How to access the mapping of Groups and Roles in the JAVA Application
We have mapped the EJB roles with the groups through the Visual Administrator. We have developed the SSO. We have developed the application through which we are creating the user and role and mapping that role with the created user. The created role is saved in some LDAP directory. The second application in which ejb methods are mapped with some security roles.The LDAP roles we are getting in Netweaver as groups and we can perform the mapping of the deployed ejb roles with the group.Now for the logged in user we want to get the roles mapped with it so that we can give/deny the access to the methods from EJB as per the role of that user .How we will get the access to the mappings of the roles with the group in the application, if I know the LDAP roles mapped with the user (since these roles are accessible as groups in the NetWeaver)
For e.g. From application created the user with the role as "manager". This role is stored in iPlanet directory.
This directory is mapped in the Netweaver.The manager role is displayed as the group in the Netweaver.
Created the EJB application with the method "displayTheAccountDetails() with the role as "ManagerRole"
This role is mapped with the manager group. Now we are having the details about the logged in user and the LDAP roles mapped to it (maneger role). How I will get the access to the details that for this group which ejb role is mapped in the application. So depending on that I can allow/deny the access to the ""displayTheAccountDetails()" method to the logged in user.
Do you, guys, work together?
See the last answer in this thread: How database works in UCM?
Similar Messages
-
How to access MS Exchange Server Mail and download attachment using Java ??
Hi guys,
I need to develop a program to access my inbox from MS Exchange Server and also download the attachment using Java language !! Any example code or any site which got tutorial on this ? Thanks !!Here is a java file that connects to a users exchange account, reads all messages, and writes the attachment to the file system.
import java.io.*;
import java.util.*;
import javax.mail.*;
import javax.mail.internet.*;
import javax.activation.*;
public class TestNew {
public static void main (String args[]) throws Exception {
// Create empty properties
Properties props = new Properties();
// Get session
Session session = Session.getInstance(props, null);
// Get the store
Store store = session.getStore("imap");
// Connect to store
store.connect(host, username, password);
// Get folder
Folder topFolder = store.getDefaultFolder();
Folder folder = literature.getFolder("newFolder");
folder.open(Folder.READ_WRITE);
Message[] msg = folder.getMessages();
for(int i = 0; i < msg.length; i++){
Address[] from = msg.getFrom();
String subject = msg[i].getSubject();
Object o = msg[i].getContent();
if (o instanceof MimeMultipart) { //attachements available?
MimeMultipart mm = (MimeMultipart) o;
int mmCount = mm.getCount();
for (int m = 0; m < mmCount; m++) { // for each part
Part part = mm.getBodyPart(m);
String disposition = part.getDisposition();
if ((disposition != null) && ((disposition.equals(Part.ATTACHMENT) || disposition.equals(Part.INLINE)))) {
InputStream is = null;
File tempFile = new File("D:\\TEMP\\mailtest\\" + part.getFileName());
FileOutputStream fos = null;
try {
fos = new FileOutputStream(tempFile);
is = part.getInputStream();
int byteCount = 0;
byte[] bytes = new byte[128];
while ( (byteCount = is.read(bytes, 0, bytes.length)) > -1) { //use full read() method for GZIPInputStream to be treated correctly
fos.write(bytes, 0, byteCount);
finally {
try {
if (fos != null)
fos.close();
catch (IOException ioe) {}
try {
if (is != null)
is.close();
catch (IOException ioe) {}
System.out.println("Content: " + o);
System.out.println(from[0].toString());
System.out.println(subject); -
Making users available for OpenSSO realm group and role assignment?? Help.
Here is the situation. We have 3 Open SSO realms set up. One we have called OpenSSO-Admin, a second called OpenSSO-Provider and a third OpenSSO-Internal. We are having issues provisioning and managing the OpenSSO-Internal OpenSSO-Provider realms, but OpenSSO-Admin seems to be fine.
Here is the behavior that is manifest.
