Direct access to document image via webservice - best practice?

Howdy,
   Rookie "Post-er".... be gentle. I've searched and I've read... didn't find this. I've not taken training. I may be way off base.
We have multiple manufacturing sites around the world with local Operator Qualification appls that want to access the enterprise SAP DMS mfg document images (stop dual maint - enterprise & local).... without dependency on SAP ECC being up. If we can pass them DMS meta-data via near-realtime msgs (including the document image access "key" data); then we would assume they can direclty access KPRO for the document image as needed.
Would this be considered a "best practice"?   Webservice controlled (access only from known source).
Is PHIO-ID the only dynamic variable needed (based on info below I found in WIKI)?
*Alternatively, the url as below can be used to retrieve the documents from the content server[*http://<Server_Name>:<Port_No>/archive.dll?get&pVersion=<Version_No>&contRep=<Content_Rep>&docId=<PHIO_ID|http://<Server_Name>:<Port_No>/archive.dll?get&pVersion=<Version_No>&contRep=<Content_Rep>&docId=<PHIO_ID|\||]>
            <Server_Name> = Content server (IP address or name of content server)
            <Port_No> = Port No. of the server
            <Version_No> = Version No of content server (Transaction OACT)
            <Content_Rep> = content category of the server (Transaction OAC0)
            <PHIO_ID> = PHIO Id derived for each upload method

Hello,
This reply posted to help others who may refer this in the future.
As Amit Maheshwari mentioned, it is possible to give access to a document stored in the Content Server even when the partner system(ECC) is down.
As per your requirement, you want to access documents when the ECC System is down, but the content server is up and running.
The following steps can be of help to you:
1 - Create a program, that will create URL for the documents stored in the content server and send the URL to the external system.(Refer: FM- SDOK_PHIO_GET_URL_FOR_GET)
The URL refers to the public IP of the Internet Server on which the content server is hosted on.
2 - With this URL and few configurations on the Content Server (to allow access from external systems) you can fetch the file from the content server to the external system. Access privileges may vary based on your security settings.
Note: Since the ECC system will be down, creating URL for all the documents can be a bottleneck.
Probable Solution: While adding a document to the ECC system, the respective URL can be created and transferred to the external system along with the master details and stored there.
This can be undertaken if it is really important for the business, as it will increase the load for the external system. The solution can be modified based on the business requirement.
Thank you,
Regards,
Tamilnesan G

Similar Messages

Using the Mac with windows for document imaging business is it practical?

I have incorporated my business in my state and the premise is to perform document imaging services. The problem though is alot of recommendations from windows people telling me its not practical to enter this arena using a windows xp on a mac and it would be more practical just getting a pc since the industry and all software for the business is done for windows. I am wondering if I do this using windows on my mac in a commercial atmosphere how much of a problem should Iexpect and should I just go ahead and use a pc laptop for the business. I was also going to use a company that has apple servers for my online backup of files.

"how much of a problem should Iexpect"
None. Why would you? Running Windows on a Mac is just like runnning it on any other PC, because Macs...are PCs.

Document FPS Settings? Best Practice?

hi all,
just made a simple "move ball along to accelerometer". i've set the fps to 30, activated gpu rendering,
exported it to my phone for testing and... hell... this runs pretty slow! "ball" is a simple one colored 40x40 px sprite.
except some (4) debug textfields there is anything else on the stage.
is this a fps setting issue? any best practice values? i could not find anything in the docs the mentions the fps
settings so i'm not even sure they are important for the compiled app... are they?
thanks

So, I've been playing around with this, and here's my initial findings.
Pushing the frame rate up to 60 made things choppier, but I'm just using the Adobe example code and I think that can be optimized.
I have it set to 18 FPS, and it's not bad. Not great, but not bad.
I changed out the drawn image to use a png file that's 30x30.
I put an image below the png file so that there is a background.
I turned off debugging.
While not perfect, I think this would be acceptable performance for a game with just these few objects. Next up, I'm going to try adding more objects and see how far I can push things.
P.S., the example code I'm using can be found here:
http://help.adobe.com/en_US/FlashPlatform/beta/reference/actionscript/3/flash/sensors/Acce lerometer.html
Works in Flash CS5.

