Empty ROLE or ROLEGUID session

I was using Oracle BI Server as the Security Model of BI Publisher. When I logined BI Publisher via http://localhost:9704/xmlpserver, I couldn't see any folder in BI Catalog.
I got the following error message from BI Presentation Service log file: sawlog0.log. I used the initialization blocks to get the user ROLES and other system variables from DB tables. Not sure why it works for BI Analytics service but doesn't work for BI Publisher.
[2011-09-17T02:41:09.000-07:00] [OBIPS] [WARNING:16] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: 3e8b0288400534f9:-1cd4418a:1326fd2ac19:-8000-0000000000009385,0:1:1] [tid: 1868] Empty ROLE or ROLEGUID session variable recieved for the user qudu. User may not have
access to many features in Oracle Business Intelligence[[
File:checkauthentication.cpp
Line:1150
Location:
     saw.securitysubsystem.checkauthentication.runimpl
     saw.threadpool
     saw.threads
ecid: 3e8b0288400534f9:-1cd4418a:1326fd2ac19:-8000-0000000000009385,0:1:1
ThreadID: 1868
]]

Log into Oracle BI Publisher Server using ADMIN user and then Go to ADMIN Tab and click on the Roles and Responsibilities.
select the Folder for perticular users.

Similar Messages

How do get the role from ldap session.

i am using the follwing getting the role from the request in openldap and j_security_check:
f(request.isUserInRole("manager")){
how can i use this in the session:

You might wanna change permissions for that attribute ...
Change it from Admin to OWNER and you should be able to then get it for any user ...
HTH ..

In ldap how doe you get your role from your session.

i am getting the role from the request in ldap how do you get it from the from the session.
<%if(request.isUserInRole("management")){%>

Hi,
who writes it to the session and which attribute name is used ?
Frank

Grant role for a session

Hi,
What is the Syntax for Granting a role just for the current
session? If the user abnormally terminate the session will the
role still be revoked?
Thanks in advance,
Viji

Vamsee,
If you dwell down to the bottom of the access/authorizations/profile/roles etc what ever you call....you have something called authorizations.
If you are talking about a particular transaction a custom one or a standard one, there is an auth. group assigned to it. Basis is the team which creates auth. objects and they create a profile which are infact added to the roles.
These are the roles which are added to the user ids of the people using the system.
Different roles which give us different authorizations to work with in the system.
Hope I made my point clear.
One more important thing is, you cant just ask basis to assign a particular profile or role which you might have found by some means like SU53. Because a tcode can be there in many roles or profiles. It is up to basis to decide what role they have to assign based on what authorizations you need. The profile or role which you might have found out may contain other auth's for other tcodes which basis may not want to offer.
Thanks,
Message was edited by: Naren Somen

CONNECT ROLE and CREATE SESSION

Oracle 8.1.7.4.1 Enterprise RDBMS
User has CONNECT role but receives ORA-1045 when trying to log in. Problem resolved after explicitly granting CREATE SESSION. This should not have been necessary. Has any one else had this problem? What would cause such behavior?

Verify that CREATE SESSION is in the role. (Yes, it should be, but ...)
Verify that nothing has revoked CREATE SESSION from the user.
Besides, it is probably is good idea to get out of the 'CONNECT', 'RESOURCE' and 'DBA' role habit.

