End user account

Dear all,
I have created an application in the HTML DB repository and create a developer account to access the application. After logging in, the developer account user can use the standard feature such as SQL Workshop and Data Workshop of HTML DB. My question is if there is any method to control the priviledge of a user to use functions designed the application only and prohibit him to use any standard feature.

Hello "73719",
even the developer account won't see the edit links when calling the application link directly...
Assuming your host is called myhost, your port is 7777, your DAD is called htmldb, your application is number 125 and your application's start page is 1, the URL you call to go directly to the app would be
http://myhost:7777/pls/htmldb/f?p=125:1
You may setup end user accounts inside HTMLDB by making them neither admin nor developers for the workspace. However, for a larger numer of users on production applications, it is recommended to perform authentication against an LDAP server (e.g. OID or Active Directory) and configure the apps accordingly.
HTH,
Holger

Similar Messages

VPP end user account creation

I am a VPP program manager, i created a facilator account but i can't find out how to create a end user account to download the apps that the facilator purchases. In the VPP video training they talk about creating both types of accounts but I am not seeing where to do it.

When you create a new user and leave the password fields blank, you should see a warning similar to the following one. Clicking "OK" will continue to create the account, but if you press Return/Enter or click "Cancel" then the account will not be made.

What is a good way on a resume to say you created End user accounts

I also created in-house solutions of telling the users how to correct the most common problems they may encounter.

and also deleted their accounts on termination.
Basically I want to say that I have administered user accounts when they are hire and I have closed out their accounts upon their termination/departure.
Thank you
This topic first appeared in the Spiceworks Community

Unable to Create End User in Apex 4.0.2

I want an End User to use an application without seeing Development links at the bottom (like 'Edit page x' or 'Session' or 'Debug'). I go to the Administration tab, click 'Manage Users and Groups', and click Create User. In the Account Priveleges section I specify 'No' for User is a Workspace Administrator. I specify 'No' for User is a developer. I fill in the mandatory fields and click 'Create User' at the top.
It processes the action BUT on the following page, for the row created representing the new user, the Account Type says Workspace Administrator and not End User. If I log in with the new user I see developer tabs at the bottom.
How do I create an End User?
I obtained APEX 4.0.2.00.08 by downloading Oracle Express 11g if that helps.

Custom Authentication is behaving like an End User account, which is good - no developer tabs at the bottom. I used something similar to Chapter 11 of the Advanced Tutorials guide:
CREATE OR REPLACE FUNCTION acl_custom_auth (
p_username IN VARCHAR2,
p_password IN VARCHAR2)
RETURN BOOLEAN IS
BEGIN
FOR c1 IN (SELECT 1
FROM acl_employees
WHERE upper(userid) = upper(p_username)
AND upper(last_name) = upper(p_password))
LOOP
RETURN TRUE;
END LOOP;
RETURN FALSE;
END;
/

End user? in apex 4.2.3

hi
i have searched forum but could not understand the solutions yet
i have create an user without admin and developing rights
how should i enable applications created for view only?
a step by step ...instructions pleaseeeeeeeeee

hemu wrote:
sir
when i logged in with newly created user
i do not see any of my applications i have created
Unsurprisingly:
i have create an user without admin and developing rights
An "end user" account without admin or developer access to the app builder obviously can't access applications through the builder. They access applications directly using an application URL containing the application ID/alias and page ID/alias supplied by an admin or developer user.

DPM 2012 still requires put end users into local admin groups for the purpose of end user data recovery?