PS 2010: Task Updating via PWA best practice?

Can anyone suggest a best method of tracking task progress via PWA? In MS Project, you would expect task owners or project manager to enter the following:
Actual Start, Actual Finish, Actual Duration or Work, Remaining Duration or Work, and then “update” all un-started/finished work after the Status Date.
Is it possible to use the same update process using PWA? I noticed that some fields mentioned above are greyed-out (can’t enter data) in PWA.
Any guidance will be much appreciated.

Project Server 2010 User --
I want to commend you for having the foresight to ask these important questions before your people actually begin using Project Server 2010. It is the easiest to set up the default method of tracking progress in the beginning, and much harder to change
it to something else after you go live. My answer is based on the assumption that you will NOT be using the Timesheet page in PWA, as this requires a totally different method of tracking than what you describe.
Based on your comments about how your PMs track progress in Microsoft Project 2010 desktop projects, you would want to select the Actual Work Done and Work Remaining method of tracking in Project Server 2010. To prevent people from freelancing how
they enter progress, you should also select the Force Project Managers to Use the Progress Reporting Method Specified Above for All Projects option. You should be able to leave all of the other options set to their default values on the Task Settings
and Display page.
Next, you should set up the Tasks page to include the following columns, along with other default columns that are necessary:
Actual Start
Actual Work
Remaining Work
Actual Finish
By doing this, you will capture the EXACT information in PWA that your PMs would be capturing in their projects in Microsoft Project. The difference is that when team members enter their progress in PWA, your PMs will no longer need to manually enter
the progress in their Microsoft Project files. The methodology you would need to require your team members to follow on the Tasks page in PWA would be this:
If you begin work on a new task this week, enter the date you began work on the task in the Actual Start field.
Enter the total amount of work done so far on each task in the Actual Work field.
Adjust the Remaining Work field value, if necessary, for any task. Team members can increase or decrease the value as needed.
On the day you finish work on a task, enter this date in the Actual Finish field for the task.
If you change the Remaining Work value for any task, optionally add a note to the task document the reason for the adjustment.
Submit the task updates for the week on the last day of each reporting period.
Just some thoughts. Perhaps others in this group will have some good ideas for you as well. Hope this helps.
Dale A. Howard [MVP]

Access AM method from backing bean - best practice

Hello,
I need to call an appModule method from a backing bean. What is better?
1. Resolve bindings.AMDataControl.dataProvider, get AM and invoke the method directly
or
2. Create method action in page definition, resolve OperationBinding from it's binding expression and execute the operationBinding
I don't need to have a button on the page for this method.
Rado

Good question Rado.
With a "flexible" framework like Oracle ADF, I also ask myself sometimes what would be the preferred approach to do things.
See also these forum threads:
- about "ADF Faces: Passing values from a managed bean to ADF BC module"
http://forums.oracle.com/forums/thread.jspa?threadID=486742
- about : "ADF Faces: getting selected row data in multi select table ..."
http://forums.oracle.com/forums/thread.jspa?threadID=503248
regards
Jan Vervecken

Images for iPad - best practices?

I'm having a heck of a time with figuring out the proper image format/res/etc when creating for the iPad.
For instance, I've got an original jpg image at 1536x1024. My comp is of course at 1024x768.
If I scale down that image and resize to fill the screen, I get some nasty aliasing happening in the shot.
If I leave it at original scale, it ends up perfect. What I don't get is that when I use that same image size and format for printed material, and scale down, I get excellent quality. Buy on the iPad and screen? It's pretty jagged.
Any suggestions?

