Field level Access - OAM

Hi all,
I would like to know whether it is possible to provide field level access to an application using Oracle Access Manager.
Please let me know..!!
Thanks

Sagar has the point. You should check the OES and OAM certification for all versions you want to use. AFAIK OAM 11g and OES 10.3.4 run on WLS 10.3.3 only.
See the certifications for details: http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
--olaf

Similar Messages

Field-level Edit Access

Hello everyone,
I have 4 questions, all pertaining to what you can do with a field in APEX:
First, how to enable field-level Edit access in APEX? I understand I can apply authorization scheme on each page. So when a user has only View access, he/she can't edit the page. This is nice but what if out of a page, I want only one field being editable by an Administrator and not by the other groups, how do I do this?
Second, if I want an Administrator to be able to add a row to a pop-up LOV and he's a mere administrative user of the system and not the APEX administator, how best it is to do this?
Third, when a user logs in, how to ensure his login name and perhaps today's date already appear in a field?
Finally, when a field is filled in, how to disable that field from future modification by shading it for example?
Thanks for enlightening me on this.
Best regards,
Daniel

Sagar has the point. You should check the OES and OAM certification for all versions you want to use. AFAIK OAM 11g and OES 10.3.4 run on WLS 10.3.3 only.
See the certifications for details: http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html
--olaf

Can Oracle Access Manager (OAM) be used for configuring data-level access?

Hi,
Can OAM 10gR3 or 11g be used for configuring data-level access in PS 9.10 and OBI 11g.
This would mean that data-level configuration are stored centrally within OAM database and PS 9.10 pulls these settings for its appropriate Row and ChartField security and OBI 11g queries OAM database tables to populate the initialization blocks during login.
If you have configured this successfuly, please feel free to provide highlevel details/steps about the configuration and any complexities that can pre present.
Thanks.

I recently worked on an interesting implementation that utilized OAM configured against OID in which OAM was configured to control authentication/authorization and then all applications that were serviced by OAM utilized the users login to pass to the database at which point the Oracle database utilized VPD, which was configured against the same OID instance, to leverage user attributes/groups in order to configure fine-grained access control to data within the database. Not sure if this would work for you unless your requirements are similar but it worked very well for this particular implementation as it allowed them to have SSO for their own apps and for BI Publisher which then could pass allong the userid to be leveraged by the database to do fine grained access control.
Edited by: oblix_fan on Jun 23, 2011 8:10 AM

Column level access in Crystal Report Server

Hi,I have three fields in my Crystal Report. The crystal report will be exported to PDF by my customised web application. The application has a built in user security and access control model. However if user 1 logs in he should see all the 3 columns(database fields) on the exported PDF. If user 2 logs in he should see only first 2 columns as he has access to only those. We would also be using Crystal Report Server.I know this could be done in Crystal Report itself but is there any way to leverage column level access (and also row level) functionality using Crystal Report Server. The Crystal Report reports off an ODBC Datasource.It would be great if any one could help me in this regard. Cheers.  

If you were running the same version designer and server, you could open your reports straight from the repository, and save them straight back. Then you wouldnt have multiple versions of RPTs flying about.
I have just purchased a new licence for 2008 and an 2008 upgrade for a Xr2.
I don't think I completely understand, but we do have Crystal Reports 2008 and Crystal Reports Server 2008 available for purchase.

FIELD WISE Access Permission????? Help me

Hi all,
 I want to specify the Field level of Access Permission for the SBO Users. 
For Example
i) I have one Screen named 'SALES ORDER AMENDMENT'
ii) Here i added four checkboxes for the CGM,HOD,Manager,Supervisor.
 If the Manager login into the Company he only access the Manager CheckBox.Like that all users.
Please give Solution for FIELD WISE Access Permission .
Regards,
G.Suresh.

Hi Suresh,
You can do this in a couple of ways. Herewith two suggestions. I suggest you add a user-defined field to your user's window that will specify whether it's a CGM, HOD, Manager or supervisor or normal user. Then you can get the details of the logged in user when the add-on starts up using a query or the user object.
Firstly, when you custom form (sales order amendment) is loaded you can disable the check boxes that does not belong to that user.
Secondly, you can also check whenever these check boxes are checked (check on before action) what the permission for the user is and if he doesn't have access, set the BubbleEvent to false, this will mean that the user will not be able to change anything on the controls that is checked, unless he has access.
Hope it helps,
Adele

Field level trigger on qualifier field

Hello,
Here is my scenario.
I have a qualified field : ACTIVE FLAG in address qualified table.
What i want to do is if the value of this field changes to N (possible values of this field : Blank,Y and N),i want my workflow to trigger.
I know its possible with field trigger option where you create one time stamp field and will give the field you want to comare
but in case of qualified tables you can not select qualifier as a selected field for timestamp field.you can only select non qualifiers.
is there any other way this can be achieved?
thanks
Bindi

SharePoint doesn't provide field level permissions. Fellow MVP Dan Holme has a good article that recommends some approaches on this here:
http://sharepointpromag.com/blog/3-approaches-restricting-access-sharepoint-columns-and-metadata
Another approach you could take is to make the form an InfoPath form from in an InfoPath LIBRARY instead. This way you can control the form fields and prevent users from directly editing fields. It also plays really well with workflow.
I trust that answers your question...
Thanks
C
|
RSS |
http://crayveon.com/blog |
SharePoint Scripts | Twitter |
Google+ | LinkedIn |
Facebook | Quix Utilities for SharePoint
thanks for your reply , seems that creating two lists will work for me better. but can you provide some useful links that talks about how to create two lists and link them , and specify different permissions for each list using web-parts...

