How to stop user doesn't have "approver" to approve PR from "forward"

When we have an issue from our customers that an approver forward via email to the user doesn't have "approve" right. But this use be cable to approve this PR. Is there profile or setting to stop this ?
we are using EBS 12.0.1 and database 11.1. Hope some one can shed lights on us.
Thanks,
Albert

Sanjay,
Our issue is when any approver used "forward" function from Gmail or any mail program and send the PR to an user. This user doesn't have any approval right ,but this user can open this mail from "forward" and she clicks "approve" button from the bottom of this email and send "approve" action back to Oracle EBS. After a few minutes we went to database to check this status of PR is approved by "Approver" but not by this user.
Thx.
Albert

Similar Messages

How to stop users not in any group and users from other groups accessing sites they have no permission to access on top link bar?

Hello Community
    Using SharePoint 2010 Server and UI, a web application
was created with subsites.
    The subsites have unique permissions and Owner, Member
and Visitor groups.
    The problem is however even if a user does not exist
in a group that user can access the top link bar/navigation
bar and its sub sites.
    Also any user in any group can access any top link bar/navigation bar and its subsites.
    How do you enforce that if a user is not in a group
they are denied access the top link bar/navigation bar and its
subsites?
    Thank you
    Shabeaut

If you are using the built in SharePoint navigation links, SharePoint will automatically hide links to sites that a given user doesn't have access to.
The problem is, it sounds to me like you have a fixed top link bar that lists the content and if a user doesn't have access, the link still shows up.
You may want to look at how the top link bar was encapsulated in the design of the page. If it isn't wrapped in the permissions provider code, that could be the problem.
I trust that answers your question...
Thanks
C
|
RSS |
http://crayveon.com/blog |
SharePoint Scripts | Twitter |
Google+ | LinkedIn |
Facebook | Quix Utilities for SharePoint

When the schema/user doesn't have an entry in dba_ts_quotas

DB version:11.2.0.2
Developers have been creating/dropping objects in LANTS_ENTMT_NA_DEV_01 schema for several weeks now. Today, while trying to create a table in this schema they got
ORA-01536: space quota exceeded for tablespace 'LANTS_DATA'So, I wanted to check the quota allocated to this user. But this user doesn't have an entry in dba_ts_quotas ! This means that this user was never granted any quota on any tablespace . Right ?
But, I am curious , without any QUOTA , how this user was able to create objects in its default tablespace until now and suddenly get "ORA-01536: space quota exceeded" error today.
SQL > select distinct tablespace_name from dba_segments where owner = 'LANTS_ENTMT_NA_DEV_01';
TABLESPACE_NAME
LANTS_DATA
SQL > select MAX_BYTES from dba_ts_quotas where username = 'LANTS_ENTMT_NA_DEV_01';
no rows selected
SQL > select username, default_tablespace from dba_users where username = 'LANTS_ENTMT_NA_DEV_01';
USERNAME                       DEFAULT_TABLESPACE
LANTS_ENTMT_NA_DEV_01          LANTS_DATA
SQL > select count(*) from dba_ts_quotas where username = 'LANTS_ENTMT_NA_DEV_01';
COUNT(*)
         0
SQL > alter user LANTS_ENTMT_NA_DEV_01 quota 20g on LANTS_DATA;
User altered.
-- After setting the quota, the user has an entry in dba_ts_quotas
SQL > select MAX_BYTES from dba_ts_quotas where username = 'LANTS_ENTMT_NA_DEV_01';
MAX_BYTES
2.1475E+10
SQL > select TABLESPACE_NAME, MAX_BYTES/1024/1024/1024 from dba_ts_quotas where username = 'LANTS_ENTMT_NA_DEV_01';
TABLESPACE_NAME                          MAX_BYTES/1024/1024/1024
LANTS_DATA                                                     20If LANTS_ENTMT_NA_DEV_01 didn't have any quota at all on this tablespace , this user should have got a different error ie. "ORA-01950: no privileges on tablespace" as shown in the test below.
SQL> create user testuser02 identified by abcd123 default tablespace FRCRS_TS;
User created.
SQL> grant create session to testuser02;
Grant succeeded.
SQL> grant select on dba_objects to testuser02;
Grant succeeded.
SQL> grant create table, create session to testuser02;
Grant succeeded.
SQL> select count(*) from dba_ts_quotas where username= 'TESTUSER02';
COUNT(*)
         0
SQL> conn testuser02/abcd123
Connected.
SQL> create table john as select * from dba_objects where rownum < 30;
create table john as select * from dba_objects where rownum < 30
ERROR at line 1:
ORA-01950: no privileges on tablespace 'FRCRS_TS'