That's indeed horrible ! And should not happen.
It's not just that the JPEG quality seems terribly poor, those horizontal lines even seem to be more mysterious.
Because this is definitely not something "standard", there must be something happening or going wrong in the process. And the only way to find out what it is, is to "isolate" and "differntiate", like Dr. House always says in the tv series. By subsequentually minimizing the problem's environment, changing different factors and probing the results, you must eventually discover an improvement. And then you quickly have a diagnose, and most probably also a solution. But it involves changes.
So try bringing the problem down to lets say one page with some (these) pictues from which you know they'll go wrong. Verify that the file still goes wrong - you couldn't be happier, and it makes following tests easier to go through. Next, try the folio on different tablets, try building it with a test user account, with a different InDesign, on a different Mac, whatever ! Until you deduced the culprit that causes the problem.
It can be a lengthy process, but it's the only way to find out what is going wrong here...
If you want to, you can send the (minimized and zipped) InDesign package to me, if you don't have any other configurations to try it on.

LAN side firewall settings for Direct Access (Windows Server 2012 R2) in DMZ?

I am currently planning to set up our first Direct Access server (Windows Server 2012 R2). I will be in our firewall DMZ and we will be using the IP-HTTPS listener.
For the Internet facing rule only TCP 443 inbound/outbound is sufficient but for the LAN facing rules (not talking about the Windows server firewall) what would be the recommended firewall rules for a Direct Access server? Is there a best practice guideline
to follow for this? Appreciate any advice or comments. Thank you.

Hi Barkley
Please see this Technet Link which will backup your requirements - https://technet.microsoft.com/en-gb/library/jj574101.aspx
Section Reads -
When using additional firewalls, apply the following internal network firewall exceptions for Remote Access traffic:
ISATAP—Protocol 41 inbound and outbound
TCP/UDP for all IPv4/IPv6 traffic
Also another link from http://www.ironnetworks.com/blog/directaccess-network-deployment-scenarios#.VO3tfvmsVrU
"I have had a number of conversations with security administrators and network architects who have expressed a desire to place the DirectAccess server between two firewalls (firewall sandwich) in order to explicitly control access from the DirectAccess
server to the internal corporate network. While at first this may sound like a sensible solution, it is often quite problematic and, in my opinion, does little to improve the overall security of the solution. Restricting network access from the DirectAccess
server to the internal LAN requires so many ports to be opened on the inside firewall that the benefit of having the firewall is greatly diminished. Placing the DirectAccess server’s internal network interface on the LAN unrestricted is the best configuration
in terms of supportability and provides the best user experience."
Kindest Regards
John Davies
Thank for your reply and information John. I find it somewhat disappointing that Microsoft does not provide much more in the way of documentation and information regarding this topic. I required more information to show to our security team so they will allow
us to have the internal facing NIC not have more restrictive rules in place as it is a security concern.

Removed user from group, user no longer has access to documents even though user is owner of documents

I'm running a server 2012 std domain and I'm in the process of rebuilding our fileserver after we had some pretty serious permission issues. Bad permissions (Everyone had full access to user documents share) were migrated when we move to the new server and
then by some strange Monday morning freak out all users lost access to their documents. I restored from backups, redirected everyone's folders back to local computer and started to reconfigure the share permissions. I moved our administration group back to
the server after securing proper permissions for folder redirection (permissions copied from https://technet.microsoft.com/en-us/library/jj649078.aspx?f=255&MSPPError=-2147217396 table 1, only difference is instead of creating a new security group
for redirection users, I used the everyone group) to test and everything went perfectly. The GPO created the users folders under the root and redirection was good to go. Along with that, other users cannot access other users documents anymore which was the
intended outcome.
Last night I was looking at security groups and see that our administration group (back office group: accounting, HR, etc..) was a member of the domain admins. I removed them from the domain admins group and added them to the administrators group (they do
need regular admin access) then went on like normal. This morning, all users in that group can no longer access their documents on the server. I immediately think that permissions were broken again and started to get angry, but then realize that all the files
are still accessible on the server (no lost permissions like before) and the user is still shown as the owner with full permissions, but the files are inaccessible to those users. I re-added them to the domain admins group, logged out, logged back in and documents
are back and accessible by the user. Remove them from the domain admins group, log out, log back in and the documents are inaccessible again. Re-add to the domain admins group and back to normal.
Which leads me to now. If the users are part of the domain admins group, they have access to their files. If they are removed from the domain admins group, they lose access. When they lose access, they are still the owners of the files/folders with full
permissions, yet they can't access their documents. Also, just to add, the domain admins group has no specified permissions on the files or folders. See screenshots below..
Here is the root share.
And the user's desktop folder. The folder is owned by the user with full permissions. This is the folder the redirection GPO created.
Any ideas why removing the group from domain admins would drop access to their files? They are still the owners of the files and should have full access but they don't. Is there something I'm not seeing here?

