Is it possible to restrict user access to files that need read/write permissions?

I am in the process of implementing electronic payments for a company's AP department. Dynamics GP (Great Plains) needs to create an EFT file that will get sent to the bank. After it is created, a script is run that sends the TXT file to the
bank and then renames the file extension to SNT. Users are logged on to the Great Plains server and have their own permission group.
Because the file is sending payment instructions, it is essential that users cannot modify or create a file with fraudulent payment instructions to the bank (incorrect bank account info).
With testing, I was able to save the file from GP to a folder where users cannot read it's contents, however the script cannot send the file to the bank without "read access" (it says not files available).
Any ideas for solutions? For instance, is it possible to make Great Plains and/or the script file "system" so that it can override the user profile's permissions?
I was also looking into the ability to hide the folder/files, but it appears users can choose to view hidden files and folders.

I dont think so you can do it that way..

Similar Messages

When a win7 users accesses a file on the server the permissions on the file revert to read only.

Hi there,
Originally my enviroment was 100% Mac, but now we have merged with another company who are all PC users.
The issue I'm having is when a Windows 7 client accesses a file on the Snow Leopard server the file becomes Read Only, and I have to manually propergate the permissions to fix it. This isn't an issue with XP users.
So far this is only happening with Excel files.
Is anyone else experiencing this issue? Any help would be greatly appreciated.
Cheers,
J

I'm having a similar issue as well. Excel 2007 appears to be the culprit, but hard for me to say. Running 10.6.8 here as well.

Basic Server Config question: Restricting user access to files & folders

I am in the process of locating a good Apple Server consultant in south florida, but in the meantime I want to educate myself on what we have.
We now have an XServe in our office, running 10.6 Server. We intend to use it as a File Server, and we want to set it up in such a way that we can specify which individual users have access to each directory.
As a 100% beginner, where would you suggest I start in understanding how do this? Or even, which Help resource I should look at to begin learning. I imagine that our senario is a very simple one. I'd appreciate any help or suggestions from anyone out there.

Hi
These for starters:
http://manuals.info.apple.com/enUS/FileServerAdminv10.6.pdf
http://manuals.info.apple.com/enUS/UserMgmtv10.6.pdf
http://manuals.info.apple.com/enUS/NetworkSvcsv10.6.pdf
For the rest:
http://support.apple.com/manuals/#serversandenterprisesoftware
Tony

Time restricted user access

Dear Experts,
we are dealing with the following issue. Is it possible to set up time restricted user access in BPC 7.5? It means e.g. we want user to have access to BPC only in the first half of the year or (a bit trickier) in every first half of each month.
And is it possible to temporarily prohibit access for an user without deleting him or his rights?
Thanks for the reply,
Jakub

Hi Jakub,
Can you explain why you want to set up your system this way? Depending on what you are trying to accomplish, there may be a good way to make it work in BPC (work status, security, data model design), but as Nilanjan said, there is not an easy way to totally lock out users based on date.
Ethan

Restricted User Access

Hi All!
Is it possible to restrict the access of a user in that way that he can only edit a part of the columns, but he can see the whole table even the columns he isn't permitted to change! How can i solve this problem?

Hi user552848,
please provide your first name...
I would see 2 possible solutions here:
1) Create or own access roles
a) create an application item where you store which "access role" the user has and
b) use the "Read only" property of the page item, where you specify a condition of type "Value of Item in Expression 1 != Expression 2". Write the name of your application item into Expression 1 and eg UPDATE_ALLOWED (=>name of your access role) into Expression 2
2) You use the APEX authorization.
a) Create one at Shared Components\Authorization Schemes).
b) Use the "Read only" property of the page item, where you specify a condition of type "PL/SQL Expression" with the following code in Expression 1
NOT WWV_Flow.public_security_check('Name of the Authorization you created');Note 1: "Name of the Authorization you created" is case sensitive
Note 2: WWV_Flow.public_security_check isn't a documented function, so use it at your own risk, Oracle may change it/remove in the next release.
Hope that helps
Patrick
Check out my APEX-blog: http://inside-apex.blogspot.com

How to restrict user access in Oracle Application Server 10g (9.0.4)?