Masking at field level

Hello SDNers,
My concern is to allow view to several users by making MASKING AT FIELD LEVEL.
To make it clear:
Take one example of automobile giant in which certain views are needed :
a)Higher Managment View (Total Access to all the fields,say all 10 fields)
b)Sales View (which should be given access to say first 4 fields)
c)Finance VIew (which needs to have acess to some 7 fields)
As in the case mentioned i need Masking at Field level.
Share your views.
Solution will be rewarded.
Rgds,
Krutarth

Hi Krutharth,
Where do you want that view in data manager or you want to view your user specific records (Fileds) on Web UI. If you want to view the records on web UI you can arrange the user specific views in the Config UI by selecting the fields you want your specific user to view.
You can have field level masking i.e., you have to configure such masking on specific user in the config UI.
Data Manager you cannot impose such mask at field level.
Reward points if helpful.
Prasad.......................

Question on field level help and bookmarking

Hi All
I have a question about field level help and bookmarking fields. I did this before but i can't remember how. Right now, when you click on a field in my help to access our software application the page displays but at the top and not at the exact field description. I don't remember how I did this in my other help files.
Please help me so I can bookmark my field level help to go exactly to my definition on the page and not just the top of the page everytime.
Thanks
Caryn

Hi Martin!
Take a look at these sites which will provide you more information about your problem.
[http://apex-at-work.blogspot.com/2008/10/apex-select-list-with-dynamic-help-text.html|http://apex-at-work.blogspot.com/2008/10/apex-select-list-with-dynamic-help-text.html]
TRICK: Dynamic Item Help Text as Tooltip
[http://apex.oracle.com/pls/otn/f?p=11933:121|http://apex.oracle.com/pls/otn/f?p=11933:121]
Regards,
Tobias
[http://apex-at-work.blogspot.com/]

Why I can not find field:Level in Project Hierarchy in BAPI_BUS2054_NEW?

Dear experts,
Why I can not find the field of "Level in Project Hierarchy" in structure BAPI_BUS2054_NEW?
I only define the data to upload wbs:
PROJECT DEFINITION
PROJECT DESCRIPTION
PROJECT PROFILE
WBS Element
WBS description
Can you tell me which fields must to upload?
Looking forward to your reply.
Many thanks.
Merryzhang

Anyone can help me ?I need the field "Level" in BAPI_BUS2054_NEW,But I can not find it.

Fields for access Z001 10 missing (Pricing Sales/Distribution)

Hi Gurus,
I tried creating access sequence and condition table for a condition type. but i get this error when creating the error.
Fields for access Z001 10 missing (Pricing Sales/Distribution)
Thanks,
Paul

Hi,
step1: tcode: v/07
step2: select access seq Z001
step3: click access (left side)
in this how many access you have created and on which you have saved your condition record.
step4; select access
step5: click fields (left side)
over here how many field are visible to you can you tell us that.
Where you are getting error can you specify that also.
While creating sales order or while creating condition record.
Regards
Raj.

Issue with the site level access in the trial ac

I am following the given video to get an understanding of site level access.
SAP HANA Cloud Portal Setting Access Levels in the Site - YouTube
I could not find the option of setting the site level access to either public, restricted or private in my trial ac. in the site settings as per the given video above. Could this be some authorization issue or some settings that needs to be done.

Hello,
The site access level configuration is now under the Access Managment entry in the side panel.
Please follow the documentation in the link below.
SAP HANA Cloud Portal Documentation
Regards,
Eliel.

Any option to restrict SE16 record level access based on company code?

Hi All,
I have a requirement to restrict record level access in SE16 based on company code.
Our SAP system has two company codes. The requirement is that users of one company code should not be able to see records of other company code in SE16.
Is it possible through some exits/badis/other methods?
Thanks in advance.
Regards,
Arun Mohan

You could write a small front end that accepts the company code, applies custom authorization code for each value and retains or removes, then calls the transaction and enters the selections the user requested and that your authorization check resulting in "passing".... Of course, you'd have to block those users from "pure" SE16... I once worked in situation similar, users in one country couldn't see USA data, etc. I think someone wrote an entire new program, called by ZSE16, for that.

How to populate the Error stack during error records in field level routine

hi,
I am capturing the error records in Field level routine in transformation. now i want these records to reflect in error stack.
i am using 'Append monitor-rec to MONITOR' at the moment but i cant see any records in error stack.
but when i am using the same statement in start routine i am getting records in error stack.
can anyone please help as to how can i populate error stack through field level routine?

