Disable security rule and remove assignment in GL

Hi
Need to know urgently as user is stuck in Journal entry
There is an issue of overlapping two restrictions while entering department in accounting flexfield and the security rules needs to be disabled.
Rule 1 Name : Department Security
Message : Department Security: Department is restricted to 110 thru 130
Include is 000 to zzz
Exclude is 000 to 109
Exculde is 131 to zzz
Rule 2 Name : Single Department
Single Department: Department is restricted to ONLY department 110
Include is 000 to zzz
Exclude is 000 to 109
Exculde is 111 to zzz
Need help to disable the rules and allow all departments now for user entry
Thanks
Shanks
Edited by: user8364817 on Dec 3, 2008 10:10 PM

Hi
Thank you for your reply.
I also tried replacing all by "include" and it worked !!!
Hope this will not have any issues further.
The user is able to make entries using all departments now
Thanks
Shanks

Similar Messages

Disable security rules in discoverer report

I have a discoverer report on GL with security rules applied, it displays data based on the responsibility thro which we have logged in. Users dont want this functionality, they want all the data to be displayed in a single reponsibility, which implies that the security rule be disabled for this report. The report doesnt have any custom folders and also I couldnt find anywhere the GL_SECURITY_PKG being called to implement security rules. Can anyone help me in disabling the security rules.

Hi,
Where did you look for the security rule? in the underlying objects or in the discoverer?
First thing you should do to see whether this rule is applied is from within the discoverer take the SQL (from the view-> sql inspector) and start analyzing the views in the from clause, i am sure that you'll find one of them that holds this rule.
If you are using oracle BA then for sure you'll find it in the "Journal Lines" folder (based on view : GLFG_JOURNAL_LINES)
Your request is not that simple as "Disable the security rule".
If you are using Oracle views then you cannot disable it without changing those views and you will have to verify you are not changing any of the views that the application uses.
If you will create a new responsibility for "Cross Set Of Books" then you can exclude it from the rule by changing the security rule from :
Gl_Security_Pkg.Validate_Access(Journal_Line.Set_Of_Books_Id,Journal_Line.Code_Combination_Id) = 'TRUE'
To something like:
decode(fnd_global.RESP_ID,<your new resp_id>,'TRUE',Gl_Security_Pkg.Validate_Access(Journal_Line.Set_Of_Books_Id,Journal_Line.Code_Combination_Id)) = 'TRUE'
If it is a specific request they have then you can create a new view and use the GL tables to avoid the usage of the GL security rule.
Tamir

Need help with a script for moving bulk users to another OU and removing/assigning groups

I've never used PowerShell before and have been asked to track down a script that can move bulk users from one OU to another, and remove and assign new group membership. I've been googling it for about 30 minutes and haven't really gotten anywhere. If
somebody can point me in the right direction or give some tips I'd greatly appreciate it. I'm sure this kind of task has been done by several people in similar environments I just haven't been able to find those people/examples.

Here's what I've got so far...
Moving to new OU
CSV constructed like below...
DN
TargetOU
“CN=John R, OU=BB,OU=ES,OU=Students,OU=OSD,DC=usd233,=DC=local”
"OU=PRT,OU=MS,OU=Students,OU=OSD,DC=usd233,DC=local"
Import-Module activedirectory
$UserList = Import-Csv "c:\yourCSVhere.csv"
foreach ($User in $UserList) {
$User.DN
$User.TargetOU
Move-ADObject -Identity $User.DN -TargetPath $User.TargetOU
Would this work? I also need to remove the user from two groups and add them to two different groups as well. Would I need to use the addUsertoGroups and removeUserfromGroups commands?

Link between Rules and Organisation assigned in Rule Modeler

Hi,
Go to Transaction CRMC_BSP_ANALYZE,
Give Application Name: CRMM_ERM_RULES
It will go to Rule Modeler:
In this just click GO button. You will get the Policies. Click on the Policy you will get different rules.
When We drill down the rules and select a rule you can view ACTIONS tab.
In ACTIONS tab you can see Organisation Object and Outgoing E-Mail Address assigned to a selected Rule.
Can you please let me know what is table names and link to get the Organisation Object and Outgoing E-Mail Address.
Thanks a lot in advance.
Best Regards,
Azaz Ali.

Hi Azaz
To find the Organizational Object go to Transaction PPOMA_CRM the details you need are under field "ID"
The Outgoing Email address can be found under transaction CRMC_IC_FROMGRP.
Hope this helps
Regards
Arden

PS script to disable users / Audit and remove Groups / Hide from GAL have bits but need to put it together

