How to retrieve access rights for an user/usergroup ?

Hello everybody.
I'm working on BO XI 3.1. And I have to develop with the .NET SDK package an application that retrieves the following data :
- the access rights to WEBI application and properties for each user/user group.
- the access rights to each folder and properties for each user/user group.
etc
The idea is to retrieve for an user/usergroup the access right on each property of WEBI application and softwares. and same thing for folders....
I'm looking at the .NET SDK package contents but it takes me a lot of time, even too compared to my deadlines. So I'm looking for help.
Does anyone have an idea about class of objects, properties and methods to use ?
Thank you in advance for your help.

Thanks for these samples.
The list of user and usergroups is very interesting to audit CMC but my need is different : for example, I'm looking a method to retrieve the level access (full control, no access, ...) of an usergoup on each webi's property. The reason ? To know for example which usergroups have fullcontrol access on the right name "edit SQL" ?
I think it's hard to retrieve but very interesting to audit CMC...

Similar Messages

How to Create ACCESS key for different users

How to create or generate an ACCESS KEY which is required to make changes to the table V_FAGL_ACTIVEC (For New General ledger) for IDES 6.0. Is it created in table DEVACCESS, if so where or is it created in SU01 where user id's are maintained. Since I am working on IDES, I thought probably we can create it for each user in SU01, but dont know the steps to do it. Please help me. It is urgent.

Hi
ACCESS KEY - First of all its provided by SAP. You can get the key from http://service.sap.com -> SAP SUPPORT PORTAL -> Keys & Requests -> SCCR Keys -> Registration. Here u can register a DEVELOPER or an OBJECT, by this time SAP will give the ACCESS KEYS.
**Note : To access http://service.sap.com u should have S number login or like that.
Only after obtaining that ACCESS KEY, SAP will allow the DEVELOPER to create some objects or change or modify Delivered objects.
Why ACCESS KEY - For creating or accessing any object some one should be responsible. Suppose, any issue arises with an object then can easily track the details who has created or modified.
Reward with suitable points

How we know the rights for particular user..?

in BO CMC, how we will know what are rights and authorizations he has for all groups...
Sri

Log in to CMC and slect the group and select properties of the group or user and to user security to see their rights.
I don't see any other automated system telling you the rights for each group.
Regards,
Bashir Awan

How to stop administrator rights for an user

Hi,
We had given the default user in all Mac systems administrator rights while installing the OS 10.3.X
Now, as per our new policy, users should not have administrator rights. We have one administator login on the systems.
Can someone help me on disbling the users Admin rights withour affect their data?
Rgds
Babu.S

You should backup the NetInfo database before making any changes. Run the 500.daily script from the command line. You can copy the command from this post and paste it into the Terminal application:
sudo sh /etc/daily
Press the return key. Enter you admin password at the password prompt and press the return key.
Open the NetInfo Manager and navigate to the group admin. You need to unlock the NetInfo Manager and enter your admin password. Remove the user from the field users. Click the lock to save the changes. If this doesn't work I'll hesitantly post the command line method.

URGENT : How to retrieve Last Accessed Timestamp for all Users in GRC

Dear Experts,
Please help me with this urgent request. Appreciate your help in advance.
My client is trying to understand the usage of the GRC application and would like to know information regarding the Last Accesse Time for all users who have logged into the Oracle's Governance, Risk and Compliance applcaition.
Thank You,
Rakesh

If you still need the solution,
Have a callback on OnSubtaskUpdated in your BPEL. This call back will be called for any updates in parallel approval pattern.
Thanks
--Sreeny

Problems Managing User Access Rights for Web Gallery

Has anyone else had issues changing the user access rights for a web gallery? It seems like the access is everyone or no one. Are the user rights handled per event in the gallery? I had issues adding events to the user's view/download rights in the publish settings.
Also, can these settings only be set when an event is first published? Attempting to change the user access rights after the event is published seems to require a re-upload of the images.
Any thoughts?

Problem solved.
I had to put the following lines in the specified "0000_any_80.my.website.conf" file:
        <Directory "/Library/WebServer/subdomain.domain">
                Options All +MultiViews -ExecCGI -Indexes -Includes
                AllowOverride None
                # For Password protection
                AuthType Digest
                AuthName "Password Protection"
                require valid-user
                <IfModule mod_dav.c>
                        DAV Off
                </IfModule>
        </Directory>

How to retrieve password character according to user logged on ?