In the 2 'broken' realms, when we create users and assign them to the appropriate Open SSO realm, they appear to be provisioned correctly in IDM as well as the realm (We have validated user creation in LDAP and everything about the user appears to be fine). When we view the groups and roles in the specific resources, we are presented with a list of users that are in Brackets and appear to be provisioned. The brackets indicate that the users are not found as available users. The bracketed users can not be unassigned, nor can any others. note, our bracketed users in the list of assigned users are created from a workflow which assigns them directly to the appropriate group and role based on their business role.
The third realm, OpenSSO-Admin works fine and we can add, and manage users in the groups and roles within the realm.
We have ruled out the workflow as a source as the problem persists when we use the tool to manage users. We can create a user from scratch and add them to the realms. In the 'Broken' relms, the users do not appear in thelist of available users to be assigned to the groups or roles. Yet in the 'good realm, everything appears fine. We can move users from one realm to another and the problem persists in the broken realms, but when a user is added to the 'good' realm, everything is fine.
I have tried reconciling and get no different results.
Question is, We have isolated that the issue seems to be in the generation / management of the left hand "Available Users" list. How and where is this generated from and how can we check/fix or regenerate this list?
Thanks.
JoeI should clarify. We are using Sun IDM 8.1
-
Difference between Groups and roles?
Hi All,
What is the difference between groups and roles?
Thanks for your time and help.Oracle does not have anything called a 'group'.
A role is a named object that can contain a set of privileges. The members of the set can be individual privileges or can be another role that contains its own set of privileges. Roles can then be granted to users (or to other roles) so that those users (or roles) have the specified privileges.
See the SQL Language reference - http://docs.oracle.com/cd/B28359_01/server.111/b28286/toc.htm
Read the topics for CREATE ROLE, GRANT and REVOKE -
How to map journal fields and whats is the better process type
/Journal/JournalSuspenseCostCentre NULL
/Journal/JournalBalancingCentre Lookup from Organisation ID
/Journal/JournalMultiCompany u2018Nu2019
/Journal/JournalBatchNumber NULL
/Journal/JournalNumTransactions Total number of /Journal/JournalLine transactions
/Journal/JournalBaseDRTotal Sum of /Journal/JournalLine/JournalLineBaseValue u2013 Debit Values only
/Journal/JournalBaseCRTotal Sum of /Journal/JournalLine/JournalLineBaseValue u2013 Credit Values only
How to map journal fields and whats is the better process type idoc/proxies?please let me know
Journal Line
Multiple journal lines per header:
Schema Element Data
/Journal/JournalLine/JournalLineCostCentre Bank account control Cost Centre
/Journal/JournalLine/JournalLineAccount Bank account control Account Code
/Journal/JournalLine/JournalLineMoneyTotal Transaction Line Amount
/Journal/JournalLine/JournalLineVolume NULL
/Journal/JournalLine/JournalLineDescription Payee Name
/Journal/JournalLine/JournalLineChequeBookReference NULL
/Journal/JournalLine/JournalLineMatchField Cheque Number
NB Contra accounting entries should be posted to:
Schema Element Data
/Journal/JournalLine/JournalLineCostCentre Bank account control Cost Centre
/Journal/JournalLine/JournalLineAccount Bank account control Account Code
/Journal/JournalLine/JournalLineMoneyTotal Transaction Line Amount * -1
/Journal/JournalLine/JournalLineDescription Payee Name
/Journal/JournalLine/JournalLineMatchField Cheque Number
/Journal/JournalPeriod Current General Ledger Period
/Journal/JournalYear Current General Ledger YearIt looks you are new to PI,
you have to develop scenario end to end, by creating source data type and target data type(if you have XSD's not required),then use Graphical mapping (message mapping) to map source and target structures.
Search in sdn for one end to end scenario you will understand easily
Regards,
Raj -
The contacts list on my iphone 5c suddenly shows groups in the upper left hand corner of the all contacts list and many of the phone numbers no longer show. How do I get them back? I can't seem to get the groups word to disappear.
Hi there bvb913,
It sounds like you may have a group of contacts hidden. While in the Contacts app, tap Groups > Show All Contacts. Take a look at the User Guide below for more information.
