Finding user rights

Is there any way to get the list of users in Essbase.5.4.2 for each application and to which groups they belong ,their access rights etc in an easy manner?

refer to this thread
User access rights list
it may be helpful

Similar Messages

Find user rights related to schema

hi every body
i am stucked in a problem.
i have an oracle 9i database release2 on windows server 2003.
there is schema IINVENTORY and there is 96 tables in this schema. there are many roles creted in this database.
how i can find which roles are created for this schema.
there are plenty of users created in this database. now i want to find which users are assigned which roles
regarding this schema INVENTORY.
i also search the forums, google, tables like privs but i could not find my results.
plz help me.
thanks in advance.
rehan fsd pakistan

Use this script to find out the roles assigned to tables of schema
SELECT *
FROM role_tab_privs
WHERE table_name IN (SELECT table_name
FROM all_tables
WHERE owner = 'SCHEMA_NAME')- - - - - - - - - - - - - - - - - - - - -
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com

Missing user rights assignment entries for many security policies in list exported via secedit

Hello,
First of all, I posted this same question on The Official Scripting Guys Forum! but didn't get the answer to this exact question (even though I received a lot of useful relevant info). That is why I am posting here. This is a more appropriate
forum for the question. (Also posted on Windows Server 2012 General two days ago and didn't get a response at all).
OK, question time:
I want to modify the user rights assignment for a local security policy. In the GUI, find User Rights Assignment as follows: Win+R -> Enter "secpol.msc" -> Go to Local Policies -> Go to User Rights Assignment.
So, to modify a particular use rights assignment via a script, I need to export the INF file using secedit, modify it and then configure using the modified file using secedit. To export the INF file, I am using:
secedit /export /db C:\Windows\security\database\secedit.sdb /mergedpolicy /cfg SecPolicy
Now, the problem is that the INF file exported doesn't have all the user rights assignments that I see in the GUI. For example, the policy "Restore files and directories" has users/groups in its settings but it doesn't show up in the INF file.
In fact, most don't. Only five do and all these five have a different symbol next to them in the GUI. How are these policies different? What do I need to do to export all the policies?
EDIT: Adding screenshot of what I see:
Thanks!
-Rohan.

On Fri, 11 Apr 2014 18:26:50 +0000, Rohan PN wrote:
Now, the problem is that the INF file exported doesn't have all the user rights assignments that I see in the GUI. For example, the policy "Restore files and directories" has users/groups in its settings but it doesn't show up in the INF
file. In fact, most don't. Only five do and all these five have a different symbol next to them in the GUI. How are these policies different? What do I need to do to export all the policies?
Can you post a screen shot? My guess is that what you're seeing is that
secpol is only exporting the local settings and not ones that are set by a
GPO in AD and that will also be the difference between the icons.
Paul Adare - FIM CM MVP
Although the Buddhists will tell you that desire is the root of suffering,
my personal experience leads me to point the finger at system
administration.
-- Philip Greenspun

How to set up time machine so it can view old backup after renewal of user rights ?

I am newbie in the mac world but I am very happy to use the devices I have.
I just both and setup time capsule and did firt initial backup with time machine into account I have setup on the TC. But after while I was not able to view my user folder, so I resetup the user rights.
But now when I turn on time machine, I say that I didnt perform initial backup. In finder I am able to see and acces my folder on TC now and there is also a file with backup with name Václav - Mac mini.sparsebundle just in the root of my user folder on TC.
Can you please help me how to tell TM, that there is a initial backup that can be used for other incremental backups in the future ?
Thanks for your help.
Vaclav.

