Limit user Access to Return Data in Report

Have reporst that I need to limit what is returned. The person running the report should only see the data that they own. Is this possible. Can I set an attribute based on the person who has signed on to Discoverer and use that in the select to limit the data returned.
Thanks,
Dan

Yes, it's possible!
You can use the VPD (Virtuall Private Database) feature of the database.
Check out the following stuff:
http://www.oracle.com/oramag/oracle/99-Jul/index.html?49sec.html
http://download-west.oracle.com/docs/cd/B10501_01/appdev.920/a96590/adgsec02.htm
http://www.oracle-base.com/Articles/8i/VirtualPrivateDatabases(VPD).asp

Similar Messages

To limit the access of PM data based on the Company Code, Plant & Location

Hi Experts,
         I have a requirement . Customer wants to Restrict the access of PM data for a user based on the company code,
Plant & Location.
Say user : XYZ
Plant :1000
CCODE:1000
Location:0001
So you can see data of only this Organisation structure .No other data will be visible to him.
I know we can do it using authorisation object
Can you Suggest me how can we do this.
Regards,
Amar

Hi,
You can achieve this by maitaing these values in user authrisations. If you want more info about the objects check SU22 t code under PM.
For Plant              I_IWERK
For Location       I_ILOA
Regards,
N.Nagaraju

END USER accessing only the Output of report

Hi,
I'm creating reports based on queries, right now we are planning to give view access to end users, but my doubt if end user hits view on the report the query runs everytime and produces the report, what I want to achieve is that the we schedule the report before night and end user will only view the PDF output the query produces by the scheduling, How can I achieve this?

So do we need to give the user access to schedule button as well? and Do you mean run report online option?
Any update please?
Edited by: user8937215 on Aug 5, 2010 7:55 AM
E

Oracle App Server limit user access

Hi guys!
Is there such function in OAS where I can limit a users access to a certain page?
I have registered my users in OID and I want to set limits to specific pages (limiting which user can access which page or not)...
Appreciate any help..

They are different. Oracle Application Server is Oracle's application server prior to the BEA acquisition. WebLogic Server is a completely separate product and will be the strategic application server going forward at Oracle, although Oracle Application Server will still be maintained and supported.

Using SSDs to limit user access to hosts

I have a question about limiting user access to a host using SSDs. Is there any reason I should not do the following?:
In the profile for the ldap client, myhost:
serviceSearchDescriptor: passwd: ou=People,dc=example,dc=com?sub(|(host=myhost)(host=production)(host=ALL))
Then in the users account:
dn: uid=juser, ou=People,dc=example,dc=com
host: myhost <---------------------------------------------------------------
loginShell: /bin/ksh
gecos: Joe User
cn: juser
uidNumber: 5555
gidNumber: 5555
homeDirectory: /export/home/juser
objectClass: posixAccount
objectClass: shadowAccount
objectClass: account
objectClass: top
uid: juser
etc
I can add a single host, an environment (production), or all hosts for admins by editing user account. It seems to work fine in testing. I just don't want to get blind-sided by some glitch later. I am using Solaris 8,9, and 10 native clients and SunONE 5.2 DS with TLS.

Thanks Gary. I sent you an email before I posted here. I wasn't sure if this is where you "hang out". :)
I was thinking after posting here that I might want to do it with shadow instead of passwd so that permissions of files still showed the owner instead of id even if the owner were not allow to login. A somewhat rare situation, but it happens.

Multiple users accessing the same data in a global temp table

I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
The GTT isn't going to work unless we get new sessions. How do we do this?
Thanks!

DGS wrote:
I have a global temp table (GTT) defined with 'on commit preserve rows'. This table is accessed via a web page using ASP.NET. The application was designed so that every one that accessed the web page could only see their data in the GTT.
We have just realized that the GTT doesn't appear to be empty as new web users use the application. I believe it has something to do with how ASP is connecting to the database. I only see one entry in the V$SESSION view even when multiple users are using the web page. I believe this single V$SESSION entry is causing only one GTT to be available at a time. Each user is inserting into / selecting out of the same GTT and their results are wrong.
I'm the back end Oracle developer at this place and I'm having difficulty translating this issue to the front end ASP team. When this web page is accessed, I need it to start a new session, not reuse an existing session. I want to keep the same connection, but just start a new session... Now I'm losing it.. Like I said, I'm the back end guy and all this web/connection/pooling front end stuff is magic to me.
The GTT isn't going to work unless we get new sessions. How do we do this?
Thanks!You may want to try changing your GTT to 'ON COMMIT DELETE ROWS' and have the .Net app use a transaction object.
We had a similar problem and I found help in the following thread:
Re: Global temp table problem w/ODP?
All the best.