On client computers that are protected by DPM 2010 and prior versions, you had to put the end users account in the local administrators group. If you did not add the end user account to the local administrators group you would get this error after opening
the recovery tab in the DPM client: “DPM found no recovery points which you are authorized to restore on the specified DPM server. You can restore only those recovery points for which you were an administrator at the time the
backup was taken. To restore other recovery points, contact your DPM administrator, or attempt to restore from another DPM.” This is not ideal on many networks because the end users are not allowed to have local administrator access.
Ths fix to this was included in hotfix 2465832 found here: http://support.microsoft.com/kb/2465832.
This hotfix (a hotfix rollup package for DPM 2010) resolves other issues with DPM 2010 as well. You can find the full list of what this hotfix corrects on that link.
One would think this issue should have been resolved in DPM 2012, however I am encountering the same exact issue, had to include end-users into the workstation local admin group before they can search for recovery points on the DPM server. This is not acceptable
practice.
Is there a new hotfix for the same issue on DPM 2012? I am hesitated to apply KB2465832 since it also includes many other fixes for DPM 2010, which may not appicable for version 2012.
Please help.
Thanks,

This is a hands off solution to allow all users that use a machine to be able to restore their own files.
1) Make these two cmd files and save them in c:\temp
2) Using windows scheduler – schedule addperms.cmd to run daily – any new users that log onto the machine will automatically be able to restore their own files.
<addperms.cmd>
Cmd.exe /v /c c:\temp\addreg.cmd
<addreg.cmd>
set users=
echo Windows Registry Editor Version 5.00>c:\temp\perms.reg
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection]>>c:\temp\perms.reg
FOR /F "Tokens=*" %%n IN ('dir c:\users\*. /b') do set users=!users!%Userdomain%\\%%n,
echo "ClientOwners"=^"%users%%Userdomain%\\bogususer^">>c:\temp\perms.reg
REG IMPORT c:\temp\perms.reg
Del c:\temp\perms.reg
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Regards, Mike J. [MSFT] This
posting is provided "AS IS" with no warranties, and confers no rights.
That's a good one! Thanks for that.
I've been scripting on KIX for some time, so here is mine, hope it helps to someone... (it's probably not the best, but it works)
========================================================================
$RC=setoption("WOW64AlternateRegView","on")
$DPMkey = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Data Protection Manager\Agent\ClientProtection"
$uservariable = "%userdomain%\%username%"
If KeyExist ($DPMkey)
$Userstring=ReadValue($DPMkey, "ClientOwners")
If $Userstring == ""
WriteValue($DPMkey,"ClientOwners", $uservariable, "REG_MULTI_SZ")
? "Key created"
else
If not instr($Userstring,$uservariable)
$Userstring = "$Userstring,$uservariable"
WriteValue($DPMkey,"ClientOwners", $Userstring, "REG_MULTI_SZ")
EndIf
Endif
EndIf
==========================================================================
The problem actually is that you still need to use an admin account to write on the registry, so ensure you configure it properly on the schedule task.
In case you use a service account on the schedule task... the "$uservariable" will get populated with that account. As a work around to this... I changed it for the following line:
=========================================================
$uservariable = ReadValue("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI", "LastLoggedOnSAMUser")
=========================================================
The only problem with that, is that key gets created/updated only if user gets logged phisically on that PC, but will not work for anyone connecting through RDP.

Removing Active Directory Synchronization - will it delete all end-users?

I need to split our company across two AD Forests and do not want to setup AD LDS for Dirsync and authentication. Can I disable LDAP synchronization on CUCM 8.5.1 and have it leave the current users objects? I would look to add passwords to each of the users in the Cisco directory and have Cisco perform the authenication locally.

The threads recommend that I remove LDAP synchronization and authentication on CUCM Admin. Then run this command:
You can conver the users back to standard CUCM users using sql query update...Ths is easy to do
run sql update enduser set status=1
Will this procedure work?
1) remove LDAP sync and auth from CUCM Admin (stay signed in)
2) run the update on the enduser table (before the 3:15am garbage collection run)
3) I assume that none of the end user accounts can be used now since the passwords were stored on AD and not in the enduser table. I would have to update each of the enduser entries and add a password.
What could go wrong?

User accounts locking out.

