How to restrict login for multiple users having same Role

Our Web Application is deployed on Tomcat 5.5
The requirement is ?
There are roles in application like "operator", "admin"?
There are multiple users created for each of the above role.
When one user of "operator" role is logged in, then
It should not allow to login for another user of "operator" role.
Also, if user did not log out & application gets close, then
It should not allow to login for another user of "operator" role.
Also, it should not allow to login for multiple requests of same user
(using another browser instance...)
Is it possible using session object?
But, using session object, it will create separate objects for different users,
So here I will not be able to restrict session object creation rolewise.
Also, how to retrieve these multiple session objects created for different users on server?
If anyone is having the solution please reply as soon as possible,
Thank you.

To tell you the truth, this is a stupid requirement. It must be an extremely fragile application.
In any case, you will have to write your stuff for that. Probably a filter that on login, logout, and session expiration checks, makes, or removes entries in a DB (using a synchronized resource to prevent race conditions) or possibly even simply in an application context object.

Similar Messages

  • Triggering a sub work flow for multiple users at same time.

    I have a scenario in which I have created sub workflow as an activity for approval process. This sub work flow should be triggered for multiple users at the same time and their decison is independent of each other.
    This is like creating multipe instance of the same sub work flow and then the sub work flow runs indepedently as a new work flow for each of the approver and the process is completeded for approver independently.
    How can this be achieved?

    Tyr to do like this,
    1. First include the subworkflow in the main workflow template.
    2. Now include standard Block Step in the main workflow template.
    3. In the block select the block type as ParForEach.
    4. Before doing the 3rd point make sure that all the agents for whom you want whom you want to initiate the workflow, populate them in a Multiline conatiner element.
    5. Once completing 3rd and 4th points open the block step under the tab ParallelProcessing  assign the multiline container element name in the   for e;g if the multi line container element name is COSTCENTER then do the binding like below. the conatiner element COSTCENTERLINE is created by default once you include the multi line conatiner element under parller processing tab.
    &COSTCENTER[&_WF_PARFOREACH_INDEX&]&   -------->     &_COSTCENTER_LINE&
    Now assign the agent of the subworkflow as COSTCENTERLINE , imean if suppose you have 3 entries in the internal table then three separate and for three different agents the workflow is instantiated.

  • Allowing clear-text logins for multiple users

    I'm not sure if this is the correct section to place this question in, so Mods, please move if needed.
    As many know, Apple changed the AFP Client defaults in 10.5.x so that clear-text logins to servers are disallowed by default. You can edit the afpcleartextallow option in ~/Library/Preferences/com.apple.AppleShareClient.plist to enable it on a per user basis.
    What I wish to know is wether it's possible to allow clear-text logins on a global basis. I've looked at /Library/Preferences/com.apple.AppleShareClient.plist and it does not contain the afpcleartextallow option, and adding the option and setting it to "yes" (without editing the file in the user's preference folder) does not allow clear-text logins.
    Is there some global preference file that this option could be added to that would preclude me from having to edit the preference file for every user? Part of the reason it's a problem is if you have multiple user accounts on multiple machines, or network based home folders stored on an AFP server that only supports clear text, for example, a Netware 6.5 server running NFA for Mac.
    One problem I've seen is that until the user is actually at the desktop (well I think it's specifically when the Finder loads and reads the per-user preferences) the OS will prevent clear-text logins, regardless of the setting in the pref file, thus you cannot automatically mount volumes at login if the server only supports clear-text.
    Any suggestions or advice greatly welcomed.

    If you are familiar with the exchange man shell, use the new-mailboxsearch powershell cmdlet in your code.  You can pass it a list of -SourceMailboxes(use get-content to pass your .txt to a variable, you'll want to place each name on a new line) to
    search on/set the in place hold.. Here is the technet material on new-mailboxsearch. 
    http://technet.microsoft.com/en-us/library/dd298064(v=exchg.150).aspx

  • How to use Keychain for multiple users on one computer?

    I have a new Macbook Pro with Yosemite.  I just moved over from PC for my work computer and the Keychain thing is killing me!  I am a social media consultant so I manage multiple accounts for multiple clients.  I need a way to log in and out as them on many different platforms.  The reality is that I am the only user but I log in and out of different things as if this was a public computer with multiple users. 
    PC allowed me a drop-down option with each login.  For example the email box could be clicked and then I could select the client email that I needed to fill in.  The password would then auto-populate.  Is there any setting I can change to make this happen on a Macbook? I have been logging in, deleting the info in Keychain, then logging in for the next client, delete...etc.
    Most password managers don't work because of this same problem.  Please don't recommend a password manager app unless it can handle logging in and out of (for example)10 different LinkedIn profiles.
    Any advice would be greatly appreciated!