What role can ejb Session Beans play jsp session tracking

          I am also looking for a way to use JSP as ejb client with WLS5.1. i would appreciate any help.
          -Girish
          Prasad Peddada <[email protected]> wrote:
          >David,
          >     The beans which are refered in jsp specs are java beans and not EJB.
          >
          >Prasad
          >
          >David Levy wrote:
          >>
          >> Hello,
          >>
          >> We are using Jsp/Servlets which will hold session state and subsequently
          >> call ejb Session Beans for transaction/persistence coordination . We are
          >> not sure if we are using the correct techniques to control object memory.
          >>
          >> Summary of what we have:
          >>
          >> A jsp with the "useBean" directive:
          >> <jsp:useBean id="MySession" class="com....MySession"
          >> scope="session"></jsp:useBean>
          >>
          >> The class MySession holds other classes ( all serializable).
          >> The class MySession is NOT an ejb Session Bean
          >>
          >> Questions:
          >> We are considering making class MySession an ejb Session Bean so (via it's
          >> passivate/activate feature) we can control instances in memory as more web
          >> clients start the session from the jsp page. I.E. all web clients will have
          >> their own HttpSession instance which holds on to an ejb Session Bean object
          >> "MySession"( or a passivated representation of it)
          >>
          >> 1) Is this a sufficient approach or will there be other memory concerns?
          >> I.E. What about all the HttpSession objects out there? Do they need to be
          >> passivated as well?
          >>
          >> 2) If its a good idea to passivate the HttpSessions as well, then what
          >> mechanism should be used ( servlet session persistence)? Also, if we are
          >> passivating the HttpSession (which holds on to the MySession object graph)
          >> , then why bother with the SessionBean for passivation
          >>
          >> 3) Currently, we only have a single instance of a servlet handling all
          >> requests. Will multiple instances buy us anything?
          >>
          >> 4) How does clustering relate to this topic?
          >>
          >> 5) Can we change the "jsp:useBean" directive so MySession is an ejb Session
          >> Bean or do we have to do the "home.create()" within a jsp script?
          >>
          >> thanks,
          >> dave

Publisher permissions and BI integration

I have switched to Oracle BI Server Security Model in publisher so I can log in with users stored in an external Database. The presentation works just fine, but when I try to use Publisher I cannot access the Catalog and also get the following issues/errors.
1. "No input xdo file path is specified" When creating a new Data Model.
2. If I ignore this error and create a new Data Set - Oracle BI Analysis, I can only see the folders in the catalog initially (Shared Folders, Users), and all sub folders, but no reports.
3. If close out, or click back on the breadcrump the folders no longer show up (from issue 2).
I've already tried this: Error integrating publisher and BI but no luck.
Could I be missing another security policy?
The user I am testing with has the BIAdministrator Role with all the publisher permissions I can find.
Edited by: 844667 on Aug 4, 2012 5:08 PM

I added the default Oracle BI EE datasource awhile ago. All this did was allow me to click refresh when creating a new data model and it shows up in the Default Data Source list (not sure why I have to click refresh Data Source List but if I do not it is empty)
The only other error in the logs I can find is this
[2012-08-06T14:49:44.000-04:00] [OBIPS] [WARNING:16] [] [saw.securitysubsystem.authenticationutils.addauthenticatedusertocatalog] [ecid: 7eee1bf15b0dff8d:-4dbe3b88:138fcdc54a4:-8000-0000000000001aa4,0:1:1] [tid: 8792] Empty ROLE or ROLEGUID session variable received for the user admin. User may not have
access to many features in Oracle Business Intelligence[[
File:authenticationutils.cpp
Line:191
Location:
     saw.securitysubsystem.authenticationutils.addauthenticatedusertocatalog
     saw.securitysubsystem.checkauthentication.runimpl
     saw.threadpool.asynclogon
     saw.threads
ecid: 7eee1bf15b0dff8d:-4dbe3b88:138fcdc54a4:-8000-0000000000001aa4,0:1:1
ThreadID: 8792
Still looking into this but not finding much.

Setting session attributes at the Role level

I am running AM7.1 in Legacy mode and I am trying to create a role and assign session attributes at this role level. I followed the instructions for doing this but it does not seem to be working. I created the role and added the session service to it. I then went in an changed the attributes (Max Idle, Max Session, etc.) to the values I need for the role. I then assigned the role to a user. However when I log in as this user and look at the Active Sessions panel all of the values are still saying they are set at the defaults. It is not picking up the new values for the user. Am I missing something? Help! -Jeff

Reply i was also getting this problem in relam mode but 7.0..........but when i specify in the url?role=rolename..........i see the session info applied but i wanted it to be dyanmically applied(without specifiying the role in the url).......i have raised an SR but that is for 7.0 .........please do it for 7.1 i think you might get some response.

