Granting a group ownership of an item programmatically??

I've imported a lot of data from another system. Now I need to
set the appropriate permissions on some of the items.
For instance I want to set group id 15 to be the owner of all
items that is a specific (custom) type, e.g. subtype=2442.
The code below is what I've tried, but I'm getting this error
message:
begin
"SUPPORT"."UPDATE_ITEM_PERMISSIONS";
end; (WWV-11230)
Unexpected error encountered in wwsec_api.set_group_acl (ORA-
06502: PL/SQL: numeric or value error: character to number
conversion error) (WWC-41417)
Has anyone done this successfully?
Any ideas, tips etc is highly appreciated!
-Mats
Create or Replace PROCEDURE SUPPORT.UPDATE_ITEM_PERMISSIONS
as
CURSOR examples_cur IS
SELECT C.ID, C.NAME
FROM PORTAL30.WWV_THINGS C
WHERE SUBTYPE=2442;
begin
FOR ex IN examples_cur
LOOP
htp.p('Changing permission on: ' ||
ex.name || '<BR>');
wwsec_api.set_group_acl
p_group_id => 15,
p_object_type_name => wwsec_api.ITEM_OBJ,
p_owner => wwctx_api.get_product_schema,
p_name => ex.name,
p_privilege => wwsec_api.OWN_PRIV
END LOOP;
end;

You can't call htp.p from SQL*Plus - it must be called through
mod_plsql. Try executing the procedure from within the browser
(use the database navigator) - it should work.
Regards,
Jerry

Similar Messages

  • Take Ownership of this item link

    Hi
    In catalog manager, in item properties, there is a link "Take Ownership of this item" which changes the owner of an object as the current user. However, eventhough I limit it only to Presentation Server Administrators group through privileges setup, each user still sees this link and be able to use it. What can I do to prevent users seeing this link, except the setting in privileges.
    Thanks a lot.

    Catalog Manager is a powerful tool - it should only be made available to report developers / administrators that need to use it. Most users should not have access to the tool - in fact the only access for most people should be through their web browser into Dashboards/Answers etc.
    If used in 'offline mode' then you have access to any item in the catalog, 'on-line' access should restrict to you to the items that you have permission on.
    I suggest that you review the catalog manager section of the Presentation Services Administration guide and particularly note the need to take backups before you make changes as there is no 'undo' available!

  • Group ownership for rdbms files in the diagnostic dest

    Hi Gurus,
    In my RAC environment I have notices that, group ownership for the files under $ORACLE_BASE/diag/orcl/orcl/ folder is set to ASMADMIN.
    Is there any specific reason why oracle does it that way?
    Do we have an article id which explains this .
    Thanks.

    Hi,
    Please refer to the following for the same
    Advanced Installation Oracle Grid Infrastructure for a Cluster Preinstallation Tasks
    2.5.5.1.3 Oracle ASM Groups for Job Role Separation Installations
    SYSASM is a new system privilege that enables the separation of the Oracle ASM storage administration privilege from SYSDBA. With Oracle Automatic Storage Management 11g Release 2 (11.2), members of the database OSDBA group are not granted SYSASM privileges, unless the operating system group designated as the OSASM group is the same group designated as the OSDBA group.
    Select separate operating system groups as the operating system authentication groups for privileges on Oracle ASM. Before you start OUI, create the following groups and users for Oracle ASM:
    The Oracle Automatic Storage Management Group (typically asmadmin)This is a required group. Create this group as a separate group if you want to have separate administration privilege groups for Oracle ASM and Oracle Database administrators. In Oracle documentation, the operating system group whose members are granted privileges is called the OSASM group, and in code examples, where there is a group specifically created to grant this privilege, it is referred to as asmadmin.If you have multiple databases on your system, and use multiple OSDBA groups so that you can provide separate SYSDBA privileges for each database, then you should create a separate OSASM group, and use a separate user from the database users to own the Oracle Grid Infrastructure installation (Oracle Clusterware and Oracle ASM). Oracle ASM can support multiple databases.Members of the OSASM group can use SQL to connect to an Oracle ASM instance as SYSASM using operating system authentication. The SYSASM privileges permit mounting and dismounting disk groups, and other storage administration tasks. SYSASM privileges provide no access privileges on an RDBMS instance.
    Regards,
    Vandana - Oracle

  • How to show purchasing group members in the item data of the shopping cart?