    Tanja Turtsanyi wrote:
    I have a new Macbook Pro with Yosemite.
    Apple>About This Mac>More Info>Service
    Please read the warranty paperwork that came w/your computer.
    You have 14 days to return the computer w/no questions asked. 
    You have 90 days of FREE phone tech support on top of your standard 1 year warranty unless you also purchased AppleCare which gives you an additional 2 years of coverage plus FREE phone support.
    Strongly suggest that you take FULL advantage of the above before it runs out.  Let Apple deal w/the problems.
    Mac OS X (10.4)
    Conflicting info:  Please update/correct your profile so that you can receive the correct troubleshooting suggestions.  This will assist the users in trying to help you.  Thank you.

  • How Can I Login To Multiple User Accounts Simultaneously

    I am using an Intel iMac (2GHz Intel Core 2 Duo) with 1GB of memory and 10.4.11. I have Fast User Switching enabled. I restart the Mac every morning. Then I login to a second user account. While at work, I access these accounts via VNC.
    Sometimes I forget to login to the second user account. I do it from work via VNC, which sometimes causes complications.
    Does OSX support simultaneous multiple user account login? If not, is there a work-around solution such as an AppleScript? This would provide a time savings to me, as well as a convenience if I forgot to login to the second user account before leaving home.
    Thank you.
    Kurt R. Todoroff

    Seems to me, in another discussion, the simple Fast User Switching does not
    do much really fast or automatically; there are a few faster steps than having
    to log into each and every account change (even when FUS is enabled) so
    this later development sounds a little more automatic, esp over a distance.
    Is there a third party app or valid script that an do the multiple logins automatic
    after the first-run; so passwords need not be re-entered, and the screen can just
    switch over "fast" to another open account window, ready to go to work in there?
    {And not just a keyboard shortcut to save a few little steps, overall.}
    Whichever way the road turns...
    Good luck & happy computing!
    {edited}

  • How to show inboxs for multiple users?

    I recently have started using the Mail App on my iMac. I was using my company's OWA as my standard mail program but I found the Mac mail easier to use. But... In my OWA it was possible for me to have multiple accounts and inboxs from the same server (exchange 2007) and after I had set up my mac mail with my primary exchange account, I couldn't send or recieve from my other accounts. Then I saw that I could type in more e-mail addresses in the Account setup and now it is possible for me to send fromthese accounts.
    But still.. I can't see the incoming mails for these accounts. Anybody who knows how to setup mac mail app so I can see the incoming mails for ohter users than my primary?

    I've found the same problem in OS X Lion, with Mail, iCal and Address Book getting confused when two Exchange accounts on the same server are configured, resulting in either missing or duplicate entries (despite everything appearing fine when accessing the accounts individually via Outlook or OWA).  iOS doesn't have any problem with this setup; two Exchange accounts on the same server work perfectly; the issue seems specific to Mac OS X.
    After some experimentation I've found a workaround.  Since the issue crops up with two Exchange accounts on the same server, it seems possible to trick OS X into thinking the accounts are on two separate servers through a little DNS manipulation (which I realize may not be a practical option for everyone).  Here's what resolved the issue for me:
    My external and internal DNS FQDNs for the mail server were mail.mydomain.com.
    I set up a new DNS entry - mail2.mydomain.com - as a CNAME for mail.mydomain.com.
    On my Mac, I set up Exchange account #1 with the server set to mail.mydomain.com.
    I then set up Exchange account #2 with the server set to mail2.mydomain.com.
    Even though both FQDNs resolve to the same IP, this seems sufficient for Mac OS X to consider them as separate servers, elliminating the problems I had before when I set both Exchange accounts to the same mail server FQDN.
    I've only tried this on OS X 10.7 Lion, and the recent 10.7.1 update, although I wouldn't be surprised if the same trick works for earlier versions of OS X.

