DS 5.2 targetfilter  with add permission - ACI eval

When you have a ACI with targetfilter and grants add to a user , is the targetfilter is evalualted with respect to the new entry being created ?
for example
(targetattr = "*") (target = "ldap:///ou=books,o=test") (targetfilter = (objectclass=classicbooks)) (version 3.0;acl "addtf";allow (read,compare,search,write,delete,add)(userdn = "ldap:///uid=tbook,o=test");)
The examples in the documentation [targetfilter] all show read,search,compare and leads to think that the entries must exist for the targetfilter to evaluate
Thanks

Hi
Read ACI Placement" at "http://docs.sun.com/source/817-7613/aci.html
You can create an ACI on an entry that does not apply directly to that entry but to some or all of the entries in the subtree below it. So when you create the subentry the ACI will apply if it matches. If you do not specify a target the ACI applies to the entry where the ACI is put.
Or did I missunderstand the question?
Regards
/Per-Olov

Similar Messages

  • Powershell Script to Remove and Add the user with same permission

    Hi,
    I need to remove all users within all site collection of a web application and add them back with same permission level. We have a siteminder based custom trusted identity token issuer configured in our farm. The name of the issuer will be changed
    due to some architectural decissions , hence all users which are there before will be unidentified, hence need to be removed and added again.
    Currently each user looks like :                       c:0ǹ.t|Identity Token Issuer1|user1
    Post the change the user will look like:          c:0ǹ.t|Identity Token Issuer New|user1
    I am looking for a powershell script which can handle this operation.
    Thanks, Bivsworld

    Bivsworld,
    Below link should give you a start.
    http://www.sptechlearn.com/2014/10/delete-users-from-user-information-list.html

  • Error in SharePoint hosted app: Add permission level to the list programmatically

    I am trying to add permission to the list which I have created in my app. I am trying to give current user some permission to add update delete items from my list. I have used one article from MSDN(http://msdn.microsoft.com/en-us/library/office/jj247079.aspx)
    site. And my code is as bellow:
    function execOperation() {
    debugger;
    context = new SP.ClientContext(appweburl);
    var factory =
    new SP.ProxyWebRequestExecutorFactory(
    appweburl
    context.set_webRequestExecutorFactory(factory);
    appContextSite = new SP.AppContextSite(context, appweburl);
    var appContextSite2 = new SP.AppContextSite(context, hostweburl);
    var siteColl = appContextSite2.get_site();
    hostweb = appContextSite2.get_web();
    context.load(hostweb);
    web = appContextSite.get_web();
    context.load(web);
    user = web.get_currentUser();
    context.load(user);
    que_list = web.get_lists().getByTitle("MyList1");
    context.load(que_list);
    que_list.breakRoleInheritance(true, true);
    var permissions = new SP.BasePermissions();
    permissions.set(SP.PermissionKind.viewListItems);
    permissions.set(SP.PermissionKind.addListItems);
    permissions.set(SP.PermissionKind.editListItems);
    permissions.set(SP.PermissionKind.deleteListItems);
    // Create a new role definition.
    var roleDefinitionCreationInfo = new SP.RoleDefinitionCreationInformation();
    roleDefinitionCreationInfo.set_name('Manage List Items');
    roleDefinitionCreationInfo.set_description('Allows a user to manage list items');
    roleDefinitionCreationInfo.set_basePermissions(permissions);
    var roleDefinition = web.get_roleDefinitions().add(roleDefinitionCreationInfo);
    web.breakRoleInheritance(true, false);
    // Create a new RoleDefinitionBindingCollection.
    var newBindings = SP.RoleDefinitionBindingCollection.newObject(context);
    // Add the role to the collection.
    newBindings.add(roleDefinition);
    // Get the RoleAssignmentCollection for the target list.
    var assignments = que_list.get_roleAssignments();
    que_list.breakRoleInheritance(true, true);
    // Add the user to the target list and assign the use to the new RoleDefinitionBindingCollection.
    var roleAssignment = assignments.add(web.get_currentUser(), newBindings);
    context.executeQueryAsync(onSuccess, onFail);
    I have just copied the code from that article. But when I run my app it give me error :
    You cannot customize permission levels in a web site with inherited permission levels
    Any suggestions, What am I doing wrong?
    Thank you in advance...!