    Dear Experts,
    for s shopping cart in SRM 7.0 CS, i have the following business requirement:
    In the item data tab of the line item details, the drop down field for Purchasing group is there. Right to this field, there is also a link called "Show members".
    If i go on this link, than a small table opens that obviously is there to contain such additional information about the purchasers like name, telephone nummber or extension.
    Currently, this small table does not contain any of this additional information for any of the used purchasing groups.
    Can you please help me understand, how and where i can maintain this information in the sytem, so it shows in the shopping cart?
    Thank you very much for your help.

    Hi,
    thank you very much for the answer.
    Actually, the question is not how to create the organizational unit of purchasing group in the PPOMA. This is all done. I just would like to understand, whether there is somewhere a place where i can maintain the name and maybe also the phone number of the buyer himself.
    Thus, i would hope to see these details (i.e. the name and the phone number) in that small table that opens up if i click on the "Show members" link that is situated right to the purchasing group field in the "Item data" tab of the details of the line item.
    Thank you.

  • Grouping of SC line items to single PO

    Hi,
    We are facing an issue with grouping of SC line items to one single PO as per the details given below.
    The requirement is if the SC has 10 line items as below
    5 line items with no source of supply                - 5 PO's
    3 line items with preferred vendor (82000000)    - 1 PO
    2 line items with preferred vendor (82000001)   - 1 PO
    In the first case 5 PO's has to be created. This is standard no issues.
    In the second case system has to group 3 line items to 1 PO.
    In the third case system has to group 2 line items to 1 PO.
    We have tried the BADI BBP_LOCAL_GROUP_PO and it doesn't help for the second & third case of our requirement.
    We tried using the Document change badi to convert the Prefferred vendor to vendor and could not do that.
    We also tried the FS BBP_SC_TRANSFER_GROUPED, but it doesn't cater to our requirement.
    Any help would be highly appreaciated.

    Here is a sample code that convert preferred vendor into fixed vendor.
    You can easily change it to your requirement )
    method IF_EX_BBP_DOC_CHANGE_BADI~BBP_SC_CHANGE .
    Constants : c_vendor type BBP_PDS_PARTNER-PARTNER_FCT
    value '00000019',
    c_preferred_vend type BBP_PDS_PARTNER-PARTNER_FCT
    value '00000039'.
    Data : ls_partner type BBP_PDS_PARTNER.
    *Read Table it_partner into ls_partner With key PARTNER_FCT = c_vendor.
    *If sy-subrc NE 0.
    Loop at it_partner into ls_partner
    where PARTNER_FCT Eq c_preferred_vend.
    Move c_vendor To Ls_partner-PARTNER_FCT.
    Modify it_partner from ls_partner index sy-tabix.
    Endloop.
    *Endif.
    et_partner[] = it_partner[].
    ET_ORGDATA[] = IT_ORGDATA[].
    ET_ITEM[] = IT_ITEM[].
    ES_HEADER = IS_HEADER.
    ET_ACCOUNT[] = IT_ACCOUNT[].
    *break ybo
    *IT_PARTNER
    *ET_PARTNER[]
    endmethod.