I did that. But and then reopen TM but still I dont see backup performed any suggestions ?
"Inherit" a backup
Copy the following after the prompt, and leave a space, but do not press Return yet:
sudo tmutil inheritbackup
If your backups are on an external HD, locate and open the drive in the Finder window. At the top level of the drive is a Backups.backupdb folder containing a folder named for your old Mac, per the sample. This is what you want the new Mac to "inherit." Drag that folder to the Terminal window.
(If your backups are on a Time Capsule, locate the sparse bundle containing the backups for your old Mac via the Finder, and drag it to the Terminal window):

Can't find user exit or enhancement at RGJVBR15

Hi everyone,
I need your help guys. Right now,i'm developed sapscript for billing statement (cash call and expenditure). I have finished the form but i have problem at print program RGJVBR15. This print program is called by RGJVBR10 (Tcode : GJ14 --> Hard Copy Billing).GJ 12 and GJ 13 is used to extract data that will be used by forms.
There is statement like this in RGJVBR15 at subroutine CREATE_EXPENDITURE (Line 1421 in include file RGJBF_I1) :
AT NEW C5_CURR. --> Group by funding currency
   PERFORM POPULATE_SPOOL_ID
ENDAT.
PERFORM F6100_PROC_... -> This will be used to open form,write form (sapscript)
AT END OF C5_CURR.
ENDAT.
The problem is that i want to change this logic. I want to change the standard logic (display report group by funding currency), i want to ignore this and instead using group currency. So there only one report produced with one currency only (if using standard logic there is more than 1 report based on funding currency). But i can't find user exit or enhancement in this SAP Standard Program. Is anyone know if there is user exit or enhancement in this program? I don't want to use implicit enhancement because it's will produce problem when client want to upgrade their system. Thank you.
Best Regards,
Satria

hi,
for tcode GJ14 user exits avaliables are
Exit Name           Description
JVA-IM-1             Joint Venture: Integration Manager Set Intercompany Lines
JVA_IM_2            User Exit Splitting
JVA_IM_3            User Exit Check Document
regards,
paras

Enable User Rights using Adobe Acrobat Professional 7

I created an editable PDF form using LifeCycle Designer 7.0. My goal is to have users fill out the form and email the actual filled out form not the XML code. I added a regualr button with the following java script.
event.target.submitForm({cURL:"mailto:[email protected]?subject=Submitted Form&body=Please find attached the completed form.",cSubmitAs:"PDF",cCharset:"utf-8"});
Show = Click
Language = JavaScript
Run At = Client
When I test the button in Adobe Professional or in LifeCycle the button works fine. However when I open the file in Reader 9, it does not work. I do not encuonter any error messages. Nothing happens when you click on the button. I thought that users rights need to be enabled in order for it to work. Unfortunately I do not see how to do this Adobe Acrobat Professional 7. I do not have Adobe Acrobat Professional 8. Any ideas on what I can do to correct this issue?

For Reader users and AA7, your only choice is to have the XML file submitted. Then simply open the form in Acrobat and import the XML data file to fill the form. This will be exactly what the user saw when they submitted it. Thus there is no need to submit the entire form.

Upgrading to Acrobat Pro XI / Adobe Reader XI and enabling user rights

My company is a little behind on software updates and I'm going to ask for Adobe Reader XI to pushed out company wide since allows the user to save a filled-in PDF form.
Right now I'm using Acrobat Pro X, and suspect I will need to upgrade as well.
My questions are:
With the new-found ability of Reader to finally be able to save a filled in form, how does this effect the "enabling user rights" scenario?
Is it needed if the entire company is using Adobe Reader XI?
I did a test in Adobe Reader XI, and sure enough, I was able to save a filled-in form...BUT, I could not digitally sign the form.
Is this where the enabling user rights is still mandatory?
Or is this because the form was designed in Acrobat Pro X?
Does Acrobat Pro XI work around this?
I know I don't need to upgrade to Acrobat Pro XI to continue making forms, but should I?
Thanks for your feed back, and I look forward to reading your replies

Thank you, George, for the prompt reply!
I suspected as much, but couldn't find a clear cut answer in my searches.
The tab order update alone has convinced me its worth pushing for the new Acrobat Pro XI.
The update to Adobe Reader XI will make many of our forms easier to get into the digital workflow, and I'm looking forward to getting use further away from a paper-based system

