Integration B. Repository. Authorizations to see SWC nodes in the IR tree

Hi experts,
I have read this Michal Krawczyk blog in order to make authorization for determinates objects in IR /people/michal.krawczyk2/blog/2005/05/25/xi-how-to-add-authorizations-to-repository-objects
I like to know if its possible to do any authorization for the determinates users can only see determinates SCW and this objects in the integration builder repository tree (and the integration builder directory tree). For example, SAP XI has 10 SWC imported in IR, and X user only must to see 3 SWC in IR tree.
Regards.

AFAIK, not for pi 7.0, only 7.1.
Regards,
Henrique.

Similar Messages

How to make the leaf node of the APEX tree downloadable

Hi All,
I am trying to build a "library" page for my application, with the documents as the leaf nodes of the tree. The documents come from a database table, and each document is a BLOB.
My question is, how should I write the "link" part of the APEX tree query to make the lead node document downloadable for the end users?
Thanks,
Christine

Hilary helped me out of this by creating a new form page with two new items there corresponding to the PK and BLOB column, then in the tree query use apex_util.get_blob_file_src function as the link. Below is the email from Hilary:
1. Created Form, page 13, based upon your table storing the documents as BLOBs. The form page has just two associated items: P13_DOC and P13_DOC_ID. The item P13_DOC is of type FILE and contains a source type of DB column, which is the first required parameters of the function get_blob_file_src. NOTE: I could have created a form region on the same page as your tree, but chose to generate a separate page. You may choose to change this yourself.
2. Updated the Tree query on pg 12 to use the following link for tree nodes of level 4:
apex_util.get_blob_file_src('P13_DOC',v.attr3)
...where P13_DOC is the application page item mentioned in step 1 above, and v.attr3 should hold the unique ID associated with the document. Your tree now allows users to download the listed documents.

Nodes in the R-tree

Hello,
I have a question concerning a R-tree Index:
If I create a R-tree Index with:
CREATE INDEX test ON tablename (geom)
INDEXTYPE IS MDSYS.SPATIAL_INDEX;
at which position can I decide, how many entries
a node could have?
The more entries a Tree has, the smaller is the height
and the performance is better.
Isn�t it true?
Thanks for helping

Hi,
The number of entries for each node is determined at index create time by the R-tree indexing code. The number of entries is a function of:
dimensionality of index
geodetic/non-geodetic
tablespace block size
etc.
It is not necessarily the case that more entries from a single node is better (or why have a tree structure at all?).
Hope this helps.

How to scroll to a specific node in the webdynpro tree

Hi all,
I'm developing an application where I need to load and expand a tree upon some action in another view.
Loading the children, expanding nodes and setting a new lead selection (with cl_wd_dynamic_tool=>set_tree_lead_selection) all works fine.
But I did not find a way to scroll the tree, so that the node is in the currently visible area of the tree. Is there a way to do this?
Thanks for your answers!
Best regards,
Frank

Tree is a particular structure, you need to realize a recursive function, specially if the tree with is a recursive TreeNode.
this is a quickly answer, i did this in java.
The idea is the same everywhere, this is an ABAP-LIKE solution, understand and translate in a good ABAP source.
FUNCTION FindNode(TypeNode tree_node, TypeNode node_to_find ).
IF ( tree_node.ELEMENT_ID EQ node_to_find.ELEMENT_ID ).
"""""""    do what you wanna do """""
ELSE.
n = tree_node.GET_NUMBERS_OF_CHILDS;
""""""""" RECURSION
FOR i = 0 TO n.
    child_node = tree_node.GET_CHILD(i).
    CALLFUNCTION FindNode(child_node, node_to_find ).
ENDFOR.
ENDIF.
ENDFUNCTION.

Exchaging Nodes in the Scene Tree

Hi,
I use a web page like structure for my application. This means, I have a tabbed navigation on the top. When I press on a tab the whole content must be replaced inside the tabbed panel. So anywhere in my action handler I make something like this:
group.content = [ ... new content ... ]
This refills the content. Unfortunately this results in "on the fly layouting". In other words, at the beginning everything is displayed at the top-left while somehow "reloading" the new content. During this the layouting is done. It looks like an HTML page which iteratively calculates the positions of the elements. How can I avoid this?
Edited by: kudi on Feb 25, 2009 1:58 AM

Well, your content is certainly dynamic since you are replacing the group.content with new content. The term 'layout' in JavaFX could mean a lot of things. Nodes are positioned with dimensions in the scene graph and can also be transformed (or vbox/hbox layout). Everybody wants something specific from their idea of 'layout'. Some examples might be to handle different screen resolutions or dynamically handle unknown child node sizes, some want 3D it goes on and on.... If you are talking about not having to dynamically recreate the group.content everytime... then maybe you want to move the node "toBack" or "toFront" on the scene graph (effectivly switching between nodes as if they were 'layers' atop of each other) - something I am yet to test!
Whatever the case, this probably requires more information about what you want to achieve. Hope this helps....