  • How to preserve group ownership

    I recently created a group called "special", added some users (including myself), and successfully created a directory where all users in the "special" group can read and write. The umasks have been changed from the default 0022 to 0002 in /etc/launchd-user.conf. Here's how I tested this:
    $ mkdir myTestDir
    $ ls -l | grep myTestDir
    drwxrwxr-x   2 tdunlap  staff   136 Jul 25 12:13 myTestDir
    $ chown :special myTestDir
    $ chmod g+s myTestDir
    $ ls -l | grep myTestDir
    drwxrwxs-x   2 tdunlap  special   136 Jul 25 12:13 myTestDir
    $ cd myTestDir
    $ mkdir my2ndTestDir
    $ touch myTestFile.txt
    $ ls -l
    drwxrwxr-x  2 tdunlap  special  68 Jul 25 12:17 my2ndTestDir
    -rw-rw-r--  1 tdunlap  special   0 Jul 25 12:17 myTestFile.txt
    Here we see the group and appropriate permissions are created when performing tasks on the command line. The same has been confirmed when using Finder and TextEdit.app. But I noticed an issue of the group not being preserved when I use Applications like Chrome.app and Archive Utility.app to download and unzip files, respectively. Here's what happens:
    drwx------@ 4 tdunlap  staff         136 Jul 25 12:42 802.11
    -rw-rw-r--@ 1 tdunlap  staff    16833611 Jul 25 12:42 802.11.zip
    drwxrwxr-x  2 tdunlap  special        68 Jul 25 12:17 my2ndTestDir
    -rw-rw-r--  1 tdunlap  special         0 Jul 25 12:17 myTestFile.txt
    Notice the zip file I downloaded is saved with my Primary Group ID, not the group ID of the folder. And when I use the Archive Utility.app to unzip, the same thing happens. However, examine what happens when I use unzip from the command line instead of the Archive Utility.app:
    $ unzip 802.11.zip
    Archive:  802.11.zip
      inflating: 802.11-2012.pdf        
       creating: __MACOSX/
      inflating: __MACOSX/._802.11-2012.pdf 
      inflating: 802.11v-2011.pdf       
      inflating: __MACOSX/._802.11v-2011.pdf 
    $ ls -l
    total 95520
    -rw-r--r--@ 1 tdunlap  special  24739306 May 21 13:54 802.11-2012.pdf
    -rw-rw-r--@ 1 tdunlap  staff    16833611 Jul 25 12:42 802.11.zip
    -rw-r--r--@ 1 tdunlap  special   7329554 May 21 13:47 802.11v-2011.pdf
    drwxrwxr-x  4 tdunlap  special       136 Jul 25 12:40 __MACOSX
    drwxrwxr-x  2 tdunlap  special        68 Jul 25 12:17 my2ndTestDir
    -rw-rw-r--  1 tdunlap  special         0 Jul 25 12:17 myTestFile.txt
    Once again it appears that command line tools honor the group ownership, but GUI-based apps do not.
    Can anyone suggest how I can ensure attachments downloaded into this directory honor the "special" group instead of saving as "staff"? I prefer not to change the Primary Group ID for each member of the "special" group. I could also run a periodic cron job looking for "staff" group on files and/or directories then performing a chown :special on the offenders. But there must be a better way.
    Any suggestions?
    Thanks!
    Terry

    When you remove querystring , then it displays all the data, so no dynamic filter required. But with Filter it reload the filtered  data. That may be the reason for not keeping the states.
    You can expand collapse the groups by using javascript code. You can either expand all rows or do some JS trick to store current expanded row state in some hidden control and re-expand them at load through you js code as explained below -
    You can find image ID for the collapse-expand image (the '-' image) and can call a SP javascript function (ExpCollGroup()) to collapse/expand and loop it for all row.
    $(function(){
    ExpCollGroup('id..','img_...');
    please check -
    http://sharepoint.stackexchange.com/questions/5935/expand-1st-group-and-collapse-2nd-group-in-list-view
    http://alectang.com/blog/archive/2010/09/09/easy-expand-or-collapse-sharepoint-list-in-group-by-view.aspx
    Thanks
    Ganesh Jat [My Blog |
    LinkedIn | Twitter ]
    Please click 'Mark As Answer' if a post solves your problem or 'Vote As Helpful' if it was useful.

