.
Could this be?

Same query takes different time for two different users with same privileges

Hi,
Just wanted to know if it is possible for an INSERT query to take different amount of time for two different users for the same volume of data. If so, what could be the reason? I would like to add that we are not executing the query simultaneously. But it is always faster for user1(within 10-20 seconds) and slower for user2(takes around 8-10 minutes).

Show execution plan for each user. I think there is other reasons which you didn't not tell

Firefox Flash plugin crashes when FF launched with "Run as different user"

I often start Firefox in Windows 7 (x64) using the "Run as different user" mechanism. After upgrading my Flash plugin to v11 (11.8.800.94), the browser will hang for several minutes when visiting any page that contains Flash content. When Firefox becomes responsive again, scrolling a page with Flash content will cause the app to hang again. Disabling the Flash plugin eliminates the problem.
It seems the plugin is silently crashing -- I'm not alerted to a plugin crash in any way (no dialog or yellow "Flash player crashed" notice at the top of the window), but after FF hangs I will see a new crash report entry in the FF about:crashes list. An example crash report is available at https://crash-stats.mozilla.com/report/index/ff452291-b5b2-44e4-a172-416792130818
The plugin does not crash when Firefox is running under the same account that is logged onto Windows interactively -- only when running FF as a different user. For example, if I log onto Windows with user account Adam and launch FF normally, the problem does not exist. If I close FF and launch it as user Bob (shift+right-click Firefox Shortcut, choose "Run as different user"), the problem will appear. However, if I log into Windows as user Bob and launch FF normally, the problem does not exist.
I have tried the following as troubleshooting steps, all to no effect:
Create new Windows user accounts to rule out potential Windows or Firefox profile issues.
Use another PC (also Windows 7 x64). The same behavior occurs on both PCs
Disable AVG antivirus.
Upgrade Firefox to latest version (23.0.1).
Disable Flash hardware acceleration.
Give both user accounts full local admin privileges.
Can anyone suggest something to try next?
Update: Per the troubleshooting instructions at < http://forums.adobe.com/thread/1018071?tstart=0 >, I was able to eliminate the problem by adding the line
ProtectedMode=0
to my C:\Windows\SysWOW64\Macromed\Flash\mms.cfg file to disable Flash Player Protected Mode. There are instructions on that page for submitting a Protected Mode-related bug, and I will follow through with that.

Maybe you did't understand my previous statement. There are no crashes in FF 3.6, There is no previous evidence FF 14 was ever here, I completely uninstalled all trace of Firefox, no app data, no preferences, no cache. I will upgrade to FF14 so I can send IDs,
so here ya go.
Crash ID: bp-fa9da320-92dc-47f7-afff-33e702120718
AdapterDeviceID: 0x2a02
AdapterVendorID: 0x8086
Add-ons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:14.0.1
BuildID: 20120713134347
CrashTime: 1342655269
EMCheckCompatibility: true
Email: [email protected]
FramePoisonBase: 7ffffffff0dea000
FramePoisonSize: 4096
InstallTime: 1342655256
Notes: AdapterVendorID: 0x8086, AdapterDeviceID: 0x2a02GL Context? GL Context+ GL Layers? GL Layers+
ProductID: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
ProductName: Firefox
ReleaseChannel: release
StartupTime: 1342655256
Theme: classic/1.0
Throttleable: 1
URL: http://www.mozilla.org/en-US/firefox/14.0.1/whatsnew/?oldversion=rv:1.9.2.13
Vendor: Mozilla
Version: 14.0.1
This report also contains technical information about the state of the application when it crashed.