Add contacts
http://help.apple.com/iphone/7/#/iph14a87326
-Griff W. -
How to manageimported users, groups, and computers in the "Magic Triangle"
How do I manage imported users, groups, and computers? Server Preferences versus Workgroup Manager? I can import users and groups with the former but it offers limited configurable options. I can view all users. groups. and computers (from active directory) in the latter, but it does not designate which accounts have been imported.
I've got a magic triangle setup, with my users, groups and computers in Windows Active Directory, and my MacOS X snow leopard server setup as a directory master, abd bound to AD as well. I wish to apply group policy like settings to my Mac OS X leopard and snow leopard clients.
Here's a summary of my goals:
1. Time Machine Storage for mac users when they logon to Mac OS X computers.
2. Automount group shares located on the Mac OS X Server.
3. Redirect user desktop and document folders to user shares either on the Mac OS X server or my Windows file server.
4. Automount a custom folder (for each user) located either on the Mac OS X server or my Windows file server.
5. Setup Mac OS X server as a printer server with quotas for all mac and windows computer users.
Goal #1 appears to be working. "need help with the rest. ThanksI'm not sure you want to import users to use the magic triangle properly. I think importing creates 'Augmented Records' - the user icons have blue dots.
The principle is this…
Bind the server to Active Directory (AD) & create an Open Directory master (OD). This can be done from Server Admin, in the OD section, via the change button.
Then you use Workgroup Manager, set the viewing directory (tiny little globe in top left) to use LDAP records on the server - LDAPv3/127.0.0.1. Authenticate (lock on right of toolbar) add a group, then switch to to its Members tab, click + Then change the user list to show the AD records & add the AD users to the OD group. It sounds weird & wrong, but it is how it works.
You are never modifying the AD records, just assigning a group to the users in OD. It's why the clients need to bind to AD & OD.
From there you can set the Managed prefs (MCX) for the members of the OD group. It also helps to add a guest computer account to OD to assign computer prefs based on the macs that bind to the server - it's in the File menu when you select the computes list in OD.
I hope that's clear, not sure I can help with the other tasks, but they tend to fall into place once you have the complex start in place. -
I have taken pictures with both my Sony camera and my iPhone of items that are linked to a database that I am building, as well as my website. How can I bypass importing the images into iPhoto and simply downloading the images as "files" not "photos" so I can access them with my database? thanx.
If your Sony has a removable memory card you can use a card reader to copy the image files from to a folder on your Desktop and then move them anywhere you'd like.
Since the iPhone doesn't have a removable memory card you can try using Image Capture to see if you can manually upload the files to a folder on the Desktop.
If you have to import the photos, which are image files, into iPhoto you can then export them out of iPhoto to the Desktop and go from there to your database. Just because they are in iPhoto doesn't prevent you from using them elsewhere.
OT -
PS CS6 on the mac pro: the bruch in hard and soft is the circle of the bruch bigger than then the effect. How can i bring it to normale?
Go to System Preferences>Accessibility>Display and the set the Cursor Size to Normal
-
I want to delete a group on my iChat list, but it doesn't go away when I right click and delete it. No ones in the group and I tried the plus button on the bottom left of the list and I can't find "edit groups"
WordPress is in a class of it's own. It began it's open source life as a blogging system but it has evolved into a powerful, feature-rich CMS (content management system). In short, if you elect to use WordPress on your domain, you might just as well use it for your entire web site.
To work with WordPress, you will need a firm understanding of HTML, CSS and how PHP includes work.
WP requires you to set-up a dynamic work environment (see links below)
Find a WP Theme you like that won't require much customizing on your part.
Related Links:
http://wordpress.org/
Get one of the following testing servers for your OS and follow the installation instructions.
WAMP for Windows
http://www.wampserver.com/en/
XAMPP for Windows
http://www.apachefriends.org/en/xampp-windows.html
XAMPP for Mac
http://www.apachefriends.org/en/xampp-macosx.html
MAMP for Mac
http://www.mamp.info/en/downloads/index.html
Setting up a PHP development environment for Dreamweaver
http://www.adobe.com/devnet/dreamweaver/articles/setting_up_php_05.html
Creating a WordPress Theme in DW
http://www.adobe.com/devnet/dreamweaver/articles/creating_wordpress_theme_with_dreamweaver _pt1.html
Best of luck,
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
http://alt-web.com/
http://twitter.com/altweb
http://alt-web-design.blogspot.com/ -
How to list users under multiple groups and users sub groups
Hi, I am stump, which is not hard to do. i have a list of groups and i want to list the users in those groups and then in the next column lists all the citrix only groups for each user. hopefully im describing that correctly. Heres what i have but it is
not listing the users groups. I am not sure how to proceed.
