Fetch PCD and UME roles and worksets
Hello,
I want to fetch PCD and UME roles and worksets of the logged in user in a web dynpro java application. Can some one help ?
Regards
Mrinalini
hi mriNalini
check this wiki links for web dynpo java
[Retrieving all iViews,pages,worksets from PCD |http://wiki.sdn.sap.com/wiki/display/WDJava/RetrievingalliViewsfromPCD]
[web dynpro java home page wiki|http://wiki.sdn.sap.com/wiki/display/WDJava/WelcometoWebDynproJava%21]
[Get Current Logged In User, using Web Dynpro for Java |http://wiki.sdn.sap.com/wiki/display/Snippets/GetCurrentLoggedInUser%2CusingWebDynprofor+Java]
and
[Fetching all the Portal Roles Assigned to the Current Logged in User, Using Web Dynpro for Java|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/80ef07f8-3e6c-2b10-9cb7-81d4ef2e294a?QuickLink=index&overridelayout=true] ( document)
hope these links solve your problem
Regards,
Maheshchandra
Similar Messages
-
I am developing a recursive tree in a Web Dynpro App. My tree has some nodes and subnodes. Under the subnodes i have documents. Depending to the permission of the users should be decided what can the user do with the documents, for example, create, upate, delete and so on. I need to check the authorization of users. I want to follow the conzept like the Web Dynpro tutorial RentCar APP with Actions und Permissions. If a user logs on, i can get his UME role and group. My question is: if it is possible to list the permissions behind of one specific role, which is assigned to the user or a group.
In short I want to list the permissions and not only check if the user has it or not.
Please help me.
Regards
Hairong ZhaoHi Sudhir,
thank you very much for your quick answer. But it can't resolve our problem really.If we only use hasPermission() method to check if the user has right, the efford to check user in our case is too great .
I try to describe our problem exactly. In our case, thers is possible that tausend documents can be attached to a node. we can't create a permission for every document. We create for every node a role, but for document we haven't role. If we don't use the conzept with Actions and Permissions, how can we check the permission of the users, have you another idea?
Regards,
Hairong Zhao -
Where are all the UME actions and UME roles stored?
Hi there,
I had a look at the SAP<SID>DB.UME* tables, it seems to me that they are not stored there.
What I wanted to achieve is to build a list of all user, user to role assignment, all UME actions, and role to action assignment so that we can do some analysis of the data.
Another related question is about the SPML based java API for user management in UME. It only allows you to list all the UME roles. What about the J2EE security roles? It seems to me that by using this API, you can not get a complete picture of user authorization, which includes both UME role and J2EE security role. Any comments?
Thanks in advance
GGHi,
I would suggest to use [UME Java API|http://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/package-summary.html] instead of reading from the DB tables. You can get all users using methods of the class IUserFactory. The class IRoleFactory has method getRolesOfUser which gives you all roles for each user. Don't forget about roles assigned to user groups. Have a look also at package com.sap.security.api.acl. You should be able to get all ACL entries using [IAclManager|http://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/acl/IAclManager.html]. Especially, check the code example. I've never done this but from reading javadocs it looks like it should be possible.
Have a look also at this [document|http://help.sap.com/saphelp_nwce711core/helpdata/en/a4/d39b3e09cdf313e10000000a114084/frameset.htm]. It describes the authorization concept of the AS Java.
Cheers -
Notification Task needs UME role and other value
Hi Experts,
I have a BPM notification task which needs to go to two UME roles (always same) and a UME user (dynamic selection).
This UME user is already stored in my context data.
However, when I configure the "To" tab of the notification task, how do I achive this.
If I select "Choose one or more UME principles" - I can assign the 2 UME roles. But then how do I get that UME user?
Please help.
Thanks,
Rahim.Hi Rahim,
You want to use an expression and one of the getPrincipal built-in mapping functions.
How are your user id and role names formatted? If you have the full UME name you can use getPrincipal or getPrincipals (for a list of values).
If you only have the name itself then you use getPrincipalByUniqueName - the identityType parameter is 1, 2 or 3 indicating whether its a user, group or role respectively. That only returns a single value ... so if you need to process multiple values then suggest you create a EJB-based mapping function using the UMFactory API to do something similar.
Regards,
Jocelyn -
Hi,
I am trying to enable/disable a feature based on user.roles.
Added a constraint for that feature as below,
<adfmf:constraints>
<adfmf:constraint property="user.roles" operator="contains" value="manager" id="c1"/>
</adfmf:constraints>
In this case, Users have manager role should be able to access this feature.
