IView Access Authority Question

Hi,
     I am accessing an IView on my BI Portal by way of a http link.  This link goes through my Enterprise Portal (for single signon reasons) to the BI Portal. The BI Portal is setup as the Producer SAM as you can see in the link.  
     If a user executes the link will they be able to access the BI Portal IView even if they don't have a role assigned to them that contains that IView?  I am thinking they can.  You opinions are greatly appreciated
https://<server>:<port>/irj/servlet/prt/portal/prtroot/com.sap.portal.pagebuilder.IviewModeProxy?iview_id=gp%3ASAM/pcd%3Aportal_content/com.frx.forest_content_folder/com.frx.bi_folder/com.frx.bi_projects_folder/com.frx.ZDWNBI/com.frx.ZDW_IVIEWS/ZDWQRP_LAST_COMMUNICATION
Thanks!
Ken Murray

Hi Ken,
If user has permissions for iView and System it shouldn`t be a problem even if it has no portal roles assigned. IMHO, roles are more to build navigation.
Best regards, Maksim Rashchynski.

Similar Messages

  • ESS IView access to ERP - login page displayed and not access possible

    Hello Colleagues,
    we have to setup Employee Self-Service (ESS) Portal as well  ERP.
    All required steps seems to be performed but we still facing one access issue.
    If I try to enter the Link My Employees under SAP Portal > Employess Self-Service > Travel and Expenses it get an web login (ITS) from the ERP system and not direct access to the service. In addition I am not able to login with defined user an password.
    If I try the to enter the service directly (test service) at transaction SICF on the ERP (ECC) System itself it works fine as well with defined user and password.
    If both IE Browser Windows are open, then I am able to see the service (empty table) unter My Employees at portal after click again under Link SAP Portal > Employess Self-Service > Travel and Expenses > My Employees.
    So I think the general connectivity works fine but some thing still wrong with maybe IView access/permissions/roles?
    Any Ideas?
    Many thanks in advance!
    Regards,
    Jochen

    This means that your Single sign on is not working correctly.
    Things to check:
    1. From Portal System Administration - for the system object created for connecting to the backend system - try to perform the connection tests and make sure they pass.
    2. Access your portal with a Fully Qualified Domain Name (for example: myportal..mysubdomain.mydomain:port/irj/portal instead of just myportal:port/irj/portal) - this should most likely resolve your issue - since you see the error only for WD4A applications.
    3. Make sure that the host name you have configured in the portal system and the host name with which you access your portal are in the same domain.
    Also, check the SSO related profile parameters in the backend system:
    login/accept_sso2_ticket=1
    login/accept_sso2_ticket=0
    login/password_change_for_SSO=0
    Thanks,
    Shanti

  • Windows Root Certificate authority questions.

    hello,
    I have 2 questions with regards to Offline ROOT CA in a 2 TIER Hierarchy :
    (1) Is it necessary to to ” map the Namespace of Active Directory to an Offline CA’s Registry Configuration” ? I didn’t do this step in my lab env and find this in some but
    but not all the online posts as well. what happens if we don't run this command on offline CA ?
    For instance:  certutil.exe –setreg ca\DSConfigDN CN=Configuration,DC=lab,DC=com 
    (2) What happens if i do not publish the ROOT CA certificate via "certutil -dspublish -f xxx.cer ROOTCA " command but instead just  push the root certificate  using Default Domain Group Policy Object to "Trusted Root Auth" store
    on all the domain machines ?  What are the pros/cons of using the certutil method vs the GPO method ?  
    Thanks
    Neeraj

    > Is it necessary to to ” map the Namespace of Active Directory to an Offline CA’s Registry Configuration” ?
    it is necessary only if you configure LDAP URLs for CRL Dsitribution Points and Authority Information Access extensions on Root CA (not recommended).
    > What are the pros/cons of using the certutil method vs the GPO method ?  
    different scopes. When publishing in Active Directory, it is downloaded to all
    *forest* members, while GPO covers only limited scope (domain, site or OU).
    Vadims Podāns, aka PowerShell CryptoGuy
    My weblog: en-us.sysadmins.lv
    PowerShell PKI Module: pspki.codeplex.com
    PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
    Check out new: SSL Certificate Verifier
    Check out new:
    PowerShell File Checksum Integrity Verifier tool.

  • ODBC Backdoor Access Security Question

    IS it still possible for an individual to gain access to a sql database if there is an ODBC connection open? Can anyone point me in the direction of any documentation that discusses this? I know my question may be a little outdated, but I've been having difficulty finding the answer myself. Thanks guys!