Sign Out in IC Agent Role CRM 6.O

Hi All,
I am implementing CIC in SAP CRM 6.O. The standard is not having the sign out option in IC Agent Role , rather the session will end if we close the window. But ou client is willing to have the same in 6.O as all other Bussiness Roles is having Sign out option. Can any body suggest how to activate or include the signout option.
Regards,
Sarangamath

Hello
You cannot activate the "logoff" option in CRM6.0. This is only available as of CRM7.0.
Anyway, when you close the browser window, automatic logoff takes place. This is the reason why the logoff button is not available.
Regards
Joaquin

Problem when trying to rename uploaded images using session value

Hi,
I have a form where 9 images are uploaded made into thumb nail size and then stored in a file. What I´m trying to do is rename those thumbnails from their original name to username_0, username_1, username_2 etc for each of the 9 thumbs. The username comes from the registration form on the same page. I have created a session variable for the username and am trying to use that to change to name of the image name, whilst my images are uploading and resizing the name stays as the original and not as the new username_$number. I have pasted relevant code below and would very much appreciate any help with this:
<?php session_start();
// check that form has been submitted and that name is not empty and has no errors
if ($_POST && !empty($_POST['directusername'])) {
// set session variable
$_SESSION['directusername'] = $_POST['directusername'];
// define a constant for the maximum upload size
define ('MAX_FILE_SIZE', 5120000);
if (array_key_exists('upload', $_POST)) {
// define constant for upload folder
define('UPLOAD_DIR', 'J:/xampp/htdocs/propertypages/uploads/');
// convert the maximum size to KB
$max = number_format(MAX_FILE_SIZE/1024, 1).'KB';
// create an array of permitted MIME types
$permitted = array('image/gif','image/jpeg','image/pjpeg','image/png');
foreach ($_FILES['photo']['name'] as $number => $file) {
// replace any spaces in the filename with underscores
$file = str_replace(' ', '_', $file);
// begin by assuming the file is unacceptable
$sizeOK = false;
$typeOK = false;
// check that file is within the permitted size
if ($_FILES['photo']['size'] [$number] > 0 && $_FILES['photo']['size'] [$number] <= MAX_FILE_SIZE) {
$sizeOK = true;
// check that file is of a permitted MIME type
foreach ($permitted as $type) {
if ($type == $_FILES['photo']['type'] [$number]) {
$typeOK = true;
break;
if ($sizeOK && $typeOK) {
switch($_FILES['photo']['error'] [$number]) {
case 0:
include('Includes/create_thumbs.inc.php');
break;
case 3:
$result[] = "Error uploading $file. Please try again.";
default:
$result[] = "System error uploading $file. Please contact us for further assistance.";
elseif ($_FILES['photo']['error'] [$number] == 4) {
$result[] = 'No file selected';
else {
$result[] = "$file cannot be uploaded. Maximum size: $max. Acceptable file types: gif, jpg, png.";
................CODE BELOW IS THE INCLUDES FILE THAT MAKES AND TRIES TO RENAME THE THUMBS................................................
<?php
// define constants
define('THUMBS_DIR', 'J:/xampp/htdocs/propertypages/uploads/thumbs/');
define('MAX_WIDTH_THB', 75);
define('MAX_HEIGHT_THB', 75);
set_time_limit(600);
// process the uploaded image
if (is_uploaded_file($_FILES['photo']['tmp_name'][$number] )) {
$original = $_FILES['photo']['tmp_name'][$number] ;
// begin by getting the details of the original
list($width, $height, $type) = getimagesize($original);
// check that original image is big enough
if ($width < 270 || $height < 270) {
$result[] = 'Image dimensions are too small, a minimum image of 270 by 270 is required';
else { // crop image to a square before resizing to thumb
if ($width > $height) {
$x = ceil(($width - $height) / 2);
$width = $height;
$y = 0;
else if($height > $width) {
$y = ceil(($height - $width) / 2);
$height = $width;
$x = 0;
// calculate the scaling ratio
if ($width <= MAX_WIDTH_THB && $height <= MAX_HEIGHT_THB) {
$ratio = 1;
elseif ($width > $height) {
$ratio = MAX_WIDTH_THB/$width;
else {
$ratio = MAX_HEIGHT_THB/$height;
if (isset($_SESSION['directusername'])) {
$username = $_SESSION['directusername'];
// strip the extension off the image filename
$imagetypes = array('/\.gif$/', '/\.jpg$/', '/\.jpeg$/', '/\.png$/');
$name = preg_replace($imagetypes, '', basename($_FILES['photo']['name'][$number]));
// change the images names to the user name _ the photo number
$newname = str_replace ('name', '$username_$number', $name);
// create an image resource for the original
switch($type) {
case 1:
$source = @ imagecreatefromgif($original);
if (!$source) {
$result = 'Cannot process GIF files. Please use JPEG or PNG.';
break;
case 2:
$source = imagecreatefromjpeg($original);
break;
case 3:
$source = imagecreatefrompng($original);
break;
default:
$source = NULL;
$result = 'Cannot identify file type.';
// make sure the image resource is OK
if (!$source) {
$result = 'Problem uploading image, please try again or contact us for further assistance';
else {
// calculate the dimensions of the thumbnail
$thumb_width = round($width * $ratio);
$thumb_height = round($height * $ratio);
// create an image resource for the thumbnail
$thumb = imagecreatetruecolor($thumb_width, $thumb_height);
// create the resized copy
imagecopyresampled($thumb, $source, 0, 0, $x, $y, $thumb_width, $thumb_height, $width, $height);
// save the resized copy
switch($type) {
case 1:
if (function_exists('imagegif')) {
$success[] = imagegif($thumb, THUMBS_DIR.$newname.'.gif');
$photoname = $newname.'.gif';
else {
$success[] = imagejpeg($thumb, THUMBS_DIR.$newname.'.jpg',50);
$photoname = $newname.'.jpg';
break;
case 2:
$success[] = imagejpeg($thumb, THUMBS_DIR.$newname.'.jpg', 100);
$photoname = $newname.'.jpg';
break;
case 3:
$success[] = imagepng($thumb, THUMBS_DIR.$newname.'.png');
$photoname = $newname.'.png';
if ($success) {
$result[] = "Upload sucessful";
else {
$result[] = 'Problem uploading image, please try again or contact us for further assistance';
// remove the image resources from memory
imagedestroy($source);
imagedestroy($thumb);
?>
I hope i´ve supplied enough information and look forward to receiving any help or advise in this matter.