    Problem solved. 
    It turns out there should be NO leading '/' in the relative URL despite the example shown in http://msdn.microsoft.com/en-us/library/office/dn292553.aspx#Folders with "/Shared Folder".
    The correct GetFolderByServerRelativeUrl-parameter in my case is 'Lists/Productdocuments'.
    Unsure whether example is wrong or if it applies to other cases than mine.

  • [nQSError: 13049] User 'BISYSTEMUSER' with 'empty' permission can not query

    Hi,
    On my local OBIEE 11.1.1.5 Windows 64 bit, I get [nQSError: 13049] error all the time. I understand this must be my configuration is wrong somehow, but comparing with correct installations I can't find a clue, and can't find anything from google either.
    Could you please suggest what can be wrong? How to add permissions?
    - log in to obiee as weblogic/welcome1
    - Administration -> Manage Privileges
    - get: State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 13049] User 'BISYSTEMUSER' with 'empty' permission can not query user population.Please have your System Administrator look at the log for more details on this error. (HY000)
    I have
    - console: myrealm->Users->weblogic and BISystemUser, both in Administrators, BIAdministrators groups
    - em: bifoundation_domain->Security->Credentials, system.user=BISystemUser
    Thanks,
    Wei

    Try doing the following things:
    1) Make sure the user ID you are using as BISystemUser in EM is linked to the BISystemuser role
    2) Add the weblogic user ID to Bi administrator role. ( Do the association in EM ).
    This should solve your problem.
    Thanks,
    -Amith.

  • Help with add file name problem with Photoshop CS4

    Frustrating problem: Help with add file name problem with Photoshop CS4. What happens is this. When I am in PS CS4 or CS3 and run the following script it runs fine. When I am in Bridge and go to tools/photoshop/batch and run the same script it runs until it wants interaction with preference.rulerunits. How do I get it to quit doing this so I can run in batch mode? Any help is appreciated. HLower
    Script follows:
    // this script is another variation of the script addTimeStamp.js that is installed with PS7
    //Check if a document is open
    if ( documents.length > 0 )
    var originalRulerUnits = preferences.rulerUnits;
    preferences.rulerUnits = Units.INCHES;
    try
    var docRef = activeDocument;
    // Create a text layer at the front
    var myLayerRef = docRef.artLayers.add();
    myLayerRef.kind = LayerKind.TEXT;
    myLayerRef.name = "Filename";
    var myTextRef = myLayerRef.textItem;
    //Set your parameters below this line
    //If you wish to show the file extension, change the n to y in the line below, if not use n.
    var ShowExtension = "n";
    // Insert any text to appear before the filename, such as your name and copyright info between the quotes.
    //If you do not want extra text, delete between the quotes (but leave the quotes in).
    var TextBefore = "Lower© ";
    // Insert any text to appear after the filename between the quotes.
    //If you do not want extra text, delete between the quotes (but leave the quotes in).
    var TextAfter = " ";
    // Set font size in Points
    myTextRef.size = 10;
    //Set font - use GetFontName.jsx to get exact name
    myTextRef.font = "Arial";
    //Set text colour in RGB values
    var newColor = new SolidColor();
    newColor.rgb.red = 0;
    newColor.rgb.green = 0;
    newColor.rgb.blue = 0;
    myTextRef.color = newColor;
    // Set the position of the text - percentages from left first, then from top.
    myTextRef.position = new Array( 10, 99);
    // Set the Blend Mode of the Text Layer. The name must be in CAPITALS - ie change NORMAL to DIFFERENCE.
    myLayerRef.blendMode = BlendMode.NORMAL;
    // select opacity in percentage
    myLayerRef.opacity = 100;
    // The following code strips the extension and writes tha text layer. fname = file name only
    di=(docRef.name).indexOf(".");
    fname = (docRef.name).substr(0, di);
    //use extension if set
    if ( ShowExtension == "y" )
    fname = docRef.name
    myTextRef.contents = TextBefore + " " + fname + " " + TextAfter;
    catch( e )
    // An error occurred. Restore ruler units, then propagate the error back
    // to the user
    preferences.rulerUnits = originalRulerUnits;
    throw e;
    // Everything went Ok. Restore ruler units
    preferences.rulerUnits = originalRulerUnits;
    else
    alert( "You must have a document open to add the filename!" );

    you might want to try the scripting forum howard:
    http://www.adobeforums.com/webx?13@@.ef7f2cb