Can anybody please let me know how to restrict user access in 10g AS? To be specific, how to allow http requests from specific IPs only?

Hi,
You have to edit httpd.conf and modify acces rights for each protected directory
e.g.
<Directory /var/www/sub/payroll/>
Order allow,deny
Allow from 192.168.1.0/24
</Directory>
then you have to restart Oracle HTTP Server
jm--

File sharing: possible to warn second user of a file that it is already open?

[I hope this forum is the best place for my question.]
I run a small business: a medical practice. I use a Mac Mini to store all my documents, and we use two iMacs to access the documents through File Sharing. I do not run OSX Lion Server. All machines have OSX 10.7.5.
I have a Numbers spreadsheet on the Mac Mini that is frequently opened and modified by the receptionist on one iMac, but also occasionally opened and modified by the doctor on the other iMac. (The vast majority of other files never need to be opened by more than one user.) Occasionally, the Numbers file will be opened by both users at the same time. If one user modifies the file, when s/he tries to close the file, a dialog pops up warning that there are two versions, and providing the choice to Revert or Duplicate & Save. This means a choice between losing changes, or subsequently checking two documents for differences.
Note that it isn't possible to simply call out, "Hey, have you got that spreadsheet open?" when the doctor is seeing a patient.
Also note that privacy is an issue, as the spreadsheet contains numerous patient names.
Is there a way to: (a) Warn the second user opening the file that it is already open? Or (b) Make the file read-only when a second user tries to open it? (c) Inform the second user that the file is in use, and they can't open it at all. (There may be other solutions that I can't think of.)
I am open to all ideas. I have tried dabbling with AppleScript, but can't find a solution with my emerging AppleScript skills. I have been trying to find out if installing OSX Lion Server on the Mac Mini would help, but I can't find the answer online. (I would have to pay someone to install OSX Lion Server, as I have medical software installed that may or may not fit well with Server.)
Thanks in advance for any help.
Peter

hmm, then would there be any way to reproduce the effect of the 'delete' or 'backspace' keys? If I'm right, I think there was an ASCII code for the backspace character... Would it be possible to insert it to get a character deleted!? :/
I really need to find a way to do all of these operations on a text file because I think it wouldn't be a good idea to completely re-write 30Mb+ large files each time some data has to be modified :P

Windows 2008 : How to Restrict Users to Copy file from Shared Folder

Hello All,
I need to Restrict Users to Copy file from Shared Folder. Please let me know is there any method to achieve this requirement.

If user have Read permission, they can copy it. So actually you cannot restrict user from copy your files if they could read/edit.
Some programs could help restrict users from edit/modify/copy the content of their files such as Office files, PDF files etc as Oscar said above.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Restrict Users from saving files on Local PC but forced to Network Shared Location

Hi,
We have the Domain in Windows 2003 Standard.
How can I restrict users from saving files in their Local PC?
Also, need to forced them to save the files in Network Location with permissions...
Thanks.
~CoolPra~

Hi,
You can create a file screen to prevent users from saving files on a certain volume. File screens are used to block specific types of files from being saved on a volume or in a folder tree. A file screen affects all folders in the designated path. You need
to update the server to Windows Server 2003 R2 to install the File Server Resource Manager.
File Screening Management
http://technet.microsoft.com/en-us/library/cc772675(v=ws.10).aspx
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How do you create default Read/Write Permissions for more than 1 user?