Effective Access shows the user has full control of the Desktop folder
This is a problem with the Effective Access tab when using CREATOR OWNER. As you have noticed, the user doesn't really have the access that the tab says it does. This is because of how CREATOR OWNER works.
CREATOR OWNER is only evaluated when a file/folder is created.
IF a user can create a file/folder, then the permissions assigned to CREATOR OWNER are copied to a new permissions entry for that user.
To see this:
Logon as an administrator and create a file in the Desktop folder in your screenshot.
Examine the permissions of the new file.
You'll see that there is a new entry for the account you logged on with.
CREATOR OWNER is gone. CREATOR OWNER would still be there if you created a folder (because of "subfolders and files").
In the Desktop folder (in your screenshot), only SYSTEM and Administrator can create/access files.
To fix this, you need to grant the users the ability to list the directory contents and create new files/folders. This corresponds with the suggestion of Table 1 in the document you found.
I see what you're saying about Administrators domain group. I'll just add them as local admins via GPO and that should solve that issue.
No, scary! This will grant those users administrative permission on your server. They will be able to see any file anywhere on that server.
If your goal is to provide a place that is private for each user, then the simplest approach is to grant each user permission to their own folder. Like this for Test User:
Notes for above:
I set the user's permission to Modify because there is no good reason why the user should change these permissions
The owner of this folder is unimportant. I leave it set to Administrators
You can, and I do, remove CREATOR OWNER. It adds no value in this situation and just causes confusion.
As for the second screen shot, the *-Admins folder is the root to which Everyone has special permissions on and can create folders. The folder for M* was created by the GPO, which makes M* the owner to which they have Full control of subfolders and files.
The GPO also created the Desktop folder, giving owner full permissions of subfolders and files. Inside the Desktop folder, permissions remain Full control for owner for subfolders and files. Even if it was the case that they only had permissions on subfolders
and files, wouldn't each subfolder under that one be considered a subfolder and file of the top folder?
If this works as you say, then Yes, it should work. But, I don't see the entries for use M*. Remember, there should be entries for the M* user that is a duplicate of CREATOR OWNER.
I suspect that Group Policy is creating the directories (elevated) and then changing the owner to M* afterward. This does not duplicate the CREATOR OWNER entries as needed. If this is the case, I consider it a flaw because your permissions do
not allow user M* to create files/folders, and group policy shouldn't bypass security.
I'm not saying your wrong, I'm just curious why the technet article would advise Creator/Owner giving full control of subfolders and files only if that were not correct. I can add the permissions for the users easily, I just don't see why I need to give
explicit permissions to access something when the GPO created those folders for me, which Microsoft recommends you allow. If the GPO can create folders and the folders are owned by the user, then the user can obviously add/create/modify/view those files and
folders.
When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
A couple things:
The article instructed the use of Folder Redirection Users group that had permissions to create files. Your examples didn't have that. Because of this, your user could create new files.
The article assumes that the directories you are creating will be empty. Existing files will be unreadable to everyone except Admins.
If you follow the directions in the article, then anyone in the Folder Redirection Users group can write files to anyone else's directory.
One benefit of the document's approach is that all the users could be redirected to the same folder using the article, and it would work. A benefit, I guess.
But, I like my user's separate and unable to see each other's files -- at all. This is why I recommend replacing CREATOR OWNER with the specific user.
I believe this document is a "how to get it done" document, not necessarily a best practices document. I see it as a starting point, and that's why I didn't follow it exactly.
Lastly, CREATOR OWNER permissions are useful but confusing. I avoid them unless I have the rare circumstance where they are perfect.
When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
To summarize:
In the user's directory, you need to provide permission to list and create new files/folders, and you need grant the user permission to the existing files.
-Tony