User access to "planning " data forms

hi
iam newbie to planning
i have two different doubts in planning
i have created a application in eas called "blue " in eas console and loaded the data and retrieved in excel , iam able to see the data . mean while i have created planning application called "gt" and its created sucessfully, i can able to "gt" see in the eas console . i wanted to get the data from "blue" in eas into planning "gt" dataforms i created a user called "blue" in shared services console , i decided to give the privilege to "blue" in eas , i clicked on the default application to blue application but was nt there ,but it showing separtely , i clicked on that and assigned roles like "administrator" and cube creator and planner
my doubt is that
1: when i logon "gt " planning application and created dataform folder i want to access the essbase application "blue" data, but there is no user available in that dataform
iam confused whether i should give privileges to default application or "gt " i find both of them in shared services console
clearly my doubt how to link eas "blue" with planning "gt " and datas form blue should be retrived in gt dataform
iam using epm11
sreekumar.H
OLAP-DEVELOPER

Hi,
I am not totally sure what you are trying to achieve but if you create an essbase application in EAS it is a totally seperate entity from a planning application, so you can't just access it directly.
The are many options on what to do but it needs to be clearer why you have to access the data from a seperate database.
If there is a commonality in the dimensions then it would have been possible to create an extra plan type when you created the planning application, this creates an extra database as part of the planning application.
The other options are to use XREFs to access data from one to cube to another.
Another option would to use partitions.
You could extract the data from one cube using an export or DATAEXPORT command and then load it into your planning database or use ODI to extract from one database and load it into the other.
Cheers
John
http://john-goodwin.blogspot.com/

How to avoid multiple users accessing same test data via parameterization in LR??

i am using LR11.5, i have the following test data&colon;
TestData
1
2
3
4
5
when i run this script from Controller with 3 users LR picks it as user1->1, user2->1, user3->1
How do i achieve this case: user1->1, user2->2, user3->3 ??
Any help would be great.

I have a related question. i created 2 websites/domains then i went to users and created 2 seperate "network" users then i went to ftp and selected each website and added only user A to site A and user B to site B. what's weird is that when i try to ftp using either of the users it seems to land on the same site. i looked at shared security for the folders and it only shows user a on site a folder and user b on site b folders. am i doing somehitng wrong or is this how it works in mountain lion server? i just want to give the domain owner ftp access so they can manage their files and only thier files. i also had to turn on open directory so that it would not create a local user but a network user. do i need to turn that off and just deal with having a bunch of local users as ftp user? i want to host multiple websites on the server and NO users remote on to server besides ftp.
edit 1: i only have 1 IP running on the server which i don't think it has any affect on this but thought i mention it :-)
edit 2: i just noticed one more thing that may help. i used filezilla to remote in using both users, one at a time. it seems to allow both users in but then it shows same directories. i then created a file using the one that was not supposed to have acces and it never sows up. but if i remote desktop to server i can see the new file in the correct folder. so it may have something to d o with the directory listing.

Please help! Multiple users accessing the same data sets

Hi all,
Can anyone provide a bit of insight in to a question I have?
We have two users that require to see the same set of data in the BPC Excel interface at the same time. The information is employees and date.
User 1 would like to see All Employee SignedData for 1 month, and User 2 would like to see just a slice of the Employees for 1 month.
If both of the Users are logged in at the same time, what will happen in terms of SAP 'locking' the data set? I am aware of Data Access Profiles to restrict their access to particular Master Data but there will be the requirement for users to see (maybe just in read-only), data that is shared between both Users.
Will it throw up an error or can I make it so that users have 'read only' access?
Any advice would be very much appreciated!
Nick

Hi Nick,
No issue with that at all.
They can even both have write access. If they try to update the exact same record at the same time BPC will just keep writing Delta records.
User A enters 10
User B enters 20
User A refreshes and will get 20
User B refreshes and also gets 20

Defining Authorizations for User to restrict the data in report.

Hi Gurus,
I have no idea on authorization concept in BI. Please give me anyone steps to creating authorization objects, roles and profiles to restrict the data for users.
Ex.
i have functinal location info object checked as authorization relavent with below data.
FL001
FL002
FL003
FL004
FL005
FL006
FL007
FL008
FL009
We have users like below.
User1
User2
User3
Now, if User1 is analysing a report he can see only FL001, FL005, FL009 only, remaining have to be omited.
If User2 is analysing that report he can see only FL002, FL003, FL009. And like wise.
So, Please help me providing the completed steps. I have done somting but failed.
Thanks in advance
Peter.