Moving a node unformates the XML File

Hi,
when I move a node in the XMl tree, I got some text format problems. I move the node like this:
if(children.item(j).getNodeName().equals("UML:Flow")) {
target = children.item(j).getParentNode().getParentNode();
target.appendChild(children.item(j));
}                    in the XML is an empty line for each moved node and the moved nodes are all in one line without linebreak like this:
befor moving:
<UML:ActivityGraph>
   <UML:Namespace.ownedElement>
        <UML:Flow xmi.id = 'G.0'/>
        <UML:Flow xmi.id = 'G.1'/>
        <UML:Flow xmi.id = 'G.3'/>
   </UML:Namespace.ownedElement>
</UML:ActivityGraph>after moving:
<UML:ActivityGraph>
   <UML:Namespace.ownedElement>
   </UML:Namespace.ownedElement>
   <UML:Flow xmi.id = 'G.0'/><UML:Flow xmi.id = 'G.1'/><UML:Flow xmi.id = 'G.3'/></UML:ActivityGraph>I want to have something like this:
<UML:ActivityGraph>
   <UML:Namespace.ownedElement>
   </UML:Namespace.ownedElement>
   <UML:Flow xmi.id = 'G.0'/>
   <UML:Flow xmi.id = 'G.1'/>
   <UML:Flow xmi.id = 'G.3'/>
</UML:ActivityGraph>i'am thankfull for any ideas how to do this

DrClap gave an excellent advice here. Still, I'm not quite sure how to do it. My approach that goes like this
     private void eliminateWhitespace(Node history) {
          NodeList nodeList = history.getChildNodes();
          for ( int i = 0; i < nodeList.getLength(); i++ ){
               Node node = nodeList.item( i );
               if (node instanceof TextNode)
                    history.removeChild(node);
     throws an EJSs.setUncheckedException from the EJSWrapper of the bean that calls the method. I assume that's due to TextNode residing in the org.apache package and so having nothing to with the text nodes DrClap is talking about?
Anyway. Could you suggest a more promising approach to disburden my XML-file of the whitespaces the op mentioned?
Thanks a lot in advance,
BUG

Authorization in which user receive rights to see specific node in Orgunit

Dear SDN's,
We have Organizational Unit Hierarchy.
We need to provide authorzation for the Org.Unit Hierarchy in which user receive rights to see specific node in Orgunit hierarchy.
For example manager of MIC can see only MIC node, Manager of 0VTH ATL can see only 0VTH ATL.
(1)Made Org.Unit info object as authorization relevant
(2)created authorization object for Org.unit and given authorization fileds ORGUNIT,TCTAUTHH,ACTVT,9YPVCALVL,9YPVCGRP,1KYFNM,9YPVCALVL2 in that authorization object.
(3) Assigned Authorization object to the Role.
Please let me know how to give rights to user to receive rights to see specific node in Orgunit hierarchy.
For example manager of MIC can see only MIC node, Manager of 0VTH ATL can see only 0VTH ATL.
Thanks and Kind Regards,
Lakshman Kumar G

Hi Lakshman Kumar G,
Where are you up to with this??
Have you assigned the org unit value in RSECADMIN to the analysis auth? Once this is done assign the analsis aut to the user. In the query you will need a filter on org unit which uses an authorisation variable. This should do the trick.
This whole process can be automated using standard DSO's. Please refer to the SAP help below.
http://wiki.sdn.sap.com/wiki/display/BI/Authorization%20in%20SAP%20NW%20BI
http://help.sap.com/saphelp_nw04s/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/en/52/6715a2439b11d1896f0000e8322d00/frameset.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/01/a7fb3a72a05546e10000000a114084/frameset.htm
Get back to me if your stuck.
Cheers.

