Is it possible to restrict the user from opening the WSDL page in a browser

Hello All,
The user should be able to send requests to the webservice, but not be able to view the wsdl file in the browser. How can we do this in Weblogic 10 ? is this configurable ?
We need to do this because, the webservice is going to be exposed to the outside world and we don't want everyone to be able to see the WSDL.
Thanks
Chandra

I don't know how to do that, but I would advise against relying on an architecture where you have to hide the WSDL to provide security. That's an illusion. If you fully expose the WSDL and then implement proper security mechanisms, even BASIC Auth under HTTPS, your service will be more secure than with a hidden WSDL.

Similar Messages

Is it possible to restrict certain users from printing from Adobe Reader?

Is it possible to restrict certain users from printing from Adobe Reader?

First of all, with Reader you can't change any security settings.
If you have Acrobat, then you could place a password on changing the document (which includes printing), and then give it to only some users.

How to secure the users from deleting the work items

Hi all,
I have a question like this.........whether we could secure the users from deleting the work items by someone in the Project and also assigning a specific user to allow them to delete the idoc.
Please help me on this as this is critical.........
Thanks in advance
Chakri

One of t he possible way is, ask the basis team to create users as Service Users and you can determine whether the login user is whether a service or dialog user by using the a bapi BAPI_USER_GET_DETAIL under the exporting parameter logondata with field USRTYP where if the logged in user is Service user then this field will be populated as S if the user is a dialog user then it will be populated as A.
Now in more efficient way of fixing this is get the list of users for whom you donot want to give the authorization of deleting workitems and assign the appropriate role for all the listed users...
for roles and authorizations i hope the basis team is the right team to consult....

How to Restrict the users from changing the Default variant of report.

Hello everybody,
The requirement is to restrict the users to save and overwrite the default layout variant (Layout for higher managenet)set for the report, but at the same time they should be able to change and save the other layouts for which they are having access.
I have written the logic in the program which is working fine for all the scenario when we execute the report. But the logic doesnt work if the user is selecting the layout on the output screen of the report.
for e.g if the user runs the report using the layout varaint for which he is having the authorization then he gets the all 4 options so he then he can select the layout for which he is not authorized and he can overwrite.
i have debugged and check as i have found that after the report output is shown all the layout paramater is controllled by the statndard SAP objects.
Can anyone help me out in this issue.
Thankyou in advance.
*to get the default layout variant.
w_save = 'A'.
if p_vari is initial.
    clear disvariant.
    disvariant-report = sy-repid.
    w_variant = disvariant.
    call function 'REUSE_ALV_VARIANT_DEFAULT_GET'
      exporting
        i_save     = w_save
      changing
        cs_variant = w_variant
      exceptions
        not_found = 2.
    if sy-subrc = 0.
      p_vari = w_variant-variant.
    endif.
endif.
*logic to check user authorization to change the layout setting.
if p_vari = c_layout.
    if not sy-uname is initial.
      select single * from agr_users
              where agr_name = c_role
              and   uname    = sy-uname.
      if sy-subrc = 0.
        w_save = 'A'.
      else.
        w_save = ' '.
      endif.
    endif.
endif.
Regards,
Satish.

Hi Maine,
Thanks for your reply.
As you mentioned for your own program, you can control the parameter "I_SAVE", when calling "REUSE_ALV_GRID_DISPLAY".
so already i have use the same logic and control the parameter through I_SAVE and here i am calling method ALV_GRID->SET_TABLE_FOR_FIRST_DISPLAY instead of "REUSE_ALV_GRID_DISPLAY".
and it works fine when we execute the report but the logic doesnt work when the user tries to change and save the layout variant on the output screen of the report.
Regards,
Satish

How to stop the users from changing the Decimal in SAP

How to stop the users from changing User Profile

Hai,
It is not possible to restrict SU3 to display, because it has only S_TCODE has the authorization object.
If you really want to restrict users from changing their profile you have to remove the SU3 access and give SU1 or SU2 which gives access only to Personnel details and Parameters.
Hope this helps.
Regards,
Yoganand.V

Can we prevent the user from saving the document?

Hi All,
I want to know that can we prevent the user from saving an illustrator doc till a condition match.
if we can, then how?
Please comment.
Thanks

You can't prevent it, no. You could continually set the document modified flag to false, which would prevent regular 'Save', but they could always do 'Save As' -- nothing can stop that.