I have recently upgraded to APEX 3.1.0.00.32 and have discovered that my users are now able to lock themselves out of my app.
I found settings both at the apex level as well as the workspace level to disable this feature, however the accounts are still locking out. Is there a setting somewhere else that I need to change?
Thanks,
Joel

Kathryn,
The feature has no Disable/Enable control. It can be required of workspaces (toggled at the site level) with respect to the epiration/locking policy for end-user accounts, or not. If not required, individual workspaces can enable or disable the feature, again, with respect to end user account expiration and locking.
For developer/admin accounts, the feature is always "on". If you prefer a longer expiration period, say 24 years, set the Account Password Lifetime (days) value to 8766. If you want to allow a large number, say 1000, of invalid consecutive password attempts, set the Maximum Login Failures Allowed value to 1000.
Scott

Adding Sip Phones - "End User" Vs "Application User"

Can we use "Application User" as the 'Owner ID' & 'Digest User' when Adding a 3rd Party Sip Phone? Since our CUCM is integrated with LDAP, we cannot create new 'End User' without calling the AD Administrator.

You need an End User account. Just create a new OU in LDAP and place all of the phones there if they are not assigned to a real user. Assign a long/random password to secure the account from all other logins.

I created a new administrator USER account. I deleted the original one but the process never ends. It's been 3 days now.

I created a new administrator USER account. I deleted the original one but the process never ends. It's been 3 days now. And I can't close preferences window or turn off the computer.
It's stays in the "deleting" but I can't cancel it or close the window.
What can I do?

Here are two screen shots to show you what I am seeing. The first screen shot shows it allowing me to select (highlighted in blue) my admin user (which is what I am locced in as). The second screen shot shows it allowing me to select the "Guest" user (highlighted in blue). However when I click on the user "Orion" nothing happens. It will not change to highlight that user.

SQL Query to put end date to user account from Backend.

We are using Oracle Apps 11.5.10.2. with oracle 9i Database.
I want to put end date to user account who has left a week ago, (Responsibility ->Sysadmin - Go to : User)
i cannot give the enddate as sysdate, i need to put the end date (25-JUN-09) from back end.
I want a query so that the workflow tables also get updated accordingly.
Regards,
Jenny

Yes i can give the back dated end date, but when i check the record history from Front end,
(Help ---> Record History) These details are not updated , they will show the Updated By : username and Updated Date to sysdate and not the back dated date given.

Ended up havin two user account

hello dear after reinstalling my system last nite by doing archive n install i ended up having two user account which i never wanted and now i can not open itunes, iphotos , mail etc on one of the accounts wheneva im tryin to open, it shows u dont have permission or files are stored in locked disc.. i m really dont kno wt to do...even when im connectin my iphone iphoto icon doesn't popup automatically like it use to................... n i only like to have one account which is havin all my stuff.. i know nothin about this plz help.... thanks

Baltwo, if I read your responses correctly, I'm confused that you say there is no Archive and Install" option in SL. The paragraphs below are copied directly from iMac_Late2009.UG.pdf page 55.
I happened upon this post as I, too, am looking to do a clean reinstall on my new iMac.
Also, may I suggest that perhaps English is not the primary language of the original poster? I credit that poster for hanging in there after receiving a blatantly unwelcoming response from a community to which the poster appears to be new. We new folks value the experience of all you seasoned Mac users, so I'd like to urge you to remember your manners and just answer our questions without sarcasm and put-downs.
=================
Reinstalling the Software That Came with Your iMac
Use the software installation discs that came with your iMac to reinstall Mac OS X and any applications that came with your computer. You can choose “Archive and Install,” which saves your existing files and settings, or “Erase and Install,” which erases all your data.
Important: Apple recommends that you back up the data on your hard disk before restoring software. Because the “Erase and Install” option erases your hard disk, you should back up your essential files before installing Mac OS X and other applications. Apple is not responsible for any lost data.
Installing Mac OS X
To install Mac OS X:
Back up your important files. Insert the Mac OS X Install DVD that came with your computer.
3 Double-click Install Mac OS X. 4 Follow the onscreen instructions.
Note: To restore Mac OS X on your computer to the original factory settings, click Options in the “Select a Destination” pane of the Installer, and then select “Erase and Install.” If you choose “Erase and Install,” you’ll see a message reminding you to use the Applications Install DVD to reinstall the bundled applications that came with your computer.
5 When the installation is complete, click Restart to restart your computer. 6 Follow the prompts in the Setup Assistant to set up your user account."
==========

Sharing an iTunes Library across multiple user account and a network.

