Disable upload for specific users only

Hi,
I'm wondering if anyone else has found a need or solution to my problem.
I have a lot of users connecting to a FCS instance, many who should not be able to upload any content, just manipulate or otherwise interact with existing content. I've found that I can simply forbid access to all devices for a particular permission set, but that still allows users to "try" to upload, and is confusing. Further, it seems to hinder the duplicate functionality, which is desired in this use case.
Any thoughts? I'm running clean out of ideas here!
Thanks,
- James Heliker
[email protected]

John explained through an email to use the "browser" group - which essentially sets a trait permission (upload = forbid) for a specific user/set of users. However, this does not seem to change anything, as far as being able to upload a file.
I can't use the actual browser group as I have many other requirements also, but setting this trait permission on my existing groups does absolutely nothing as far as I can tell. Has anyone else dealt with this issue directly?
Thanks!
- James Heliker
[email protected]

Similar Messages

Disable sound for specific users

How do I disable sound for specific users?

Theoretically if the user's not in the audio group, he shouldn't have access to sound devices.
$ ll /dev/snd/
total 0
drwxr-xr-x 2 root root 80 Oct 2 19:30 by-path
crw-rw----+ 1 root audio 116, 2 Oct 2 19:30 controlC0
crw-rw----+ 1 root audio 116, 8 Oct 2 19:30 controlC1
crw-rw----+ 1 root audio 116, 7 Oct 2 19:30 hwC0D0
crw-rw----+ 1 root audio 116, 13 Oct 2 19:30 hwC1D0
crw-rw----+ 1 root audio 116, 14 Oct 2 19:30 hwC1D1
crw-rw----+ 1 root audio 116, 15 Oct 2 19:30 hwC1D2
crw-rw----+ 1 root audio 116, 16 Oct 2 19:30 hwC1D3
crw-rw----+ 1 root audio 116, 4 Oct 4 09:12 pcmC0D0c
crw-rw----+ 1 root audio 116, 3 Oct 4 10:13 pcmC0D0p
crw-rw----+ 1 root audio 116, 5 Oct 2 19:30 pcmC0D1p
crw-rw----+ 1 root audio 116, 6 Oct 2 19:30 pcmC0D2c
crw-rw----+ 1 root audio 116, 9 Oct 2 19:30 pcmC1D3p
crw-rw----+ 1 root audio 116, 10 Oct 2 19:30 pcmC1D7p
crw-rw----+ 1 root audio 116, 11 Oct 2 19:30 pcmC1D8p
crw-rw----+ 1 root audio 116, 12 Oct 2 19:30 pcmC1D9p
crw-rw----+ 1 root audio 116, 1 Oct 2 19:30 seq
crw-rw----+ 1 root audio 116, 33 Oct 2 19:30 timer

IN OBIEE, how to disable drilldown for specific users

How to disable drilldown action in a hierarchy as manager,lead,reporter.
in this scenario i need to disable hierarchy for the specified reporter and the upper two peoples will have that functionality
Awaiting ur reply
Bala

The RPD hierarchies themselves have no security attributes on them. So your left with a workaround or two. First one that springs to mind :
Create the report in question save this as 'Manager' report.
Create the report in question, disable drilling on the column in question, save this as 'Reporter' report.
Deploy both reports to the dashboard in seperate sections and use the section permissions (against the Webgroups those users exist in) to determine which section is displayed to which user.
Maybe more options will come up from other users, but this one is a start.
Hope this helps,
Alastair

We need to restict doc.type sa for specific users only

Hi,
we need to Restrict document type SA for Particular users i.e
1. they Should not allow to post SA document types .
2. But they allow to view the documents(SA types only)
Regards
Ganesh

Dear Tarimela,
1. In transaction OBA7, you should fill up the field for all the
   document types which you want to control. If it is left blank, then
   all the users will be able to post document with that document type.
   Hence, if user A is authorised to post to document type X and in
   the configuration of document type Y field authorisation group is
   left blank, then user A will be able to post document with document
   type Y.
2. Also you need to enable authorisation check in transaction PFCG and
need to assign the authorisation group in the profile.
3. I would recommend you to go through SAP notes 198238 and 150496 for the
   purpose of your information.
I hope this can help.
Mauri