Analysis Authorization based on Hier node with multiple display hierarchies

Hi guys - I've got a problem where s.o. might have an idea of how to switch on the light at the end of the tunnel, I am currently standing in:
Requirement:
Cost Center Authorization should be given through RSECADMIN, reporting should be possible for any hierarchy that exists for the authorization relevant info object.
Preferred solution:
The Cost Center Analysis Authorization should be given through RSECADMIN - Hierarchy node assignment.
u2022     A dedicated Authorization Cost Center Hierarchy will be maintained in ECC6 as an alternative cost center hierarchy and extracted into BW.
u2022     The RSECADMIN Hierarchy node assignment should be based on a particular node (Type 2).
u2022     The display level will be specified as required (here: Level 7)
u2022     The Authorization granted should be independent of hierarchy name and version (validity 3).
Reporting Scenario and technical impact:
As mentioned above, when designing and running a query the user should be able to freely select other (i.e. than the authorization) display hierarchies for the authorization relevant reporting object 'Cost Center' as well. The technical names of the semantically relevant hierarchy nodes could therefore vary. E.g. cost centers 1, 2 and 3, being assigned under hierarchy node u2018Au2019 of the RSECADMIN relevant authorization hierarchy, could be subsumed by hierarchy node u2018Bu2019 in another display hierarchy, which the user may want to display in accordance to his reporting needs. Ideally, the alternative display hierarchy should therefore display node u2018Bu2019.
My findings so far (based on prototyping) turn out that this is not possible as long u2018Bu2019 (and its hierarchy) is not authorized in RSECADMIN. Can these findings be confirmed? And if not, would anyone have an idea of how to facilitate the reporting scenario?
Would there be any other way to grant access, possibly based on RSECADMIN single values, and also enable the user to flexibly display hierarchies with only those hierarchy nodes whose single cost center values the user has been given access to?
Thanks everyone for your input...
Claus
Edited by: Claus64 on Jul 13, 2009 4:10 AM

HI CLause,
On Jul 14 2009, you wrote in SDN and said:
FYI: Found a solution...
The hierarchy analysis authorization will be based on a navigational attribute of cost center.
With analysis authorizations it is possible to declare the Auth object (e.g. 0COSTCENTER__RACCAUT0) as authorization relevant and leave the superior object 0COSTCENTER auth irrelevant.
The auth will be given for 0COSTCENTER__RACCAUT0. This object will be placed as a filter of the query, being restricted by an Authorization variable for hierarchy nodes.
Due to the concept of Analysis Authorizations, this variable will automatically pick up the nodes granted as part of RSECADMIN Hierarchy based Authorization.
As mentioned above, 0COSTCENTER as the regular reporting characteristic remains auth irrelevant and can therefore take any hierarchy thatu2019s available. Reporting on single values will be possible, too. Only those nodes show up that hold the authorized cost centers in accordance to the authorization.
If the auth relevant 0COSTCENTER__RACCAUT0 is not used in the query definition by either not taking it in as a filter or skipping the Auth variable, the query will launch the message that the authorization is missing. No data show up at all.
Claus
See this thread:
Analysis Authorization based on Hier node with multiple display hierarchies
I am also in the same situation as you and need to understadn your solution. I understand that you created a Nav Attr on 0COSTCENTER and made this auth relevant whilst ensuring that 0COSTCENTER is NOT auth relevant. This is all fine. The issue was you have multiple hierachies for 0COSTCENTER, how did the new Nav Attr help you solve your issue. When loading 0COSTCENTER what values did you load ino the new Nav Attribute and how did that link to the hierachies? Also, in RSECADMIN you created hiearchy nodes based on the Nav Attribute but I am confused as to what values you have in the Nav Attr.
I appreciate if you can share your solution from the past in more details.
many thanks

Integration Builder - Repository - Users - Roles

Is it possible to come up with ABAP role with the help of which he can login to Integration Repository but can not change any of the objects but for the one in a specific component.
I could make it work where the user is given SAP_XI_DEVELOPER role and I can restrict him to access some objects using another Role that I built in IR. I know about excluding him full edit access etc. This is like giving him full access with modify permissions with SAP_XI_Developer and excluding him permission on some of the objects.
I tried to give a test user SAP_XI_DIPLAY_USER and then giving him include-fulledit on a specific Software component. But this did not work.
If anybody worked on this please let me know.
Regards
Mike