My AccessControlService response is
{"userId" : "sales_mgr","roles" : [ "manager","MOO_OPPORTUNITY_SALES_MANAGER_DUTY","ZBS_ENT_SALES_MANAGER_DUTY"],"privileges" : [ "managerPriv","ZSF_DEFINE_SALES_FORECAST_PRIV","MOO_MANAGE_OPPORTUNITY_GROUP_SPACE_PRIV"]}
Repsonse has "manager" as one such role.
After adding constraint to the feature, am unable to access it.
I tried many possibilities like operator="contains" or "not" or "equal", but no use.
I don't know what is going wrong. Appreciate you help.
Thanks.If you are on 11.5.10 or greater or standalone 2.6.4 if you pass the responder value to wf_notification.respond API it should be updated in wf_notifications.responder column. The comments is now updated in wf_comments table against the notification id and not wf_notifications.user_comment column.
Thanks, Vijay -
Delegated user admin and export Roles&Groups ?
Hi experts,
I'am searching some tips in order to allow my users's delegated user admin group to export UME Roles and Group. however, my users met no problem to assign their roles to themselves
I'am working on EP 7.0 sp14 and my UME is an abap system
Can you give me some advice to go out from this issue ?
Best regards,Hi experts,
I'll try to complete my question:
I've added Batch action to my delegated user role, but it's not enough to perform export operation.
I hope if i can find a combination of actions without "Manage ALL" that i can assign to my delegated user role.
Best regards, -
Where are role and administrator settings saved?
We have had issues in the past that have caused us to have to
re-setup our site, including all administrative settings and all
roles and users. Surely all of this is saved somewhere. If we just
knew where, we could backup the info for an easier restore if
further problems ensue.
Anyone know how to backup site settings?I got the following reply on a separate forum:
quote:
For a website that has been administered by Contribute
(Publishing server is not enabled), you would find an _mm folder in
the website root on the remove server. This is a contribute
specific folder and it contains the administrative settings, role
information and users.
For CPS managed sites, the _mm folder still holds the
information about the administrative settings and role information.
The user information of the sites are stored in the Database folder
of CPS. The Database folder can be found in the following location,
<CPS Install Path>\Database. -
Is it possible to export and import the roles and users tables?
Hi,
is there any possibility to export and import the role and user definitions?
We have a SAP MDM repository with a lot of roles and users and also with a lot of changes.
And now I'm searching for a fast and efficient way of managing the roles and users.
Thanks and Regards, MelanieHi Melanie,
There is no export/import functionality for roles and users. The only way to manage these in an automated way would be to write a program that uses the Java or ABAP APIs. Both APIs expose functionality to create, update and delete roles and users.
Hope this helps,
Richard -
Asynchr Calls: Partner Role and My Role must be filled in Partner Link dial
Asynchr Calls: Partner Role and My Role must be filled in Partner Link dialog ?
Is the statement true?
Can I leave for synchronous calls one of the role spec vacant?
AFAIK only in asynchronous calls both drop down values must be specified.
PeterThanks for fast reply,
Yes, I defined Partner Role and My Role,and also defined a port type for calling back the request.
I just don't know what's the endpoint address which my asynch web service should use to response to my BPEL process.
Is there anyway to find out what's the endpoint address which the BPEL processes receive the callback response from asynchronous services?
Can I get the address which BPEL engine uses to get the responsse from a called web service?
I guess it should be an obvious work but I'm really disappointed with that. -
Basis Team Composition / Roles and Responsbilities
Hi All:
I am wondering if there is information available on standard Basis team composition and associated roles and responsbilities.
Here are my thoughts on some of the key roles we would need: Basis Project Manager, Basis Lead Consultant, Basis Administrator, Environment Build Leads, SAP Transport Manager, Oracle Admin, Data stage Admin...
Any help will be greatly appreciated.
Thanks in advance,
Anwer>
Anwer Nomani wrote:
> Hi All:
>
> I am wondering if there is information available on standard Basis team composition and associated roles and responsbilities.
>
> Here are my thoughts on some of the key roles we would need: Basis Project Manager, Basis Lead Consultant, Basis Administrator, Environment Build Leads, SAP Transport Manager, Oracle Admin, Data stage Admin...
>
> Any help will be greatly appreciated.
>
> Thanks in advance,
>
> Anwer
There are sites that have a person devoted to pressing the "Import request" button? I want to work there. I like how your BASIS team has 8 people with only 2 of them doing actual BASIS haha. And given that of your 2 BASIS people, one is a consultant (i.e. a person who gives professional or expert advice) that leaves you with 1 person doing all the work... -
I would like to download a list of all users and what roles and profiles each has. I did it once before but now I can't remember the table names. Can anyone help?