Customizing "Disabled" color for specific components only

Hello,
when uncommenting the "UIManager.put(...)" line in the following code all combos display their text ungreyed when disabled. But how to proceed, if you want to give this feature only to specific combos? Setting the foreground colour, even when done in an own renderer, doesn't work.
There has been a discussion of the same problem in
http://forum.java.sun.com/thread.jspa?forumID=57&threadID=276411
but it always comes back to the overall solution with the UIManager.
If the solution should be to write an own ComboUI, does anybody have an example, for my own attempt badly failed.
import java.awt.*;
import javax.swing.*;
import javax.swing.plaf.*;
public class TextColor extends javax.swing.JFrame {
public TextColor() {
    setSize(350,300);
    setDefaultCloseOperation(WindowConstants.EXIT_ON_CLOSE);
    Container cp= getContentPane();
    cp.setLayout(null);
    JComboBox cmb1 = new JComboBox();
    cmb1.addItem("Normal");
    cmb1.setBounds(100,50,100,20);
    JComboBox cmb2 = new JComboBox();
    cmb2.addItem("Disabled");
    cmb2.setBounds(100,100,100,20);
    cmb2.setEnabled(false);
    cmb2.setForeground(Color.BLACK);
    JTextField tf = (JTextField)cmb2.getEditor().getEditorComponent();
    tf.setForeground(Color.BLACK);
    cp.add(cmb1);
    cp.add(cmb2);
    setVisible(true);
    cp.requestFocusInWindow();
public static void main(String arg[]) {
    java.awt.EventQueue.invokeLater(new Runnable() {
      public void run() {
//     UIManager.put("ComboBox.disabledForeground", new ColorUIResource(0,0,0));
     new TextColor();
}

Thanks from me too, camickr, it's always a good feeling to learn and understand something new.
When I extended MetalComboBoxUI, the borders and the button were back to normal, but the JComboBox background remained dark. After some trial and error, this is the solution I've come up with:
MyComboBoxUI.javapackage joerg22;
import java.awt.Color;
import java.awt.Component;
import java.awt.Graphics;
import java.awt.Rectangle;
import javax.swing.JComboBox;
import javax.swing.ListCellRenderer;
import javax.swing.plaf.metal.MetalComboBoxUI;
public class MyComboBoxUI extends MetalComboBoxUI {
    public void paintCurrentValue (Graphics g,
            Rectangle bounds,boolean hasFocus) {
        super.paintCurrentValue (g, bounds, hasFocus);
        ListCellRenderer renderer = comboBox.getRenderer ();
        Component c;
        c = renderer.getListCellRendererComponent ( listBox,
                comboBox.getSelectedItem (),
                -1,
                true,
                false );
        c.setForeground (Color.BLACK);
        // Uncomment the next line for dark b/g when disabled
        //if (comboBox.isEnabled ())
            c.setBackground (comboBox.getBackground ());
        currentValuePane.paintComponent (g, c,
                comboBox, bounds.x, bounds.y,
                bounds.width, bounds.height); //, shouldValidate);
    public void paintCurrentValueBackground (Graphics g,
            Rectangle bounds,boolean hasFocus) {
        super.paintCurrentValueBackground (g, bounds, hasFocus);
        Color t = g.getColor ();
        // Uncomment the next line for dark b/g when disabled
        //if ( comboBox.isEnabled () )
            g.setColor (comboBox.getBackground ());
            g.fillRect (bounds.x + 1, bounds.y + 1,
                    bounds.width - 2, bounds.height - 2);
        g.setColor (t);
}TestUI.javapackage joerg22;
import java.awt.Container;
import java.awt.event.ActionEvent;
import java.awt.event.ActionListener;
import javax.swing.JButton;
import javax.swing.JComboBox;
import javax.swing.WindowConstants;
public class TestUI extends javax.swing.JFrame {
    public TestUI () {
        setSize (200,150);
        setDefaultCloseOperation (WindowConstants.EXIT_ON_CLOSE);
        Container cp= getContentPane ();
        cp.setLayout (null);
        final JComboBox cmb1 = new JComboBox ();
        cmb1.addItem ("Normal");
        cmb1.setBounds (50,25,100,20);
        final JComboBox cmb2 = new JComboBox ();
        cmb2.addItem ("Custom");
        cmb2.setBounds (50,50,100,20);
        cmb2.setEnabled (false);
        cmb2.setUI (new MyComboBoxUI ());
        final JButton btn1 = new JButton ("Toggle");
        btn1.addActionListener (new ActionListener () {
            public void actionPerformed (ActionEvent e) {
                cmb1.setEnabled (!cmb1.isEnabled ());
                cmb2.setEnabled (!cmb1.isEnabled ());
        btn1.setBounds (50, 75, 100, 20);
        cp.add (cmb1);
        cp.add (cmb2);
        cp.add (btn1);
        setVisible (true);
        cp.requestFocusInWindow ();
    public static void main (String arg[]) {
        java.awt.EventQueue.invokeLater (new Runnable () {
            public void run () {
                new TestUI ();
}This can probably be improved further, but I'm outta here... shall check back later.
Darryl
Edited by: Darryl.Burke -- to remove some really stupid redundancies in the code I'd just posted.