So, I wanted to check the quota allocated to this user. But this user doesn't have an entry in dba_ts_quotas ! This means that this user was never granted any quota on any tablespace . Right ?no, this means that this user currently doesnt have quota, but it could have in the past
But, I am curious , without any QUOTA , how this user was able to create objects in its default tablespace until now and suddenly get "ORA-01536: space quota exceeded" error today.see above, or:
users with the UNLIMITED TABLESPACE system privilege have unlimited quota on all tablespaces without giving any specific quota on a tablespace

If the user doesn't have their email address defined

Hi,
If some users doesn't have their email address in fnd_user table, then will the work notification goto the user? What should i do to make sure that the workflow doesn't throw an error in such a situation and still send a notification to that user?
Thank you
Kumar

Hi,
Email is completely optional, so Workflow won't throw an error if there is no email address found.
In order to receive an email, you need the following:
- Workflow user / role to be notified must have an email address set.
- Workflow user / role to be notified must have a preference set to receive email.
- Workflow mailer must be running for that particular item type, or a generic mailer needs to be running.
Without all of those, you won't see any emails - but you won't see any errors, either :)
HTH,
Matt
WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
Have you read the blog at http://www.workflowfaq.com/blog ?
WorkflowFAQ support forum: http://forum.workflowfaq.com

Outlook 2010 cannot save to archive folders listed. Message says that message was already moved or that user doesn't have permission.

Outlook 2010 cannot save to archive folders listed. Message says that message was already moved or that user doesn't have permission.

Hi,
Does this issue occur when you manually archive items in Outlook, do you drag them into the archive folder?
The first thing I wonder is if the .pst file has been corrupted, please run Scanpst.exe to repair the archive .pst file:
http://support.microsoft.com/kb/272227/en-us
Please logon your Webmail(owa), check if the emails are available. If the emails have been moved and Outlook Client hasn't synced yet, this issue may occur as well.
We can also create a new .pst file to archive the file, check if the issue persists.
For more information, we can refer to Archive items manually:
http://office.microsoft.com/en-in/outlook-help/archive-items-manually-HA010355564.aspx
When you browse to the archive file in step 5, type in a new .pst file name.
If my understanding is not accurate, please detail your scenario and provide the exact error message.
Regards,
Melon Chen
TechNet Community Support

My daughter has an iphone 5s and I have her old 3GS. She receives all my imessages that I rcv or send to other people. Can anyone advise how to stop this? we have removed the 3gs from her itunes account but it hasn't stopped the issue.

My daughter has an iphone 5s and I have her old 3GS. She receives all my imessages that I rcv or send to other people. Can anyone advise how to stop this? we have removed the 3gs from her itunes account but it hasn't stopped the issue.

There are a lot of posts in the forums today with people having problems with iMessage. There was also a published outage yesterday, so it's possible there are still some issues that may be impacting you both.
I would just wait it out - I'm sure it will be sorted out soon.

In Lion, how would a user REPAIR disk without a disk to boot from?

In Lion, how would a user REPAIR Disk without a disk to boot from? It's cool to download Lion from App Store, but I think they need to solve how they will repair disk without optical disk to boot from. I have had to repair disk in with the disk utility around 5-10 times in the past.

Kappy wrote:
No doubt, but who's going to delete their installer? That would be a tad stupid don't you think?
Well it should be stupid, but people do it anyway not realizing it's importance later when something goes wrong.
Kappy wrote:
We'll need a GIF with a Bill Engvall "Here's your sign."
Not familiar with Bill Engvall's acts I'm afraid, I know it's terrible.
Kappy wrote:
I guess we shouldn't forget the recovery partition. But why confuse the issue.
That does confuse the issue, a bootable DVD is for installing the operating system after a hard drive replacement, which also will include the recovery partition.
Recovery parititions are a great idea for Windows as it fails often, but hard drives fail more often in Mac's than the operating system.

HT4623 How to stop third party apps download with out you permission from ATT partners that cant see any connections on your account due to you not being the prchaser?

How to stop third party apps download with out you permission from ATT partners that cant see any connections on your account due to you not being the purchaser or on account as long as someone else is paying they can not hold legal resposible there third privacy due to legal privacy laws.