Use double quotes here:
$newname = str_replace ('name', '$username_$number', $name);
Change it to this:
$newname = str_replace ('name', "$username_$number", $name);

Form field displaying but not in session state

I have a form which displays data depending on node selected in a tree. The data displays ok and allows me to update but If I try to access a value ( I want to filter a select list ) its empty.
Displaying all session values reveals that only the primary key of the form is held in sessikon state. I have set the value I want to read to 'Display as Text ( saves state )'
Regards
Seán

I have 2 regions, a tree and a form. The form was created with the wizard and I added the tree afterwards.
The tree nodes are links which branch to the same page and set the value of the primary key field .
I've copied the event view of the page below...
Page Rendering
Process: After Header Fetch Row from ALL_COST_CENTRE (#OWNER#:ALL_COS..)
Region: Tree Page Template Body (3) (1,20)
Admin Tree
Tree: 11210417299635529
(50) P8_TREE_ROOT [Hidden]
Region: HTML Text Page Template Body (3) (3,10)
Office Details
(10) CANCEL Location: Template Close
(30) SAVE Location: Template Change
(1) P8_COST_CENTRE [Display as Text (saves state)]
(10) P8_NAME [Display as Text (saves state)]
(15) P8_OFFICE_TYPE [Display as Text (saves state)]
(30) P8_DIST_PARENT [Select List]
(40) P8_ADMIN_PARENT [Select List]
Region: HTML Text Page Template Body (3) (3,40)
Administration
No computations
Page Processing
No computations
Validation: P8_NAME not null (Inline+Notification) sequence: 10
Process: After Submit Process Row of ALL_COST_CENTRE (#OWNER#:ALL_COS..)
Process: After Submit reset page (8..)
Go To Page: f?p=&APP_ID.:8:&SESSION.&succe (After Processing) sequence: 1 Unconditional

How to achieve Entity Bean methods ONLY by calling them from a Session Bean

Hi,
I used a session bean as a business facade to a entity bean.
In the session bean I achieve the entity bean with a jndiContext.lookup("java:comp/env/ejbEntityBean").
Now I am looking for a solution that it is only possible to call the entity bean methods or the whole entity bean from the corresponding session bean.
In other words: "How can I forbid the access to the entity bean, if the calling object is not the corresponding session bean?"
--->
I only found a way the regulate the access to the entity bean methods by declaring a security-role.
But the existence of the security-role at runtime depends on the calling user-authorizations!
Is there a way to set the entity-security-role within the session bean context?
Best Regards
Steffen