Disable automapping for specific users

Hello All,
I have a DL which contains the users list and i have to remove automapping feature for them.
we have more than 3 sharedmailbox and 50+ users per sharedmailbox to disable this feature so i can't do it manually.
Can someone please help me with the powershell script which gets input from text file which contains username? Thanks in Advance
Regards,
Mac

Thanks Amit. Now i ran the whole script and getting the same error.
User or group "Userlogonname
" wasn't found. Please make sure you've typed it
correctly.
+ CategoryInfo : InvalidData: (:) [Add-MailboxPermission],
ManagementObjectNotFoundException
+ FullyQualifiedErrorId : FAC24C45,Microsoft.Exchange.Management.RecipientTasks.AddMailboxPermission
I'm very sure my sharedmailbox name is correct and as well the logon name in text file because when i ran the below script manually it get successful.
Add-MailboxPermission "India Mail" -User macman -AccessRights:FullAccess -AutoMapping $false

Disable release flag in service entry sheet for specific users

How can we disable the release flag for specific user/s in Service Entry Sheet(ML81N)?
Can any one suggest?
arjman

Hi dear,
In the ML81N T code, there is an object M_EINK_FRG Release code and code grp.
leave it empty. and assign the Role to the user with whoom you dont want to release the SES.
In this process the system will show you the green flag and also allow you to release the SES but when you will save it the system will give an Error Message about the Authorization.
this will not allow the user to release the SES.
Hope it Helps,
Regards,
Yawar Khan
Edited by: 1234_abcd on Jan 21, 2011 12:40 PM

Disable Print for specific situations

I Use Adobe Pro X.
Is there a way to make a form not print if certain information is entered? For instance, some forms in our list are for specific clients only. If a user pulls up a form with the incorrect client, I want to add a script that disables the form from being printed or faxed. I already added script to display a warning message, but that won't prevent anyone from printing it - and then the recipient will receive the letter with the warning message - which is potentially worse than just receiving the wrong letter.
Any assistance is greatly appreciated.
Thanks!

Tto detect a specific client, each system the client has would need a spacial file installed on it and the Organization filled in for the Identity object. This will be a real challenge.
Then once the print process is started there is no way to cancel it. You could unhide a hidden form filed and cover the content of the PDF. But then this could easily be defeated.
So in the end, it could be done, but you most likely will not be able to implement it outside of a given organization.

Disable DSN for specific messages

Hi,
i have a problem, where i wish to disable DSN for specific internal users.
Scenario :
Interal User a sends a mail to special address c,
if mail host of special address c is not available or anything else i wish that internal user a is never informed that c didnt recieve his mail.
Can this be done ?
i thought about doing this with sieve.. but i dont know if DSNs generated by the IMS Master itself are also checked by sieve mechanism....