Can't Find "Users Teams"

I just installed Service Desk 7 and I'm trying to configure it for testing; we have a valid license. I have full admin rights to the server (SLES 11 SP2, mysql) and Service Desk. I can't, for the life of me, find where to create new teams or organizational units.
The documentations says:
Users > Teams
Where ever I find "user" I can't then find a path to "teams." The default team and organization are there, but that's no help in the long run. The initial install seems too simple for me to have messed something up. What am I missing?

You need to login as supervisor for adding teams. You will see that in the user(technician) view Users->teams
On adding organization units - you can do it in two ways
1. Organizational Unit relationships can also be mapped from the authentication(LDAP) server. Make sure you add the company name, department name to the customer properties in your ldap server. To activate Customer Organizational Unit mapping, select Yes for the Import Customer Organizational Units option (Setup->LDAP->Advanced) and map the attributes.By default this is not enabled.
2. If you want to add Organizational units from with-in service desk then select Yes for Mixed Mode for LDAP/AD (Setup->Privileges->Customer)

User rights on forms

Hello
Does anyone know how i can set user rights such as save etc on forms?
This is really getting frustrating!!!
I have made a form in Designer and i want people to be able to fill it out and save it with the information filled in using Adobe reader. This does currently not work and i cant find any setting for activating this in the form.
Please help

Hello Torbjorn,
Adobe LiveCycle Reader Extension ES will activate this feature. If you want users to be able to do more than simply read a PDF document or submit XML data file you'll need to install LiveCycle Reader Extension. Adobe LiveCycle® Reader Extensions ES software, allows you to activate functionality within Adobe Reader (version 7 and above), enabling end users to save, fill in, annotate, sign, and submit PDF documents and forms online or offline. LiveCycle Reader Extensions ES works with existing IT assets to create an automated environment for capturing information and feedback.It allows you to embed usage rights within an Adobe PDF document. These usage rights "turn on" functionality within Adobe Reader, so end users can view and interact with PDF documents.
Features & Benefits: http://www.adobe.com/products/livecycle/readerextensions/features.html
Trial Download: http://www.adobe.com/devnet/livecycle/trial/
LiveCycle Reader Extensions ES Overview(Page 37-39): http://help.adobe.com/en_US/livecycle/es/overview.pdf
Hope this helps.

Find User Exit in MIR7 to validate Vendor info

When incoming invoice is being parked in transaction MIR7, I need to find user exit to add validation/warning if vendor has multiple PI partners in the vendor master. It has to happen when user types in PO number and hits enter key this is when vendor info is retrieved in top right corner of the screen.
Any suggestions/recommendations would be greatly appreciated.
G.B.

It looks like function module MRM_HEADER_CHECK is called from fm MRM_INVOICE_CREATE during invoice creation. I tried to set break points there, but it does not seem to be executed when I need it.
I already know how to check for multiple PI partners ( table WYT3 ). What I need is to find a user exit in MIR7 with PO # available when user types in PO number and hits enter key and vendor info is retrieved in top right corner of the screen. I need something similar to routine USEREXIT_XKOMV_BEWERTEN_INIT in include RV61AFZB, but PO # is not available there. Any ideas?
Thanks in advance,
G.B.

Advanced user rights and 500 users of my PDF Form

I am owner of Acrobat Pro & Livecycle Designer ES. I have done interactive pdf form and i would like to sell it to my client. My client would like to put it in intertet for his customer. I suppose that would be more than 500 answers in a year. They will collect data and post by e-mail or post to him.
What should i do to do it legally (i would like to save it locally)?