Hi,
Try to do it in the end routine instead of the field routine.
It should work.
Regards,
Joe

Setting Item level access rights on sharepoint list item in ItemAdding event handler

Hi ,
I am using sharepoint 2013. I am trying to set item level access rights when a list item is added using the following code snippet,
public override void ItemAdding(SPItemEventProperties properties)
base.ItemAdding(properties);
ConfigureItemSecurity(properties);
private void ConfigureItemSecurity(SPItemEventProperties properties)
var item=properties.ListItem;
SPSecurity.RunWithElevatedPrivileges(delegate()
using (SPSite site = new SPSite(properties.SiteId))
using (SPWeb oWeb = site.OpenWeb())
item.ParentList.BreakRoleInheritance(true);
oWeb.AllowUnsafeUpdates = true;
var guestRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Reader);
var editRole = oWeb.RoleDefinitions.GetByType(SPRoleType.Editor);
SPGroup HRGroup = oWeb.SiteGroups.Cast<SPGroup>().AsQueryable().FirstOrDefault(g => g.LoginName=="HR Team");
SPRoleAssignment groupRoleAssignment = new SPRoleAssignment(HRGroup);
groupRoleAssignment.RoleDefinitionBindings.Add(guestRole);
SPUserCollection users = oWeb.Users;
SPFieldUserValueCollection hm = (SPFieldUserValueCollection)item["HiringManager"];
SPFieldUserValueCollection pm = (SPFieldUserValueCollection)item["ProjectManager"];
SPFieldUserValueCollection pmChiefs = (SPFieldUserValueCollection)item["ProjectManagerChief"];
item.BreakRoleInheritance(true);
item.RoleAssignments.Add(groupRoleAssignment);
foreach (SPFieldUserValue staffMember in hm)
SetRightsOnItem(item, staffMember, editRole);
foreach (SPFieldUserValue staffMember in pm)
SetRightsOnItem(item, staffMember, guestRole);
foreach (SPFieldUserValue staffMember in pmChiefs)
SetRightsOnItem(item, staffMember, guestRole);
item.Update();
private void SetRightsOnItem(SPListItem item, SPFieldUserValue staffMember, SPRoleDefinition role)
SPUser employeeUser = staffMember.User;
var userRoleAssignment = new SPRoleAssignment(employeeUser);
userRoleAssignment.RoleDefinitionBindings.Add(role);
item.RoleAssignments.Add(userRoleAssignment);
Nothing is happening though... Is the event handler the right place to do this?
thank you

Hi ,
You can refer to the code working in my environment:
using System;
using System.Security.Permissions;
using Microsoft.SharePoint;
using Microsoft.SharePoint.Utilities;
using Microsoft.SharePoint.Workflow;
namespace ItemLevelSecurity.ItemSecurity
/// <summary>
/// List Item Events
/// </summary>
public class ItemSecurity : SPItemEventReceiver
/// <summary>
/// An item was added.
/// </summary>
public override void ItemAdded(SPItemEventProperties properties)
SPSecurity.RunWithElevatedPrivileges(delegate()
try
using (SPSite oSPSite = new SPSite(properties.SiteId))
using (SPWeb oSPWeb = oSPSite.OpenWeb(properties.RelativeWebUrl))
//get the list item that was created
SPListItem item = oSPWeb.Lists[properties.ListId].GetItemById(properties.ListItem.ID);
//get the author user who created the item
SPFieldUserValue valAuthor = new SPFieldUserValue(properties.Web, item["Created By"].ToString());
SPUser oAuthor = valAuthor.User;
//assign read permission to item author
AssignPermissionsToItem(item,oAuthor,SPRoleType.Reader);
//update the item
item.Update();
base.ItemAdded(properties);
catch (Exception ex)
properties.ErrorMessage = ex.Message; properties.Status = SPEventReceiverStatus.CancelWithError;
properties.Cancel = true;
public static void AssignPermissionsToItem(SPListItem item, SPPrincipal obj, SPRoleType roleType)
if (!item.HasUniqueRoleAssignments)
item.BreakRoleInheritance(false, true);
SPRoleAssignment roleAssignment = new SPRoleAssignment(obj);
SPRoleDefinition roleDefinition = item.Web.RoleDefinitions.GetByType(roleType);
roleAssignment.RoleDefinitionBindings.Add(roleDefinition);
item.RoleAssignments.Add(roleAssignment);
Thanks,
Eric
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected].
Eric Tao
TechNet Community Support

E-Recruitment - Requisition - Infotype Field Level Change Log

Hi Experts,
We are implementing SAP E-Recruitment, and would like to know how to capture the changes made in Requisition at infotype field level.
For example: If a support team member is added/delete in the Requisition (Tab - Support Team), then these changes (NEW/DELETE) at the infotype field level are required.
I have tried to maintain the infotype and the required fields in V_T582A, V_T585A, V_T585B and V_T585C. But didnt get any result when I executed the report RPUAUD00. Is there any additional configuration required for this?
Please adivse.
Thanks and Regards,
Dinakaran R

Hi,
You can just to that with the infotype table log. Support team is stored in table HRP5131.
Regards,
Nicole

Field level Access - OAM

Similar Messages

Maybe you are looking for