My wife and I share an iMac, but use separate User accounts for separate mail accounts, etc.
However, we have a business where we both need to have access to the same files and both have Read/Write permissions on when one of us creates a new file/folder.
By default new files and folders grant Read/Write to the creator of the new file/folder, and read-only to the Group "Staff" in our own accounts or "Wheel" in the /Users/Public/ folder, and read-only to Everyone.
We are both administrators on the machine, and I know we can manually override the settings for a particular file/folder by changing the permissions, but I would like to set things up so that the Read/Write persmissions are assigned for both of us in the folder for that holds our business files.
It is only the 2 of us on the machine, we trust each other and need to have complete access to these many files that we share. I have archiveing programs running so I can get back old versions if we need that, so I'm not worried about us overwriting the file with bad info. I'm more concerned with us having duplicates that are not up to date in our respective user accounts.
Here is what I have tried so far:
1. I tried to just set the persmissions of the containing folder with us both having read/write persmissions, and applied that to all containing elements.
RESULT -> This did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
2. I tried using Sandbox ( http://www.mikey-san.net/sandbox/ ) to set the inheritance of the folder using the methods laid out at http://forums.macosxhints.com/showthread.php?t=93742
RESULT -> Still this did nothing for newly created files or folders, they still had the default permissions of Read/Write for the creating User, Read for the default Group, Read for Everyone
3. I have set the umask to 002 ( http://support.apple.com/kb/HT2202 ) so that new files and folders have a default permission that gives the default group Read/Write permissions. This unfortunately changes the default for the entire computer, not just a give folder.
I then had to add wife's user account to the "Staff" group because for some reason her account was not included in that. I think this is due to the fact that her account was ported into the computer when we upgraded, where as mine was created new. I read something about that somewhere, but don't recall where now. I discovered what groups we were each in by using the Terminal and typing in "groups username" where username was the user I was checking on.
I added my wife to the "Staff" group, and both of us to the "Wheel" group using the procedures I found at
http://discussions.apple.com/thread.jspa?messageID=8765421&#8765421
RESULT -> I could create a new file using TextEdit and save it anywhere in my account and it would have the permissions: My Username - Read/Write, "Staff" or "Wheel" (depending on where I saved it) - Read/Write, Everyone - Read Only, as expected from the default umask.
I could then switch over to my wife's account, open the file, edited it, and save it, but then the permissions changed to: Her Username - Read/Write, (unknown) - Read/Write, Everyone - Read Only.
And when I switch back to my account, now I can open the file, but I can't save it with my edits.
I'm at my wits end with this, and I can believe it is impossible to create a common folder that we can both put files in to have Read/Write permissions on like a True Shared Folder. Anyone who has used windows knows what you can do with the Shared folder in that operating system, ie. Anyone with access can do anything with those files.
So if anyone can provide me some insight on how to accomplish what I really want to do here and help me get my system back to remove the things it seems like I have screwed up, I greatly appreciate it.
I tried to give as detailed a description of the problem and what I have done as possible, without being to long winded, but if you need to know anything else to help me, please ask, I certainly won't be offended!
Thanks In Advance!
Steve

Thanks again, V.K., for your assistance and especially for the very prompt responses.
I was unaware that I could create a volume on the HD non-destructively using disk utility. This may then turn out to be the better solution after all, but I will have to free up space on this HD and try that.
Also, I was obviously unaware of the special treatment of file creation by TextEdit. I have been using this to test my various settings, and so the inheritance of ACLs has probably been working properly, I just have been testing it incorrectly. URGH!
I created a file from Word in my wife's account, and it properly inherited the permissions of the company folder: barara - Custom, steve - Custom, barara - Read/Write, admin - Read Only, Everyone - Read Only
I tried doing the chmod commands on $TMPDIR for both of us from each of our accounts, but I still have the same behavior for TextEdit files though.
I changed the group on your shared folder to admin from wheel as you instructed with chgrp. I had already changed the umask to 002, and I just changed it back to 022 because it didn't seem to help. But now I know my testing was faulty. I will leave it this way though because I don't think it will be necessary to have it set to 002.
I do apparently still have a problem though, probably as a result of all the things I have tried to get this work while I was testing incorrectly with TextEdit.
I have just discovered that the "unknown user" only appears when I create the a file from my wife's account. It happens with any file or folder I create in her account, and it exists for very old files and folders that were migrated from the old computer. i.e. new and old files and foders have permissions: barara - Read/Write, unknown user - Read Only, Everyone - Read Only
Apparently the unknown user gets the default permissions of a group, as the umask is currently set to 022 and unknown user now gets Read Only permissions on new items, but when I had umask set to 002, the unknown user got Read/Write permissions on new items.
I realize this is now taking this thread in a different direction, but perhaps you know what might be the cause of this and how to correct or at least know where to point me to get the answer.
Also, do you happen to know how to remove users from groups? I added myself and my wife to the Wheel group because that kept showing up as the default group for folders in /Users/Shared
Thanks for your help on this, I just don't know how else one can learn these little "gotchas" without assistance from people like you!
Steve

Can a JApplet access a file to be read?