Hi All
I am trying to get a script together to run against a specific OU (our disabled Users OU) to make the process of leavers more automated.
I am trying to achieve the 4 main outcomes below
1. Disable User account
2. Hide from GAL
3. Export users group membership to a file based on SamAccountName
4. Remove users from all groups except domain users
I have some parts of this working from other peoples scripts i have found on the web but need to tie it all together which is proving to be beyond my basic scripting ability
Below is what i have so far, this does disable users / hide from GAL and remove groups however as stated i would really like it to export the group membership to a file before removing them so i have a record should a mistake be made.
$users= get-aduser -Filter {(Enabled -eq "True")} -SearchBase "ou=Disabled Accounts,dc=test2k8,dc=local"
Function RemoveMemberships
param([string]$SAMAccountName)
$user = Get-ADUser $SAMAccountName -properties memberof
$userGroups = $user.memberof
$userGroups | %{get-adgroup $_ | Remove-ADGroupMember -confirm:$false -member $SAMAccountName}
$userGroups = $null
$users | %{RemoveMemberships $_.SAMAccountName}
ForEach ($user in $users)
set-aduser -identity $user.sAMAccountName -Enabled $false -replace @{msExchHideFromAddressLists=$true}
exit
If there is anyone here that can help i would be very grateful
Many Thanks
Nick

Try this:
$Users = get-aduser -Filter {(Enabled -eq "True")} -SearchBase "ou=DisabledAccounts,dc=test2k8,dc=local"
Function Remove-GroupMembership
[CmdletBinding()]
param
[parameter(ValueFromPipeline=$true)]
$Identity
process
if ($Identity -is [string] -or !$Identity.memberof)
$Identity = Get-ADUser $Identity -properties memberof
Write-Verbose -message $Identity.samAccountname
foreach ($Group in $Identity.memberof)
Write-Verbose $Group
Remove-ADGroupMember $Group -confirm:$false -member $Identity
$Users | Remove-GroupMembership -verbose 4> c:\users\mmcnabb\desktop\groups.txt
forEach ($User in $Users)
set-aduser -identity $user.sAMAccountName -Enabled $false -replace @{msExchHideFromAddressLists=$true}
It uses the verbose stream to redirect the groups out to a text file of your choice. Please note this is untested so please use with caution.

HT201081 how to disable family sharing and remove credit card

I updated all of out Apple mobile devices and set up Family Sharing. I thought this would be a great idea. Quickly I was proven wrong. I liked the idea of linking my wife's account and mine, and the ability to add my kid as a child under my account (with his own itunes account). The ability for each account to be linked was convenient, but my problem, and many others I have seen posting online, is it being necessary to leave the credit card on file. Second is the premissions setting. This again is a good theory, but with children and their always wanting new games and other apps, it quickly became inconvenient to have to give permission to download even a FREE app. So here is what I would like. The option to add the ability to download free apps, and request permission for purchasing apps. If this in not possible, than the ability to completely disable family sharing, thus allowing me to remove my credit card info from the iTunes system and prevent unwanted purchases.
If anyone has any suggestions on disabling the family sharing I would greatly appreciate it.

Direct from the iPhone User Guide.
“Leave Family Sharing. Go to Settings > iCloud > Family, then tap Leave Family Sharing. If you are the organizer, go to Settings > iCloud > Family, tap your name, then tap Stop Family Sharing. For more information, see support.apple.com/kb/HT201081.”
Excerpt From: Apple Inc. “iPad User Guide For iOS 8.1.” Apple Inc., 2014. iBooks.
This material may be protected by copyright.
Check out this book on the iBooks Store: https://itun.es/us/5A6R2.l
Edit. Here's the link for more information.
Leave Family Sharing - Apple Support

Disable 'Start Screen' and Remove Arrow from Apps Screen that links to it

I am trying to configure Windows 8 for our company and I want the remove the arrow at the bottom of the Apps Screen that links this screen with the Start Screen. We do not want users to have access to the Start Screen...

Hi,
Do you mean disable Windows 8 Start Screen completely and just using Desktop Screen? If so, there is no way to achive your goal.
Roger Lu
TechNet Community Support

Security rules in apps EUL

Hi,
It is possible to implement in apps EUL security rules set for Key Flexfield? If yes, how do that?
rgds,
Krystian

Hi Krystian,
What you want to do is possible and can be achieved by using the GL_SECURITY_PKG in the chosen view. The view will need to include the following condition: gl_security_pkg.validate_access(sob_id, ccid) = 'TRUE'’
Once your view is setup and ready, you’ll need to create your Key-Flexfield security rules and assign them to a Responsibility. Users will need to run the report under that responsibility for it to work.
Some links for handy reading regarding using the GL_SECURITY_PKG:
Re: Speeding up or Caching the gl_security_pkg.validate_access(sob_id, ccid)
Re: Free Discoverer views for Financials, or BIS?
Hope this helps ;-)
Lance