  • Both my iPad and iPhone have ios8 On either device in Calendars edit shared with add person when I enter an email address and press add nothing happens - just goes back to edit screen and what I have entered has gone. No error message or any clue

    Both my iPad and iPhone have ios8
    On either device in Calendars> edit >shared with> add person when I enter an email address and press add nothing happens - just goes back to edit screen and what I have entered has gone. No error message or any clue about why I cant share my calendar. Please help.

    UDPATE:
    Spoke with Express lane, and issue was escalated.  Kudos to the support guys that handled this one (Brian and Yi).  Went through everything in detail and took all the crash dumps off the iphones and ipads to send to engineering.
    After backing up the contacts, the recommendation was to delete all contacts in  iCloud.  Doing that caused my iCloud to crash (in the browser), so more crash dumps were sent to apple.
    Eventually got all contacts deleted, then did a resync.  Looks like IOS devices are coming back to life and syncing again.
    Also, Outlook iCloud connector has just been updated to ver 1.0.1 so i installed that on their recommendation.
    BOTTOM LINE workaround:
    1. Backup contacts
    2. Delete contacts in iCloud
    3. Delete accounts on IOS devices
    4. Recreate accounts on IOS devices.
    Hoping a real root cause can be found and real fix implemented.  This has caused me to doubt the stability of iCloud, so i will procees with caution.

  • Report ID94 specific software registered with Add or Remove Programs = requested software not listed

    Hi All,
    Our company uses SCCM 2007 and we don't really have an SCCM officer here. I kind of try to get things done by googling a lot but for this i can't find a a solution so i open a thread.
    I'm a newbie to SCCM 2007 so I don't know if i'm about to ask a dumb question but here I go.
    I'm trying to pull out a report for the count of computers that run a desktop version of our Ticketing Tool.
    I found the perfect standard report for this in SCCM 2007 which is: Count of instances of specific software registered with Add or Remove Programs.
    in there i have to set two values: 1) the software that i'm willing to count, 2) the collection in which to search.
    for value number 2 I have no problems.
    my problem is in value number 1. When I click the value button to list all known software, he lists all software in a alphabetic way. problem is that it stops at letter "I"... the software i'm looking for starts with an O so it's not listed.
    also if I type the software and then click Values... it replies that it couldn't find the software.
    am I doing something wrong?

    it sound like you are using the filter option with in the old and "crappy" ASP reports. first you should stop using then and only  use the SSRS reports. secondly the filter option will only show the first 1000 rows, there is a reg key to
    allow it to show more.
    Garth Jones | My blogs: Enhansoft and
    Old Blog site | Twitter:
    @GarthMJ

  • Firefox will no longer open any website, not even a Mozilla support page. Resetting, even with add-ons disabled, has not helped.

    The question explains the whole thing. No web page will open at all, except for the blank Firefox page. Typing in an address, clicking on a site in the history, opening a new tab and working from it - nothing works. I've reset it twice, restarted with add-ons disabled. All with the same result. (I just clicked on the Show Details link at the bottom of this page, and nothing happened.

    hello susnyk, please see [[Fix problems connecting to websites after updating Firefox]] &
    [[Firefox can't load websites but other browsers can]]

  • I'm trying to share to Media Browser a 20 minute still slide show with music and text. I have tried several times to save at 1080 HD, but just before it's finished, a message box pops up saying "File already open with write permission."  What's this mean?