Hi Michael,
Yes it is possible, this is what i found on help.sap.com,
To make changes to authorizations on the ABAP side, proceed as follows for each dialog user role:
       1.      Call transaction PFCG.
       2.      Copy the single role SAP_XI_<role>_ABAP into the customer namespace (replace the prefix SAP).
       3.      Create a new composite role in the customer namespace (for example, *_XI_<role>).
       4.      Assign the new single role (suffix _ABAP) to the new composite role.
       5.      Assign the new SAP single role (suffix _J2EE) to the new composite role.
       6.      Make changes to the new single role (suffix _ABAP).
       7.      Generate an authorization profile for the new single role (suffix _ABAP).
Basically what is important is that the single roles with a J2EE suffix are still assigned to the current composite role. These J2EE single roles are known to the J2EE applications and are required for automatic authorization assignments during deployment.
I hope it helps,
Thanks,
Varun

Could not see Security Node under Global Explorer.

Hi All,
Could not see Security Node under Global Explorer, can some one guide is there any I can make changes to the setup to see the Security node.
Thanks in Advance.
--Satish

Hi
Is OWBUSER the repository owner? If not then log on as the repository owner. Otherwise it may be you have killed the panel and it has disappeared, see post here for resetting layout.
You can have as many target users that you deploy into as you want.
Cheers
David

Authorization to new hierarchy node (Profit center) in 3.5 Transaction code

Dear Colleagues,
I have an autorization problem that I wish you can help me with.
I have a (3.5) profit center hierarcy with authorizations on each node. These were made a long time ago by another consultant. Suddenly we have an additional node in the hierarchy (a new region). How do I give authorizations for this new node? Which transaction codes do I use, and how? I am a little bit familiar with PFCG, and have just briefly seen RSSM and SU01. But I can't see where I add authorization functionality yo the new node, and then give it to the user.
Will sign points!
Regards Silje

Look in RSSM to find out what your authorization object is for Profit Center.
Then lookup the roles that use this Profit Center authorization object -- Not sure how to do this because I usually know the roles I create! Ask the security or basis team for help if you can't find them.
Look at those roles and get an idea of how they are used ... In some cases you can group together values and use a wildcard to select a whole group. Such as, if I have profit centers ABC, ACD, ADE and BAC, I can select the group A* to only allow access to the profit centers starting with A. This person will not have access to the BAC profit center.
So, try to figure out how the other consultant assigned the profit centers, then add your new one in in the same way.
Brian

Users not able to see remote users on the node network

Users that belong to one node are not able to see users in another calendar
server node. Both calendar servers are pointing to the same directory server.
Some errors that occur in the log files:
DEXOTEK ERRCODE Ox13608 -> SchedBaseOpen: Section name too long
DEXOTEK ERRCODE Ox13608 -> OpenConnection: SchedBaseOpenOnHost
And when uninode -cws nodeID is run, it does not report being able to see all
the users and resources on the remote nodes.
uninode: connected to hostname.net.xxx.com, node 10000
directory of items: 10 (USERS = 10/RESOURCES = 0)
CONNECTION EX AV Q-SIZE IN-PROCESS IMPORT-DIR
(10000)->xxxxxx.xxx.com(10001) 2 2 0 0 370 (U=370/R=0)
Here is the nodes.ini file:
+ H=xxxxxxx.xxx.com/N=10000
+ H=xxxx.xxx.com/N=10001
all=2
There is a reported bug, that 16 chars is max on domain names for the nodes.ini
file, which means that you need to change that file and use:
     a) an alias that can be resolved on the network with either DNS or local
     host files
     b) use the IP address.
As documented in the release notes, here is the procedure on how to modify the
hostname when it is too long. Or how to modify the hostname for any reason.
Fix for long host names problem
If the fully qualified domain name for your network exceeds 16 characters, it
will be necessary to shorten the host name of all the servers in the Calendar
Server network . These instructions must be carefully followed to avoid causing
problems with the network. Ensure that the procedure is applied to ALL nodes in
the Calendar network.
1) The following procedure should be carried out on each server in the
Calendar network:
a) Bring the Calendar services down.
% unistop -y
b) Run the unidbfix command in export mode.
% unidbfix -export -n node-id
This will create a remotenode.ini file for each node on the server. The file is
located in the node's perm directory.
Example:
If you have two nodes on the server ROCK, node 1(in N1) and node (in N2), the
files are:
/users/unison/db/nodes/N1/perm/remotenode.ini
/users/unison/db/nodes/N2/perm/remotenode.ini
The remotenode.ini file will look something like this:
[1]
RN_NUMCONNECT = 2
RN_SURNAME = "unison"
RN_GIVENNAME = "unison"
RN_ORGUNIT1 = "uni2"
RN_ORGUNIT2 = "openmail"
RN_ORGANIZATION = "ABC Corp"
RN_ACCESSMETHOD = 2
RN_SERVICENAME = "unieng"
RN_HOSTNAME = "rock"
[2]
RN_NUMCONNECT = 2
RN_SURNAME = "unison"
RN_GIVENNAME = "unison"
RN_ORGUNIT1 = "uni4"
RN_ORGUNIT2 = "openmail"
RN_ORGANIZATION = "ABC Corp"
RN_ACCESSMETHOD = 2
RN_SERVICENAME = "unieng"
RN_HOSTNAME = "rock"
2) Once you have run unidbfix in export mode on all the servers, proceed as
follows:
a) Compare the remotenode.ini files and verify that the entries are the
same. In each file, you will note that an entry for the local node is not
included.
b) Edit one of the files (on any of the servers). This file will be
referred to as the master file. Add the appropriate entries for the
local node (copy the section from one of the other files). Modify the
RN_HOSTNAME in each of the sections of the master file to shorten the
name.
c) Copy the master file in the perm directories of each node on all the
servers.
3) Once the master file is in the perm directory of all the nodes, proceed as
follows on each server:
a) Run the unidbfix command in the -import mode.
% unidbfix -import -n node-id
b) Edit the nodes.ini file on the hub server and make the same changes to
the host names. You do not need to apply the changes.
c) Edit the [UTL] section of the /users/unison/misc/unison.ini file and
change the host name.
d) Start up the services.
% unistart
4) After all the changes have been made, run the uninode -cws all and
uninode -snc all commands and verify that the results are accurate.