Sharing an iTunes Music Library across multiple user accounts.
Hello Everybody!
Firstly, this was designed to be run in Mac OS X 10.4 Tiger. It will not work with earlier versions of Mac OS X! Sorry.
Here's a handy tip for keeping your hard drive neat and tidy, it also saves space, what in effect will be done is an iTunes music library will be shared amongst multiple users on the same machine. There are advantages and disadvantages to using this method.
• Firstly I think it might be worthwhile to state the advantages and disadvantages to using this approach.
The advantages include:
- Space will be saved, as no duplicate files will occur.
- The administrator will be able to have complete control over the content of the iTunes library, this may be useful for restricting the content of the Library; particularly for example if computer is being used at and education institution, business or any other sort of institution where things such as explicit content would be less favorable.
- The machine will not be slowed by the fact that every user has lots of files.
The disadvantages to this system include.
- The fact that the account storing the music will have to be logged in, and iTunes will have to be active in that account.
- If the account housing the music is not active then nobody can use the iTunes library.
- There is a certain degree of risk present when an administrator account must be continually active.
- Fast User Switching must be enabled.
Overview:
A central account controls all music on the machine/network, this is achieved by storing iTunes files in a public location as opposed to in the user's directory. In effect the system will give all users across the machine/network access to the same music/files without the possibility of files 'doubling up' because two different users like the same types of music. This approach saves valuable disk space in this regard and may therefore prove to be useful in some situations.
This is a hearty process to undertake, so only follow this tutorial if you're willing to go all the way to the end of it.
Process:
Step 1:
Firstly, we need to organize the host library, I tidied mine up, removing excess playlists, random files, things like that. this will make thing a bit easier in the later stages of this process.
Once the library is tidied up, move the entire "iTunes" folder from your Home directory to the "//localhost" directory (The Macintosh HD) and ensure that files are on the same level as the "Applications", "Users", "Library" and "System" directories; this will ensure that the files in the library are available to all users on the machine (this also works for networks)
Optionally you can set the ownership of the folder to the 'administrator' account (the user who will be hosting the library.), you may also like to set the permissions of 'you can' to "Read & Write" (assuming that you are doing this through the user who will host the library); secondly you should set the "Owner" to the administrator who will be hosting the library and set their "access" to "Read & Write" (this will ensure that the administrator has full access to the folder). The final part of this step involves setting access for the "Others" tab to "Read Only" this will ensure that the other users can view but not modify the contents on the folder.
Overview:
So far we have done the following steps:
1. Organized the host library.
2. Placed the iTunes directory into a 'public' directory so that other users may use it. (this step is essential if you plan on sharing the library across multiple accounts on the same machine. NOTE: this step is only necessary if you are wanting to share you library across multiple accounts on the same machine, if you simply want to share the music across a network, use the iTunes sharing facility.
3. set ownership and permissions for the iTunes music folder.
Step 2:
Currently the administrator is the only user who can use this library, however we will address this soon. In this step we will enable iTunes music sharing in the administrator's account, this will enable other users to access the files in the library.
If you are not logged in as the administrator, do so; secondly, open iTunes and select "Preferences" from the "iTunes" menu, now click the "Sharing" tab, if "share my library on my local network" is not checked, the radio buttons below this will now become active, you may choose to share the entire libraries contents, or share only selected content.
Sharing only selected content may be useful if their is explicit content in the library and minors use the network or machine that the library is connected to.
If you have selected "share entire library" go to Step 3, if you have selected share "share selected playlists" read on.
After clicking "share selected playlists" you must then select the playlists that you intend to share across your accounts and network. Once you have finished selecting the playlists, click "OK" to save the settings.
Overview:
In this step we:
1. Enabled iTunes sharing in the administrator's account, now, users on the local network may access the iTunes library, however, users on the same machine may not.
Step 3:
Now we will enable users on the same machine to access the library on the machine. This is achieved by logging in as each user, opening iTunes, opening iTunes preferences, and clicking "look for shared music". now all users on the machine may also access the library that the administrator controls.
This in effect will mean that the user will not need to use their user library, it will be provided to them via a pseudo network connection.
As a secondary measure, I have chosen to write a generic login script that will move any content from the user's "Music/iTunes/iTunes Music" directory to the trash and then empties the user's trash.
This is done through the use of an Automator Application: this application does the following actions.
1. Uses the "Finder" action "Get Specified Finder Items"
1a. The user's "~/Music/iTunes/iTunes Music" folder
2. Uses the "Finder" action "Get Folder Contents"
3. Uses the "Finder" action "Move to Trash"
4. Uses the "Automator" action "Run AppleScript"
4a. with the following:
on run {input, parameters}
tell application "Finder"
empty trash
end tell
return input
end run
IMPORTANT: Once the script is adapted to the user account it must be set as a login item. in order to keep the script out of the way i have placed it in the user's "Library" directory, in "Application Support" under "iTunes".
Overview:
Here we:
1. Enabled iTunes sharing in the user accounts on the host machine, in effect allowing all users of the machine to view a single iTunes library.
2. (Optional) I have created a login application that will remove any content that has been added to user iTunes libraries, this in effect stops other users of the machine from adding music and files to iTunes.
Step 4:
If it is not already enabled, open system preferences and enable Fast User Switching in Accounts Options.
Summary:
We have shared a single iTunes library across multiple user account, while still allowing for network sharing. This method is designed to save space on machines, particularly those with smaller hard drives.
I hope that this hint proves to be helpful and I hope everybody will give me feedback on my process.
regards,
Pete.
iBook G4; 60GB Hard Drive, 512MB RAM, Airport Extreme Mac OS X (10.4.6) iWork & iLife '06, Adobe CS2, Final Cut Pro. Anything and Everything!!!