Hi,
Can anybody help on this issue .
How to retrieve password character according to user logged on ?
I have a program will runs on multiple logins.I like restrict so that only an admin can retrieve the password.
How to do it ?

> I have a report program which uploads sensitive information to presentation server.The program is also used by multiple users for other use.(billing info on excel sheet)
That is the bugger with generic (executable) functionality. When used for multiple requirements which are too far from each other then they break or the "lowest common denominator" calls the shots.
If this data is being uploaded from the application server, then why don't you just protect it there. The S_DATASET for that program context will not be very usefull, because it is generic.... so you can look into using S_PATH.
> Since a user might have already logged on to system i can only ask a password as a authorization to run the program.
Again, this means that anyone who knows the generic password (or can display / debug the code) will be able to access the data.
A better variant of the same would be to create a symbolic service user, and prompt for that user's password before the data is downloaded. You can then use standard functions for prompting for passwords, which also update the lock counter.
=> If the password is locked due to incorrect logins, then the program is locked for this functionality as well.
=> You can periodically lock / unlock / change the access to the program, by administrating the service user in SU01.
=> Do not give this service user any authority at all - you only want to prompt for knowledge of the password, but not actually log the user itself onto the system. (see report RDDPWCHK for some example coding)
In German this is called "von hinten durch die brust", which means something like "unusual approach but still works anyway".
> I like to restrict access of retrieving the password only to a basis team.(others user can run the program)
I would still protect the source data itself using unique authority to access it, and then control that.
Cheers,
Julius

Access control for different user groups in APEX 4.0

Hi guys,
in Apex 4.0, is there any way to use the access control page to configure access control for different user groups?
The access control page currently only has an access control list by users with 3 privileges namely, Administrator, Edit & View where Administrator has the highest access level & View the lowest. Therefore 1 user cannot have more than 1 different privilege, however if the user belongs to 2 or more different groups then we can control what access he can have in a more fine grained manner. We also want to have more than the 3 privileges given.
Can we assign different groups to different users and let them have different privileges to be configured by page, region, process or item level?
Now Apex will create 2 tables, Apex_Access_Control & Apex_Access_Setup to store the application access control mode & access control list. It will also create 3 authorization schemes "access control - administrator", "access control - edit" & "access control - view" based on the 2 tables.
Does this mean we have to change the table structures & edit the authorization schemes to suit our usage? We are reluctant to do this because if we upgrade to a newer version of Apex then we would have to merge our pl/sql coding with Apex's updated code.
How can we auto-configure more than the 3 authorization schemes in the access control page? Is there any way to achieve a finer grain of access control based on the current access control administration page given by Apex without writing it ourselves?
We are afraid that we may have missed something on Apex access control & do not want to reinvent the wheel.

Hi Errol,
to build your own application authorization scheme around the security model supplied by Apex for administration of the Apex environment would be a bad idea.
This was never intended for authorization scheme management in custom built Apex applications, it was solely intended to control access in the Apex environment overall. The API for it is not published, and making changes to it, such as adding more roles, would run the risk of breaking the overall Apex security model. It would not be supported by Oracle and Oracle would not guarantee the upwards compatibility of any changes you make in future versions of Apex.
In short, you should follow Tyson's advice and build your own structure. As he indicated, there are plenty of examples around and provided your requirements are not too complicated, it will be relatively simple.
Regards
Andre

Specifying access rights for page tabs

Hello
I have trouble with specifying access rights for tabs that are inside another tab.
I have a group named "Customers" and a group for each of our customer companies. The company-groups are all members of the Customers group.
Then i created a tab called "Customers" which i specified access rights to the Customers group.
Under the customers tab, i created one tab for each customer and i've specified access rights to each tab.
I want to accomplish that customers who log into the portal only are able to see theyr own tab, but this doesn't seem to work properly.
Have anyone had this problem before?
Regards
Per-Jarle Sfther

Per-Jarle,
Are you sure that the users are not part of a group that is included in the group you gave access to on the tab?
Rich

SimpleSearch can only retrieve documents(reports) for enterprise users!!

