How to Restrict Users Rights to Change Select List

Good morning everyone,
I've got a select list that is populated using a basic query on a table. Lets say the items in the list are A,B,C and D.
At the moment the users are able to choose any of those options and they are written to the database as expected.
I want to prevent users from selecting option D unless they are a member of an authorization scheme, say SchemeX.
I've tried a validation process but can only access the current database value not the value that the user is attempting to set.
I've successfully used
APEX_UTIL.PUBLIC_CHECK_AUTHORIZATION('SchemeX')
to test whether a user is a member of SchemeX but can't quite get my hands on the value the user is trying to set.
Any ideas would be gratefully received :-)

Thanks for the replies.
I tried the disable options method but unfortunately that doesn't work on IE 6 .. all my users are forced to use IE 6 at the moment. Works fine in Opera which I can use for testing purposes.
Drawing on inspiration from this thread I managed to sort it out. I set "Display Extra Values" to YES in my Select List and inserted this query as the "List of values definition" :
IF APEX_UTIL.PUBLIC_CHECK_AUTHORIZATION('OR_AUTHORISE_MANAGE') THEN
RETURN
'SELECT STATUS d, STATUS r ' ||
'FROM LSTSTATUS ORDER BY STATUS ASC';
ELSE
RETURN
'SELECT STATUS d, STATUS r ' ||
'FROM LSTSTATUS ' ||
'WHERE STATUS<>''Closed''' ||
'ORDER BY STATUS ASC';
END IF;
If the user is a member of OR_AUTHORISE_MANAGE they get the full list. If they are not they get the list minus "Closed" ... unless the record has already been set to "Closed" in which case it is added as an "Extra Value".
Thanks for the nudges :-)

Similar Messages

!!!How to restrict user for making changes in Sales order , partner level

Hi all,
Can anybody tell me how to restrict user for making changes in Sales order at partner level, is it through user exit?

Hi Ruchi
I hope u had gone to the screen fields which u want them not to be editable. So there u select all the fields contents which u do not want to to be changed and check the boxes with W.content and Display and save it. Once evrything is done u have to activate the particular transcation going in to the standard variants and put the name and click the activate button.
Hope its clear
Reward if help ful
Sri

How to restrict user rights so they can add list items but cannot edit them once saved?

I appreciate if you can help me with this. My beloved company uses SP2010, and I got the task to solve this issue using it, though I am not a programmer (basic html is still ok).
I need a simple annual leave list with the following capabilities:
1. Group of users (~100 members) should be able to create list items in a list that contains annual leave data. Columns are: Name, Leave start date, Leave end date, Team leader, etc.
2. Once they fill in the new item form, a workflow notifies the team leader to visit the item and set a column "approval status" to approved or rejected.
3. Based on this column value, another workflow notifies the requestor about the decision.
4. After approval, users should be able to see their items in the list, but they should not be able to edit it.
Sounds so simple, but I have big issues with point 4. as Sharepoint does not differentiate create and edit rights to a list item. As a result, requestor can edit dates of the approved items.
Any hints how to solve this? Can impersonation help with this? Or should I add a new permission level to the site?

Hello
We are going to do the following things to accomplish your task
create a new security permission level that will allow submit only
create your annual leave list
assign everyone the submit only permission
add a workflow to send the email and modify the item permissions
Ok first things first, on the sharepoint server open a powershell window and type the following powershell:
$spweb=Get-SPWeb -Identity "<site url>";
$spRoleDefinition = New-Object Microsoft.SharePoint.SPRoleDefinition;
$spRoleDefinition.Name = "Submit only";
$spRoleDefinition.Description = "Can submit/add forms/files/items into library or list but cannot view/edit them.";
$spRoleDefinition.BasePermissions = "AddListItems, ViewPages, ViewFormPages, Open";
$spweb.RoleDefinitions.Add($spRoleDefinition);
$spweb.Dispose();
Now in your site you will have a new permission level called 'Submit Only'.
Create your annual leave list and give all users read and submit only permissions.
Now create a workflow against this list in sharepoint designer.
Add a new step which should be an impersonization step
1st action
add permission: give the user and their manager (i am presuming you are capturing this information in your list so it will be recorded against the item) whatever control you wish, i.e. full control, contribute, etc.
2nd action
remove list permission: remove the group you initially gave read and submit only permission to and select the read and submit only permissions to remove from them, i.e. if you added the 'All Users' group, then when performing this action choose to remove
the read and submit only permissions for the users 'All Users'.
3rd Action
Send an Email: Email Manager with notification.
Regards
Sergio Giusti
http://sergioblogs.blog.co.uk/
Whenever you see a reply and if you think is helpful, click " Vote As Helpful". And whenever you see
a reply being an answer to the question of the thread, click "
Mark As Answer".
i just face the same issue and i create a new Permission level named "Submit Only". but i also have a custom web part that is added to my Create form . so when users tried to access the Create form they will get Access Defined. so is there a way to
modify the permission level to be able to read web parts ?

