Flex User Level Handling

Hi all,
is there a profesional way of doing handling diffrent user levels.I mean suppose there are some work classes.L1,L2 L3..somthing like that.
then,
L1 user can do every function (add edit delete)
L2 user can do some functions only..(add.edit)
L3 user can do some functions only..(add only)
how can I control it in a proffesional mannar?
Any responses are appreciated...

thnx for the answer.but problem is not solved.that is a some kind of hard codring way.If i need to change previlages then what should I do? I have to change the code.I think that is not profesional way.I need more advanced something.I read about chimp framework which is a permision based security framework but I didn't found how to dinamically define permisions.
<fx:Metadata>
        [Protected(permissions="user",notInPermissionAction="disable",componentId="btnAdd")]
        [Protected(permissions="user",notInPermissionAction="disable",componentId="fmAdmin")]
        [Protected(permissions="user",notInPermissionAction="disable",componentId="fmUser")]
    </fx:Metadata>
Above is the way of deling with chimp security framwork.
I need to genarate above meta data dinamically. How can I do that?
In my case user,diable,btnAdd are variables in my case how can I do that.

Similar Messages

Ideas for Providing User Level Data Backup and Restore

I'm looking for ideas for implementing a user level application data backup and restore in an Apex app.
What would be great is to have a user be provided an export file and a way to import this file. A bit overkill but hopefully never needed.
Another option that is perfectly doable is a report that simply provides a means to create an export of the data. Since I already have an interface I can use an export to interface an export.
Any thoughts?
Hopefully I'm missing something already there for an end user to use.

jlincoln wrote:
"Do you mean "export" and "import" colloquially, or in the specific sense of the exp/imp/datapump utilities?"': I mean as in imp/exp Oracle utilities. Generally speaking, it would be neat to be able to export and import via an Apex an application. In this hosted environment I don't have that access but would this be a bad idea if you don't care about the existing data in the schema in which the data resides?I can envisage a mechanism using <tt>exp/imp</tt>, but since it requires <tt>dbms_scheduler</tt> external jobs and access to the file system it's highly unlikely to be possible in a hosted environment. (Unless you're doing the hosting?)
Backup: Necessary for piece of mind and flexibility. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group.
Restore: Like I said. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group. This is a very small data set. A restore would simply remove existing data and replace it with the new data.My opinion is that time would be better spent working on the user rather than a redundant backup and restore feature. Involve them in a disaster recovery exercise with whoever is hosting the environment to prove that their data is safe. Normally the inclusion of data in regular, effective database backups is sold as a major feature of APEX solutions.
"What about security/privacy when this data ends up in uncontrolled environments?": I don't understand the point of this question. The data should not end up in uncontrolled environments. Just like the data in the database or its backups.Again, having data in a central, shared location protected by multiple levels of application, database, and OS security is usually seen as a plus for APEX over VB/Access. Exporting the data in toto to a PC/laptop that can be stolen or lost, and where it can be copied to USB drives/phones/email loses this protection.
User Level: Because the end user must have access to the backup and restore mechanisms of the application.
Application Data: The application data. Less than 10MB. Very small. It can be exported in a flat file downloaded by the end user. This file can then be used to upload and import via an existing application interface. For example.
"I'm struggling to parse this for meaning.": When I say I have an existing interface I am referring to a program residing in the Apex application that will take data from a flat table structure (i.e. interface table), validate the data, derive data, and load into the target table structure.Other than the report export capability linked to above, there's nothing built-in to APEX that comes close to your requirement. If the data is simple enough that it can be handled in such a report, and you have a process that can read and recreate this export, then you have your backup/restore capability. If the data can't be handled in a simple report, then you'll need a more complex PL/SQL process to generate the file.