  • Group ownership bug?

    Hi there,
    I'm having an issue on my OD Master where I have created two test groups and a number of test users in order to enable the Wiki functionality for groups.
    Each group has one user assigned limited admin rights.
    Each group has the same user assigned as group owner (or is it ownership of the group folder, I'm not quite clear on this)
    Using the "All Records" tab in Workgroup Manager I can see that the correct (limited admin) user is set to HomeLocOwner for both groups.
    Yet using the Directory application, the "Ownership" tab tells me that the group is owned by diradmin (Directory Administrator).
    As a result, logging into the wiki as the groups owner/administrator gives no extra privileges above those of a standard user.
    To get "Admin Functions" for the wiki I have to either log in as diradmin or set the users to be moderators in Server Admin/Web which allows them admin rights to all wikis. Not the behaviour I want.
    Am I doing something wildly wrong in terms of group ownership?
    Thanks in advance.

    Hi Ryan,
    Your modified file worked for me as well and here is what I did:
    1.  Import the netlist generated by Multisim
    2.  Place all components from group 3 on the work area
    3.  Design>>Group Replica
    4.  Primary Group select Group 3
    5.  Secondary Group select Group 4
    6.  Make sure corresponding components from group 3 and 4 are on the same line, in this example D6 and D5 need to be on the same line and also check the other two transistors.
    I think your problem is at step 6.
    Tien P.
    National Instruments

  • Creating Items Programmatically?

    Hi,
    What's the easiest way to create items programmatically? Our goal is to push new items (and later business partners & sales orders) into SAP without wasting valuable staff time on this kind of tedious stuff.
    I'm assuming it's not the obvious answer of simply INSERT'ing into the relevant tables (OITM etc)
    Do we need to buy the SDK to do what I'm asking?
    If someone can give me a pointer in the right direction, I'd really appreciate it!
    Many thanks,
    William.

    Hi there,
    I don't really undersand your question. If it is for data take on purposes, you can use DTW. You can use SDK if you need to stuff "automatically". You can write a Windows service that runs in the background, using SDK or an Add-on that will execute in the normal ways.
    Hope this helps.
    Kind regards

  • Purchasing Group in equipment BOM ( Item level)

    At the time of creating equipment BOM , purchasing group in equipment BOM (item level ) will be in sync with material master purchasing data.
    When we change purchasing data (Purchasing group) in material master at that time system will not change purchasing group in old equipment BOM's at item level. Is there any standard method to maintain purchasing group in old equipment BOM in sync with purchasing group in material master data (System ECC 6.0 ehp5)
    Thanks and Regards,
    Pankaj

    Thanks for reply Peter ,
    Because of this issue wrong information is flowing to PR (when component selected from equipment BOM in work order).
    Is there any negative impact if I will remove purchasing group at BOM item level ?
    I did analysis for this and found no negative impact on PR , still looking for expert advice as client is not looking for any core modification.
    Thanks and Regards,
    Pankaj

  • Set OwnerShip of this Item

    Hi all,
    Could you please tell me the what does it meant by Set Ownership of this item property of folder in Manage Catalog
    Thanks,
    Suresh

    hi,
    it means the person who is said to be the owner, can modify the permissions and properties of that catalog

  • Granting Authorization Group SC in S_TABU_DIS

    Hello Gurus,
    In our SAP Security Optimization Report, we have been highlighted that granting authorization group 'SC' to user will open a risk as follows:-
    "The authorization to view the data in table RFCDES makes it possible for a dictionary attack to find out the
    password of a user specified in an RFC connection."
    However, authorization group SC is also assigned to some other HR table under HRP* e.g. HRP1002.
    Can you advice what approach have you taken on granting access to this table?
    Thank you,
    Suriati