Hi Srikanth Reddy.T,
sorry, I am not looking for a special tag <entity-security-role>.
I am looking for a way to specifiy that my session bean "has" the special security-role (in my case "WebZaehlerEjbRole") of my entity bean "in my case "WebZaehlerEjbRole") that is necessary to call the methods (findAlleEntries, findByWindowId,...) of my entity-bean.
Here is the relevant part of my ejb-jar.ml:
     <assembly-descriptor>
          <security-role>
               <role-name>WebZaehlerEjbRole</role-name>
          </security-role>
          <method-permission>
               <description>method-permission</description>
               <role-name>WebZaehlerEjbRole</role-name>
               <method>
                    <ejb-name>WebZaehlerBean</ejb-name>
                    <method-name>findAllEntries</method-name>
                    <method-params/>
               </method>
               <method>
                    <ejb-name>WebZaehlerBean</ejb-name>
                    <method-name>findByWindowId</method-name>
                    <method-params>
                         <method-param>java.lang.Long</method-param>
                    </method-params>
               </method>
Regards,
Steffen

RDS 2012 External access for Session Hosts over different port to default 443

Hello there
I am having problems solving this problem as you may see on other posts, so I am going to try again.
I have two Server 2012 machines for RDS. Server 1 one with all roles (Gateway, Broker, Session host etc.) and second machine, Server 2 as a session host only. I am running RDWeb Apps, with CA certificate installed and
everything works fine internally.
Due to limitations on the router I had to change the default SSL port on the gateway (Server 1) to 4043. I have this and 3391 for UDP open to Server 1 from the router.
Working externally, I can login to the RDS site and open apps form Server 1, but when I try to open an app installed on Server 2, I get a certificate error. The error is:
“Your computer can’t connect to the remote computer because the Remote Desktop Gateway server address
and the certificate subject name do not match. Contact your network administrator for assistance".
The certificate address the error points to is referring to is an SBS 2011 cert for RWW and email. Experimenting, if I use 443 on the Server 1
gateway instead of 4043 and change the router accordingly, it then works. I can open apps form both session hosts externally . But not if is set to 4043.
For the record Server 2 session host also gives this error:
Event ID: 1280 Warning Microsoft Windows TerminalServcies-session broker client
Remote Desktop Services failed to join the Connection Broker on server sever-vm1.local.
Error: Current async message was dropped by async dispatcher, because there is a new message which will override the current one.
Because everything works fine using default 443, I figure this is a communication or firewall issue between the gateway and the session host on Server 2.
Can anyone help here?
Many Thanks
MIS5000

Hi,
Thanks for your comment.
Have you check the connection on your second server?
Can you ping the server 2 from server 1?
As from the event ID 1280 it seems there is some network connectivity to RDCB server. Also please “Add the RD Session Host server to the Session Broker Computers group” & RDWeb server's computer account needs to be a member of the local TS Web Access Computers
group on your RDSH server. You can get the detailed information from this article.
In addition, do you have certificate purchased and install from trusted root authority. There is some requirement to use certificate for RDS environment, please consider following points.
1. The certificate is installed into computer’s “Personal” certificate store.
2. The certificate has a corresponding private key.
3. The "Enhanced Key Usage" extension has a value of either "Server Authentication" or "Remote Desktop Authentication" (1.3.6.1.4.1.311.54.1.2). Certificates with no "Enhanced Key Usage" extension can be used as well.
You can get more details regarding certificatehere.
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