    It sounds like you're talking about a generic problem of controlling what application(s) a user is allowed to use to connect to a database. If so, that's not really an issue with ODBC or any other client API-- it's an issue with the organization's security architecture.
    If you give a person an Oracle user name and password, they're going to be able to connect via whatever application they'd like-- whether they're using Access via ODBC, SQL*Plus, or a custom application. Once they connect, they'll have whatever privileges you've granted them. Ideally, that would mean that users only have SELECT access and EXECUTE access on a set of stored functions and procedures they are authorized to run. If users have been given the keys to the kingdom as it were-- full INSERT, UPDATE, and DELETE privileges on every table-- you've got more fundamental problems.
    Justin

  • Class Access & Package Question - Please Help

    Hi,
    I have a question regarding how to access a class in an abnormal directory structure.
    Here's the type of directory structures:
    -Documenter
    -com
    -xyz
    -business
    -AppBase
    -com
    -xyz
    -util
    I have a class called Hash that is in the util directory and I want to access it from a class in the business directory. How can I do that? Any help would be appreciated.

    Thanks, I should have mentioned that WebApp is the same parent directory for the Documenter & AppBase directories:
    -c:\WebApp
    -Documenter
    -com
    -xyz
    -business
    -c:\WebApp
    -AppBase
    -com
    -xyz
    -util
    Can I still just make sure the that the classpath contains the above directories? Thanks in advance.

  • Java webdynpro Iview accessing different SAP system

    Hai,
    I have created two Java webdynpro Iview for ess leave application, in the Iview application parameter, I have given the below value
    IVIEW1
    sap-wd-arfc-useSys=SAP_R3_HumanResources:200&sap-wd-arfc-useSys=SAP_R3_HumanResources_MetaData:200.
    IVIEW2
    sap-wd-arfc-useSys=SAP_R3_HumanResources:300&sap-wd-arfc-useSys=SAP_R3_HumanResources_MetaData:300
    JCO SAP_R3_HumanResources is mapped to client 100, I have created two more JCO's and the metadata SAP_R3_HumanResources200 & SAP_R3_HumanResources300
    We have a CUA system and the client number of this system in 099. Apart from that we have client 100, 200 & 300. My userid is created in client 099 and 200 and Iview "IVIEW1" is assigned to my userid. When I try to access the Iview from portal I am getting a error, I checked the trace file and found the connection is going to client 100.
    Then I created my userid in client 100 also and try to access Iview1, its going to client 200 without error.
    When I use "SAP_R3_HumanResources:200&sap-wd-arfc-useSys=SAP_R3_HumanResources_MetaData:200" it looks like system will first connect to SAP_R3_HumanResource and then connects to client 200. Is this behavior normal.
    What I want to do is with the "SAP_R3_HumanResources:200&sap-wd-arfc-useSys=SAP_R3_HumanResources_MetaData:200" I want to access client 200 without creating a id in client 100. Please let me know how to do or is there any other solution to achieve it.
    Regards,
    H.K.Hayath Basha.

    HI,
    Edit the JCo's, try to point the JCo's to 200 Client.
    so that the iview can points to the 200 client right,
    May be it will help u,
    Cheers,
    Apparao

  • Java visit microsoft access database question

    I want to visit microsoft access database,like follows:
    String dirverClass="sun.jdbc.odbc.JdbcOdbcDriver"; String url="jdbc:odbc:Driver={Microsoft Access Driver (*.mdb)}; DBQ=C:\\apache-tomcat-5.5.27\\webapps\\Test\\db.mdb"; String content=""; try{   Class.forName(dirverClass);   Connection conn=DriverManager.getConnection(url);   Statement stmt = conn.createStatement();   String sql="select * from mytab"; ResultSet rs = stmt.executeQuery(sql); while(rs.next()){       content=rs.getString("zd1"); }
    My question is whether I must install microsoft access database?
    Thanks

    Far as I know and have been able to determine a MS Access ODBC driver comes with every windows install going back to about windows 98. Might be 95 as well.
    I haven't looked at some of the more exotic ones like the 64 bit versions nor the mobile versions.