I think I recall reading or hearing somewhere that a JApplet cannot, for "security reasons", access any files on the computer it is running on unless it is the 'original' or the one where the code is stored. What I would like to do is have a file that will be only read (not written to) by a JApplet and use the information for the applet. If I always run the JApplet with a browser on the computer where I have the code stored, will it allow me to access this file or will it still prevent me? Or can I just have the file stored in the same folder as the applet in my webpage directory so that it will be able to access it there and display it for all others on different computers?
Thanks in advance for any insights!

Hello forum,
Lot of confusion's on this topic.
Here is my understanding.The question is "Can a JApplet access a file to be read?". Answer is "No". But workaround is there.Then where the confusion is.
I have seen kartik181 mentioned about using digital signature from verisign/similar to grant access to your local file system!
The question asked by aachi is " ........Is it so? What is the purpose of digital signatures then?"
Also aachi mentioned about policy file. That means to get an access to local file is something you have to do with policy file.
bharthy explained the same in detail with some example.
Now look at the original question posted by the author littleB.
The answer I got from jdk 1.2 sand box model..
"There is no longer a built-in concept that all local code is trusted. Instead, local code (e.g., non-system code, application packages installed on the local file system) is subjected to the same security control as applets, although it is possible, if desired, to declare that the policy on local code (or remote code) be the most liberal, thus enabling such code to effectively run as totally trusted. The same principle applies to signed applets and any Java application."
So if you want to do your applet (whether you store locally or remotely in the path of webserver) you would end up an easy way of changing policy file by allowing more easily to do the specific job.
Hope it gives a bit clear picture of it.

Is it possible to change the read/write permissions on a time machine back-up of iTunes? I need to restore it, but old version is locked....

Is it possible to change the read/write permissions on a time machine back-up of iTunes? I'm needing to restore it as my phone deleted half our playlists during sync & am not seeing a way to unlock the permissions. I have the current version unlocked, but can't seem to get the backed-up version. When I click on restore I get a pop-up that says iTunes can't be deleted as it is part of the OS. I'm not even trying to delete, just restore the old version. Any suggestions?

Hmmm, ok I'll give it a shot. I've always had the iTunes sync w/ my phone set up to only load selected playlists to the phone b/c there's a lot more in iTunes than I have room or desire for on my phone. A few months back I started having trouble w/ trying to sync everything & subsequently adding more to the phone than it could hold. The quickest thing at the time was to unclick the sync music option in iTunes so I could still backup the phone to the computer & not have a problem.
When I asked about it during one-to-one session shortly after, they advised me to delete the music off my phone & then re-sync it to the computer, run a backup of the phone & redownload the music to the phone. When I tried this it ended up deleting all my playlists (but not my husband's) from iTunes. Irritating, but I've been rebuilding the playlists since. I had also unclicked sync music again & an Apple person told me the most likely best fix was to delete & reload iTunes completely.
A few days ago I realized I hadn't backed up the phone to the computer in over a month so after deleting & reinstalling iTunes, & w/o changing anything (sync music was STILL unchecked) I ran a backup & my phone went from having 4 GB free space to being 2 GB over capacity due to iTunes trying to download the entire music library to the phone. I made a one-to-one appt again & it was suggested AGAIN that I delete all the music off my phone & then resync it to the computer & redownload the music. We did this (though a few random songs that had previously been purchased somehow remained on the phone), I got home, connected the phone & instead of the music that shows as 'on my device' disappearing from iTunes it just sat there, so, as the guy had told me I MIGHT have to do, I threw all those songs showing in iTunes as being on my phone, in the trash so that it was completely clear.
At this point I checked sync music, made sure the options were 'selected playlists only', checked the ones from my own list that I wanted (I usually have one playlist of comedians from my husband's folder that I also have on the phone, but didn't check it at this point). It uploaded all my stuff just fine, but for whatever reason when it saw that I wasn't uploading that comedy playlist any longer, it not only didn't upload it but proceeded to delete my husband's entire folder of playlists from iTunes. -_- I got on the phone w/ an Apple support person right away but he wasn't able to tell me anything .. basically said we'll have to rebuild everything. I asked about the possibility of using time machine, he said he's not qualified to answer that, so that's when I started looking around online & found, among others, the link I referenced a couple replies ago.
I hope this all makes sense. It's been a long-term issue so I'm trying to go from memory as I figured to begin w/ that I had just made a mistake somewhere, so didn't try to document anything. Now w/ it having happened a 2nd time, I'm not sure if it was 'user error' or something else.......