  • Shared Photo & Music Libraries for Multiple Users on Same Machine

    I've setup multiple users on a single machine and I'm trying to have a common shared folder for photos (w/ Adobe PSE) and music (w/ iTunes). First, on photos:
    -Tried setting up a folder on /users/shared/pictures. How can I "share" the main folder and have permissions carry down to all subfolders and files?
    -I've given the other user permission, but when logged on, Finder window only displays icon, not preview of image? In cover flow mode, image shows up, though?
    -Is this the best approach or is /me/public the better way or /me/pictures (shared) a better way?
    And then on music:
    -recommendations on best approach to have a single library with multiple users and multiple iTunes accounts.
    Thanks in advance

    The iTunes sharing is for sharing music between computers on a network.
    To share music on a single PC, read this article
    http://docs.info.apple.com/article.html?artnum=93195

  • App updates for multiple users on same Mac with maverick

    Background.  I have a single iMac that I have been using since ~2007. It's a family computer and there are three(3) accounts/users on it.  I am the administrator for them.  The operating system has been kept up with each OS upgrade since its purchase.  We are currently using Maverick.
    Problem - In the past with all the other operating systems (pre-Maverick), when a application needed to be upgraded I could log into my account (administrator rights) and perform the necessary upgrade and it would propgate to ALL the users on this computer.  However, since upgrading to Maverick I can no longer just upgrade on the administrators account (i.e. mine) and it propogate to the other users.  I now have to log into each individual account (i.e my wifes and sons) and perform the upgrades to their account.
    Question - Does anyone know if there is a way to allow the administrator to perform the single upgrade that propogates to others users in OS Maverick without having to log into each individual accounts and updating each account separately.  Also does anyone know why OS Maverick no longer supports the capability like ALL previous OS's have in the past? 
    Thanks

    Ok thanks.  The apps that I'm referring to are: Pages, keynote, numbers, iMovie, and iPhoto.  Each of these were originally purchased or came (iLife / iWork) with the machine when I purchased it.  All of those apps are located for each user under HD/Applications folder.  Each user does have a apple iD for itunes and itunes purchases for songs etc. but all applications are purchased by me the administrator and placed in the HD/Applications folder.  So I'm not sure why I now (since upgrading) to Maverick need to go into each account and perform the updates to these apps.  All previous OS updates never had this problem. 
    Does this now mean for each user that I perform the update my HD is getting multiple downloads and installs and increasing the amount of usage per application.  For example if "pages" takes 1 Gb and I install it for each user will it now take a total of 3Gb for the 3 users?
    Thanks for your help

  • Flash Player For Multiple Users On Same Computer

    While surfing. I got a message to update Flash Player. When I
    did, issues began to occur for other users on my home computer. The
    adminstrator could view web pages with Flash content, but no other
    users could, including other adminstrators on the computer. After
    looking at support documents, I uninstalled the flashplayer - then,
    reinstalled using a different administrator id. Now, that id can
    view Flash and no others can. I have tried changing screensavers as
    suggested in another support document, but no luck. How do I get
    Flash to work for all users?

    It might be a permission problem in the Flash Player install folder.  Try a clean install on the original machine.
    If that does not resolve your problem, can you tell what Windows version & edition you are using?
    Also check the permissions of all files in
    C:\Windows\System32\Macromed\Flash
    C:\Windows\Syswow64\Macromed\Flash

  • Can I set a default Playback preference for multiple users on same PC?

    I am setting up an editing suite for our University which has a "per machine" Creative Cloud licence. It is a PC installation. This machine will be used by a class of students who will log in with their own credentials. I need to set the preferences for Premiere (video output, workspace layout, default drives etc) so that it will be the same for all users logging in since we want a consistent setup for teaching purposes and dont want to have to help each student set up so that it shows correctly on the monitors. Is there a way of saving this setting as the default for every user?  In particular, as we have dual monitors, we want to save the preferences - Playback to always appear on the second monitor. This is really important for us - I need an answer before building more suites.
    (Adobe won't let me ask them directly, so I have to wait for someone to provide an anwser on the forums... not great customer support in my book)

    Firstly...is  this editing suite for the purpose of teaching editing or something else?
    Next ...what is your experience with PPRo?
    You can set up the machine(s) initially exactly how you want them  in regards to hardware and screen layouts etc.  Thats easy and can be called..'University of Waikato Default Edit Workspace' for example. That is  only part of it though.
    You can set up and share a common Key Board Short cut Preference File.  Same as Export Presets.
    There is no way you can "Default" all the USERS stuff for individual unique projects  though without creating a massive potential for disaster and confusion.
    Each will need to have access to many separate drive locations for their media (audio, graphics, footage) and the knowledge to create, access and locate it.
    THey will each need a separate Location for their Projects as well as their media.
    If they are editing students...they should be taught how to set up everything for themselves so they have an understanding of the fundamentals and basic s of NLEs