Oracle Security - Controlling the 'alter user' privilege

Hi,
1. DB 10.1.0.5 and 10.2.0.3
2. "Admin User" needs to be able to change some users passwords in database.
3. Create user adminuser - grant alter user to adminuser.
4. DBAs will grant "approle" role to list of required users. DBAs will maintain control of who gets this role.
4. Create system trigger on alter database - will prevent "adminuser" from changing passwords for accounts not authorized - Script does not fire for DBAs and anyone changing their own password.
The trigger works as intended - the "adminuser" account can only change the specific set of users.
Question: We've discovered that the "adminuser" can also use the "alter user" privilege to change default tablespace and tablespace quota. User should only be able to change password.
Anyone have ideas on adding to the trigger to make sure the "adminuser" is only altering the password?
I am playing with the ora_is_alter_column system event, thinking that maybe the password column in user$ would be changed but so far I can't get this to work: Here is my trigger --
CREATE OR REPLACE TRIGGER SYS.PASSWORD_CONTROL AFTER ALTER ON DATABASE
DECLARE
DBACHK varchar2(50);
USRCHK varchar2(50);
BEGIN
BEGIN
-- Ensure users can change their own passwords --
IF
ora_login_user = ora_dict_obj_name
THEN
RETURN;
ELSE
-- Do not apply trigger to DBA group --
select grantee into DBACHK from dba_role_privs where granted_role='DBA'
and grantee = ora_login_user;
IF
DBACHK = ora_login_user
THEN
RETURN;
END IF;
END IF;
EXCEPTION
WHEN NO_DATA_FOUND
THEN
NULL;
END;
BEGIN
select grantee into USRCHK from dba_role_privs where
granted_role='DISCUSR' and grantee = ora_dict_obj_name;
IF
ora_dict_obj_type = 'USER'
and ora_dict_obj_name = USRCHK
---- Need to check that only the password is being change -- the line below does not work
and ora_is_alter_column('PASSWORD') = TRUE
THEN
RETURN;
ELSE
RAISE_APPLICATION_ERROR(-20003,
'You are not allowed to alter user.');
END IF;
EXCEPTION
WHEN NO_DATA_FOUND
THEN
RAISE_APPLICATION_ERROR(-20003,
'You are not allowed to alter user.');
END;
END;

user602453 wrote:
Ed, thank you for your reply. But, let me explain in more detail.
More detail is always helpful. ;-)
>
A specific user has been assigned as the application administrator. This admininstrator is responsible for reseting application user passwords. The DBA (me) recognizes the DB security issues so I am trying to craft a solution that will allow the application administrator the ability to change only the password of the application users.
I see that this may be out your hands, but I'd still question the wisdom of having an apps administrator being the one to change user passwords. Especially if that were a model where the users couldn't change their own passwords. I might accept it if the app admin were acting more of a helper to a clueless user.
Since the only way to change user passwords is to grant the 'alter user' privilege I need a system trigger to keep the user from changing non-application user passwords. Also, because I support nearly 100 production databases that support about 35 different applications I need a solution that can apply to multiple databases. I've been assured that there will only be one administrator charged with resetting passwords.
So,
Given those requirements, I have this trigger that will allow the the specific administrator to change the password of a specific set of user while not impacting DBAs or people wanting to change their own password. The way I've implemented this is to create a "dummy" role and assigning the role to the application user. The trigger will allow the administrator to change the password only if the user has the role assigned. The role has no privileges, it is just a way to "mark" the user as an application user. The administrator cannot grant this "dummy" role, only the DBA can.
Hope that clears things up.I still see another problem in that it still comes back to the dba to create the apps user in the first place, and to assign that dummy role to the user. Also, I'd hope that this proposed apps admin user is a role assigned to a real user. If not, as I mentioned before, you have no real accountability to who is using that account. Simply saying "it shall not be shared", even if written in corporate policy, won't secure it, and you won't be able to trace it. Well, you could turn on auditing and capture the OS userid in the audit log.

How to create different users in a unique project?