  • Access Database Question

    I've been searching the web, but haven't seemed to ask the
    right questions or used the correct terminology to return what I
    need.
    I want to make an online db that allows users to login and
    update their information and submit directly for viewing. I have
    about 20 individuals that would likely logon once a month to update
    their information. They probably would have 50-60 pieces of info to
    update.
    What would you suggest me to use for a db and app server that
    integrates well with DW? I have worked extensively with Access, but
    I've never integrated a mdb file with the web. Would my end users
    need to have client license and ODBC setting to update?
    If someone could point me in the right direction I have no
    problem learning, I just am lost as to which road to take.

    "kathycmiller" <[email protected]> wrote in
    message
    news:f3v8j7$269$[email protected]..
    > I want to make an online db that allows users to login
    and update their
    > information and submit directly for viewing. I have
    about 20 individuals
    > that
    > would likely logon once a month to update their
    information. They
    > probably
    > would have 50-60 pieces of info to update.
    If that's all the traffic you'll have, then Access might
    actually work.
    Normally I'd say, "if you care about your data, then DON'T
    use MS Access."
    > What would you suggest me to use for a db and app server
    that integrates
    > well
    > with DW? I have worked extensively with Access, but I've
    never integrated
    > a
    > mdb file with the web. Would my end users need to have
    client license and
    > ODBC
    > setting to update?
    No, none of that would be necessary.
    I would suggest using SQL Server 2005 Express. It's a free
    version of
    Microsoft's excellent flagship DBMS. There are rather
    generous restrictions
    (no more than 25 users simultaneously on a Web site, no more
    that 2GB of
    RAM, no more than 2 processors, no more than 4GB of data), so
    it works well
    for a lot of people who would normally look at Access.
    Throw away what you know about Access, though. It will only
    get you in
    trouble with a real database system.
    > If someone could point me in the right direction I have
    no problem
    > learning, I
    > just am lost as to which road to take.
    Well, check your host. Your host may offer plans that contain
    space on a
    SQL Server 2000 or 2005 installation for a reasonable price.
    If not, then
    you'll have to find another solution as the database must be
    installed on
    the server. If you host your own server, then great. :)

  • Access restriction question

    I have a WRT54G v2 wireless router/access point (Firmware Version v2.02.7) ...and I am using access restrictions with some success, but I have one question - is there any way to setup a rule (or rules) such that site blocking is time-based?
    For example, the internet is up and available, except for myspace.com, which is blocked between 7pm and 5am.
    I know that a time window that spans midnight requires two rules, but what I don't know is how to have a rule that is both site-based AND time-based. If I create a new rule and change its status from "allow PCs" to "deny PCs", the router's web-based GUI immediately disables the blocked protocols, blocked sites, and blocked keywords fields...and so it seems that what I am asking for is not possible...unless I am missing something.
    Any ideas? Thanks.
    cheers,
    Steve
    Message Edited by Scuba_Steve on 09-18-2007 12:10 PM

    Okay...the answer is this - NO. So what to do? Install a different firmware. I installed Tomato and it blows the doors off of the standard Linksys firmware...and the supported access restriction rules are far more powerful and intuitive.

  • About multi process access BDB question

    I am designing one system using BDB.I have some questions about multi process access BDB.
    1.If there are two process, they are shared BDB cache or every one has self BDB cache? (My understanding is every process has cache by itself.)
    2.If one process write BDB and at the same time one process read BDB,how to make read processs can read data which write by write process just now?

    1.If there are two process, they are shared BDB cache
    or every one has self BDB cache? (My understanding
    is every process has cache by itself.)You can configure it either way. The cache is maintained as part of the so-called environment. The usual thing is to configure a shared cache. You need to read about environments in the BDB and BDB/XML documentation.
    http://www.oracle.com/technology/documentation/berkeley-db/xml/index.html
    2.If one process write BDB and at the same time one
    process read BDB,how to make read processs can read
    data which write by write process just now?Use transactions, set up deadlock handling, and think about what transaction isolation guarantees you need. Note that there are four different fundamental setups for BDB: DS, CDS, TDS and HA, which stand for Data Store, Concurrent DS, Transactional DS and High Availability. For read-write concurrency, you need TDS.
    http://www.oracle.com/technology/documentation/berkeley-db/xml/ref/intro/products.html
    For high concurrency at the expense of memory, consider using multi-version concurrency control (MVCC). You can read about it in the following thread, especially in George Feinberg's replies:
    Deadlock handling for beginners
    In addition, there is ample documentation included in the BDB/XML distribution. It's pretty complex, as BDB can be configured in many different ways.
    Michael Ludwig

  • Discussions and iPhoto 08 access plus question

    I haven't been able to access the iPhoto 08 discussion but receive the following message:
    "Error An error in the system has occurred. Please contact the system administrator if the problem persists. Useful links : Forum Home -- browse the forums here. Search Forums -- visit the search page to query all forum content."
    As you see, I have been able to access this discussion!
    Question: I think may be answerable with this group, too: Can you make/have sub-albums under an Album? If so, how is it done?
    Thanks.