$CurrentDate = Get-Date
$CurrentDate = $CurrentDate.ToString('MM-dd-yyyy_hh-mm-ss')
$Groupname = "Distribution Lists"
$excel = New-Object -comobject Excel.Application
$excel.visible = $True
$wbook = $excel.Workbooks.Add()
$wsheet = $wbook.Worksheets.Item(1)
$wsheet.Cells.Item(1,1) = "Groupname"
$wsheet.Cells.Item(1,2) = "Member"
$wsheet.Cells.Item(1,3) = "ACID"
$wsheet.Cells.Item(1,4) = "Department"
$range = $wsheet.UsedRange
$range.Interior.ColorIndex = 19
$range.Font.ColorIndex = 11
$range.Font.Bold = $True
$intRow = 2
$groups = get-adgroup -Filter * -properties * -Searchbase "OU=Citrix,OU=Permission,OU=Groups,OU=Home Office,OU=domain,DC=Domain,DC=com"
$targetFile = "c:\temp\$groupname $CurrentDate.csv"
Add-Content $targetFile "Group;Member;ACID;Department"
foreach ($group in $groups){
$groupMembers = get-adgroupmember $group -Recursive | Get-ADUser -Properties Department, DistinguishedName| Where-Object { $_.Enabled -eq 'True' } | Select-Object Name, samaccountname, department, distinguishedname, @{n='MemberOf';e={$_.MemberOf -replace '^cn=([^,]+).+$','$1' -join '; '}
foreach ($groupMember in $groupMembers){
$groupName = $group.Name
$memberName = $groupMember.Name
$acid = $groupMember.samaccountname
$groups = $usergroups
#$department = $groupMember.department
$department = $groupMember.memberof
#$DistinguishedName = $gropmember.distinguishedname
$line = "($groupName)--------($memberName)-----($acid)-------($department)------($usergroups)"
add-content $targetFile $line
$wsheet.Cells.Item($intRow,1) = $groupName
$wsheet.Cells.Item($intRow,2) = $memberName
$wsheet.Cells.Item($intRow,3) = $acid
$wsheet.Cells.Item($intRow,4) = $groups
$wsheet.Cells.Item($intRow,5) = $DistinguishedName
$intRow++
$WorkBook.EntureColumn.AutoFit()
$excel.SaveAs("DL" + "name.xlsx")
$excel.Close()Hi Glacket,
Below codes should give you headsup.
This command will give you estimate the result count for each group:
PS C:\Users\Administrator> Get-ADGroup -Filter {Name -like "TestGroup*"} | Select Name, @{Expression={get-adgroupmember $_ -recursive | Measure | Select -ExpandProperty Count};Label="Count"}
Name Count
TestGroup1 7
TestGroup2 8
Note that as said earlier we are getting duplicated results(12,13,14) for users belonging to multiple groups. Result is in order as per earlier code's count and order.