Hi,
We are able to create different users in security manager,but it is not possible to grant privileges accordingly.According to our requirement we need different users with different granting privileges so that our work should be secured.After login with different user we are getting the below error
com.sunopsis.core.SecurityAccessException: com.sunopsis.core.SecurityAccessException: You are not authorized to View the Object:SNP_TECHNO : Oracle / 1999
Thanks
Suresh

Hi there,
I am also receiving this same error and I'm not sure what you mean by granting the users the correct access to the Topology items. I mistakenly deleted the CONNECT profile and I have re-created it with all of the same objects it had in it before but it is not letting my users in and fails with this same error..
However, the supervisor and the any of us admins that are marked as supervisors can still get in no issues..
Please help!

Broad casting Webi report in excel format to different users email ids

Hello,
Seriously looking for the help, please help with the solution for below scenario.
We have a requirement to schedule broadcasting of Webi reports to users email in excel format from infoview. But our concern is how the system takes care of authorizations of users when we broadcast the report to their mail id as excel file.
For example we have one webi report for Finance and there are thousands of users for each department, cost centre etcu2026so how to broadcast the same webi report in excel to different users with only data they have authorized to see. We have committed to client that we can do this with out much massive overhead, please advise what is the easiest way to achieve this. I read something like this can be done using authorization profiles in CMS but creating those many profiles and mapping them to relevant authorizations is not possible as there are thousands of users with different authorization levels. And Client is expecting this broadcasting need to be done automatically with out every time manual intervention.
Looking forward for the prompt reply.
Thanks,
Gani.

Please use the Dynmanic Recipients functionality of the Publication.
For this we need to do follow steps.
1) Create the WebI Report that needs to be published(Broadcasted)
2) create Deski/webi report which contains the user details and email id's for publishing main report.
3) Map the properties of souce report with Dynamic Recipient report.
Please refer the user guide for more inforamtion.This helps you in avoiding manual creation of profiles in CMC.
Regards,
Siva
Edited by: Nallamala siva on Jun 13, 2011 8:17 AM

How do you do a quick transfer of data from one TX to another TX with different user name

I have more than one TX and want to keep most of the information, addresses, media, calendar as well as third party software the same on all my TX's. Is there a way to do this without the long hassle of exporting all that can be exported, and then importing it into each TX. Then adding all the third party software again? I have a new TX and remember how long this takes, so I am hoping for a faster method. I already know how to do a transfer if using the same user name, but this won't work when each will have a different user name in order to hotsync.
This may be a different question. All the TXs will be used and will sync to the same computer via USB, and all are on the Palm Desktop. I want to use them interchangeably. I would also like to keep the information current on all of them, as I now must copy paste any new info (ex. new address) into each via either palm desktop, or beaming to the others. Often this leads to discrepancies of the data between the different TXs.
Post relates to: Palm TX
Message Edited by Silfox on 06-22-2009 09:03 AM

You might look into a program called "SyncUs" from an author in the UK. It will keep all the PIM data synced between two Palm OS units.
WyreNut
I am a Volunteer here, not employed by HP.
You too can become an HP Expert! Details HERE!
If my post has helped you, click the Kudos Thumbs up!
If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

Connect from iPad to MacbookPro as a different user?

Here is, in a nutshell, what I would like to do:
I would like to log in to my MacbookPro as user "me" from an iPad,
while someone else is already logged in on the Macbook the conventional way as "he".
I would like to do my email, using the Mail app on my Macbook, while my kids are watching a movie on it,
and even if they are logged in under there account.
IIRC, this used to be possible on Unix/Linux (I grew up under Unix about 15 years ago).
I have tried screen sharing and a VNC client on the iPad (VNC viewer from RealVNC), but
1. it seems to work only if the VNC server is running on the Macbook;
2. I don't see how I can log in as a different user *and* have my own GUI session.
I read posts on the internet that claim that it is possible to do what I want, and they seem to refer
to VNC and/or Apple's Screen Sharing, but I didn't find any specific details.
Yes, I have Screen Sharing on under System Preferences > Sharing.
Any insights, pointers, and hints will be highly appreciated.
Best regards,
Gabriel.
PS:
The iPad needs to be registered with my son's Apple ID because he needs it in school.
PS:
Yes, I could install a second mail client on the iPad, but then I still would not have access to all the local mail folders on my MacBook.