How to restrict user to change original file in word document.

Hi experts,
I am begineer in DMS. I am not able to understand how to restrict user to make any changes to a word document attached any DIR or any object link.
Ex: I have a created a DIR attaching a word doc to equipment master.
However, the user is still able to make changes to that word document usign CV03 tcode. I am sure most of you might have faced this problem. Please respond.
We are using SAP 3.1i version. It is very old version.
Thanks in advance,
Kiran

Kiran,
The task that you have mentioned could be accomplished by setting up a status network for your document type. While setting up the status network, SAP has defined statuses which could potentially lock objects and fields corresponding to that status type.
More information could be found at
http://help.sap.com/erp2005_ehp_03/helpdata/EN/9f/857f3a1c7b11d294d200a0c92f024a/frameset.htm
I am not aware of 3.0i but you can navigate to customisation --> Cross Application Components --> Document Management --> Control Data --> Define Document Types --> Click on a doc type and go to
define doc status.
Here if you define a document with status type S the object is essentially locked for editing.
Sojan

How to restrict user at selection screen while executing in background mode

hi all,
how to restrict user at selection screen while executing in background mode
Regards
Deepak

Hi,
We can get the Program whether this is running in background or not then we need to use SY-BATCH, if the SY-BATCH is set to X then the program is running in Background,
so in the INITIALIZATION event, you can use this SY-BATCH and check the User names, and give the error messsage which you want to restrict
Regards
Sudheer

How To Restrict Users To Only Create Purchase Requisitions with Item Catalog?

Hi, everyone
Please help me,
How To Restrict Users To Only Create Purchase Requisitions with Item Catalog? is it possible?
Regards, Manuel

Hi Steenie Norman
First click on the text item ---> Tools ---> Property Pallete ---->
and change the Keyboard State to Local Only also this Depend in your OS
hope this useful ....
Regards
Mohammed

How to restrict user access in Oracle Application Server 10g (9.0.4)?

Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

Hi,
You have to edit httpd.conf and modify acces rights for each protected directory
e.g.
<Directory /var/www/sub/payroll/>
Order allow,deny
Allow from 192.168.1.0/24
</Directory>
then you have to restart Oracle HTTP Server
jm--

How to restrict values displayed using a select-options

Can someone please tell me how to restrict values displayed using a select-options.
Example- in my table I have 100 entries. However when the user will click on the required field- I want to be display only 25 options based on a given value of another field in the table.
Thanks,
Mahesh.

