Is it possible to restrict Content Administrator from a room?

I'm having a hard time wrapping my brain around this one so please bare with me.
The client wants the following situation:
- they want a collaboration room that is restricted to 4 individuals in the company
- this room needs to be secure so that only those 4 individuals can access the content in the room, these are end users
- the Portal admin person will setup the room initially and then should no longer be able to access the room or content
I can't think of any way to do this. I've thought that maybe we could create a custom Content Admin role that has all access except to the room folder but this doesn't seem to be possible. From my testing it looks like you can see all the documents in the room from Content Admin -> KM Content if you have the Content Admin role (or a copied version of it).
Currently the portal team has Super Admin in production. We'd obviously like to keep that access because maintenance and support becomes difficult without it. The client would allow for special Super Admin access for temporary periods but it seems that we'd have to create a scaled down admin role that we would have all the time and then when we needed further access we'd need to get special approval to get the Super Admin role for a temporary period.
So, is there any way that we can revoke all access to a room and it's content except for the specific users assigned to that room? Any other ideas?
Thanks in advance for any help,
Robin Schmidt

Hello,
I'll explain what I am trying to achieve.
I've written phone book application. Each person has his/her personal card with his/her picture. In order to display the picture I need it to available in http. I've created an HTTP Alias (Like can be done on IIS). What I do is simply conctenate the HTTP alias the unique id number of each person which is also his picture's file name. The workers have an option to show or hide their pictures if they want to. The problem is that once creating an HTTP alias (or virtual directory on an IIS) this url becmes available to every person inside the LAN and the whole pivacy cocept is lost. If I could reveal this alias only to users who are entering the portal I could have control over the displying of the pictures but like this everyone can see every picture if he wants to. I beleive I can change the method of the picture retreival so it will take it from the file and not from http, but this methos is much more faster and simple.
Roy

Similar Messages

Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes in DRM?

When in a hierarchy, a user right clicks on a node to crate a new node, he has two options
-Child
-Sibling
Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes?
Business cases:
1. different level nodes need to have different prefixes.
- Thus, the default prefix property definition uses the level number to assign a prefix
- Also, a validation, to ensure the correct prefix, uses the level number
But if the user can create a child and a sibling then the default prefix will only be right for a single case and not both.
Thanks

If the images are exactly the same size then make sure the layer with the mask
is the active layer and in the other documents go to Select>Load Selection and choose
your document with the layer mask under Source document and under channel choose the layer mask.
After the selection loads press the layer mask icon at the bottom of the layers panel.
MTSTUNER

Is it possible to restrict certain users from printing from Adobe Reader?

Is it possible to restrict certain users from printing from Adobe Reader?

First of all, with Reader you can't change any security settings.
If you have Acrobat, then you could place a password on changing the document (which includes printing), and then give it to only some users.

How to content migrate from e-room to sharepoint using powershell

Hi,
How to do content migration from e-room to share-point using powershell.
Please give step by step process and give some idea about migration using powershell and other tools.
Thanks,
inguru

Hi,
There is no direct content database migration approach from eRoom to SharePoint.
However many third party tools such as Metalogix, Tzunami, and AvePoint are available to migrate eRoom content to SharePoint as well as you can write your own utility
to migrate content since there are various eRoom API available for the same.
Thank You, Somnath Matere

Is it possible to restrict content of HTTP alias only to portal context?

Hello,
After creating an HTTP alias on the WAS (through Services -> HTTP Provider) all content becomes publically available.
Is there any way to prevent this and allow only applications that are running inside the portal context approach this content that alias points to?
Roy

Hello,
I'll explain what I am trying to achieve.
I've written phone book application. Each person has his/her personal card with his/her picture. In order to display the picture I need it to available in http. I've created an HTTP Alias (Like can be done on IIS). What I do is simply conctenate the HTTP alias the unique id number of each person which is also his picture's file name. The workers have an option to show or hide their pictures if they want to. The problem is that once creating an HTTP alias (or virtual directory on an IIS) this url becmes available to every person inside the LAN and the whole pivacy cocept is lost. If I could reveal this alias only to users who are entering the portal I could have control over the displying of the pictures but like this everyone can see every picture if he wants to. I beleive I can change the method of the picture retreival so it will take it from the file and not from http, but this methos is much more faster and simple.
Roy

Is it possible to restrict the user from opening the WSDL page in a browser

Hello All,
The user should be able to send requests to the webservice, but not be able to view the wsdl file in the browser. How can we do this in Weblogic 10 ? is this configurable ?
We need to do this because, the webservice is going to be exposed to the outside world and we don't want everyone to be able to see the WSDL.
Thanks
Chandra

I don't know how to do that, but I would advise against relying on an architecture where you have to hide the WSDL to provide security. That's an illusion. If you fully expose the WSDL and then implement proper security mechanisms, even BASIC Auth under HTTPS, your service will be more secure than with a hidden WSDL.

Unable to start WebDynpro Content Administrator.....