Accounting FlexField Security rules

Hi,
I want to know is it possible that i create one Accounting FlexField Security Rules and assign to specific user / Responsibility ?
If is it possible plz let me know how is it possible?
Regards,
Yasir

when i recompile the flexfield there is complete with error in log file
Oracle error 905: ORA-00905: missing keyword
ORA-06512: at "SYSTEM.AD_DDL", line 165
ORA-06512: at line 1 has been detected in afuddl() [3_xdd].
do_ddl(APPLSYS, SQLGL, 2, $statement$, AASML VIEW): private_do_ddl(APPS, APPLSYS, GL, 2, $statement$, AASML VIEW): do_cd_view(0, APPS, 2, AASML VIEW, $statement$): : do_apps_ddl(APPS, $statement$): : substr($statement$,1,255)='CREATE OR REPLACE VIEW AASML VIEW
(ROW_ID, CODE_COMBINATION_ID, COMPANY, OPERATING_UNIT, DEPARTMENT, GL_ACCOUNT, PRODUCT, PROJECT, INTERCOMPANY, FUTURE_USE, GL_ACCOUNT_TYPE, GL_CONTROL_ACCOUNT, RECONCILIATION_FLAG, DETAIL_BUDGETING_ALLOWED, DETAIL_POSTI'
CREATE OR REPLACE VIEW AASML VIEW
AS SELECT 'View generation has failed. Check log file for error messages' VIEW_HAS_FAILED_CHECK_LOG_FILE
FROM SYS.DUAL

Set up rule and lost mail!

I thought I was doing a 'good' thing when I set up a rule in Mail that said if the email address does not contain my exact email address, please move it to the junk folder. I set it up for both my cable company's email address and for my Mac address. Went back into Mail- all messages gone from both accounts!! Wiped out. So I went back into Rules and removed both rules. The Mac mail reappeared but my cable company emails did NOT reappear. Now I can probably recover them cuz I back up every morning but since the backup this morning, of course I have gotten some emails which did not get backed up. What happened?! Where did they go? Can I get them back? Ugh! Judy

I tried rebuilding the mailbox and that didn't help. Judy

Shared Services 11.1.2 Unable to remove assigned user from a security group

In Shared Services 11.1.2 - trying to remove a user from the assigned users list of a security group. Initially, I am able to remove the user and the assigned users total decreases by one - but when I relaunch the group properties - this user is still in there? The change does not hold. Any suggestions would be appreciated - thanks,
Paul

Hello Paul,
Not sure if this is related to yours, but it might be worth having a look at the following articles on Oracle support --
External users in EPM Shared Services (e.g. MSAD users) cannot be removed from Native groups if they have multiple IDs in the external user directory. [ID 1526569.1]
Users from External User Directories Cannot be Removed from Native Groups [ID 1272309.1]
Thanks,
hyperionEPM
Please mark answers as correct or helpful for others to find them easily.

My iPad is disabled and won't connect to iTunes on any computer; I went to my iCloud and removed the iPad so it will erase all data when the iPad is connected to the internet (the original problem was a restrictions passcode we forgot)

Here is the order of what I did to my iPad:
1. A restrictions passcode was put on and we couldn't remember it. Despite numerous attempts at righting this, I couldn't. The iPad would not sync with any iTunes on any computer, Mac or PC.
2. I put a, 'use passcode after one minute' passcode on it and deliberately put in 10 wrong passcodes so it would disable the iPad. Now it still will not connect to any iTunes.
3. I connected to my iCloud account and removed the iPad from the cloud; it says it will erase all iPad data when it connects to the internet. I am fine with that, I need to know what to do now, though. iPad says, 'Connect to iTunes,' but it won't. Please help this amateur of all amateurs!!

See iPhone DFU mode explained, and how to enter DFU mode.

HT1414 My wife gave me her older ipad. I have reset and removed all data. My Apple ID (Ipod touch) is not an email adress, but when I try to stu up the ipad it asks for my Apple ID, then tells me that for security reasons the Apple ID must be in email for

My wife gave me her older ipad. I have reset and removed all data. My Apple ID (Ipod touch) is not an email adress, but when I try to stu up the ipad it asks for my Apple ID, then tells me that for security reasons the Apple ID must be in email format?

Change it to an email address.
-> https://appleid.apple.com/

TS1424 My Apple ID has been disabled, it won't let me updated my previous purchases. No reason for why it has been disabled or how to enable it again. I reset my password, security questions and billing info. Nothing- Anybody has seen this before?...

My Apple ID has been disabled, it won't let me updated my previous purchases. No reason for why it has been disabled or how to enable it again. I reset my password, security questions and billing info. Nothing… I even called Apple SUpport 1-800 # and they said they can't help me...Anybody has seen this before?...

You need to contact itunes support.
http://www.apple.com/support/contact/
There is NO telephone support for itunes. Use the link above.

I added a persona, I've disabled and removed that persona, it keeps coming back. Going into tools does not help, adding a new persona does not help. I'm ready to give up on firefox!

I added a persona, wanted a new one so disabled and removed the old one. I added a new persona, but the old one keeps coming back. Going into tools/add ons does no good because it is not even listed anymore but keeps coming back. I've shut down/restarted, I've searched for answers to this problem.

The data that specifies which persona to display is stored as a pref in the prefs.js file in the Firefox Profile Folder.
Did you try to rename or move the prefs.js file and a possible user.js file to see if that helps?
Are you using the Personas Plus extension, because in that case you need to check the settings in that extension.
You can use this button to go to the Firefox profile folder:
*Help > Troubleshooting Information > Profile Directory: Open Containing Folder

Disable security rule and remove assignment in GL

Similar Messages

Maybe you are looking for