Controlling Task expiry at User Level programatically

Hi to all BPEL Guru's. Need some expert advice.
I am using Oracle SOA Suite 10.1.3.4 on weblogic server 9.2
The requirement given to me says that,
- Number of approvers for a task may vary on case to case bases, and needs to be pushed in the workflow as a set of parameters.
- Every user may have a different SLA to act on a given task.
To satisfy the first requirement my first approach was to use Sequential Approver Participant Type and push a comma seperated approver list to the workflow. But the issue with this approach is, associating a different expiry date to every user would be a big deal. And even if I find a way to get the associated expiry date, I would not be able to set it on user level, as the 'By Expression' is supported only at Global Expiration and Escalation Policy level and not at the Participant type level. Does anything click in your mind as a workaround to this? Appreciate your help. One workaround I can think about is to get handle of 'OnUpdated' callback and change the Global Expiration and Escalation policy everyime the task is updated.
The second approach was to have a defined set of 'Single Approver' participant types (i.e. Multiple Single Approvers)under 'Assignment and Routing Policy'. Here the dynamicity of number of approvers is lost. So I will have to design multiple workflows with a selected set of approvers. The workflow submitter can select the appropriate workflow and submit it. In this approach I can atleast associate an expiry date with a user in the incoming payload and assign to the single approver.
Not sure how to get out of it.
Any help is highly appreciated.
Many Thanks,
Vikas

Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

User Level based Validation caching

Hi,
This is with references to JSP/JPDK based portlets.
To implement validation based caching in JSP portlets, the first step I understand is to create our own class that extends JspValidateRenderer and reference this new class in the provider.xml file in the <showPage class=" "> tag for the appropriate Portlet/s.
The questions I had -
1) What do I call to cause a change in the version identifier? Do I call getNewVersion() and
let my implementation of the JspValidateRenderer's getNewVersion()take care of
setting/updating the version identifier? I dont need to take care of storing the version
identifier anywhere - is that correct?
2) How do I implement this if, for eg. events in Portlet A determines if a cached version or a
new version of Portlet B has to be rendered? In my case Portlet A would be a
showDetails page of Portlet A collecting data that drives the content in Portlet B.
So, everytime the html form in Portlet A'showDetails page is submitted, I would like to
refresh Portlet B, otherwise simply use the cached version. How do I change the version
identifier in Portlet B, to cause the Portlet A to not use the cached version?
3) How do I enforce USER level in this model? I didnt see any parameter that accepts the LEVEL in
validation based caching methods.
Appreciate any suggestions/help since this is my first attempt at implementing any form of cahing
regards
-Ananth Makaram

Yes. There will be 20000 instances in the case you have mentioned.
To answer your question "Would that be expensive OR is it a non-issue? "
- The File Cache is built to handle 10 million cache items efficiently. So, This will NOT be an issue for the cache you are mentioning.
- Assuming each of the portlet is about 2k. In your case you'd only have about 40MB in case. Even in very big sites the cache size is only about 2GB per mid-tier
Moreover, Disk space is very Cheap. There are cache clean jobs which clean up the cache regularly to make sure that it does NOT grow to unmanageable proportions.