Good Day Everybody,
i'm using SimpleSearch to retrieve all reports for specific users, the problem is that i'm only able to retirve reports for enterprise users and i can not get reports for domain users, anybody knows why?? or there is another way to do so??
GetDocumentList is working fine but it's only retirves reports for the loged in user only....
also i would like to extacrt all useres which has permession to reports, so would you please give me a hand of help and send me how to do!!!
kindly find below the code i'm using to retrieve all reports for specific users:
//After creating connection, seesion and login using administrator enterprise user
        SimpleSearch mySearch = new SimpleSearch();
        mySearch.InAuthor = txtUsername.Text;//.Trim();
        //mySearch.InName = "";
        mySearch.BeginDate = System.DateTime.Now.AddYears(-2);
        mySearch.BeginDateSpecified = true;
        mySearch.ObjectType = "documents";// "documents";
        BusinessObjects.DSWS.BICatalog.SortType[] mySort = new BusinessObjects.DSWS.BICatalog.SortType[1];
        mySort[0] = BusinessObjects.DSWS.BICatalog.SortType.NAMEASC;
        BICatalogObject[] searchResults= null ;
        searchResults = boCatalog.Search(mySearch, mySort, null, null, InstanceRetrievalType.WITHOUTINSTANCE);
        if (searchResults != null)
            foreach (BICatalogObject myBOCatObject in searchResults)
                Response.Write(myBOCatObject.Name + "----" + myBOCatObject.UID + "" + myBOCatObject.CreationDate + "--" +"<BR>");
        else
            Response.Write("no documents");

Which version are you using?
BICatalog is pretty limited, and has been deprecated for more recent versions.
Sincerely,
Ted Ueda

How can i open period for specific user in OB52.

Hi Expert,
How can i open period for specific user in OB52. As 'Authorisation Group' field is there in OB52, how can i use this field to restrict the specific user to post for particular period. How can i creat authorisation group and where can i assign it to the particular user...
Please let me know?
Thanks and regards,
Sam.

Hi,
Here is the detailed process as outlined in SAP help.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
Thanks
Venkata Ganesh Perumalla

We have two Apple ID's but share the same computer....that runs Itunes...How do i setup Icloud for ea. user ID?

We have two Apple ID's but share the same computer....that runs Itunes...How do i setup Icloud for ea. user ID?

You can't merge Apple IDs. What you could do is set up your phone to use the same iCloud accout you are using on your Mac. To do this, go to Settings>iCloud and turn all synced data (Contacts, Calendars, etc.) to Off. When prompted, choose to keep the data on the phone. When everything is off, scroll to the bottom and tap Delete Account. Now add the iCloud account you set up on your Mac (with the same Apple ID) and turn syncing back on for Calendars, Contacts, etc. When prompted, you will probably want to choose merge, to merge the data on your phone with the existing data on this iCloud account.

How do i access word for mac on my macbook air?

how do i access word for mac on my macbook air?

Purchase it. Here's one link to an Amazon site to buy one of the many Office configurations:
http://www.amazon.com/Office-Mac-Home-Student-2011/dp/B003YCOJA8/ref=sr_1_3?s=so ftware&ie=UTF8&qid=1349217216&sr=1-3&keywords=office+for+mac
You would receive Office on a CD, and need a disk drive for your MacBook Air to access so you could download the software.

How to allocate disk size for each user in iMac?

Hi folks,
I have iMac (Mac OS X, version 10.7.5) for Family, and each of my family member has account on it.
Now, kids download many large files (several GB size files) and HD is getting full.
So, I'd like to set maximum disk size for each user.
Could you prvide instruction how to configure disk size for each user?
Regards,
Hiro

I don't know of any way to do that by user.
I used to partition my HD and that sets a hard limit by partition, but by user? I don't think it can be done.

HT5824 How do retrieve my calendar for my iphone? All the events disappeared on my last sync.

How do retrieve my calendar for my iphone? All the events disappeared on my last sync.

to retrieve from where? If you synced with icloud all you need to do is go to settings- icloud- turn calendars on. After a minute your calendars should show up and if they do not you can try to turn off and then on again. If they still didn't show - they were never synced with icloud and then the first question to retrieve from where? comes back to us.

How to retrieve access rights for an user/usergroup ?

Similar Messages

Maybe you are looking for