get the screen value for the selectd field using the fm
DYNP_VALUES_READ.
for that value filter the internal table values and pass the table to f4 help of the field.
below code will help u
write the f4 help for the field.
At Selection Screen on value request                                *
F4 help for Corporate
AT SELECTION-SCREEN ON VALUE-REQUEST FOR P_CORP.
Get Corporates for selected division
PERFORM GET_CORP.
PERFORM F4HELP_CORP.
*&      Form GET_CORP
Get the corporates for the selected division
There are no interface parameters to be passed to this routine
FORM GET_CORP .
Table for conglomerate
DATA:
    LT_CONG      LIKE STANDARD TABLE OF FS_CORP,
Fields of current screen
    LFS_DYNPREAD TYPE DYNPREAD,
Table for current Screen fields
    LT_DYNPREAD LIKE STANDARD TABLE OF LFS_DYNPREAD.
LFS_DYNPREAD-FIELDNAME = 'P_DIV'.
APPEND LFS_DYNPREAD TO LT_DYNPREAD.
Get selection screen value for division
CALL FUNCTION 'DYNP_VALUES_READ'
    EXPORTING
      DYNAME               = SY-REPID
      DYNUMB               = SY-DYNNR
    TABLES
      DYNPFIELDS           = LT_DYNPREAD
    EXCEPTIONS
      INVALID_ABAPWORKAREA = 1
      INVALID_DYNPROFIELD = 2
      INVALID_DYNPRONAME   = 3
      INVALID_DYNPRONUMMER = 4
      INVALID_REQUEST      = 5
      NO_FIELDDESCRIPTION = 6
      INVALID_PARAMETER    = 7
      UNDEFIND_ERROR       = 8
      DOUBLE_CONVERSION    = 9
      STEPL_NOT_FOUND      = 10
      OTHERS               = 11.
IF SY-SUBRC EQ 0.
    READ TABLE LT_DYNPREAD INTO LFS_DYNPREAD INDEX 1.
    IF SY-SUBRC EQ 0.
      P_DIV = LFS_DYNPREAD-FIELDVALUE.
    ENDIF.                             " IF SY-SUBRC EQ 0
ENDIF.                               " IF SY-SUBRC EQ 0
REFRESH T_CORP.
Get the conglomerate for the selected division
SELECT KUNNR                         " Conglomerate
    FROM KNVH
    INTO TABLE LT_CONG
   WHERE HITYP EQ C_HITYP
     AND VKORG EQ C_VKORG
     AND VTWEG EQ C_VTWEG
     AND SPART EQ P_DIV
     AND DATAB LE SY-DATUM
     AND DATBI GE SY-DATUM
     AND HKUNNR EQ SPACE.
IF SY-SUBRC EQ 0.
    SORT LT_CONG BY KUNNR.
    DELETE ADJACENT DUPLICATES FROM LT_CONG
                    COMPARING KUNNR.
Get the corporates for the selected conglomerates
    SELECT KUNNR                       " Customer Number
      FROM KNVH
      INTO TABLE T_CORP
       FOR ALL ENTRIES IN LT_CONG
     WHERE HITYP EQ C_HITYP
       AND VKORG EQ C_VKORG
       AND VTWEG EQ C_VTWEG
       AND SPART EQ P_DIV
       AND DATAB LE SY-DATUM
       AND DATBI GE SY-DATUM
       AND HKUNNR EQ LT_CONG-KUNNR.
    IF SY-SUBRC NE 0.
      CLEAR: SSCRFIELDS.
      MESSAGE I531(0U) WITH TEXT-005.
      STOP.
    ENDIF.                             " IF SY-SUBRC NE 0
ELSE.
    CLEAR: SSCRFIELDS.
    MESSAGE I531(0U) WITH TEXT-004.
    STOP.
ENDIF.                               " IF SY-SUBRC EQ 0
ENDFORM.                               " GET_CORP
*&      Form F4HELP_CORP
F4 help for corporate
There are no interface parameters to be passed to this routine
FORM F4HELP_CORP .
F4 help for corporate
CALL FUNCTION 'F4IF_INT_TABLE_VALUE_REQUEST'
    EXPORTING
      RETFIELD        = 'KUNNR'
      DYNPPROG        = 'Z_EXCESS_USAGE'
      DYNPNR          = '1000'
      DYNPROFIELD     = 'P_CORP'
      VALUE_ORG       = 'S'
    TABLES
      VALUE_TAB       = T_CORP
    EXCEPTIONS
      PARAMETER_ERROR = 1
      NO_VALUES_FOUND = 2
      OTHERS          = 3.
IF SY-SUBRC EQ 0.
Do nothing
ENDIF.                               " IF SY-SUBRC EQ 0
ENDFORM.                               " F4HELP_CORP

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

How to restrict user to must enter value in compulsory fields

Greetings !
I had a personal information form. I want to restrict user to enter values in all fields e.g Compulsory fields (Username, D.O.B etc)
how i restrict user to must enter value in Compulsory fields

I created an example on apex.oracle.com
http://apex.oracle.com/pls/apex/f?p=18686:1:0:::::
like you see a red staric placed on ID it means it is complusory to enter because it is a primary key, i want this on every field or to restrict user to enter all data , if any field left blank it will give error "to Fill respective field ", but not on creation but on left blank (if user type ID e.g 12 and skip ename field and go on Job field it gives error to fill Ename first)

How to restrict user to select date from the calendar into a text item

Hi All,
I am using oracle 10g.IN a form i am having a block 'client_block' in that i am having a text_item ' entry_date' which is a datebase item and i have set enabled false in property palette and i created an image item on the same form and i have an calendar icon on it .In when_image_pressed trigger for image item i have written this code
SET_ITEM_PROPERTY('CLIENT_BLOCK.ENTRY_DATE',ENABLED,PROPERTY_TRUE);
DATE_LOV.Get_Date(sysdate,'CLIENT_BLOCK.ENTRY_DATE');
This is working perfectly but user can enter or delete date into the text_item through keyboard i want to restrict that they can only select date from calendar.
I have tried setting item property enabled false in triggers but it is not working.
Can someone help me what trigger i have to use and how?.
Thanks
Sri