Then you should read these.
http://forums.macrumors.com/showthread.php?t=1804704&highlight=sonnet+tempo+pro
http://forums.macrumors.com/showthread.php?t=1721573&highlight=sonnet+tempo+pro
This was strange but has to do with how startup disk and nvram interact
http://forums.macrumors.com/showthread.php?t=1795765
I think your problems were solvable and not that the Sonnet card and 5,1 is not bootable, in fact the 5,1 is easier, there are more supported cards.
I have the 1,1 where the Sonnet Pro is recommended but for data only and are not bootable because of the 32-bit EFI firmware. NOT the 4,1 and 5,1. The 2008's are problem child and have a mix of PCIe 1.1 slots, first implementation of EFI64 that also has problems. Also the 4,1 has two PCIe 2.x slots 3 and 4 that share a controller but that simply limits bandwidth.
I would have left the TRIM support and NVRAM changes in Yosemite to a separate thread if you wanted to focus on the Sonnet Tempo Pro support in Mac Pro 2010-12 5,1s.
Also the make of SSD can vary and they also have their own firmware as do bootable controllers along with the EFI of the Mac, all of which have to work together. Meaning it might be that Samsung 840 va 840 EVO vs 840 Pro will all be slightly different but my experience is Samsungs work well (as do others like Crucial with the proper firmware - and there was/is an issue with the firmware of the Samsung 840 but not with booting).
The PCIe card gets seen and treated as external and therefore 'eject' but of course you can't when it is the system boot drive.
One thing I found last week and meant to mention: After installing or changing PCIe cards, RESET SMC made all the difference in the world with the long boot delay. Some PCIe cards will add a few seconds, system has to search the device tree which now shows another controller with multiple devices - and sometimes NVRAM and SMC are what I will call "dirty" and need to be rebuilt and reset.

How to stop user profiles clean-up job from deleting Active users.

Hi,
Somehow bunch of active users profile are marked for deletions and their managers have received email saying it will be deleted in X days.
I know if we disable My Site Clean Up Job, it will not delete any profiles. But I want that job to continue running and stop active user profiles from getting deleted.
How do I proceed here...
Thanks,
Abhilash

Hi Abhilash,
I understand SharePoint 2010 MySite clean up timer job is deleting active user profiles.
Firstly, I need to confirm with you that the timer job will work on below two situations:
1.When you use the web UI in Central Administration to delete a user profile
2.When a user who was included in a previous user profile import is no longer included in the import.
The second point bears a little more explanation, please refer to How Is A User Profile Deleted?
in the article below:
http://blogs.msdn.com/b/kaevans/archive/2012/06/25/top-recommendations-for-managing-the-my-site-cleanup-timer-job.aspx
Let me know if you situation is not included in the above two.
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Protected WebResource access granted even though user doesn't have the required role

Apologies in advance - this must be a real newbie question, but I've read thru
alot of documentation/newsgroup info and haven't found the answer.
I'm using WL 7.0 SP1, and deploying an exploded web-app. (contents in attached
Login.zip). The web.xml defines a single protected web-resource (/yeslogin.jsp)
and a single role (PortalUser).
I've got a realm configured with all the Default* providers, and have defined
a user, a group, and the PortalUser role that hooks them together.
If I do not check the Security->Realms->myrealm->General->"Ignore security data
in deployment descriptors" checkbox, my user never seems to be associated with
the role I've defined. (I can see this from the output of the DefaultAuditor set
to INFORMATION severity) when access control checks are done - so I always get
a 403 (Access denied).
If I do check the "Ignore security data in deployment descriptors" box, reboot
WL and re-deploy my web-application then the audit trail does show that my user
is associated with my role, and I am able to run the application.
The problem is, when configured this way if I have another user who does not have
that role, they are also able to use the application. The DefaultAuditRecorder.log
file show that the "Role Manager Audit Event" for checking access to the protected
resource has been invoked, but then the status is SUCCEED!?!?!
Any pointer to what I've done wrong, or the docs that tell me how to do this right
would be WAY appreciated.
This same web-application works across a range of various J2EE 1.3 compliant web-containers,
but I have not figured out how to configure WL 7.0 to let it work.
[Login.zip]