See this:
http://docs.info.apple.com/article.html?path=Mac/10.6/en/8203.html
You should then see your pcs listed in Finder's sidebar under the shared section.
Regards

BPM Process List Viewer -"No Authorization to see view of the Page"

Hi,
While I am trying to see preview of the Process List viewer Page at content provided by sap -> end user content -> bpm -> pages and at tcbpemwdui~proclist-> ProcessListViewer getting "No authorization to see the preview of the page".
Given permissions to portal content to everyone group with end user and user been assigned BPEM end user role & EU_role and Everyone group.
I hightly appreciate your help to resolve the issue. I am in crusial situation to fix this issue.
Thanks in advance..
Ian

You can use an extension to set a default font size and page zoom on web pages.
*Default FullZoom Level: https://addons.mozilla.org/firefox/addon/default-fullzoom-level/

Integration of service processing with warranty claims node not appearing

Dear experts,
Plant Maintenance and Customer Service => Maintenance and Service Processing => Integration of Service Processing with Warranty Claims
Integration of service processing with warranty claims node not appearing in SPRO.We are using ECC 6.0.How should we get this node?
regards,
ashraf

Hi,
It will not be in core solution. As far as I know you need Aerospace & Defence solution (DIMP) for this functionality.
-Paul

DBCA did not see the ASM disk group in NODE 2 but see in NODE 1

Are there anyone who encountered creating a database using DBCA with ASM as file system?
Our issue before is in both nodes the DBCA did not see the ASM disk group.
But after setting the TNS_ADMIN in both nodes and running the DBCA as administrator in Node 1, the DBCA able to see now the ASM disk group. Unfortunately, in Node 2 it didn't work out?
So we didn't know why is it from Node 2, the DBCA still didn't see the ASM disk group?Since it is both the same.
Any ideas? Please advise.
For you information, we are using Windows 64-bit, Oracle 11g R2
Thank you in advance for those who will respond.
Edited by: 822505 on Dec 20, 2010 7:47 PM

822505 wrote:
Are there anyone who encountered creating a database using DBCA with ASM as file system?
Our issue before is in both nodes the DBCA did not see the ASM disk group.
But after setting the TNS_ADMIN in both nodes and running the DBCA as administrator in Node 1, the DBCA able to see now the ASM disk group. Unfortunately, in Node 2 it didn't work out?
So we didn't know why is it from Node 2, the DBCA still didn't see the ASM disk group?Since it is both the same.
Any ideas? Please advise.
For you information, we are using Windows 64-bit, Oracle 11g R2
Thank you in advance for those who will respond.
Are the disks given to the ASM are visible from Node2?
Aman....

Integration B. Repository. Authorizations to see SWC nodes in the IR tree

Similar Messages

Maybe you are looking for