Please do notice that your bits do not support many of the features you want. And that later bits do. If you offer that to your company, perhaps you could update more often, or at least this time. We're not talking about a new package, here, but just an update to the one you have, that's not doing the job properly.
Also, if you had asked for what you needed at the beginning, I could have helped you better.
What you want is the sieve command, save-copy, or, perhaps monitor. Please see whitepaper, quoted below:
Saving Messages for Document Retention
If the reason you want to capture a copy of the message is for document retention, then you will want to take advantage of the new "capture" sieve action. You have to have iMS v5.2 or better to use this facility. The capture action can only be specified in a system or channel sieve; it is not available in user sieves. The general syntax is
capture "monitoraddress"
The monitor action is the same as the capture action. Users are encouraged to use the 'capture' instead of monitor as it best reflects the function being performed.
This action sends a DSN containing the original message in its entirety to the specified capture address. Since this is a DSN it is effectively a completely separate message so there's little chance of it causing side effects that will alert anyone to the monitoring. In particular, no addresses from the original message appear in the DSN header so there's very little chance of the capture copy getting forwarded to the wrong person by mistake. And even though the original message is encapsulated, it is a MIME encapsulation which means the content is easily accessible in any MIME-compliant user agent.
The capture action is nonstandard and undocumented. It was originally intended to be part of the habanero release, but the backporting of direct LDAP support to 5.2 means it is available in 5.2 as well. We certainly intend to support it in the future.
Saving Messages for Replay
There is an undocumented functionality in iMS for making a copy of messages for archival purposes. It's intended for saving sent messages in the event that they need to be replayed. We did this for folks who send mail via bad links to places where the mail may be received OK by an intermediate host but then subsequently lost on its way to the final destination.
This is done with the MESSAGE-SAVE-COPY mapping table. Entries in that table have the form
MESSAGE-SAVE-COPY
out-channel|from-address|D|msg-filename result
where
out-channel -- name of the channel the message is flowing out
from-address -- originator's address (envelope From: address)
D -- the letter "D" (stands for "dequeue" )
msg-filename -- name of the message file being dequeued.
result -- where to rename the file
Outbound Traffic
To save only messages out to the Internet, do
MESSAGE-SAVE-COPY
tcp_local|*|D|/instance-root/queue/tcp_local/*/* (tab-or-space)$Y/msg_save/$1/$2
Be aware that the archive isn't made until the message is actually dequeued from iMS (i.e., sent successfully or bounced). A rename operation is done (as opposed to a copy operation). As such, the message file has to remain on the same disk that the IMTA_QUEUE lives on.
Inbound Traffic
To capture inbound mail will want to have good control of what machines/pathways a message will take on its way into your systems. If your setup is such that mail always enters the site via an INBOUND relay and leaves the site via know outbound gateways, then inbound message flow is from INBOUND-MTA --> MsgStore machine.
Since you can have multiple MsgStore machines behind any one INBOUND-MTA, you will want to make configuration on the INBOUND-MTA machine such that it will use a dedicated queue to talk to the MsgStore machines. For instance, on the INBOUND-MTA machine, you could setup a rewrite rule in your imta.cnf file for MsgStore-A, MsgStore-B, ... MsgStore-Z like:
Node-A.store.domain.com.au $U%$D@tcp_to_store-daemon
Node-Z.store.domain.com.au $U%$D@tcp_to_store-daemon
and a corresponding 'tcp_to_store' channel which looks like:
! tcp_to_store
tcp_to_store smtp mx single_sys subdirs 20 noreverse maxjobs 7 \
pool SMTP_POOL maytlsserver allowswitchchannel \
saslswitchchannel tcp_auth
tcp_to_store-daemon
This has the effect of routing all mail to any of your MsgStore machines through tcp_to_store channel. Transactions to other machines in your setup will take the tcp_intranet channel.
With this in place you can then throw in a MSG-SAVE-COPY mapping table which reads:
MESSAGE-SAVE-COPY
*|*|D|/instance-root/imta/queue/tcp_to_store/*/* $Y/msg_save/tcp_to_store/$2/$3
the net effect will be a number of queue files in the /msg_save/tcp_to_store directory which are ready for replay. Note the $2 in the sample represents the subdir that the message was already in. As such if you have 'subdirs 20' on your tcp_to_store channel, you will want to precreate the /msg_save/tcp_to_save/000 thru 019 subdirectories with the appropriate ownership and permissions.
To initiate the replay, you want to simply move the /msg_save/tcp_to_store/### directories to the /instance-root/imta/queue/reprocess and issue the command 'imsimta cache -synch'. The MTA will start pushing out those messages to the store(s).
If you want to have multiple replays happening you can kick off parallel runs of the reprocess channel by doing 'imsimta run reprocess &' a number of times.
And, If you want to segregate the storage for each MsgStore machine, you can make new channel in addition to the one suggested 'tcp_to_store' channel. You would then have groups of rewrite rules directing traffic over those channels or you could have one rewrite rule per channel block that you setup. That way you can have distinct entries in your MSG-SAVE-COPY mapping table.
Finally, since there is a rename operation taking place when you use the MSG-SAVE-COPY mapping table, you will want to make sure that at the first pass that /msg_save is on the same device that your queues live on.
Short Term Arvchival
You could setup a process in cron to move those files to a new device on a periodic basis. Better yet, schedule this via the job_controller. For instance, these lines at the top of your job_controller.cnf file:
[PERIODIC_JOB=archive_mover]
command=/usr/iplanet/sitescripts/arc_mover.sh
time=/00:10
will run the arc_mover.sh script for you every 10 minutes. Your arc_mover.sh could look something like:
#!/bin/ksh
# ***Script is untested - should generate some ideas though****
DUMMY=`test -d /var/tmp/timestamp.dir || mkdir -p /var/tmp/timestamp.dir`
cd /msg_save
# First pass
for dir in `find ./ -type d`
do
DUMMY=`test -d /real/storage/area/$dir || mkdir -p /real/storage/area/$dir`
cd $dir
for msgfile in `find ./ -type f -newer /var/tmp/timestamp.dir -name "*.00"`
do
mv $msgfile /real/storage/area/$dir/
done
cd /msg_save
done
touch /var/tmp/timestamp.dir
# Second pass cause we do not know how long we took.
for dir in `find ./ -type d`
do
DUMMY=`test -d /real/storage/area/$dir || mkdir -p /real/storage/area/$dir`
cd $dir
for msgfile in `find ./ -type f -newer /var/tmp/timestamp.dir -name "00"`
do
mv $msgfile /real/storage/area/$dir/
done
cd /msg_save
done
exit