Get-ADGroup -Filter {Name -like "TestGroup*"} | get-adgroupmember -recursive | Select Name,@{Expression={Get-ADPrincipalGroupMembership $_ | Select -ExpandProperty Name};Label="GroupMemberOfName"}
Name GroupMemberOfName
User100 {Domain Users, TestGroup1}
User14 {Domain Users, TestGroup1, TestGroup2}
User13 {Domain Users, TestGroup1, TestGroup2}
User12 {Domain Users, TestGroup1, TestGroup2}
User11 {Domain Users, TestGroup1}
User10 {Domain Users, TestGroup1}
User1 {Domain Users, TestGroup1}
User19 {Domain Users, TestGroup2}
User18 {Domain Users, TestGroup2}
User17 {Domain Users, TestGroup2}
User16 {Domain Users, TestGroup2}
User15 {Domain Users, TestGroup2}
User14 {Domain Users, TestGroup1, TestGroup2}
User13 {Domain Users, TestGroup1, TestGroup2}
User12 {Domain Users, TestGroup1, TestGroup2}
Use below to export to CSV:
Get-ADGroup -Filter {Name -like "TestGroup*"} | get-adgroupmember -recursive | Select Name,@{Expression={Get-ADPrincipalGroupMembership $_ | Select -ExpandProperty Name};Label="GroupMemberOfName"} | Export-Csv C:\ListGroups.csv
Regards,
Satyajit
Please “Vote As Helpful”
if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you. -
I bought the Adobe Exportpdf license and cannot find the link how to use it
I bought the Adobe Exportpdf license and cannot find the link how to use it
Hi Pedro,
To use the ExportPDF service, simply visit http://exportpdf.acrobat.com and click 'Sign in' at the top right corner. Enter your Adobe ID (email address) credentials to log into the service. As ExportPDF is web-based, you simply utilize the tool through your web browser. After you're logged in, you should see the ExportPDF interface, with a button saying 'Select PDF file..' to get the process started.
You may also access ExportPDF via Adobe Reader by choosing File > Save as Word or Excel Online.
Please let us know if you have any questions.
-David -
my bluetooth says 'Not Available' how do i get it to work again. I have restarted the computer several times and have replaced the batteries in both the keyboard and mouse and yet it still is not working! please help
I have had the same problem. It was cured by turning computer off and/or restarting it. I am not sure if once was enough. I think shutting down must cut out whatever it is that blocks bluetooth. Good luck
-
When I have the downloads window open and I close the browser window, the next time I reopen the browser while the downloads are still going, it returns me to the last page I was on. All previous versions of Firefox would return me to my homepage which I would prefer. Please let me know if this is possible.
When you re-open Firefox and choose Restore Session, by default it picks up your most-recently-open window, and the other windows should then show up in Recently Closed Windows.
The Firefox add-on Session Manager lets you manage how many closed windows and closed tabs are saved, in case it's not enough. -
Me and my daughter are using the same Apple id and we share the same iCloud account. I want to change her Apple id so that she will have her own icloud account and I will have mine.
1. how do I do it?
2. how do I transfer her stuff which is in my icloud storage to her new icloud account once this one is created?
thanks,
AriTo migrate her device to a new account, start by saving any photo stream photos she wants to keep to her amera roll (unless already there) by opening your my photo stream album, tapping Select, tapping the photos, tap the share icon (box with upward facing arrow, then tapping Save to Camera Roll. If she is syncing notes with iCloud, you'll need to open each of the notes and email them to her so she can later copy and paste the text into new notes created in her new account. Then go to Settings>iCloud, tap Delete Account (which only deletes it from this device, not from iCloud), choose Keep on My iDevice and provide the password to turn off Find My iPhone. Then sign back in with a different Apple ID to create her new account and choose Merge to upload the data.
Once you are on separate accounts you can each go to icloud.com from a computer and delete the other person's data from your account.
Maybe you are looking for
-
How to remove MacKepper from my Mac book pro
I downloaded MacKeeper today which I now regret. I have tried to delete the app how it is not allowing me, I have tried it to trash etc but there is no hope. Please help in anyway you can. I own a MacBook Pro
-
Withholding tax not captured for a single Vendor during Invoice
Dear SAP Gurus, Withholding tax is not captured during MIRO for a particular Vendor. The Vendor Master has been assigned with the relative tax codes. Program RFWT0010 has been run. Tax Types have been checked. Error message was changed to Warning
-
Hi all, I'm getting data from PNP logical database but it's possible a user that runs the report doesn't has authorization to access some employees. When I do GET PERNR the table doesn't comes with these employees which the user has no authorization
-
Why do I get "Error 2134" when I try to view an online catalog I've successfully viewed in the past?
-
Trouble with implementing translation
I'm having some trouble getting my translation to work. I have a very basic application which is available in two languages. I have mapped and published my translation. What I am trying to do is have the page translate when clicking the language butt