    The iPhoto '08 forum is sick right now - I'm sure it will be back soon
    You can not make sub albums but you can make folder and place albums in them - so you might have a vacation folder with Italy, Spain, Montana, etc albums in it
    LN

  • Iviews accessing between EP 7.0 and EP 6.0

    Hi Portal Experts,
    I have the following scenario
    I have iViews of different kinds like an URL iView,  a WebDynpro iView, and a BW report iViews attached to a role in EP 7.0. These iViews are present in PCD of EP 7.0.
    Now I wanted to access the same iViews in my other Portal which is EP 6.0? Is that Possible thorugh any URL re - direction technique in EP as we do in Java? Or through Portal services?
    I am not interested in do ing a content transport from EP 7.0 to EP 6.0?
    Has anybody encountered same scenario?
    Helping answers will be rewarded.
    Thanks,
    Guru

    Hi Guru,
    I believe you should be able to use URL iviews to get those iviews on Portal. You don't even have to redirect it to the other ser. All you need to do is to integrate the two Portal servers for SSO and then to give a URL. You can check the URL when you preview an iview and give the same URL.
    But I see a performance issue here. When you are doing this, the request from browser is first hitting the EP7.0 server, which is then sending a request to the ITS of your backend system. Finally, the response is sent to your to EP6.0 server.
    Anyways, you will have to create that many iviews on EP7.0 may that be an URL iview or a transaction iview. Secondly, let's not forget that the data is basically coming from R3 system so it's ideal to get the data from R3 then from another portal which is again getting you the same data from R3 (as discussed above).
    Hope that helps.
    Regards,
    Sunil

  • Remote client accessing ejb - question

    This may be a very simplistic question, but here goes -
    scenario: I have a J2EE application running on a server Y with session beans/entity beans.
    I need a remote client on machine X to access EJB objects on Y.
    I have set the initial conext with INITIAL_CONTEXT_FACTORY, PROVIDER_URL etc...
    But, in order to narrow the reference of the object returned by lookup() method, I need to instantiate the Home object of my session (or entity) bean ...
    here's my problem: How do I instantiate EJBHomeInterface or EJBRemoteInterface, when they do not exist on the remote client machine?? (does this have something to do with the stub??)
    THANKS!

    This answer assumes you're using Weblogic, although most any other EJB container has a facility for this. Basically you need to distribute a client jar file with the client. This client jar is created during the EJB compile/deployment process and creates a jar separate from the normal jar file associated with your deployment. This jar file contains the class stubs you need to call for and use EJB's on a remote client.
    I hope this makes some sense.
    SeanB

  • ESS CATS IVIEW ACCESS

    Hello,
    We have an ESS role with the CATS Iview. We wants to deny the access to this iview for people that don't have a specific status. How we can restrict and disable the acess for the CATS iview wihout creating two roles ?
    Thanks a lot,
    Regards,

    Not sure about hiding but you can show specific error msg. in case the emp doesn't meet certain condition.
    Lets say you have link for timesheet. When employee clicks on it, if he meet certain condition he'll be shown timesheet entry page otherwise an appropriate error msg. This can be achieved using WDNavigation API. Create a new WD app. which has logic to determine whether timesheet iview has to be shown or not. Using WDNavigation API in the application, navigate the user to appropriate page. If he satisfies the condition, navigate to cats iview otherwise show error msg. The iview which you create from this custom WD app. should be inserted in place of existing timesheet iview in the ess role.
    cheers~
    avadh

  • Discussion iView Access Error

    Hello,
    I have been trying to preview discussion iView under com.sap.ip.collaboration. But, even after having super-admin access, the portal says "you do not have access permission" to preview the iView.
    I even tried creating a copy of the iView and previewing it. Even that is not helping out.
    I am currently working on EP 6.0 SP15.
    Srindhi

    Hi Patricio,
    I can very well use KM Discussions iView. But I need to create a room template of my own, for which I need to use the discussion page which has this Discussion iview.
    The problem here is, whenever i try to preview it, it says "You do not have access permission".
    Please help me on this!!
    Srinidhi

Maybe you are looking for