LiveCycle Reader Extensions is (was) part of the ADEP enterprise portfolio. There are no price lists as each package is tailor-made for a customer - to discuss pricing and installation options you must speak directly to Adobe Customer Support.
martinbartosh wrote:
@Bernd. OK i understand your point of view. So please tell me how is it with that server product. May i rent this product from hosting company or only i can buy it for heavy cash and put it on my own server? Is it allow to resell? Where is price list? Why i can`t find any reseller to rent me that server for small company. Is that only allowed for enterprise who has thousands of servers and did not resell it to small people. Please give me opportunity for cash (which small firm can pay) to save it localy without changing advanced user rights. If i had opportunity i would like to buy it but i fell that i can`t. Maybe i am wrong. So please tell me what should i buy to do that. Please tell me also how much it cost and where is any price list to that. I represent few persons company and i can afford normal price software as Creative Suite and not afford buying server for 50K or something like that.

User Rights Delegation via Powershell (Server 2012)

Hi
In the Exam Ref 70-414 book the author refers the the following powershell cmdlets in server 2012 to assign /delegate user rights by using the constant names.
The cmdlets;
Get-privilege
Grant-privilege
Revoke-privilege
Test-privilege
I am not sure if i'm missing something blatantly, but i seem not to find any information or syntax on this, even after updating powershell help, it doesn't recognize the cmdlets.
Any help will be appreciated.

Here this will tide you over:
PS C:\scripts> function Get-Privileges{whoami /priv /fo csv|Out-String|convertFrom-Csv}
PS C:\scripts> Get-Privileges
Privilege Name Description State
SeShutdownPrivilege Shut down the system Disabled
SeChangeNotifyPrivilege Bypass traverse checking Enabled
SeUndockPrivilege Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set Disabled
SeTimeZonePrivilege Change the time zone Disabled
¯\_(ツ)_/¯

Definer rights vs. user rights

I must be having a senior moment .... ;-)
Trying to demo definer rights vs. user rights on execution of a procedure.. With apologies to Daniel, I created this test, and then in trying to find the answer to my question I found his nearly identical example at psoug.
SQL> --
SQL> conn system/halftrack@vmora01
Connected.
SQL> drop user bert cascade;
User dropped.
SQL> drop user ernie cascade;
User dropped.
SQL> drop role ernies_role;
Role dropped.
SQL> --
SQL> create user bert identified by bert
2 default tablespace users
3 temporary tablespace temp
4 quota 10m on users;
User created.
SQL> --
SQL> grant create session, create table, create procedure to bert;
Grant succeeded.
SQL> --
SQL> create table bert.berts_table (empid varchar2(15));
Table created.
SQL> --
SQL> CREATE OR REPLACE PROCEDURE bert.user_test AUTHID current_user IS
2 v_empcnt number;
3 BEGIN
4   select count(*)
5   into v_empcnt
6   from bert.berts_table;
7 END user_test;
8 /
Procedure created.
SQL> --
SQL> CREATE OR REPLACE PROCEDURE bert.definer_test AUTHID DEFINER IS
2 v_empcnt number;
3 BEGIN
4   select count(*)
5   into v_empcnt
6   from bert.berts_table;
7 END definer_test;
8 /
Procedure created.
SQL> --
SQL> create user ernie identified by ernie
2 default tablespace users
3 temporary tablespace temp
4 quota 10m on users;
User created.
SQL> --
SQL> create role ernies_role;
Role created.
SQL> --
SQL> grant create session to ernies_role;
Grant succeeded.
SQL> grant select on bert.berts_table to ernies_role;
Grant succeeded.
SQL> grant execute on bert.definer_test to ernies_role;
Grant succeeded.
SQL> grant execute on bert.user_test to ernies_role;
Grant succeeded.
SQL> grant ernies_role to ernie;
Grant succeeded.
SQL> --
SQL> conn ernie/ernie@vmora01
Connected.
SQL> --
SQL> -- this should succeed
SQL> --
SQL> execute bert.user_test;
PL/SQL procedure successfully completed.
SQL> --
SQL> -- this should fail --
SQL> --
SQL> execute bert.definer_test;
PL/SQL procedure successfully completed.
SQL> spo offOk, the only rights ernie has are via ernies_role. So I would expect his execution of bert.definer_test to fail, but it didn't.