    Hi Bernhard,
    I was very curious about this and thinking about it while mowing the lawn this weekend
    I tried to emulate the checks described in my sandbox system (7.01 Bc SP 06) by modifying the function module.
    First of all, I think the checks can be transfered to a central form (just a logistics comment). If need be, STATICS could be used for CASES of the tables, which is already an import parameter (less spagetti
    Where I ran into some problems are with parameter transactions as "proxies" in the authorization maintenance for core transactions SM30, SE16, SM34 etc. I also tried the "old" tcodes.
    When you switch to the new S_TABU_NAM concept then it makes sense to not propose any S_TABU_DIS for the parameter transaction. In that case the core transaction pulls it's empty field for S_TABU_DIS each time ...
    The TSTCA entries are also a pestilence here, even if they were maintained with exact values. I maintained SU24 for my Z_TABU_NAM object so can as expected use it but there is a huge backlog of TSTCA entries for S_TABU_DIS.
    As the check is only performed (in my prototype) when S_TABU_DIS fails, it did provide certain granularity for isolated transaction codes, but with given (in my case very explicit!) standard authorizations for S_TABU_DIS in larger (single) roles if was very difficult to cleanly migrate to^the new concept (because of TSTCA and S_TABU_DIS NE Z_TABU_NAM).
    I am aware of SAP Note 1404093 but it is hard to "sell" SU24 maintenance to developers. You have it good in SAP type systems and it is still a hassle.
    Would it be possible that the expert mode merge can look for S_TABU_NAM and the automatically set S_TABU_DIS to inactive? I removed S_TABU_DIS from the core transactions as a workaround but it does not always work when it was already maintained.... This would require a "history" of the pervious merge, I guess... ?
    I will use this in new roles but am sceptical about a migration path for existing roles and existing SU24 maintenance "in the wild".
    Is there a major SAP release change at which SU22 will switch to this new concept as well?
    Cheers,
    Julius

  • Sharepoint list not letting edit/add items programmatically

    Hello,
    I have a SP List which I need to update and edit items programmatically (I'm using InfoPath).
    I coded the solution, tested in many others lists and the code does work. But when I test using the list I actually need to use it just doesn't let me to do any operation. I wonder if there is any configuration that might be set which doesn't allow
    people to programmatically  change the list.
    Some points:
    - This list was created in another SP site and has been exported as template to another. Is that possible that anything could be occurred during the export operation?.
    - I have created an InfoPath form template to add a new item to this list, If I need to add/update an item manually I can do this without any problems.
    -I checked the fields that cannot be blank and I'm filling all of them, so I don't think that's the problem.
    Thanks in advance.

    Hi,
    I suggest you debug your code, then provide error messages for further troubleshooting.
    Or you can provide your code for us to reproduce the issue.
    Best Regards
    Dennis Guo
    TechNet Community Support

  • Group ownership of Service Requests

    Hi All,
    Does anyone know of a way to allow group ownership of a service request in Siebel? Failing this, is it possible to delegate ownership of a service request?
    Regards,
    Cameron

    Cameron, what are you trying to accomplish? A service request can only have one owner and that owner assignment can be done manually, service request assignment rules, or workflow. If you are looking at visibility to service requests by a group of users then I would recommend using Book of Business.

  • Group ownership of Distribution Group not working

    Hi,
    We recently migrated from Exchange 2007 to 2013 CU2. We have various security groups with permissions to edit various distribution lists; this is no longer working. I've already researched the problem and I understand two things are necessary for a
    user to have permission to edit a distribution list:
    1. User must have membership in the My Distribution Groups and My Distro Groups Membership roles. Already done.
    2. User must be an owner of the distribution group.  
    The problem comes with the ownership. I'm assigning ownership of the distribution list to a security group, of which my test user is a member. Per
    this article, groups can own groups again as of 2013 CU1.
    If I directly assign a user ownership of the group, they can edit membership without issue, which means item #1 is satisfied. But they are not receiving ownership by way of membership in the group that owns the distribution list. Or put another way, their
    group membership is not granting them ownership of the group as it should.
    Any thoughts? Spent a good hour searching and can't come up with anything.
    Thanks,
    James