  • How to send notifications to multiple person with same role and with result

    How to send notifications to multiple people with resultout as approve/reject?
    We are looping the notification by attaching a cursor query to find the different emp nos to send for approval.
    I cannot associate a role because these emp nos are sub-set of a role which I have created and i am getting thru the cursor query.
    For FYI notification there is no problem, but for approval notification, I am not unable to send approval notifications to all the people.It stops at the first person in the loop.Pls suggest alternate way. Thanks in advance.

    Manju,
    I would use the cursor to populate the API for creating an ad-hoc role within the workflow process as a function. Then set your notification performer as the ad-hoc role.
    Here is an example function:
    create or replace procedure sample_emp_fill(itemtype in varchar2,
    itemkey in varchar2,
    actid in number,
    funcmode in varchar2,
    resultout in out varchar2) as
    cursor get_name is
    select ename from scott.emp where mgr = 7839 and empno != 7566;
    role_name varchar2(50);
    names varchar2(500);
    begin
    if (funcmode = 'RUN') then
    role_name := 'ad_hoc_role_'|| itemkey;
    for row in get_name loop
    names := names || row.ename || ' ';
    end loop;
    WF_DIRECTORY.CreateAdHocRole( role_name=>role_name,
    role_display_name=>role_name,
    language=>'AMERICAN',
    territory=>'AMERICA',
    role_description=>role_name,
    notification_preference=>'QUERY',
    role_users=>names,
    email_address=>' ',
    fax=>'',
    status=>'ACTIVE',
    expiration_date=>'');
    resultout := wf_engine.eng_completed||':'||wf_engine.eng_null;
    return;
    end if;
    end;

  • How to setup for multiple users accessing same share?

    Hi!
    Recently picked up Mac Mini Server and have some configuration questions related to sharing files & information over the internet. Whenever possible, prefer to use the built-in features & tools, not 3rd party tools.
    My setup & needs are this:
    - Have folders & sub-folders with files to share.
    - Wish to give individuals access to the shared folders, each with their own account (and access logging).
    - Shared folder and files should be visible via web to authenticated users only (so no special client or setup is needed).
    Right now, have added a Website via Server.app that points to the folder with files to share, and that works somewhat, but doesn't support individual user accounts separately?
    Thought maybe to setup VPN but that seems like massive overkill for this (and is a pain in the butt for non-technical users to setup).
    Editing httpd.conf for user support is a possibility, but seems /etc/apache2/httpd.conf only applies to the default web server (on port 80) not the one i set up in Server.app?
    Can anyone recommend the best approach, given the above needs?

    I have a related question. i created 2 websites/domains then i went to users and created 2 seperate "network" users then i went to ftp and selected each website and added only user A to site A and user B to site B. what's weird is that when i try to ftp using either of the users it seems to land on the same site. i looked at shared security for the folders and it only shows user a on site a folder and user b on site b folders. am i doing somehitng wrong or is this how it works in mountain lion server? i just want to give the domain owner ftp access so they can manage their files and only thier files. i also had to turn on open directory so that it would not create a local user but a network user. do i need to turn that off and just deal with having a bunch of local users as ftp user? i want to host multiple websites on the server and NO users remote on to server besides ftp.
    edit 1: i only have 1 IP running on the server which i don't think it has any affect on this but thought i mention it :-)
    edit 2: i just noticed one more thing that may help. i used filezilla to remote in using both users, one at a time. it seems to allow both users in but then it shows same directories. i then created a file using the one that was not supposed to have acces and it never sows up. but if i remote desktop to server i can see the new file in the correct folder. so it may have something to d o with the directory listing.

  • How to set emails for multiple users?