mbobak wrote:
Hi Ed,
In the definer rights case, as long as ernie can execute the procedure owned by bert, he'll be able to successfully execute it, cause definer rights mean that the object (owned/defined by bert) executes w/ bert's rights, and the only object access in the procedure is on bert's objects. So, no problem there.
In the invoker rights case, it works cause even though the proc is owned by bert, ernie is executing and so, rights have to be granted to ernie, and they are.
I don't see a problem in either case. Am I missing something?
My guess is, what you're overlooking is the fact that, in the case of invokers rights, it's ok for necessary privileges to be granted via a role. The restriction against roles, is only on a definers rights procedure.
-Mark
PS See here for more info:
http://download.oracle.com/docs/cd/E11882_01/network.112/e10574/authorization.htm#DBSEG50010
Ok, as I read the explanation in the linked reference, that makes sense. So now I'm having a hard time imagining the situation where inheriting privs via a role comes into play as a problem in dealing with pl/sql blocks.

Need help finding the right codec to play QT files

Like many others who have posted, all the quicktime files on my drive have turned to black. Previously when I opened the file, I saw picture and sound. Now every single file has only audio, but the picture is black.
I am operation on Mac O.S. 10.4.11. I am using Quicktime Pro 7.5. I have been trying to fix this problem for a month now. Many people have suggested I need to find the right codec, but so far I have not found it. I have tried: A52codec.component, AC3codec, MacOS 8.x, 9.1.x, Apple Intermediate Codec.com, Apple MPEG2.codec.component, Avilmporter-r7.component, DivX Decoder.component, DivX Encoder.component, DivX Pro 6.8.0.19 + keymaker, EnsharpEncoderMacOsX.cmg, Fbx 20091quicktime_macemu.pkg.tar, Fbx QT.pkg, Flipsformac, WMV Advanced.component, Flipsformac WMV Advanced Exports.component, Flipsformac WMV Import.component, IMXCodec.component, LAAME Universal Installer.mpkg, LAAMEncoder.component, QSSP_2.1.dmg, QSXEssentials.component, QSXEssentials.dmg, QTFvx.component, Red Quicktime Codec v3.1.pkg, Red Code iedcod.qt.component, Spectrograph.component, TSCC.component xiphqt.component, XviD_codec-r58.component, XviDELEGATE.component
Nothing worked!
I also tried to install Perian. This did not work.
What should I do? Should I re-install my operating system and start over? About a month ago, all the video clips played just fine. Is there any solution?
Thanks