Hi,
This is working perfectly but user can enter or delete date into the text_item >>>through keyboard i want to restrict that they can only select date from calendarSet Insert allowed to 'NO' in property pallete of item ENTRY_DATE.
In ON-ERROR Trigger::
BEGIN
DECLARE
err_code CONSTANT NUMBER := error_code;
err_type CONSTANT VARCHAR2(3) := error_type;
BEGIN
IF (err_type = 'FRM'
AND err_code IN (40200)) THEN
Message('Updates Not allowed, Please Select Your Date from Calendar');
Message(' ');
ELSE
NULL;
END IF;
END;
END;
Thanks,
Bhujendra

How to Restrict users to change password

Hi All,
I would like to restrict user to change password only defined number of times in a day, Is it possible to do it through group policies.
Please note i am already aware of "Minimum Password age" feature, however i do not want to use it as the minimum value that i can set here is 1 day. I would like to restrict users based on password reset threshold e.g. User can reset his password
in a day only twice or thrice.
Thanx & Regards,
Wasim Parkar

If you want to limit the user to have his/her password changed for a specific number of time every day, I have to say
NO thats not possible. PSO's as other mentioned,can be used to have different password policies. Maybe you can set the msDS-MinimumPasswordAge
to 00:04:00:00 which is equal to 4 hours. It means every 4 hours a user will be able to change his/her password. So in each day a user can change the password 6 times, since a day is 24 hours.
Do not forget a day start from 00:00 AM up to 11:59 PM. So in a 9 to 5 job, a user may change the password 2-3 times.
Hope it helps.
Mahdi Tehrani Loves Powershell
Please kindly click on Propose As Answer or to mark this post as
and helpfull to other poeple.

How to restrict user to change status.

Dear All,
we want to restrict users to change the status from set to assign to released status.
is there any authorization object to restirct user to change status?
i was trying with object CPRO_DPO Create Project Definition with activity 43 release ,but unable to do so.
Please do need ful
Regards
Ravindra

Hi Ravi,
probably you need to create user status profile.
Use TA BS02 to create status profile
here you have to add authorization key which needs to be defined in BS52
use b_user_stat auth object to give profiles in custom roles in PFCG
Thus you can block access to change status
Niranjan
Let me know if it helps
Points welcome
Thanks Mathias
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM
Edited by: Niranjan Dandekar on Apr 2, 2009 1:21 PM

DUN Bluetooth connection to PocketPC, Vista and restricted user rights

Hallo,
I've successfully established a DUN connection to my Pocket WM5-based QTEK 9100 smartphone via Bluetooth and the Toshiba Stack, latest version. My notebook is a X200-21D with Vista Home Premium.
Everything works well as far as I don't change the Vista user to an user with restricted rights, for the user with Administrator rights the Bluetooth Utility created a new DUN connection and a new modem with a virtual COM port. The user with the restricted rights isn't allowed to setup a new connection but this is necessary to connect to the smartphone with the Bluetooth Utility. On the administrative account the radio button to allow the connection to be dialed from other users is disabled and greyed out, so there is now way to open it for other users.
How can I setup an Bluetooth DUN connection for a user with restricted rights ?
Thank you in advance !

Should the Restricted user use the same DUN configuration like the Admin ?
If so, then you can use "Bluetooth Settings-> Custom Mode". This allows you to
select the "33600 Standard Modem" from the list which was configured before by
the Admin. So every DUN which was configured by the Admin can be used by the
Restricted user with this method. Restricted users can not install hardware, so
if the Admin has not installed a modem, then also the Restricted user can not use it.
The Admin can pre-install a modem with the Bluetooth stack installation.
This is useful if the restricted user should be able to configure a DUN connections
with advanced modem settings which are not used by the Admin.
This should be possible if the "as.ini" file has a line "MODEMINST = 1"

How to restrict user marking same events in multiple times.

Hi,
In my online exam system, I am displaying the questions and related answer in jsp page. Once user fill all this questions, the result of these stored in final table containing column questonNo, userid, answer, testname.
Now in my application if any user goes back to the question displaying page after submitting same questions, he can change the answer selected in first attempt and submitting again the test, the result are stored in final table. I.e. for same question no. user is now able to answer in two times. I want to restrict user for answering test in second times.
How can I achieve this?
Any suggestion is highly appreciated?
Thanks and Regards
Harshal

Hi Hari,
with you suggested logic can i restrict user marking one question in multiple times,
My target is once user submit any questions teh control will be transferred to the next page.Now he/she could not able to submit the same questions with another answer or the same answer also which is possible in my application by going back to these page using back button .so that i can get only one record for particular questions in table final.
Thanks and Regards
Harshal
Edited by: HARSHAL_GURAV on Aug 20, 2008 12:15 AM

How to Restrict Users Rights to Change Select List

Similar Messages

Maybe you are looking for