    I'm trying to finalize/share to Media Browser a 20 minute still slide show with music and text. I'd like to finalize it 1080 hd and have tried several times, but just before it's finished, a message box pops up saying it can't be done because "File already open with with write permission."  What does this mean?  All files are closed; this iMovie project is the only thing open.  Does it mean one of the song files from iTunes? And should I just settle for saving it as a "large" file, which is what I'm trying right now?
    Thanks,
    Jamie

    Hi
    Error -49 opWrErr  File already open with write permission
    Trash the preference files while application is NOT Running.
    from Karsten Schlüter
    Some users notice on exporting larger projects from within iMovie that this operation is aborted with an 'error -49'
    This issue occours only on MacOs machines using 10.7x
    try switching-off the Local Mobile Backup
    in Terminal copy/paste
    sudo tmutil disablelocal
    Re-launch Mac
    See also this post
    https://discussions.apple.com/thread/4434104?tstart=0
    Yours Bengt W

  • Is there a way to disable/restrict access to Help Restart with Add-ons Disabled or just to Help altogether?

    I have students who use Help>Restart with Add-ons Disabled to disable add-ons, reset things, and go into Safe Mode. I'd like to be able to disable their ability to do so. Is this possible? I am also using a product called Fortres 101, which is a file security application. I can use it to limit file access to read only or even no access. If there are certain files that Firefox uses to allow access to these options, then maybe I can use these file names and make them read only or no access.

    Note that you would only have to hold down the Shift key while starting Firefox to start in Safe Mode.
    Any restriction added via an extension can easily be bypassed by knowledgeable users.
    See also:
    *http://mike.kaply.com/2012/04/10/customizing-firefox-disabling-safe-mode/
    *http://mike.kaply.com/2013/01/11/disabling-safe-mode-in-firefox-17/

  • Error while executing BBP_UPDATE_PORG Tr Code with ADD Option

    Hi All,
    I changed the Back end Vendor Master Data - Purchasing View (Example Accounting Number) and run the BBPUPDVD Tr code in SRM. The Business Partner (Vendor) data is updated correctly in SRM System from Back End System.
    We have set of purchasing organisations like one local (SRM) Purchasing Organisation and respective Back end Purchasing Organisation (account number). When ever I run BBPUPDVD, the SRM system updates the backend vendor master data  with back end purchasing organisation into SRM Standard tables. Then I am running BBP_UPDATE_PORG Tr code to have updated data into SRM Local Purchasing Organisation. I am receiving error message.
    Example Scenario:
    step 1: Present values in Vendor Master Vendor Number 100250, Purchaing Organisation : 1010 A/c Number: 100250-1010
    and I changed the account number as 10025o-test for vendor 100250 and pur organisation 1010.
    step 2: I run the BBPUPDVD in SRM System.
    Step 3: I checked the values in BBPMAININT - vendor data (for backend vendor number 100250 and backend pur organisation - 1010). The SRM system replicates the values correct.
    Step 4: I executed BBP_UPDATE_PORG and replaced the local (SRM) business partner (for local vendor number - 100250 and local purchasing organisation) - REPLACE Option. Then SRM replaces the SRM Business Partner (local) Data with Back end Vendor Master Data and also Back End vendor master data is deleted in SRM System. Now I have updated business partner details in SRM System as SRM Local an no SRM Back End Vendor Master Data in SRM System. This step is working fine.
    Step 5: One more time I am executing BBP_UPDATE_PORG Tr code with Add option to have SRM Back End Details (in SRM System) from SRM Local Details (SRM System). Then the system is error message in SM13 Tr code.
    Kind Note: There is no SRM Back End Vendor details in SRM System which I want to have with the help of executing BBP_UPDATE_PORG Tr code with Add option.
    For analysis I went to ST22 (dump Analysis), the SRM gave an error message like:
    Runtime Error          DYNPRO_SEND_IN_BACKGROUND
    Date and Time          09/15/2008 10:56:58
    ShrtText
         Screen output without connection to user.
    What happened?
         Error in ABAP application program.
         The current ABAP program "SAPLBBP_PARTNER_MAINT" had to be terminated because
          one of the
         statements could not be executed.
         This is probably due to an error in the ABAP program.
    Information on where terminated
        The termination occurred in the ABAP program "SAPLBBP_PARTNER_MAINT" in      "BBP_PORG_INSERT".
        The main program was "RSM13000 ".
        The termination occurred in line 59 of the source code of the (Include)      program "LBBP_PARTNER_MAINTU11"
        of the source code of program "LBBP_PARTNER_MAINTU11" (when calling the editor      590).
        The program "SAPLBBP_PARTNER_MAINT" was started in the update system.
       56
       57 * update database
       58   IF NOT LT_FRG0060_NEW[] IS INITIAL.
    >>>>>     INSERT BBPM_BUT_FRG0060 FROM TABLE LT_FRG0060_NEW.
       60   ENDIF.
       61
       62   IF NOT LT_FRG0061_NEW[] IS INITIAL.
       63     INSERT BBPM_BUT_FRG0061 FROM TABLE LT_FRG0061_NEW.
       64   ENDIF.
    Kindly guide me or provide solution.
    We are in SRM 4.0 and ECC 5.0.
    Thanks a lot in advance.
    Regards,
    Sudarsan
    Edited by: KOYYA SUDARSANA NAIDU on Sep 15, 2008 9:09 PM
    Edited by: KOYYA SUDARSANA NAIDU on Sep 17, 2008 8:46 PM