IOCTL from user level program do not reach module

Hello,
I am facing with a weired problem. The user level ioctl on my device file does not reach the ioctl handler in my module at all. I have a simple character device driver called dummy (just pulled from a device driver manual 'hello world' example).
[root@/]modinfo | grep dummy
227 fa2f9a20 634 220 1 dummy (dummy driver)
[root@/]ls -l /devices/pseudo/dummy\@0\:0
c-wxrw--wx 1 root sys 220, 0 Dec 3 15:13 /devices/pseudo/dummy@0:0
The open on the device file works well. But when I call ioctl, the message in the ioctl handler does not print. Niether does the ioctl call appear in the DTrace probes. perror from user program returns :
: Invalid argument
Let me know of any probable cause of ioctls not getting executed.
Thanks in advance
->Shreyas
My driver code is as follows :
    * Minimalist pseudo-device.
    * Writes a message whenever a routine is entered.
    * Build the driver:
    *         cc -D_KERNEL -c dummy.c
    *         ld -r -o dummy dummy.o
    * Copy the driver and the configuration file to /usr/kernel/drv:
    *         cp dummy.conf /usr/kernel/drv
    *         cp dummy /tmp
    *         ln -s /tmp/dummy /usr/kernel/drv/dummy
    * Add the driver:
    *         add_drv dummy
    * Test (1) read from driver (2) write to driver:
    *         cat /devices/pseudo/dummy@*
              echo hello > ls /devices/pseudo/dummy@*
    * Verify the tests in another window:
    *         tail -f /var/adm/messages
    * Remove the driver:
    *         rem_drv dummy
#define SOLARIS
#include <sys/devops.h> /* used by dev_ops */
#include <sys/conf.h>               /* used by dev_ops and cb_ops */
#include <sys/modctl.h> /* used by modlinkage, modldrv, _init, _info, */
                                       /* and _fini */
#include <sys/types.h> /* used by open, close, read, write, prop_op, */
                                       /* and ddi_prop_op */
#include <sys/file.h>               /* used by open, close */
#include <sys/errno.h> /* used by open, close, read, write */
#include    <sys/open.h>         /* used by open, close, read, write */
#include    <sys/cred.h>         /* used by open, close, read */
#include    <sys/uio.h>          /* used by read */
#include    <sys/stat.h>         /* defines S_IFCHR used by ddi_create_minor_node */
#include    <sys/cmn_err.h>      /* used by all entry points for this driver */
#include    <sys/ddi.h>          /* used by all entry points for this driver */
                                 /* also used by cb_ops, ddi_get_instance, and */
                                 /* ddi_prop_op */
#include <sys/sunddi.h> /*          used by all entry points for this driver */
                                 /* also used by cb_ops, ddi_create_minor_node, */
                                 /* ddi_get_instance, and ddi_prop_op */
#include "vmci_defs.h"
#include "vmciDatagram.h"
char _depends_on[]="vmci";
static int dummy_attach(dev_info_t *dip, ddi_attach_cmd_t cmd);
static int dummy_detach(dev_info_t *dip, ddi_detach_cmd_t cmd);
static int dummy_getinfo(dev_info_t *dip, ddi_info_cmd_t cmd, void *arg,
     void **resultp);
static int dummy_prop_op(dev_t dev, dev_info_t *dip, ddi_prop_op_t prop_op,
     int flags, char *name, caddr_t valuep, int *lengthp);
static int dummy_open(dev_t *devp, int flag, int otyp, cred_t *cred);
static int dummy_close(dev_t dev, int flag, int otyp, cred_t *cred);
static int dummy_read(dev_t dev, struct uio *uiop, cred_t *credp);
static int dummy_write(dev_t dev, struct uio *uiop, cred_t *credp);
static int dummy_ioctl(dev_t dev, int cmd, intptr_t arg, int mode,
                      cred_t *credp, int *rval);
static int dummy_poll(dev_t dev, short events, int anyyet,
                      short *reventsp, struct pollhead **phpp);
/* cb_ops structure */
static struct cb_ops dummy_cb_ops = {
     dummy_open,
     dummy_close,
     nodev,                     /* no strategy - nodev returns ENXIO */
     nodev,                     /* no print */
     nodev,                     /* no dump */
     dummy_read,
     dummy_write,
     dummy_ioctl,
     nodev,                     /* no devmap */
     nodev,                     /* no mmap */
     nodev,                     /* no segmap */
     dummy_poll,                /* returns ENXIO for non-pollable devices */
     dummy_prop_op,
     NULL,                      /* streamtab struct; if not NULL, all above */