I had a Microsoft tech access my computer remotely to resolve issues with my hotmail acct. There were files that needed to be deleted and he also changed some settings. Later, when I tried to open InDesign I received the following error: AMT Subsystem

I had a Microsoft tech access my computer remotely to resolve issues with my hotmail acct. There were files that needed to be deleted and he also changed some settings.
Later, when I tried to open InDesign I received the following error:
AMT Subsystem Failure
The licensing subsystem has failed catastrophically. You must reinstall or call customer support.
I rebooted the computer and tried again:
Licensing for this product has stopped working.
You cannot use this product at this time. You must repair the problem by uninstalling and then reinstalling this product or contacting your IT administrator or Adobe customer support for help.
I can access Acrobat and MS Office programs, it's just the CS3 programs that I can't access. Can I uninstall and then reinstall CS3 without an access (un-lock) code?

Use the trackpad to scroll, thats what it was designed for. The scroll bars automatically disappear when not being used and will appear if you scroll up or down using the trackpad.
This is a user-to-user forum and most people will post on here if they have problems. You very rarely get people posting to say there update went smooth. The fact is the vast majority of Mountain Lion users will not be experiencing any major problems with the OS, or maybe with apps which are not compatible, but thats hardly Apple's fault if developers don't update their apps.

HT201250 I have done my back up using time machine, now I have a new mac and I need to access the files that I had saved from my old mac. How can I do that?

I have done my back up using time machine, now I have a new mac and I need to access the files that I had saved from my old mac. How can I do that?

Use Migration Assistant on your new Mac:
Click Continue:
On the next screen, choose your Time Machine backup disk.
Don't bother to migrate Applications unless you know they will work on your new Mac. For example, PowerPC applications won't work. Just migrate your user account which will copy all your photos, music, movies, and other documents.
Note: you will not be able to migrate the information to same account in which you are already logged in. Migration Assistant will tell you that and recommend what to do. It can migrate the information to a new account, but you will have to give it a name you might want to change later. One way around this is to create a temporary account, log in to it, and run Migration Assistant which will replace your normal account. Then, log out of the temporary account, log in to your usual one, verify everyting works as you expect, and delete the temporary one.
All this can be avoided when you set up a brand new Mac by running Setup Assistant which essentially does the same thing to create your new account, but most people are too excited to do that and elect to migrate later.

Is it possible to save a picture/image file that is within an iOS app?

Is it possible to save a picture/image file that is within an app?
The image in question cannot be shrunk, so using the iPhone built-in Screenshot function (by pressing both "Home" & "On/OffSleep/Wake" buttons simultaneously) only produces part of the image.
Thanks.

Generally in all Apple iOS apps, you can hold down on the image and the save image dialogue will pop up. Many third party developers adopt this method, but some also have other weird ways of doing it through menus. What appa re you trying to do this with?

Is it possible to restrict user access to files that need read/write permissions?

Similar Messages

Maybe you are looking for