    Hi -
    That is correct, and is a problem with dozens of existing distribution groups.
    For testing purposes I just did the following:
    1. Created a new distribution group "Test Distro Group"
    2. Created a new mail-enabled security group "Test Distro Group Owners"
    3. Ran Set-DistributionGroup -Identity "Test Distro Group" -ManagedBy "Test Distro Group Owners"
    4. Confirmed ownership via the shell:
    Get-DistributionGroup -Identity "Test Distro Group" | fl
    GroupType                                 : Universal
    SamAccountName                       : Test Distro Group
    BypassNestedModerationEnabled  : False
    ManagedBy                                 : {contoso.com/Users/Test Distro Group Owners}
    5. Confirmed ownership via ECP:
    6. Added a test user "_Sample Teacher" to the "Test Distro Group Owners" group. Confirmed membership via ECP:
    7. Logged into OWA as "_Sample Teacher," went to Options, then Groups. "Test Distro Group Owners" is shown as a group that the user belongs to, however no groups are shown under "distribution groups I own."
    8. If I add "_Sample Teacher" directly as an owner of "Test Distro Group," the group appears as expected as an owned group.
    So in short...the user is a member of the security group, the security group owns distribution group; the user should then be an owner of the distro group via membership in the security group, however this is not working.
    Thanks for any help you can provide. I'm not sure where to go next.
    James

  • How to enable a item programmatically

    I have disabled a text item and want to enable it programmatically at the record level.
    I am using the following code but it doesnot work
    set_item_instance_property('block.item_name',current_record,insert_allowed,property_true);
    set_item_instance_property('block.item_name',current_record,update_allowed,property_true);
    set_item_instance_property('block.item_name',current_record,navigable,property_true);
    Thanks in advance.

    Hi,
    I think your question answer is some where here, look at this in your help file
    setting INSERT_ALLOWED to true has no effect at the item instance level unless it is set consistently at the block and item levels. For example, your user cannot type data into an item instance if INSERT_ALLOWED is true at the instance level, but not at the item or block levels.
    setting NAVIGABLE to true has no effect at the item instance level unless it is set consistently at the item and item instance levels
    Setting NAVIGABLE to true may affect whether the block is considered enterable. A block’s read-only Enterable property will be true if and only if its current record contains an item instance whose effective value for the NAVIGABLE property is true.
    etting UPDATE_ALLOWED to true has no effect at the item instance level unless it is set consistently at the block, item, and item instance levels.
    Regards, Khawar.

Maybe you are looking for

  • How to find a string from a set of records?

    I am having a stored procedure which is used for creating a crystal report. When I run the stored procedure sometimes it gives more than one row of data. I want to check if a particular string exists in any row of a particular column. To make it clea

  • Digitized Camcorder Tapes, Edited by iMovie, Recording to DVD

    I recently had a commercial firm digitize some 20-year old 8mm camcorder tapes that I would like to edit and put onto DVD's.  They advised me that editable digital copy would not fit on DVD's and so I provided a portable hard drive.  The tapes that h

  • How to create tables in Database when webdynpro project is deployed

    Hi I Created a project.in that i created stuctures using simpletypes.Based on structure  i created the Context,then created screens.Now how to create tables in database using this structures .Because i want to store the values in the database.Please

  • Creating a scheduled task to sync phone's using PC...

    I have two NOKIA (bluetooth) Phones and want to create a scheduled task to synchronise their agenda to outlook without user involvment. Using PCSync2 and some batch file I can get the synchronisation to work. One problem however remains. When both te

  • Code Repository "In-Development" forum on LAVA

    The LAVA Forums has successfully run a LabVIEW Code Repository (CR) for over a year now with great success. Recently there was some interest for an area where members could have preliminary discussions on code that is in-development. An area where th