                                /* fields are ignored */
     D_NEW | D_MP,              /* compatibility flags: see conf.h */
     CB_REV,                    /* cb_ops revision number */
     nodev,                     /* no aread */
     nodev                      /* no awrite */
/* dev_ops structure */
static struct dev_ops dummy_dev_ops = {
     DEVO_REV,
     0,                            /* reference count */
     ddi_no_info,
     //dummy_getinfo,
     nulldev,                      /* no identify - nulldev returns 0 */
     nulldev,                      /* no probe */
     dummy_attach,
     dummy_detach,
     nodev,                        /* no reset - nodev returns ENXIO */
     &dummy_cb_ops,
     (struct bus_ops *)NULL,
     NULL                         /* no power */
/* modldrv structure */
static struct modldrv md = {
     &mod_driverops,               /* Type of module. This is a driver. */
     "dummy driver",              /* Name of the module. */
     &dummy_dev_ops
/* modlinkage structure */
static struct modlinkage ml = {
     MODREV_1,
     &md,
     NULL
/* dev_info structure */
dev_info_t *dummy_dip; /* keep track of one instance */
/* Loadable module configuration entry points */
int
_init(void)
     cmn_err(CE_NOTE, "Inside _init");
     return(mod_install(&ml));
int
_info(struct modinfo *modinfop)
     cmn_err(CE_NOTE, "Inside _info");
     return(mod_info(&ml, modinfop));
int
_fini(void)
     cmn_err(CE_NOTE, "Inside _fini");
     return(mod_remove(&ml));
/* Device configuration entry points */
static int
dummy_attach(dev_info_t *dip, ddi_attach_cmd_t cmd)
     cmn_err(CE_NOTE, "Inside dummy_attach");
     switch(cmd) {
     case DDI_ATTACH:
           dummy_dip = dip;
           if (ddi_create_minor_node(dip, "0", S_IFCHR,
               ddi_get_instance(dip), DDI_PSEUDO,0)
               != DDI_SUCCESS) {
               cmn_err(CE_NOTE,
                     "%s%d: attach: could not add character node.",
                     "dummy", 0);
               return(DDI_FAILURE);
           } else
               return DDI_SUCCESS;
     default:
           return DDI_FAILURE;
static int
dummy_detach(dev_info_t *dip, ddi_detach_cmd_t cmd)
     cmn_err(CE_NOTE, "Inside dummy_detach");
     switch(cmd) {
     case DDI_DETACH:
           dummy_dip = 0;
           ddi_remove_minor_node(dip, NULL);
           return DDI_SUCCESS;
     default:
           return DDI_FAILURE;
static int
dummy_getinfo(dev_info_t *dip, ddi_info_cmd_t cmd, void *arg,
     void **resultp)
     cmn_err(CE_NOTE, "Inside dummy_getinfo");
     switch(cmd) {
     case DDI_INFO_DEVT2DEVINFO:
                                 *resultp = dummy_dip;
                                 return DDI_SUCCESS;
                             case DDI_INFO_DEVT2INSTANCE:
                                 *resultp = 0;
                                 return DDI_SUCCESS;
                             default:
                                 return DDI_FAILURE;
/* Main entry points */
static int
dummy_prop_op(dev_t dev, dev_info_t *dip, ddi_prop_op_t prop_op,
int flags, char *name, caddr_t valuep, int *lengthp)
cmn_err(CE_NOTE, "Inside dummy_prop_op");
// return DDI_SUCCESS;
return(ddi_prop_op(dev,dip,prop_op,flags,name,valuep,lengthp));
static int
dummy_open(dev_t *devp, int flag, int otyp, cred_t *cred)
   int status;
   cmn_err(CE_NOTE, "Inside dummy_open");
    return DDI_SUCCESS;
static int
dummy_close(dev_t dev, int flag, int otyp, cred_t *cred)
    cmn_err(CE_NOTE, "Inside dummy_close");
    return DDI_SUCCESS;
static int
dummy_read(dev_t dev, struct uio *uiop, cred_t *credp)
     cmn_err(CE_NOTE, "Inside dummy_read");
     return DDI_SUCCESS;
static int
dummy_write(dev_t dev, struct uio *uiop, cred_t *credp)
     cmn_err(CE_NOTE, "Inside dummy_write");
     return DDI_SUCCESS;
static int
dummy_ioctl(dev_t dev, int cmd, intptr_t arg, int mode,
                      cred_t *credp, int *rval)
     cmn_err(CE_WARN, "%s(%d) Received function : %d\n", __FUNCTION__, __LINE__, cmd);
     return(0);
static int
dummy_poll(dev_t dev,                // IN: Device number.
           short events,             // IN: Requested events.
           int anyyet,               // IN: Whether other fds have had events.
           short *reventsp,          // OUT: Mask of satisfied events.
           struct pollhead **phpp) { // OUT: Set to a pollhead if necessary.
     cmn_err(CE_WARN, "%s(%d) \n", __FUNCTION__, __LINE__);
   return 0;
}