Hello All,
I am trying access webDynpro Content Administrator from ContentAdmin-> webDynpro but I am getting message
<b>Missing Permissiones</b>
<b>You do not have the needed permissions to start the Web Dynpro Content Administrator.
Please contact your System Administrator.</b>
I have assigned "Administrator , Super Admin & Content Admin" roles to administrator but still i am not able to view the contents of content admin.
Pls help !
awaiting reply !
thanks,
Smita

Hello
You need the LCR roles. Assign the roles in the Portal:
LcrAdministrator
LcrUser
If you cant find the roles, you need to perform the postinstallation for SLD. It is pretty easy. Or you can import this:
[role]
rid=LcrClassWriter
action=sap.com_com.sap.lcr.LcrClassWriter
[role]
rid=LcrAdministrator
action=sap.com_com.sap.lcr.LcrAdministrator
group=SAP_SLD_ADMINISTRATOR
[role]
rid=LcrInstanceWriterLD
action=sap.com_com.sap.lcr.LcrInstanceWriterLD
group=SAP_SLD_DEVELOPER;SAP_SLD_CONFIGURATOR
[role]
rid=LcrUser
action=sap.com_com.sap.lcr.LcrUser
user=J2EE_ADMIN
group=SAP_SLD_GUEST
[role]
rid=LcrInstanceWriterCR
action=sap.com_com.sap.lcr.LcrInstanceWriterCR
[role]
rid=LcrSupport
action=sap.com_com.sap.lcr.LcrSupport
group=SAP_SLD_SUPPORT
[role]
rid=LcrInstanceWriterAll
action=sap.com_com.sap.lcr.LcrInstanceWriterAll
group=SAP_SLD_ORGANIZER
[role]
rid=LcrInstanceWriterNR
action=sap.com_com.sap.lcr.LcrInstanceWriterNR
group=SAP_SLD_CONFIGURATOR
Best Regards
Kristoffer Engh

How can I remove the applications from the Content Administrator

I had undeployed the applications from Content Administrator in two ways:
A:
1. Start the tool using the go.bat located in \usr\sap\<SID>\<Instance Name>\j2ee\admin folder
2. Log in with an Administrator user.
3. Under the Server node click Services-> Deploy.
4. In the runtime tab, on the right hand side screen click on the Applications checkbox. The list of all deployed applications appears.
5. Select the application and click on the Remove button.
B:
Undeploying using SDM remoteGUI.
after I finished that,the application still exist in the browse of Content Administrator Web Dynpro.
But it is'n invailable.When I click the application name,it throws exceptions:
Failed to get the list of names of referenced deployable objects for deployable object 'local/Welcome'.
Failed to get list of defined JCO clients for deployable object 'local/Welcome'.
Failed to get the list of names of referenced deployable objects for deployable object 'local/Welcome'.
Failed to get enable state for 'local/Welcome'.
No resource bundles found for development component ''local/Welcome''.
My question is , how can I remove it form the list.

Hi,
Have you restarted the server after removing the application from the Visual Admin?
Regards,
Satyajit.

Is it possible to restrict a local admin from accessing/viewing AD accounts on a Domain Controller?

I am working on determining if I can have a separate administrator group handle patching and performing maintenance on four servers that are DCs of their own AD domain, but restrict these administrators from the ability to see the active directory user
accounts in that AD domain?

Hello,
Since you are talking about domain controllers I have to say there are no Power Users group in them. Actually the local user management will be disabled as soon as you promote a server to a domain controller. The only option which is left here is to grant
Administrators handle the job. In case of RODC you can go through what Albert suggested.
However since domain controllers are sensitive and plays a key role in your environment I strongly recommend not to allow non administrators to perform maintanance or other related tasks (At least for domain controllers).
Another option you have left for your patch management is to use a member server like WSUS to automatically install updates on your DCs.
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Is it possible to delete data selectively from Business content cubes

Dear Experts,
         Requesting you to help me out to know, is it possible to delete data selectively from Business content cubes.
When I'm trying to delete selectively from Business content cubes, the background job gets cancelled with ST22 logs stating
A RAISE statement in the program "SAPLRSDRD" raised the exception condition "X_MESSAGE".
Since the exception was not intercepted by a superior program, processing was terminated.
and i tried with few more Technical content cubes but the same thing happens.
Pls let me know how to selectively delete data from Business content cubes if it's possible?.
Thanks in advance for your favorable assistance.
Regards,
Ramesh-Kumar.