Yes, you are right, my logout url is re-directed to the login page.
However, I tried to add the logout url in authentication scheme as you said, it does not work.
error msg: No functional attributes may be set when page sentry function is '-DATABASE-'.
My project is:
I have a oracle database with tables, functions/procedures/packages. The role privilege to access the database has been granted to a few users. Then, I developed an application in apex to access the database and run procedures.
I expect the security of apex application log in is: the users who can access the database can use the application.
So what I did:
1) I set up the authentication scheme of the application as 'database' scheme, The detail is as following:
Description: Use database authentication (user identified by DAD).
Page Session Management: Page sentry function: -DATABASE-
the left areas are all null.
2)I developed a home page (page1): the detail is as follows:
regions: html region with a logo linked to page2
item: url item, source: pl/sql function get_url(), maintain session state as per session
computation: get_url(). It only has one command to return database http login address, to ask enter username and password. BeginThis function is expected to require and provoke a database login
when the application computes the above item using this function.
branch: after log in branch to page2.
3) set up a Navigation Bar for logout as :
wwv_flow_custom_auth_std.logout?p_this_flow=&APP_ID.&p_next_flow_page_sess=&APP_ID.:1
The purpose of provoking database login has come true.
However, the problem is: after I logout from the application and it redirected to page1, when I tried to log in again as a different user, it will automatically log in as the former user (without asking username and password). I have to close the IE, and rerun IE, then I can log in as another user.
I hope I have expained it clearly.
Cheers.
Sue

Run with user privileges but write to restricted folder

In Windows Server 2008 R2 (and in an Active Directory domain), the login and logoff scripts are run with user privileges.
Suppose that I run script1.ps1, when user1 logs in; I need that script1.ps1 is associated to user1, because it will write some informations about that user: it modifies a log file in a folder. Anyway, script1.ps1 will be run with user1 privileges.
I obviously made that file and that folder accessible (readable/writable) to user1: but I actually don't want the user to modify that log file. I would like that
only the script could do it.
Is there a way to work around this problem? Maybe should I run script1.ps1 in a different way?

Henry. You can add a subscription to a server that subscribes t event log entries on user computers. Subscribe to the logon/logoff events. Now you have a central repository of logon and logoff events.
There is no way to accomplish what you are asking to do. Any file that can be written to in logon script or during a user session can be changed by the user.
Bil is suggesting a "startup" script that runs when the user logs on and not when the computer starts. A user startup script runs as the user and not system.
Another method is to schedule a script that run at logon. This can run as system and write to a file that the user cannot change.
¯\_(ツ)_/¯

Help using file sharing with different users accounts on same Macbook

Hi, I just wanted a little help using the file sharing option. My wife and I had different users accounts on the same MacBook, but when I am trying to share my baby's picture from my documents folder for my wife to have the same picture, I can't find the way to do that; I am not been able to find my pictures on my wife's account. Is there any way that I could share a folder from my account and my wife to have the same files at the same time on her account?
I mean, something like the smart play list on the itunes?
Thank you

You can't do that directly unless you change permissions on your whole Documents folder which is not a good idea. Your wife can see your Documents folder from her account by going to Users/yourusername/Documents. However, this folder has no read privileges for others except yourself by default so she won't be able to open it.
rather than changing permissions on your Documents folder, you can place the pictures you want to share in Public folder in your home directory or in Users/Shared folder.

How to update XML Facts in rule author

Hi,
since there is not a separate forum for the rules engine and this is tightly related to BPEL, so I thought I'd post the question here.
what's the process to update XML Facts in the rule author and the BPEL process that is already using the rule repository for decisions?
for example, if I change the data type on one of the elements in the XML Facts schema from string to int, what do I do next to put such change into the existing rule repository and update the BPEL side of things?
I have tried re-importing the updated XSD into the rule repository (it's a WebDAV repository), I can see the change in the new definitions for the xsd, and I can also make use of the change to define new rules, in the words, the rule author side seems fine;
then I copied the updated xsd into my BPEL project that calls the rules engine, and then what should I do next? I can't see any where in jDeveloper I can "update" the decision service partner link, so I just re-deployed the BPEL process with the updated xsd under the rule/xsd folder, but then the same call to the decision service starts failing with a "business exception, cx-fault-actor" but without any more details.
I haven't added any new rules, only change of data type on one element.
what am I missing?
thanks.