Read very carefully the file /usr/include/sys/ioccom.h.
-r

Make all the forms at a user level or responsibility level to be read only

Hi,
Please suggest me to make all the forms at a user level or responsibility level to be read only. So that when a particular user logs in, he gets all the form in read only mode or at a particular responsibility all the forms are read only so that we can attach this responsibility to the user for the same purpose.
Any ideas will be highly appreciated.

check this blog,
http://www.oracleappshub.com/11i/oracleapps-responsibility-vs-sap-functions/
Re: How to change OM responsibility as read-only in oracle applications 11i
read only responsibility-user

How to create a profile value at user level programatically

Dear all,
I want to create a profile value at user level programatically, I refer to the developer guide and try to use fnd_profile.put() to create a new value.
But I find out the value is just created in session level, not be inserted into base table.
So is there anyone know how to realize this function in PL/SQL?
Any idea is appreciated.
Best Regards,
Kenny

Check Note: 364503.1 - How to Set a System Profile Value Without Logging in to the Applications
https://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364503.1

Error while performing Risk Analysis at user level for a cross system user

Dear All,
I am getting the below error, while performing the risk analysis at user level for a cross system (Oracle) user.
The error is as follows:
"ResourceException in method ConnectionFactoryImpl.getConnection(): com.sap.engine.services.connector.exceptions.BaseResourceException: Cannot get connection for 120 seconds. Possible reasons: 1) Connections are cached within SystemThread(can be any server service or any code invoked within SystemThread in the SAP J2EE Engine), 2) The pool size of adapter "SAPJ2EDB" is not enough according to the current load of the system or 3) The specified time to wait for connection is not enough according to the pool size and current load of the system. In case 1) the solution is to check for cached connections using the Connector Service list-conns command, in case 2) to increase the size of the pool and in case 3) to increase the time to wait for connection property. In case of application thread, there is an automatic mechanism which detects unclosed connections and unfinished transactions.RC:1
Can anyone please help.
Regards,
Gurugobinda

Hi..
Check the note # SAP Note 1121978
SAP Note 1121978 - Recommended settings to improve peformance risk analysis.
Check for the following...
CONFIGTOOL>SERVER>MANAGERS>THREADMANAGER
ChangeThreadCountStep =50
InitialThreadCount= 100
MaxThreadCount =200
MinThreadCount =50
Regards
Gangadhar

LaserJet P1505n printing slow just for user-level accounts in Win7

I have several workstations running Win7 Pro 64-bit that have been installed as replacements for XP machines. All of them print to one of several P1505n printers, and are using the latest drivers from HP. Under XP there were no problems printing to these printers, but the Win7 machines have significant delays when trying to print. The Windows test page prints instantaneously, but printing from any other application has a delay of up to a full minute before the job begins to print. Once the job prints, it prints without issue.
One thing that I have noticed during my testing seems to point to permissions. If I am logged in using my admin-level account, everything prints as it should, with no delays at all. Once I log in with a user-level account, however, the delays begin. I found the driver files at C:\Windows\System32\spool\drivers\x64\3, but giving "everyone" full control over those files does not help.
Is there anything else that I should be looking at?
Thanks in advance!
Donny

In the end, I was able to resolve the problem by installing the Vista x64 drivers. No playing with permissions necessary.

Windows Server 2012 Group Policy Block USB Storage devices @ User Level Not getting applied on a Domain Client machine with Windows Server 2008 R2. Why?

Hello,
I have a Windows Server 2012 R2.
I have configured the Group Policy on it to block the usage of USB - Storage Devices @ user level on the client machines. It works properly for my Windows 7 client machines but it's not working on one of the machine having Windows Server 2008 R2 installed
on it (this machine is also a domain client in the same domain).
I will really be thankful if anyone can suggest some solution to this issue.
Please feel free to write back in-case I have missed anything obvious to be shared.
Thanks!
-Vinay Pugalia
If a post answers your question, please click "Mark As Answer" on that post or
"Vote as Helpful".
Web : Inkey Solutions
Blog : My Blog
Email : Vinay Pugalia

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet
Subscriber Support
If you are TechNet
Subscription user and have any feedback on our support quality, please send your feedbackhere.
Andy Qi
TechNet Community Support