    Hello,
    We have a scenario, where there are several users whose email is not set in "My Account". We want to set this in one shot, what is the best bet for us?
    Also we want to send email to a person outside OBIEE infrastructure, how can we do this?
    Please reply

    I've found the same problem in OS X Lion, with Mail, iCal and Address Book getting confused when two Exchange accounts on the same server are configured, resulting in either missing or duplicate entries (despite everything appearing fine when accessing the accounts individually via Outlook or OWA).  iOS doesn't have any problem with this setup; two Exchange accounts on the same server work perfectly; the issue seems specific to Mac OS X.
    After some experimentation I've found a workaround.  Since the issue crops up with two Exchange accounts on the same server, it seems possible to trick OS X into thinking the accounts are on two separate servers through a little DNS manipulation (which I realize may not be a practical option for everyone).  Here's what resolved the issue for me:
    My external and internal DNS FQDNs for the mail server were mail.mydomain.com.
    I set up a new DNS entry - mail2.mydomain.com - as a CNAME for mail.mydomain.com.
    On my Mac, I set up Exchange account #1 with the server set to mail.mydomain.com.
    I then set up Exchange account #2 with the server set to mail2.mydomain.com.
    Even though both FQDNs resolve to the same IP, this seems sufficient for Mac OS X to consider them as separate servers, elliminating the problems I had before when I set both Exchange accounts to the same mail server FQDN.
    I've only tried this on OS X 10.7 Lion, and the recent 10.7.1 update, although I wouldn't be surprised if the same trick works for earlier versions of OS X.

  • How to create template for multiple users and proper variables for DesktopDNA

    Here's the scenario:
    25 WXPSP2 laptops with only ZENworks Desktop Management agent installed.
    Laptops have at least 4 user profiles each. All laptops have same
    configuration. I want to create just one image for all laptops and am
    using personality migration to handle the different user profiles on each
    laptop.
    We are using ZENworks 7 on a NetWare server.
    Using the DNA Template Editor, I create a template by selecting All local
    user profiles on source machine, selecting User Accounts Settings under
    System, and name the template DNAusers.dtf.
    I then create an application object, CollectDNA, to collect the
    personality following the instructions in guide. I associate CollectDNA
    with a workstation and select Force Run and App Launcher. This is the
    parameter setting: (There is no VOL1 on this server)
    /D \\Server1\SYS\ddna\data\%CN%\X-REMOTE1 /T \\Server1
    \SYS\ddna\templates\DNAusers.dtf /X
    I go to X-REMOTE1 laptop and login as an administrator but nothing
    happens. I then click on Application Explorer and double-click on
    CollectDNA object and get: could not launch CollectDNA. The network
    path was not found. Checking My Network Places, I see no NetWare
    Services listed. And, although the ZENworks Desktop Management Agent
    policy says to display the ZENworks authentication dialog, the login
    screen never appears.
    Any suggestions?

    OK so I changed %CN% to "Admin" in the application object and restarted
    laptop and logged in as Admin in the ZENworks Desktop Management
    authentication screen. Nothing happened until I clicked on the
    application windows and then it tried to launch CollectDNA but then I get
    the Application Launcher status: the network path was not found.
    I saw an earlier response you gave to someone else who had the same
    message and did the same but still get this error message.
    Do you see anything else that I'm doing incorrectly?
    > On Mon, 17 Jul 2006 22:59:30 GMT, [email protected] wrote:
    >
    > > /D \\Server1\SYS\ddna\data\%CN%\X-REMOTE1
    >
    > if you do a force run with wks associatione (perhaps even selected)
    secure
    > system the %CN% can not be resolved..
    > --
    >
    >
    > Marcus Breiden
    >
    > If you are asked to email me information please change -- to - in my e-
    mail
    > address.
    > The content of this mail is my private and personal opinion.
    > http://www.edu-magic.net

  • How to restrict data for certain users (brokers) in CRM

    Hi Team,
    We need to restrict brokers on their ability to 'see' and create trade promotions for only a given set of customers.
    Example:
    Broker Joe Smith can only see through t-code BP 3 customers, even though their are 10 customers created in the CRM system.
    Same goes for the t-code CRM_MKTPL (trade promotions), how do we restrict Joe Smith from creating promotions for only those 3 customer and not the other 7 customers?
    Any help is appreciated.
    Has anyone restricted any transaction like this before?
    Does it need ABAP programming? or does it need additional security roles?
    Thanks,

    The access control engine in CRM, is probably your best bet for this option.  I have not used it, but we did evaluate the use of the product.  I know this product works in BP, but I have not looked to see whether it hooks in CRM_MKTPL.
    Do a search on ACE in this forums or in the CRM help documentation.  Try this link for some basic information
    http://help.sap.com/saphelp_crm40sr1/helpdata/en/a9/04c42a9e207545b47a32d1d05f53c3/frameset.htm
    Good luck,
    Stephen

Maybe you are looking for