    Hi All,
    I changed the Back end Vendor Master Data - Purchasing View (Example Accounting Number) and run the BBPUPDVD Tr code in SRM. The Business Partner (Vendor) data is updated correctly in SRM System from Back End System.
    We have set of purchasing organisations like one local (SRM) Purchasing Organisation and respective Back end Purchasing Organisation (account number). When ever I run BBPUPDVD, the SRM system updates the backend vendor master data  with back end purchasing organisation into SRM Standard tables. Then I am running BBP_UPDATE_PORG Tr code to have updated data into SRM Local Purchasing Organisation. I am receiving error message.
    Example Scenario:
    step 1: Present values in Vendor Master Vendor Number 100250, Purchaing Organisation : 1010 A/c Number: 100250-1010
    and I changed the account number as 10025o-test for vendor 100250 and pur organisation 1010.
    step 2: I run the BBPUPDVD in SRM System.
    Step 3: I checked the values in BBPMAININT - vendor data (for backend vendor number 100250 and backend pur organisation - 1010). The SRM system replicates the values correct.
    Step 4: I executed BBP_UPDATE_PORG and replaced the local (SRM) business partner (for local vendor number - 100250 and local purchasing organisation) - REPLACE Option. Then SRM replaces the SRM Business Partner (local) Data with Back end Vendor Master Data and also Back End vendor master data is deleted in SRM System. Now I have updated business partner details in SRM System as SRM Local an no SRM Back End Vendor Master Data in SRM System. This step is working fine.
    Step 5: One more time I am executing BBP_UPDATE_PORG Tr code with Add option to have SRM Back End Details (in SRM System) from SRM Local Details (SRM System). Then the system is error message in SM13 Tr code.
    Kind Note: There is no SRM Back End Vendor details in SRM System which I want to have with the help of executing BBP_UPDATE_PORG Tr code with Add option.
    For analysis I went to ST22 (dump Analysis), the SRM gave an error message like:
    Runtime Error          DYNPRO_SEND_IN_BACKGROUND
    Date and Time          09/15/2008 10:56:58
    ShrtText
         Screen output without connection to user.
    What happened?
         Error in ABAP application program.
         The current ABAP program "SAPLBBP_PARTNER_MAINT" had to be terminated because
          one of the
         statements could not be executed.
         This is probably due to an error in the ABAP program.
    Information on where terminated
        The termination occurred in the ABAP program "SAPLBBP_PARTNER_MAINT" in      "BBP_PORG_INSERT".
        The main program was "RSM13000 ".
        The termination occurred in line 59 of the source code of the (Include)      program "LBBP_PARTNER_MAINTU11"
        of the source code of program "LBBP_PARTNER_MAINTU11" (when calling the editor      590).
        The program "SAPLBBP_PARTNER_MAINT" was started in the update system.
       56
       57 * update database
       58   IF NOT LT_FRG0060_NEW[] IS INITIAL.
    >>>>>     INSERT BBPM_BUT_FRG0060 FROM TABLE LT_FRG0060_NEW.
       60   ENDIF.
       61
       62   IF NOT LT_FRG0061_NEW[] IS INITIAL.
       63     INSERT BBPM_BUT_FRG0061 FROM TABLE LT_FRG0061_NEW.
       64   ENDIF.
    Kindly guide me or provide solution.
    We are in SRM 4.0 and ECC 5.0.
    Thanks a lot in advance.
    Regards,
    Sudarsan
    Edited by: KOYYA SUDARSANA NAIDU on Sep 15, 2008 9:09 PM
    Edited by: KOYYA SUDARSANA NAIDU on Sep 17, 2008 8:46 PM