Hi Ramesh,
Follow below steps for selective deletion:
1.     Transaction code: Use the Transaction code DELETE_FACTS.
2.     Generate selective deletion program:
A report program will be generated of the given name, here .
3.     Selection screen:
Take the deletion program u201CZDEL_EPBGu201D to the transaction code SE38 to see/execute the program.
After executing it will take you to a selection screen:
As we need to carry out deletion selective on Calendar week, we need to get the screen field for the field Calendar week. For this, click on the Calendar week field and press F1.
Click on the technical information button (marked in red box above) you will get below screen:
     ABAP program to carry out the Calendar week calculation
Problem scenario: As stated earlier the requirement is to delete the data from the cube based on the calendar week. Thus a code must be developed such that the number of weeks should be taken as input and corresponding calendar week should be determined. This calendar week should be then passed to the deletion program in order to carry out the data deletion from the InfoCube.
     Transaction code: Use T-code SE38 in order to create a program.
Logic: Suppose we need to delete the data older than 100 weeks.
a.     Get the number of weeks and system date in variables and calculate the total number of days :
lv_week = 100.      *number of weeks
lv_dte = sy-datum.     *system date
v_totaldays = lv_week * 7.      *total days
b.     Get the corresponding calendar day from the total days. This is obtained by simply subtracting the total no. of days from the system date.
lv_calday = lv_dte - v_totaldays. *corresponding calday.
c.     Now in order to get the calendar week corresponding to the calculated calendar day we must call a function module 'DATE_TO_PERIOD_CONVERT'. This function module takes input as Calendar day and Fiscal year variant and returns the appropriate fiscal period.
Get the sales week time elements
call function 'DATE_TO_PERIOD_CONVERT'
    exporting
      i_date                      = lv_calday
      i_periv                     = lc_sales
    importing
      e_buper                     = lv_period
      e_gjahr                     = lv_year
    exceptions
      input_false                 = 1
      t009_notfound               = 2
      t009b_notfound              = 3.
if sy-subrc = 0.
    ls_time-calweek(4)      = lv_year.
    ls_time-calweek+4(2)    = lv_period.
endif.
v_week = ls_boots_time-calweek.
Note: We can pass the fiscal year variant which can be obtained from the table T009B.For e.g. here fiscal year variant lc_sales = Z2. LS_TIME will be any table with suitable time units.
d.     Now we have obtained the required calendar week in the v_week variable. This calendar week is the week till which we need to keep the data. And older data than this week will be deleted. This deletion will be done by the deletion program
Submitting the Data deletion program for ZEPBGC01 and key field
SUBMIT ZDEL_EPBG WITH C039 LT v_week.
          Here the calendar week value is submitted to the deletion program ZDEL_EPBG with the screen field of calendar week.
Hope ... this will help you..
Thanks,
Jitendra

Remove applications from content administrator

Hi,
I have some applications on the WebAS that should be removed.
I*ve undeployed all applications with the SDM.
But the Applications are still grey marked available in the WEbDynpro content administrator and it shows some error because of that.
Is there any way to remove the Applications also from the Content Admin?
Thanks and best regards,
Dennis

Hi,
I first have undeployed with the visual admin, after that I saw that they are still available in the sdm. So I undeployed them there also.
I have restarted the J2ee Engine twice. Maybe I will try to restart the whole windows server...

Is it possible to run BBC iPlayer from an iPhone4 through AirPlay to Apple TV2 please? I keep getting the message "An error occured loading this content. Please try again later"

Is it possible to run BBC iPlayer from an iPhone4 through AirPlay to Apple TV2 please? I keep getting the message "An error occured loading this content. Please try again later"

First, try a system reset on the iPod. It cures many ills and it's quick, easy and harmless...
Hold down the on/off switch and the Home button simultaneously until the screen blacks out or you see the Apple logo. Ignore the "Slide to power off" text if it appears. You will not lose any apps, data, music, movies, settings, etc.
If that doesn't work, reset the Apple TV. I'm not at mine right now and I'm talking from memory but the reset is somewhere in the Settings menu.

OIM 11g-How to restrict the role administrator from seeing "other" roles

Dear All,
How to restrict Administrator from seeing roles he is not suppose to administer?
My administrator is suppose to assign only Role A. When he logs in He can see every single role. How to correct it so that he can see only Role A?
Thank you for your time
Maria

Modify "All User Role Management Policy"

Is it possible to stream content from an iPhone directly to AppleTV

Is it possible to stream content from an iPhone directly to AppleTV. I can get content from my computer to the AppleTV but can not get infromation from the iPhone to the AppleTV. The iPhone will control the AppleTV but it only controls the information from the computer to the AppleTV. Is it necessary to have your computer turned on when streaming information from an iPhone to the AppleTV.

Yes, you can stream from an iPhone to ATV using airplay. You need to turn wifi on and make sure both are on the same network. The content needs to be on the phone if it's from your library. Some apps have airplay capability, but not all as each developer has to enable it. Same with websites.

Is it possible for an AIR application to get the content dynamically from server in Android?

To give you people the context we will be developing Hybrid application using HTML5 and PhoneGap which will be published on Android and iOS platforms.
I want to know if an AIR application in android can get the content dynamically from the server. If yes, then how part comes into picture?
PS:- I dont have any knowledge about AIR applications and i am an Android developer and exploring this integration of AIR on android.

Yes, an AIR app on android (or iOS) can communicate with a server in several ways.
Search 'adobe air zend amf' on the web to see some examples.

Is it possible to restrict Content Administrator from a room?

Similar Messages

Maybe you are looking for