Hi Wangerer!
I haven't even heard of half of those! You may have reached overkill on codecs!
Get rid of some of them and read this:
These are the downloads and the settings you need in order to view/hear pretty much everything that the net can throw at you: The setup described below has proved repeatedly successful on both PPC and Intel macs, but nothing in life carries a guarantee!
It is known to work in the great majority of cases with Safari 3.0.4, 3.1, 3.1.1, QT 7.3, 7.4.x and 7.5 and OS 10.4.11.
Assuming you already run Tiger versions OS 10.4.11 and have Quicktime 7.4 or above, and are using Safari 2 or 3, download and install (or re-install even if you already had them) the latest versions, suitable for your flavor of Mac, of:
RealPlayer 11 (which is no longer in beta) for Mac from:
http://www.versiontracker.com/dyn/moreinfo/macosx/15540
Flip4Mac WMV Player from http://www.microsoft.com/windows/windowsmedia/player/wmcomponents.mspx (Windows Media Player for the Mac is no longer supported, even by Microsoft)
Perian from http://perian.org/
You should read this support page http://perian.org/#support in case you need to delete older codecs.
Adobe FlashPlayer should first be uninstalled using the appropriate uninstaller available here:
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14157&sliceId=2
and then the latest version obtained from here:
http://www.adobe.com/shockwave/download/download.cgi?P1ProdVersion=ShockwaveFlash
and installed.
(You can check here: http://www.adobe.com/products/flash/about/ to see which version you should install for your Mac and OS, but please see my footnote if you are running Leopard.)
In earlier versions than QT 7.1.3 in Quicktime Preferences, under advanced, UNcheck Enable Flash, and under Mime settings/Miscellananeous only check Quicktime HTML (QHTM).
You should also ensure, if you are running Tiger 10.4.11, that you have downloaded and installed all the correct version for your Mac of Security Updates up to and including 2008-004. (N.B. Security Updates require both a restart and a permission repair.)
In Macintosh HD/Library/Quicktime/ delete any files relating to DivX (Perian already has them). However it should be noted that Perian is not an internet plugin and will not play DivX files imbedded on a website. For that you will need the DivX Player browser plugin available from http://www.divx.com/divx/mac/
Now go to Safari Preferences/Security, and tick the boxes under Web Content (all 4 of them) to enable Java.
Lastly open Audio Midi Setup (which you will find in the Utilities Folder of your Applications Folder) and click on Audio Devices. Make sure that both Audio Input and Audio Output, under Format, are set to 44100 Hz, and that you have selected 'Built in Audio'.
Important: Now repair permissions and restart.
You should also consider having the free VLC Player from http://www.videolan.org/ in your armory, as this plays almost anything that DVD Player might not.
There is an additional 'fix' you could try if you are having problems with Flash and Quicktime, depending on which type of Mac you have:
On Intel Macs, make sure that you are not running Safari in Rosetta. You can check this, and change it, in the Get Info window.
On PPC Macs, go to the Hard Disk/Library/Internet Plug-Ins folder, and drag the file 'QuickTime Plugin.webplugin' to the desktop. Quit and restart Safari. If things have improved you can trash that file. If they haven't put it back, as the lack of this plug-in can cause QT content in some widgets to cease functioning.
And now there is an additional kid on the block: SilverLight. Microsoft has created their own version of what a replacement for Flash should be. You can read more about it here:
http://silverlight.net/
So, if you go to any sites that have been designed for this new Silverlight stuff, you can download the plug-in from here (but make certain that you are downloading SilverLight v.1.0 for OS X (10.4.8 upwards):
http://silverlight.net/GetStarted/
FOOTNOTE
If you are running Leopard:
Some users have mentioned that the latest Flash Player (v.9.0.115.0) conflicts with Leopard, and that they have needed to revert to v. 9.0.47. This can be downloaded from here:
http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14266&sliceId=1

File Expiration Task - User rights lost

Hi
I created a File Expiration Task on Windows server 2008 R 2. And the job is running successfully.But all the user rights of those expired files are lost after they has been moved...There is no option I
can find and I dont wanna use "Custom File Management Tasks". How can I move the expired files without losing the user rights?

Hi,
As you said there is no specific options for "keeping" or "not keeping" original permissions. So if file permissions are inheriting the destination folder, we cannot change it.
I have 2 possible workaround.
1. Custom (which you would like to avoid). Sample could be found in this article:
http://blogs.technet.com/b/filecab/archive/2009/05/11/customizing-file-management-tasks.aspx
2. Use Robocopy to move files older than n days. See the following parameters:
/MAXAGE:n :: MAXimum file AGE - exclude files older than n days/date
/MINAGE:n :: MINimum file AGE - exclude files newer than n days/date
/MAXLAD:n :: MAXimum Last Access Date - exclude files unused since n
/MINLAD:n :: MINimum Last Access Date - exclude files used since n.
(If n < 1900 then n = n days, else n = YYYYMMDD date).
You could schedule a task to run this command.
If you have any feedback on our support, please send to [email protected]

Finding user rights

Similar Messages

Maybe you are looking for