Hi,
Roles:
SAP_BW_DEVELOPER
Profile:
SAP_ALL
S_BW_D____
S_BW_D____1
Authorizations are
S_Rs_Admwb_a
S_rs_adw_a
S_rs_exp_a
S_rs_wb_all
Links for user roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/6714b6439b11d1896f0000e8322d00/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/42/271d24d86211d2961a0000e82de14a/content.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/e4/15e48efd6c11d296430000e82de14a/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/d3/559a4271c80a31e10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/4e/52b74065448431e10000000a1550b0/frameset.htm
For profiles and authorisations:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
http://help.sap.com/saphelp_erp2005vp/helpdata/en/20/efcbfed8a511d397110000e82de14a/frameset.htm
Also chk this link..
http://www.bwexpertonline.com/archive/Volume_04_(2006)/Issue_10_(Nov_and_Dec)/V4I10A2.cfm?session=
screenshots..
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1b439590-0201-0010-ea8e-cba686f21f06
Hope this helps,
regards
CSM reddy -
Portal Design - Best Practices for Role and Workset Tab Menu
We are looking to identify and promote best practices in SAP Portal Design.
First, is there a maximum number of tabs which should exist on the highest level tab menu, commonly called the role menu? Do a large number of tabs on this menu cause performance issues? Are there any other issues associated with a large number of tabs on this menu?
Second, can the workset tab menu be customized to be 2 lines of tabs? Our goal is to prevent tab scrolling.
ThanksDebra,
Not aware of any performance issues with the number of tabs in the Level 1 or 2 menus, particularly if you have portal navigation caching enabled.
From an end user perspective I guess "best practice" would be to avoid scrolling in the top level navigation areas completely if possible.
You can do a number of things to avoid this, including:
- Keep the role/folder/workset names as short as possible.
- If necessary break the role down into multiple level 1 entry points to reduce the number of tabs in level 2.
An example of the second point would be MSS. Instead of creating a role with a single workset (i.e. level 1 tab), we usually split it into two folders called something like "My Staff" and My Finance" and define these folders as entry points. We therefore end up with two tabs in level 1 for the MSS role, and consequently a smaller number of tabs in level 2.
Hope that helps......
Regards,
John -
Roles and Worksets are indicated several times in Top-level-navigation.
Hallo Experts,
I dont understand why the Roles and Worksets in the Top-level-navigation are displayed several times. How can I change that?
Thank you very much
regards,
GalynaHi,
Which roles do you see several times?
If it is the home tab than you might have assigned yourself for example, eu_role, eu_core_role and cc_role.
If under the Home you see for example the Company, Work, Team... worksets twice than again you might have assigned yourself for example, eu_role, eu_core_role and cc_role.
If these are administrative roles than might have assigned yourself these roles through multiple groups/roles assignments.
If you will say exactly which roles/worksets you see several times we will be able to help more efficiently.
Roy -
Filtering role and workset content
Hi All,
We have the requirement for filtering role and workset content, for that I have followed one sample example from below sdn blogs link
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/3367e690-0201-0010-d285-c69bd884c9f3
I want to do the same for the departments also, can you guys please guide me how it can be done.Hello,
Can you guide me on the same.
Thanks & Regards,
Pravin -
Hi All,
i have created a new user "TEST". i want to assign content_admin_role to that user with the restriction that "Unification" and "Portal Content Translation" worksets should not be displayed on the portal.
how to truncate "Unification" and "Portal Content Translation" worksets at the time of assigning the content_admin_role role to the user.
kindly help me out.
Regards,
VenkatHi venkat,
My answer is same as Gopal.you can search for standard content_admin_role,edit that role and remove these worksets or page from the this role.
Assign this new role to the user.you can also try by giving entry point for these 2 workset as "No"
It works.Let me know if you have any problem.
Regards
Rani A
Maybe you are looking for
-
Best Practice Question on Heartbeat Issue
Our environment consists of 2 Fiber Channel Hard Drive enclosures. One is an HP P2000 that has 12 2TB disks in it, piggy backed on these controllers is a D2700 with 24 SFF drives, 15,000 RPM and 146GB each. This enclosure has full RAID and volume/LUN
-
As if I needed a reminder of why I love Macs and hate PC's... My in-laws have previously insisted on sticking with a Windows PC but have recently added an iMac. Since they know nothing about computers, I am the setup guy. In any case, I have a few pr
-
Do I have to download an app to be able to print from my I pad?
How do I set up my I pad to print ?
-
+Also posted here following a user advise in the Time Machine forum+ I've got a Time Capsule and want to start a new full backup of my Mac keeping a copy of my previous series. Since it seems that it's not possible to partition a TC an alternative so
-
HT3951 Apple TV Purchased Movie Errs Out
Hi apple experts! I purchased a movie (Avengers) on apple tv and it will not play (error states content cannot be viewed & try back later which was 2 days ago). It has been charged to my acct. and I dont see a way to redownload it. Other movies I pu