In ALDSP 2.5 (and ALDSP 3.0), non-XA data sources can be updated without writing an update-override. But if you want to do any special processing that is not handled by the default behaviour, or for data services not based on relational databases, in ALDSP 2.5, you can write an update-override.
In ALDSP 3.0, the update model is somewhat different, I suggest that you peruse the ALDSP 3.0 documentation for a thorough discussion. The documentation is here http://edocs.bea.com/aldsp/docs30/index.html I suggest start with a search on 'update'.
In ALDSP 3.0, I believe updateoverride feature still exists for the purpose of backwards compatibility (at least it turned up in a search of updateoverride in the 3.0 docs)

Importing the class in Oracle Rules Author Definitions

I created the Dictionary in the Oracle Rules Author.
In the Definitions Page I selected the java fact type.
In the User Classpath i gave the class path of the files.
Then i have to import my class in the Rules Repository.
I am getting the following error.
Cannot perform operation. RUL-01527: Received exception for loadClass. RUL-01016: Cannot load Java class example3.Retiree. Please make sure the class and all its dependent classes are either in the class path, or user specified path. Root Cause: example3/Retiree (Unsupported major.minor version 49.0)
Can any one respond to this query please...

You have to do like the others import. You have to put import and the complete path(with all the packages).
For example:
import mypackage.msgsend;
and if you wouls like to import all the classes of a package use:
import mypackage.*;

Does the "The Project Owner has the same RBS value as the User" dynamic category rule include Status Managers?

I tested the following scenario in Project Server 2010 and 2013:
Assume you have three users: User1, User2, and User3.
User1 has RBS value Org.UnitA
User2 and User3 both have RBS value Org.UnitB
User3 belongs to a group that gets permissions to view projects from a category with "The Project Owner has the same RBS value as the User" setting enabled.
User2 creates ProjectABC and by default becomes the project Owner. User2 creates a task in the project, and by default becomes the Status Manager of the task.
User2 then changes the project owner to User1 and republishes the project. User2 remains the Status Manager in the project task.
User3 can still see ProjectABC. Apparently this is because User2, who has the same RBS value as User3, is still a Status Manager of project tasks.
If I change User2 RBS value to Org.UnitA, then User3 can no longer see ProjectABC. Note that User2 is not the project Owner at this stage, but the change in User2's RBS still affects the visibility of the project.
It seems to me that in "The Project Owner has the same RBS value as the User" dynamic category rule, the "Owner" should be "Owner or Status Manager".
Is this a bug or by design?

Hi Barbara,
Thanks for going through the trouble of reproducing the behaviour. It's interesting to know that Effective Rights in Project Online displays different results.
The system in which I tested this scenario is updated with the December CU, so I'm guessing you'll still get the same result after updating your environment.
In my usage scenario, a user needs to create projects on behalf of other users, and then change the Owner. Unfortunately this doesn't change the Status Manager of tasks, and consequently the visibility of the project is not what was expected.
The user who creates the project can change the Owner, but can't change the Status Manager. The new owner would have to open the project for editing in Project Pro, change the Status Manager value of every task, and republish. Precisely the sort of extra
work that the users want to avoid.
Using delegation might be a workaround, but opens up a whole new can of worms in terms of information security. It's unfortunate that the "The Project Owner has the same RBS value as the User" setting doesn't do what it says, but potentially
opens up visibility of projects to a wider audience than intended.

Different user privileges in Rules Author

Similar Messages

Maybe you are looking for