Restrict a user from approving the PO that he had created

Hi experts,
Few users have the ability to create and approve Purchase orders.
However, the user should not be able to approve a Purchase order that he has created?
We are on ECC 6.0 on Enhancement Pack 04. Is it possible to achieve through SAP delivered authorization objects?
Appreciate your suggestions ASAP..
Thanks
Kee

Hi,
You may have to define your release strategy accordingly such that if a PO is created by a particular purchasing group (buyer) then the strategyA should come in picture if by another set of buyer then strategyB should be activated. This can be possibly defined at the charatceritic level for classification and is more of a MM functional know how rather than authorizations. Obviously, authorizations would come into picture if there are seperate release codes assigned to the release strategy and the users role has authorization to other release codes except for the strategy for his purchasing group.
M_EINK_FRG as already mentioned would be the object used.
regards,
Subbu

How to restrict the user from Closing the PO when it is not matched yet

Hi,
Actually PO is finally closed in lines level without matching. Now the problem is how to restrict this in future so that the user can not finally close it when it is not matched.
Thanks
Kavya

Kavya,
Check the setup of Line Type . Check for Receipt Tolerance on the Line Type . It should not be 100%
Please let me know if you have any questions
Thanks
Navin

How can i change the user that open the rfc connection (sm58) from R/3?

Hi all,
i'd like to know how can i customize the user 'connecting' R/3 and BW, i mean: when i launch a data extraction a fixed user creates the rfc connection to BW (and i can see it from tcode sm58 in r/3), i need to use a different username so that it will come be more easy for me to reorganize the rfc queue in case of errors (we are doing some testing), it's possible to do something like this or everyone has to share the same user r/3 side?
I hope i've been clear...
thanks for the help
S.

Hi...
Its recommended that only one user executes the RFC because you must manage the authorizations for remote execution only with few users....in case on error you can send the user as a parameter of the RFC and you can buid the error message with this parameter and identify the user of execution...
I hope this helps you
Regards

How to stop the users from saving the PO when there is error message

Hi Guru,
The error message had appeared but the user still can choose to hold the PO even though there is an error.
They do not want to let the user to have a choice to save the PO once there is an error.
Please advice where i can out this checking in.

Dear Sally,
As per OSS: Note 606728 - Hold Functionality of the PR & PO - Gaps.
The only way you can stop the hold functionality is by implementing the BADI: ME_PROCESS_PO_CUST.
I am copying the OSS text for your reference.
Summary
Symptom
It is possible in the system to create/hold a purchase order (PO) referencing a held purchase requisition (PR), but your business process requires that this not be possible in your installation.
Other terms
Hold, ME21N, ME52N, Parking, Save without Check, Held PR, PO referencing a held PR, Commitments, reduction of PR by a held PO
Reason and Prerequisites
Cause: The functionality is not provided in EA-PS 110.
Prerequisites : You must be on EA-PS 110 to implement this note
Solution
You can implement some customer BAdI's provided by SAP to get this functionality. Note that customer implementations of the BAdI's provided by SAP are upwardly compatible. The text that follows gives details of how to implement the customer BAdI's to accomplish this functionality.
This functionality might be provided in future releases. However, we cannot make any binding statements at this time in regard to the scope of this development and when it will become available.
The following are the steps required to implement the customer BAdI to give an error message when a user tries to create a PO referencing a held PR.
1. Go to transaction SE18. Enter the definition name as ME_PROCESS_PO_CUST. Select the push button display.
a) Choose Implementation -> Create.
b) Enter an implementation name. Choose Enter.
c) Enter a short text to describe the purpose of the implementation, then save the implementation.
d) Select the tab interface, then double-click the method "process_item".
e) Create a message to issue a message that the PR is on hold.
f) Enter the following code in the method:
                    DATA: LS_MEPOITEM TYPE MEPOITEM.
                    DATA : MEMORY     TYPE EBAN-MEMORY.
get current data from business object
                    LS_MEPOITEM = IM_ITEM->GET_DATA( ).
Check if the PO references a PR and check if the PR is not on hold
If the PR is on hold give an error message
                      IF NOT LS_MEPOITEM-BANFN IS INITIAL.
                        SELECT SINGLE MEMORY INTO MEMORY
                        FROM EBAN WHERE BANFN = LS_MEPOITEM-BANFN
                                    AND BNFPO = LS_MEPOITEM-BNFPO.
                        IF MEMORY = 'X'.
                           MESSAGE E900(ZM). "The message that you have created in step 6
                        ENDIF.
                    ENDIF.
g) Activate the implementation.
2. If you do not want to let the user put the PO referencing a held PR on hold, you have to also implement the BAdI ME_HOLD_PO. The following are the steps to implement the BAdI.
a) Go to transaction SE18.Enter the definition name as ME_HOLD_PO and click on the 'DISPLAY' button.
b) Go to Implementation -> Create.
c) Enter an implementation name, then choose Enter.
d) Give some short text to describe the purpose of the implementation, then save the implementation.
e) Select the tab interface. Double-click the method IS_ALLOWED.
f) Enter the following code in the method:
                    DATA : IM_BEKPO_WA TYPE BEKPO.
                    DATA : MEMORY TYPE EBAN-MEMORY.
                    *-Look if the PO refers to a Held PR
                    LOOP AT IM_BEKPO INTO IM_BEKPO_WA
                           WHERE NOT BANFN IS INITIAL.
                             SELECT SINGLE MEMORY INTO MEMORY
                             FROM EBAN WHERE BANFN = IM_BEKPO_WA-BANFN
                                        AND BNFPO = IM_BEKPO_WA-BNFPO.
                             IF MEMORY = 'X'.
                    *-Do not allow the PO to be kept on hold
                    *-if the PO is refering a held PR
                               CH_ALLOWED = ' '.
                              ENDIF.
                    ENDLOOP.
g) Activate the implementation.
I hope it helps.
Kind Regards,
Prakash

How to record the users who opened the email?