LSMW Vendor XK01 Session Failed to create

Hi all,
I am trying to upload vendor data using LSMW using direct batch program RFBIKR00 . Would like to store Compnay code level details also. I did have Compnay code 0001 in FIle..I checked Converted data also, but getting below error ....
FB012                    Session 1 : Special character for 'empty field' is /
FB007                    Session 1 session name VENDR_BTCH_I was opened
FB105                    Trans. 6 XK01 : CoCde not entered; company code area not being edited
FB125                    ... Data in table BLFB1 cannot be processed
FB016                    ... Last header record ...
FB014                    ... BLF00-STYPE 1
FB014                    ... BLF00-TCODE XK01
FB014                    ... BLF00-LIFNR /
FB014                    ... BLF00-BUKRS
FB014                    ... BLF00-EKORG
FB014                    ... BLF00-KTOKK
FB017                    ... Last data record ...
FB014                    ... BLFB1-STYPE 2
FB014                    ... BLFB1-TBNAM BLFB1
FB014                    ... BLFB1-AKONT
FB014                    ... BLFB1-ZUAWA
FB014                    ... BLFB1-LNRZE /
FB014                    ... BLFB1-BLNKZ /
FB014                    ... BLFB1-XDEZV /
FB014                    ... BLFB1-FDGRV /
FB014                    ... BLFB1-BEGRU /
FB014                    ... BLFB1-VZSKZ /
FB014                    ... BLFB1-ZINDT /
FB014                    ... BLFB1-ZINRT /
FB014                    ... BLFB1-DATLZ /
FB014                    ... BLFB1-QSSKZ /
FB014                    ... BLFB1-QSZNR /
FB014                    ... BLFB1-QSZDT /
FB014                    ... BLFB1-ZTERM
FB014                    ... BLFB1-TOGRU /
FB014                    ... BLFB1-KULTG /
FB014                    ... BLFB1-REPRF
FB014                    ... BLFB1-ZWELS
FB014                    ... BLFB1-ZAHLS /
FB014                    ... BLFB1-LNRZB /
FB014                    ... BLFB1-HBKID /
FB014                    ... BLFB1-XPORE /
FB014                    ... BLFB1-WEBTR /
FB014                    ... BLFB1-XVERR /
FB014                    ... BLFB1-BUSAB /
FB014                    ... BLFB1-EIKTO
FB014                    ... BLFB1-ZSABE /
FB014                    ... BLFB1-KVERM /
FB014                    ... BLFB1-LOEVM /
FB014                    ... BLFB1-SPERR /
FB014                    ... BLFB1-MINDK /
FB014                    ... BLFB1-ALTKN /
FB014                    ... BLFB1-ZGRUP /
FB014                    ... BLFB1-MGRUP /
FB014                    ... BLFB1-UZAWE /
FB014                    ... BLFB1-QSREC /
FB014                    ... BLFB1-QSBGR /
FB014                    ... BLFB1-QLAND /
FB014                    ... BLFB1-XEDIP /
FB014                    ... BLFB1-FRGRP /
FB014                    ... BLFB1-PERNR /
FB014                    ... BLFB1-TLFXS /
FB014                    ... BLFB1-TOGRR /
FB014                    ... BLFB1-INTAD /
FB014                    ... BLFB1-GUZTE /
FB014                    ... BLFB1-GRICD /
FB014                    ... BLFB1-GRIDT /
FB014                    ... BLFB1-XAUSZ /
FB014                    ... BLFB1-CERDT /
FB014                    ... BLFB1-NODEL /
FB014                    ... BLFB1-TLFNS /
FB014                    ... BLFB1-GMVKZK /
FB014                    ... BLFB1-PREPAY_RELEVANT /
FB014                    ... BLFB1-ASSIGN_TEST /
FB014                    ... BLFB1-SENDE /
FB013                    ....Editing was terminated
Thanks,
sri

solved myself...empty records at the end of text fille lead to empty company code ...

Logic Won't Let Me 'Drop' .Wav Files Into A Session??

Hi all,
Trying to simply drag and drop .wav files from a folder on an external hard drive into an empty Logic Pro 9 session. The audio tracks are stereo (have also tried mono) and the input/outputs seem to be fine. The session is also saved to the external. I am not using an external audio interface.
I have also tried importing using the 'File-->import' commands and this allows me to import one file at a time, but not in bulk. This seems odd as I could've sworn I didn't have this problem in past attempts.
Let me know your thoughts please!
Ps. Logic rules, but I'm very tempted to get acquainted with Pro Tools!

GTBannah wrote:
Are you sure they are audio tracks, and not MIDI or Instrument tracks?
Ha ha... Yes I am sure. A good thought, though I did double checked this before posting the problem.
Could it be something to do with the sample rate? Ie. the audio files were recorded at a certain sample rate and now I need to make it match with the sample rate in Logic?

Empty ROLE or ROLEGUID session

Similar Messages

Maybe you are looking for