Data Level security for specific Users

Hi,
Can you please suggest some ideas on by-passing the Data Level security for specific users or specific group?
Currently, we have data level security defined on a group permissions for one group and for people belonging to another group, the security should not apply and they should see entire data.
But, key thing here is that, the user belongs to both the groups.
Any ideas helps.
Thanks,
Chandu.

So you are saying you want a user to belong to a group with data-level security filters, but you don't want the filters to apply to that user?
Why are they in the group then?
Are the data filter defined with variables or are the hard-coded?
If variables, you may be able to put logic in initialization block to set the variable appropriately for specific users.
I'd rethink the security model - when I define data level security filters, I tend to force users to only belong to a single group/role.

Install itunes to a specific user only

I want to install itunes for a specific user only. Currently both users are administrators however i want the itunes/quicktime installation to reflect on 1 user only i.e. the one i intall it from. How can i do this? Is there a command line parameter that would allow me to install it for 'current user' only? Please advise.

Just change the installation path to somewhere in the other users account. The default is C:\Program Files\iTunes. You could change it to something like
C:\Users\accountname\iTunes. or something like that for vista. and
C:\Documents and Settings\accountname\iTunes. or something like that for XP.
accountname is the name of the account that you are trying to install itunes for.

Outlook error when collapsing groups on TS - specific users only - cleanviews and new profile didn't help.

We have a Citrix environment for app publishing.
Office 2007 is installed, and the users use the published outlook 2007.
For some users only(not all users), when they arrange by "from" and in-groups they get an error when they try and collapse groups.
Error is "There are no items to show in this view".
It does not affect all users.
Troubleshooting attempted:
Recreated user's profile. - No change
Made user an administrator
-Logged in locally
-ran outlook in safe-mode -> no change.
-ran cleanviews -> no change
There were no policies applied at the time, and there are no user specific configurations.
I can't find any other articles which might be pertinent. How should I troubleshoot this?

Hi,
One more thing you can try is to run Office Configuration Analyzer Tool to find if there is any error of the installation.
The tool provides a detailed report of your installed Office programs. This report includes many parameters about your Office program configuration. It also highlights known problems that are found when OffCAT scans your computer.
Office Configuration Analyzer Tool (OffCAT) information:
http://support.microsoft.com/kb/2812744
To download Microsoft Office Configuration Analyzer Tool:
http://www.microsoft.com/en-hk/download/details.aspx?id=36852
Regards,
Melon Chen
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Lock Transaction for Specifi Users

Dear All,
Good Day,
We are planning to lock the transaction for specific user who doesnot use the transaction more than 3 months.
Please suggest me what will be the procedure.
Thanks in advance,.
Best Regards,
Suresh Kumar K

Hi Suresh,
Your idea of restricting users in using t-code is good practice. But as of now there is nothing like you can restrict user by locking t-code only for tht user/users alone.
1. You can lock the T-code but this will affect entire system.
2, You can remove t-code from the role, but this affect other user and if you wanted to make another role for only this user it will start getting to be tedious job, since you have to delete some roles create some other and alos user may use some t-code once every quarter for some of quarter end results and you have to seperate these t-code from others which was not possible, this will not workout so easily.
The only option could be probably if user doesnot login for more than 3months just lock him.
Regards...

How can i open period for specific user in OB52.

Hi Expert,
How can i open period for specific user in OB52. As 'Authorisation Group' field is there in OB52, how can i use this field to restrict the specific user to post for particular period. How can i creat authorisation group and where can i assign it to the particular user...
Please let me know?
Thanks and regards,
Sam.

Hi,
Here is the detailed process as outlined in SAP help.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
Thanks
Venkata Ganesh Perumalla

How to apply Software Restriction policy for specific user in local group policy object ?

I am working on implementing user based software restriction policy programmatically for local group policy object.
If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
I achieved what i wanted but is it right to modify registry values ?
PS:- I am using Igrouppolicyobject API

I achieved what I wanted but is it right to modify registry values ?
You also can modify a registry programmatically based policy. Check this:
http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Disable upload for specific users only

Similar Messages

Maybe you are looking for