Hi,
After the email reaches the users' mailbox, I would like to record if a user opened the email or not. How can I call back to one of the commands in my server to make the recording? In other words, what should I include in the html or jsp file when I generate the email content in my server? Thanks a lot!
best regards,
Jen

Answer is log files.... develop your program in such a way that it keeps logs for
events like... sending a email, retrieving emails... which user is logged in and
so on...
i think this is the most simple and practical way to do this task
have fun

How to restrict a user from using the transaction code SU01?

How can I grant a profile to a user with the profile SAP_ALL except running the transaction code SU01?
I know how to lock the transaction code using SM01 but is there any other way to do it.

Go to S_TCODE
Double click on it and give the combinations like        A* -   X*
                                                                             SU00
                                                                             SU02 - Z*
                     Try this one definately it will work.

Prevent user from opening an applescript file

Greetings,
I have written an Applescript for use by the User to change file permissions on folders or files they get from clients from outside our company. The permissions of these files denies the User from opening the files and work with them The script I wrote will change those permissions to Read/Write but also contains Administrator information with regards to Admin Name and Password. The script runs just fine.
Where my problem arises is I cannot find a way to prevent a User from using the Applescript application on their workstation to open my script and view the Admin name and Password. What I need to happen is to have the script run when the User places a file on the icon, but not allow a User to open the script to see the coding. I'm really new to Applescript and I figure i am missing something. Thanks in advance for any advice.

Are these items downloaded into the same folder in each user account?
That part is reliably the same or are users involved choosing the save location?
Frankly I'd scrap Applescript - it is a pain for anything involving admin privs & normal users.
Option 1…
Stick a task into roots crontab to chmod/ chown that location every 5 minutes or so!
If you want to be smart about it check if the perms are in a mess before you fix them. A shell script can do this. Obviously you need to check the path to give the correct user the ownership etc.
Option 2…
Set a launchd job to watch a specific folder & run a command when items are added - like folder actions without the crappy Applescript part
https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/ man5/launchd.plist.5.html#//apple_ref/do…
It would need to be a system level job since the user doesn't seem to have enough permission.
If you need to use an application to allow the user to have control an Applescript droplet could move the items to the watched folder, where the launchd job resets the perms. Then the items could be moved elsewhere via the script that runs from the watch job.
It all seems kinda kludgy, but sometimes that is how OS X is!
Perhaps this is outlandish & impractical but so is manually fixing stuff like this every time someone calls
Any thoughts?

How to restrict the user from accessing other screens before submittingdata

Hi All,
I have some screens developed in Webdynpro ABAP and all these have been linked to Portal as pages. In Portal If i click on the link in detailed navigation i can see the corresponding screen on the right side. Now in one screen i have to input some data and submit the data, Now my problem is if i enter some data and before submitting the data if i click on any other link in the detailed navigation, that corresponding screen is opening and all the data of the previous screen is lost.
Can any one suggest me, how can i restrict the user from accessing other screens before submitting the data of that screen from portal perspective.

Hi Prasanna,
The pages can be restricted from the user access by using the ACL permission or you can restrict the page by making invisible in navigation area which you do not want to show to the user . Open the page properties and select navigation category in the drop down and select the Invisible in navigation area property to yes.By default this property is No.Change the property for all pcd pages which want to hide from user access.
Hope this helps you...
Regards,
Rudradev Devulapalli
Reward the points if helpful....

Restrict the user from seeing public objects

HI
How to avoid the user from see the other schema public objects
if i use odbc drive for crystal report and i am able to see other schema owner
objects
like ctxsys,dmsys,mdsys
even though it is coming from Public schema i try
revoke select on all_users from public;
it did not help
pls give me some solution how to avoid this

I'm not following you. What I suggested was (let's say it uses all_tables):
- create a local view called all_tables
- filter in that view anything you don't want to see
ops$oskar@test9i$ grant create session to u1 identified by u1;
Grant succeeded.
ops$oskar@test9i$ grant create view to u1;
Grant succeeded.
ops$oskar@test9i$ conn u1/u1
Connected.
u1@test9i$ select distinct owner from all_tables;
OWNER
CTXSYS
MDSYS
OPS$OSKAR
SYS
SYSTEM
WKSYS
WMSYS
7 rows selected.
u1@test9i$ create or replace view all_tables as select * from sys.all_tables where owner not like '%SYS%';
View created.
u1@test9i$ select distinct owner from all_tables;
OWNER
OPS$OSKAR

Is it possible to restrict the user from opening the WSDL page in a browser

Similar Messages

Maybe you are looking for