I tried your web app and it worked for me. I hit the URL that you protected:
http://localhost:7001/login/login_page.jsp
Logging in as a bad users popped up your error page.
Logging in as a users in the PortalUser role ( I changed that to a role I
already had) let me hit the
your login page.
One thing. Usually, you let the users hit your protected page and you let
the web container do the work and pop
up your login form instead of you programmatically sending them to the login
page. If you change web.xml to:
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>myrealm</realm-name>
</login-config>
It will just pop up the browsers dialog.
Also, don't check the "ignore security data in deployment descriptors". In
your case you ARE using the deployment
descriptor.
BTW. I can ONLY get web app deployment descriptor security to work in WLS
7.0 sp1 and CAN NOT get the
console web app security policy to work! I have an unanswered post on this.
See the post:
Console based web app security
"Dave Clegg" <[email protected]> wrote in message
news:[email protected]...
>
Apologies in advance - this must be a real newbie question, but I've readthru
alot of documentation/newsgroup info and haven't found the answer.
I'm using WL 7.0 SP1, and deploying an exploded web-app. (contents inattached
Login.zip). The web.xml defines a single protected web-resource(/yeslogin.jsp)
and a single role (PortalUser).
I've got a realm configured with all the Default* providers, and havedefined
a user, a group, and the PortalUser role that hooks them together.
If I do not check the Security->Realms->myrealm->General->"Ignore securitydata
in deployment descriptors" checkbox, my user never seems to be associatedwith
the role I've defined. (I can see this from the output of theDefaultAuditor set
to INFORMATION severity) when access control checks are done - so I alwaysget
a 403 (Access denied).
If I do check the "Ignore security data in deployment descriptors" box,reboot
WL and re-deploy my web-application then the audit trail does show that myuser
is associated with my role, and I am able to run the application.
The problem is, when configured this way if I have another user who doesnot have
that role, they are also able to use the application. TheDefaultAuditRecorder.log
file show that the "Role Manager Audit Event" for checking access to theprotected
resource has been invoked, but then the status is SUCCEED!?!?!
Any pointer to what I've done wrong, or the docs that tell me how to dothis right
would be WAY appreciated.
This same web-application works across a range of various J2EE 1.3compliant web-containers,
but I have not figured out how to configure WL 7.0 to let it work.

When I enter the website, Firefox stops responding and I have to end the process from the Task Manager. How do I solve this problem?

I am running Firefox 4.0 beta 7 on Windows XP Tablet Edition OS. When I enter this site using Firefox, the browser stops responding and I have to end the process using Task Manager. However, when I open it with other browsers such as IE8, I am able to view the site as per normal. This only happened when I updated my browser to Beta 7 and I did not have such problems in the previous betas.

There is [[Flash]] content on that page.
Do you have a problem with Flash on other websites?
Create a new profile as a test to check if your current profile is causing the problems.
See [[Basic Troubleshooting#Make_a_new_profile|Basic Troubleshooting: Make a new profile]]
If that new profile works then you can transfer some files from the old profile to that new profile (be careful not to copy corrupted files)
See http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox

Newly registered user doesn't have Data Model or Report Creation option

Hi,
I have recently registered in http://bipdev2.us.oracle.com:7001/xmlpserver
Except Create Report Job option, i do not have Create Data Model and Create Report options visible in my Home page.
In My Account-> My Groups, in which i have BI Consumer Role assigned.
Do i need to have a BI Administrator Role (or) BI Author Role to have these options enabled in my Home page?.
or What is the procedure to request for access
Any help regarding the same is highly appreciated.
Thanks
Parvez

Hi,
for the first part where you don't access I would suggest you do an authorization trace to ensure that the user has all the necessary authorizations.
and on the second part - yes the user needs to have credentials for the system that you trying to access
Ingo

User doesn't have sufficient privaleges to install flash player?

I'm having trouble installing flash player due to "user privileges" HELP!!

Hi Valerie,
Installation of Flash Player requires Administrative permissions as files are written to directories that standard users do not have access to. You'll either need to log in with an account that has Adminstrator permissions, or provide the Administrator UserId/password to install.
Maria

How to stop user from forwarding his mail

Dear Experts,
I am using the class cl_bcs to generate mails to some users , it would be great if i can stop those users from forwarding such mails to some unauthorised people. I understand that the add_recipient method has the parameter I_NO_FORWARD which should probably do the job when set to 'X' . But unfortunately it still doesnt stop the users from forwarding.
Is there any other way of achieving my requirement.
Thanks in Advance,
Chaitanya.

Hi,
You need to set the Message settings in
MM--Purchasing -- environment data -- Define system messages or Tcode--OMCQ
set the message number 06 076 as error message , then system will not allow the same line item to cross the PR qty
rgds
gsc

How come ipod touch doesn't have a radio app?

I have come to a realization that my current ipod touch, a 64gb 4th generation ipod touch doesn/t have a radio app. unlike my mother's ipod nano which has a radio app. i am confused as why some apple products have radio apps by default and not all apple products have a radio app? it would be handy to have.

I believe, if I am right, that the headphone jack on the iPod Shuffle is made diffrently. When you plug in the headphones in to an iPod Shuffle, the headphones end up becoming an antenna for the iPod. Thus, why it won't work with out it. The iPod Touch is not made so that the headphones do that.
Steven

How to stop user doesn't have "approver" to approve PR from "forward"

Similar Messages

Maybe you are looking for