  • In iMovie I am getting this message...Unable to prepare project for publishing. The project could not be prepared for publishing because an error occurred.m file already open with write permission.

    In iMovie I am getting this message...Unable to prepare project for publishing.  The project could not be prepared for publishing because an error occurred. File already open with write permission. 
    How do I resolve this?

    Hi
    Most often it helps by - Turning Off the TimeMachine application - during work in iMovie.
    Yours Bengt W

  • Why am I getting this message suddenly, when I've done dozens and dozens of projects without trouble at all: The project could not be prepared for publishing because an error occurred. (OpWrErr: file already open with with write permission)

    Why am I suddenly getting this message after I've been using iMovie for a few years now and have never had any such issue before:  The project could not be prepared for publishing because an error occurred. (OpWrErr: file already open with with write permission)

    Two things
    I meant search THIS FORUM
    Error minus49 not same as ERROR 49
    Yours Bengt W

  • Unable to prepare project for publishing the project could not be prepared for publishing because an error occurred. (file already open with write permission)

    Get this message when I try to publish my iMovie project.  "unable to prepare project for publishing the project could not be prepared for publishing because an error occurred. (file already open with write permission)"

    See the discussion here:
    https://discussions.apple.com/message/16784714#16784714

  • Unable to prepare project for publishing The project could not be prepared for publishing because an error occurred. (File already open with with write permission)

    When I click on finalize project or when I tried to share on Vimeo iMovie goes through this ten hour operation and the, somethime while I'm away from the computer, I get this error message.  UNABLE TO PREPARE PROJECT FOR PUBLISHING.  The project could not be prepared for publishing because an error occurred. (File already open with with write permission).
    This has happened to me before and I can't nail down the particulars of when this happens.  I will say I've never been able to Finalize A Project (not even sure what than means) but I have been able to publish short films to YouTube.  This current film is a little over an hour and I picked the HD Format.  Could the size have something to do with it?

    See the discussion here:
    https://discussions.apple.com/message/16784714#16784714

Maybe you are looking for

  • Upload the data from excel sheet to form 6i

    hi all, i am using Forms [32 Bit] Version 6.0.8.24.1 (Production) my requirement is to import data from excel to forms. i have gone through the help, they have mentioned as below To build this demo: 1     Create a spreadsheet containing the initial d

  • How do I know if my iPad 2 is already upgraded to iOS 5?

    I have just purchased new Apple iPad 2 16 GB Wi-Fi Apple A5 1 GHz Dual-Core 9.7-i and do not understand if it is an iOS 5, 5.1 or....etc. Am a bit old to be starting this sort of thing but really would like to understand what I am doing!

  • DW File Names Not Visible in Local View?

    Hi, in Dreamweaver CS4 in the bottom right of the UI is the (Files > Local View) It shows a list of the files in you website. The files were appearing just fine but now all I can see is the DW icon for each file unless I hover over the file to see wh

  • Showing video window in the same scene

    Hi there I´m doing a project for university and i have a section just for videoclips. I want to have a menu list on the left of the screen that when the user presses each element in the list a video will show up in the middle of the screen. I was thi

  • Velocity templates

    hi all!!! i'm having trouble with tomcat and velocity templates i found on the internet this code. but no matter what i do i cannot get this to work. it never displays the correct values. import java.io.StringWriter; import java.io.Writer; import jav