Viewing images via Bridge CS3

I usually adjust images in Aperture but have just begun to use the Raw converter within CS3 for a few files. I can export master files onto my desktop and dbl click to open the NEF file, however, this seems very clumsy. I know you can access the RAW images via Bridge CS3 but when I try to access all I get is the aperture library white icon (looks like a fridge?!) but when I ask to display contents it seems to be locked - my aperture library is situated in Pictures - but this still does not allow access - anyone know - thanks to anyone who does !

thank you - yes, I agree I would prefer to not bother with Bridge, but when I "Open With" which I had defaulted to PSCS3, this opens fine, but the master file opens in tif or psd depending on what I need, and then of course the ACR dosn't open- I think I may be thrown a bit here by your comment on "referenced" master files - but however, at least I do follow you clearly on the tif/jpeg import concerning reflection of changes - really appreciate your time!

How do I access my picture files via Finder after I upgraded to Yosemite?

I upgraded to Yosemite and now I have lost the ability to directly access my picture files via the Finder. There is now no longer a Picture icon in the Finder. Help, huge problem for me as I do a lot of picture editing via Photoshop Elements. I know the pics are still there as the Canon photo viewer shows them.

Pictures are normally in the top level directory under your username. If you want that directory to be in the Finder sidebar, you can open Finder, then click Preferences on the menu named Finder and then click Sidebar in the Preferences window and put a checkmark in front of Pictures in the list of Favorites.

Working with version management and promotion management best practices BO 4.1

Hi Experts
I wondered if anybody knows if there is a document or something about best practices to work with the version management and promotion management in BO 4.1?
Our Environment includes two servers. The first one is our development and test server. The second server is our prod system.
Now on the dev server we have basically two folders called dev and test. We control access to them with a right system based on the folder structure.
My question now is how you would work in this scenario (third server is not an option). Main target is to have as few reports as possible. Therefore we try to work with the version management system and only have one version of each report in the dev folder of the cms. But this is where problems start. Sometimes the newest version is not the version we want to publish to the test folder or even prod server.
How would you publish the report to the other folder? Make a copy of the concerned report (transport to the same system via promotion management is not possible). Also how would you use the version management in regards to the folder structure? Only use version management in dev folder and export reports to test folder (out of vms control) or also use vms in test folder and how would that work?
Further more I’d be interested in learning best practices with promotion management. I found out that the promotion of a report that doesn’t exist in prod doesn’t make any problems. But as soon as an older version already exists there is only partial success and the prod folder gets renamed to “test”.
Any suggestions on how to handle these problems?
Thank you and regards
Lars

Thank you for your answer.
So you are basically proposing to work with the vms in the dev folder and publish the desired version to the test folder. And the test folder is out of version control in this scenario if I understood you correctly (like simple data storage)?
And how would you suggest promoting reports to the prod system? Simply by promoting the
desired version from dev folder directly to prod? This would probably lead to inconsistence because we would need to promote from dev system to test and dev to prod instead of promoting a straight line from dev over test to prod. Furthermore it would not solve the problem of the promoting result itself (A new folder called dev will be generated in prod but the report gets promoted to the prod folder if there was no report before).
Thank you for the link. I came across this page just a few days ago and found also lots
of other tutorials and papers describing the basic promoting process. The promoting process in general is clear to me but I wondered if it is possible to change some parameters to prevent folder renaming for example.
Regards
Lars

Best practice to work with Sybase 12.5.3 database version

Hi all,
Is there any document or information about best practices to access a Sybase 12.3 version from universe on BOXIR2?
Thanks.