Issue in User Level Simulation in GRC 10.0

Hello Every one,
Before i Jump into the question, please find below the screen shot which tells about the B.P(Business process),Functions created in test system(GRC 10.0), where as the roles and corresponding users which have been created in back end system connecting to GRC 10.0.
Now when i am trying to run a risk analysis on user TEST_RISK(TEST_ROLE_RISK role is assigned and pfa the authorizations in the role), i will be shown the Risk R001.
Now i am trying to run user Level Simulation on the above user TEST_RISK and i am trying to simulate by adding a new role TEST_ROLE_RISK3 as shown in the below screenshot at Action level,Permission Level,Critical Action level ,Critical permission level.
Even though i select the option, Risk from Simulation only, when i try to execute at action level , it is also showing me the risk which coming from the actual role assigned but not from the simulating one.
Thanks and Regards,
Naga.

Hi Naga,
there are some notes which might help to fix the problem. Especially the first might fix your problem.
http://service.sap.com/sap/support/notes/1895502
http://service.sap.com/sap/support/notes/1953347
Please let us know if it helped.
Regards,
Alessandro

Permissions set at USER level

Can I just confirm, that if I open a User within Server settings and I see any of the Global permission tickboxes ticked then these have at some point been set at the User Level. If however, best practice has been observed and users have only ever been
selected against groups then I should NOT see any boxes in any of the Users permissions ticked at all? Is that correct?
Thanks in advance,
Steve

Steve --
You are absolutely right, my friend. If you see ANY checkboxes selected in the Categories or Global Permissions sections of a User page, then these selections represent an override to the permissions specified by the Groups to which the user belongs.
Best practice dictates that permissions for each user be controlled by adding the user to Groups, which makes for a simpler and easier to understand security model. This is a GREAT question, my friend, and I applaud you for asking it. :)
Dale A. Howard [MVP]

How to forbid command field at user level?

Does anyone know how can i forbid at user level the command field?
Thanks
M.

Hi marco,
1. In normal SAPGUI,
   there is some REGISTRY Value, (when gui installation is done)
2. If that setting/value in registry is changed,
   then the command field won't come.
3. For PORTALS,
    the setting is done in the ICF/Service parameter
   ~NOHEADEROKCODE=1
(By doing this, it will come in SAP GUI,
but won't come if we access r/3 from portal/internet explorer)
regards,
amit m.

How to hide the columns at the end user level thru personalization

Hi all
how I can hide the columns that are displayed on the portal. Any personalize option for the end user? Any righ click or some thing?
I am looking at hiding columns not while developing the iViews / Pages, But in the browsers as the end user.
i can hide the columns what ever i want while creating the iViews for MDM data. but we cant provide the content administrator role to the end user for hiding the columns what ever they want. they want to hide the columns thru pesonalization option at the end user level.
Can you please let me know whether we can able to hide the columns at the end user level thru personalization ?? is it posible with standard iViews??
Regards
Sunil

Hi Sunil,
I understood your requirement properly and seems valid and I tried this at my end but i didnt get the solution. Field list is not visible in Personalize option. I dont think it is possible with MDM standard iViews.
I was thinking an alternative is if some how we manage to give the permissions to end user only on Result Set iView but if it would be possible it will not be a good design.
Lets wait for some inputs from others.
Regards,
Jitesh Talreja

What is Execution Count in User Level Analysis?

Hi,
Can anyone through a light on that what is Execution Count Column means in User Level Analysis Report ,If it is the number of counts of the users execte the action then how we can discover or from when it counts the number of count ....??
is it count from the starting of the user using that tcode or action?

Hi Pranjal,
Yes, Prashant is correct it counts from the first job run, but as it takes data from STAD, so the counting is actually as per the STAD data store setting.
So if STAD store data for 4 days and if you run job in today it will count from 17.05.2014, make sure you have this job running regularly, if you miss this job run for more days than the retention period of STAD data, you may miss execution count for those days.
Hope this clears your query.
BR,
Mangesh

Flex User Level Handling

Similar Messages

Maybe you are looking for