how to share music between different accounts on a single computer

Multiple users under my name, can I transfer files/data onto just one user account if I have an external H.D. when I tried to delete info off one of the accounts it said I did not have permission? I assume I was in an account that was not admin.

I noticed I have set up 4 Admin user accounts under my own name with diff. variations as seen in the attchment. Some have a diff. password to log on to which I am able to do. This computer is used for my business and I need info that is scattered on the other 3 accounts to be in/on ONE admin account.
I don't know how i ended up with multiple accounts. Maybe due to having two 24" iMacs and multiple iPhones & iPad2 for me and family.
I use this computer for business and personal.
Due to multiple Admin user accounts I have important info scattered on the other accounts resulting in some accounts have some of the info to others having much more but not ALL. Some accounts have from a couple hundred songs, podcasts, etc. etc. to a few 1,000 on another Admin account.
I want to consolidate ALL of my info, files. songs, podcasts, pictures & email etc. into one Admin account and delete the other accounts to reduce confusion.
I was told by my local Apple authorized service shop that it is not easy but moving most of the info is possible. Their caveat was email would probably not be able to be moved other than forwarding each email I wanted out of each account and opening in the account I wanted to consolidate into.
As a side note, I get an error message at times saying that I do not permission/authority to delete / move files? What might be the issue when I encounter this type message?
Thanks for any help.
Bob

Have a read here Transferring files from one User Account to another
Stefan

Is there a way for an end user to see who has membership in a security group

Windows Server 2008 R2
Active Directory Domain
Windows 7 workstations
I am looking for a way that my end users can look at a folder security tab and then discover who has membership in the security groups listed.
Is that possible? Any drawbacks or concerns?

Hi Tod,
Based on my research, other than viewing group membership in ADUC, we can use this PowerShell cmdlet
Get-ADGroupMember GroupName and Net Group GroupName to view members in a group:
However, these commands can only be used on Domain Controllers or when connecting to DCs remotely. That’s because accounts and account membership are stored on Domain Controllers, therefore we can only view group membership on DCs.
More information for you:
Viewing the Direct Members of a Group
http://technet.microsoft.com/en-us/library/dd391915(v=WS.10).aspx
Net group
http://technet.microsoft.com/en-us/library/cc754051.aspx
Best Regards,
Amy

End user account

Similar Messages

Maybe you are looking for