Hi Marlon,
Have a look to Product Guide of BOXIR2 for [Data access|http://help.sap.com/businessobject/product_guides/boexir2/en/xir2_data_access_guide_en.pdf] see if it helps.:
Regards,
Shweta

Best Practices For Portal Content Objects Transport System

Hi All,
I am going to make some documentation on Transport Sytem for Portal content objects in Best Practices.
Please help in out and send me some documents related to SAP Best Practices for transport for Portal Content Objects.
Thanks,
Iqbal Ahmad
Edited by: Iqbal Ahmad on Sep 15, 2008 6:31 PM

Hi Iqbal,
Hope you are doing good
Well, have a look at these links.
http://help.sap.com/saphelp_nw04/helpdata/en/91/4931eca9ef05449bfe272289d20b37/frameset.htm
This document, gives a detailed description.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f570c7ee-0901-0010-269b-f743aefad0db
Hope this helps.
Cheers,
Sandeep Tudumu

Web Intelligence Security Best Practices

Hi All,
We are in the process of starting to use web intelligence. I am puttng together a security model for it and I have some questions around best practices. We have a fairly simple two tier security model so far, end users and creators. Creators will be able to create reports in certain folders and everyone else will be able to run and refresh those reports they can see.
I was going to create a group for all the creators and assign them to a custom access level in the web intelligence application. Then they would also need to be in another creator group for the particular folder. So they would be able to the create reports in that folder and execute reports in another.
For all the end users, they need to be able to view and refresh reports, drilling, data tracking, etc. if they have access to them. Is the best practice then to just assign the Everyone group the out of the box view on demand access level?
I have been digging around looking for resources and welcome anyone's input or ideas on the subject.
Thanks in advance for any assistance provided.

Thank you for your prompt reply.
But that means that the same security groups will need to be creaed on both palces, web intelligence application and at the folder level?
I was thinking if I create a developer group for the web intelligence application level, all developers would go into there. Then at the folder level I could create another folder level security group for developers to access the folder.
Would that not simplify the maintenance at the application level? Or would that not work?

Setting up a new SCOM Enviroment best practice pointers

Hello
I currently have SCOM 2007 R2 and am looking to implement SCOM 2012 R2. We have decided to start a fresh and start with a new Management Group (rather than upgrade the existing SCOM 2007 R2 environment, as there is a lot of bed practice, lessons learnt we
do not want to bring over to the new environment).
I am looking for some practical advise please on how to avoid pitfalls down the line.
For example, in the past as was recommend when installing a new MP, I would create a new unsealed MP to store any overrides for the newly imported sealed MP. So lets say I imported a MP called "System XZY" I would then create an unsealed MP called
"Override SYSTEM XYZ" now on the surface that looks fine, but when you sort in the Console they do not end up next to each other due to the console sorting alphabetically on the first letter.
Therefore I should have called the MP "System XYZ Override" and the same for the others too, they way they would of all sorted next to one another sealed and its equivalent unsealed MP.
The above is a very simply example of where doing some thing one way although looks OK at the start would have been much better to do another way.
Also when it comes to Groups in used to create a group in an unsealed MP (e.g. the override MP) relevant to the rule/monitor application in question. The issue is as you know with unsealed MP you cannot reference the Group from another MP. Therefore
if I needed to reference the same group of computers again for another reason MP I could not without creating another Group and thereby duplication and more work for the RMS to do populating/maintaining these groups.
However I have also read that creating and MP for Groups then sealing and unsealing to add more groups etc. can be an issue on its own, not sure they this sealing/unsealing of a MP dedicated to Groups would be an issue, perhaps someone has experience of
this and can explain?
I would be very grateful for any advise (URL to document etc.) which best practice tips, to help avoid things such as the above down the line.
Thanks all in advance
AAnotherUser

The following articles are helpful for you to implement SCOM 2012 R2
System Center Operations Manager 2012: Expand Monitoring with Ease
http://technet.microsoft.com/en-us/magazine/hh825624.aspx
Operations Manager 2012 Sizing Helper Tool
http://blogs.technet.com/b/momteam/archive/2012/04/02/operations-manager-2012-sizing-helper-tool.aspx
Best practices to use when you configure overrides in System Center Operations Manager
http://support.microsoft.com/kb/943239/en-us
Best Practices When Creating Dashboards In OM12
http://thoughtsonopsmgr.blogspot.hk/2012/09/best-practices-when-creating-dashboards.html
Roger

Direct access to document image via webservice - best practice?

Similar Messages

Maybe you are looking for