Hello Peter,
Please go through the following links
Authorization :
http://help.sap.com/saphelp_nw70/helpdata/en/59/fd8b41b5b3b45fe10000000a1550b0/frameset.htm
SAP Authorization Concept :
http://help.sap.com/saphelp_nw70/helpdata/en/52/671285439b11d1896f0000e8322d00/frameset.htm
Thanks.
With regrads,
Anand Kumar

Limit users access to Spotlight

We have an IBook lab at our school with users accounts for all grades, K-8. I just noticed that using Find in any of our otherwise managed user accounts allows that account to access files in all shared folders. Is there any way of turning this off?

at my school they've just disabled the find feeature altogether which can be done through spotlight prefs, if you just want to stop spotlight from searching certain places you can do that too.
really though I didn't know that this was a problem. oh and a warning, it's extremely easy to disable this if you don't have Open Firmware enabled.

Limit user access to settings and problematic options..

I don't want the user to have access to settings, and other options
they
should not be playing with.
Is there any way to do that with ZfH5 ?

fabian,
It appears that in the past few days you have not received a response
to your posting. That concerns us, and has triggered this automated
reply.
Has your problem been resolved? If not, you might try one of the
following options:
- Do a search of our knowledgebase at
http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com in both the "free product support" and "paid
product support" drop down boxes.
- You could also try posting your message again. Make sure it is
posted in the correct news group. (http://support.novell.com/forums)
If this is a reply to a duplicate posting, please ignore and accept
our apologies and rest assured we will issue a stern reprimand to our
posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

How to pass value object to BPM process and access process returned data

Hi,
I am new to Oracle BPM studio and gone through the tutorial. I did not find anywhere how to orchestrate the java components or ejb components or web services in BPM process. if any one provide sample business process orchestered with java component or ejb component or webservice, it will be great. Or atleast provide steps to do that.
Thanks and Regards
Mahesh Babu

There is a tutorial available online.. But you can always catalogue web services and JARs files into the ALBPM..
Just create a new module inside the Catalogue and then right click on it to see Catalogue Component and then select what component u want to add to ALBPM and then follows the steps of adding that component from your local machine and introspecting it..
If it is successful, then all the web-service methods or the JAR file methods would be catalogued into ALBPM..
You can put the WSDL address in the space provided for Web Services.. If password is required that too can be put..
Another way is to create a component in External Resources and then Cataloguing it...

Can Business Objects Web Intelligency reports access NearLine Storage data Via BW Bex Query

Hi Gurus,
I am aware BEX queries can access NearLine Storage data for reporting but can Business Objects Web Intelligency reports access NearLine Storage data Via BICS connection ( Bex Query as a Source).
Thanks,
Shak.

I would recommend to let your SAP Basis guys do a security trace on the SAP BW side and see if some authorization check for the user fails when trying to fetch data over the universe.
Regards,
Stratos

Authorisation: controlling access to objects/data

Hi all,
I am looking for some pointers to design patterns that deal with authorisation.
The issue at hand is the following: for an enterprise application we need to implement a mechanism that manages user-access to certain data. Example: if a user asks for sales-figures, only the data that he/she is allowed to see (e.g. based on office) should be included in the result.
The question that we asks ourselves is: do we set up a separate authorisation manager (sessionbean) that includes all the business logic to restrict user-access, or do we make the specific objects (entity beans) responsible for this.
The latter solution would take the form of: entitybean Office, getSalesFigures(Year, User) method; based on the User object access is granted or not. The method will return 0 if the user has no access.
Feedback is appreciated.
Regards,
Jaap

Hi,
The Composite View pattern http://java.sun.com/blueprints/corej2eepatterns/Patterns/CompositeView.html
has some discussion about applying security based on user roles.
Also the Intercepting Filter pattern
http://java.sun.com/blueprints/corej2eepatterns/Patterns/InterceptingFilter.html
can be used to apply security checks. The Java petstore applies this pattern for self-registration of users, and this is explained in more detail at
http://java.sun.com/blueprints/patterns/InterceptingFilter.html which includes an explantion of the pattern being applied, and also a link the details of its implementation at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/sample-app/sample-app1.3.1a3.html#wp1065478
These should give you a good starting point for designing role based security. The petstore used a seperate module for security because it was allowing self-registration of users. If your application does not allow users to create and manage their own user accounts(like yahoo mail etc) and instead all accounts are set up administratively(someone in the company sets up each user account), then the J2EE platform may provide the capabilities you require and you may not need to write a separate module.
The J2EE programming model also has a lot of support for role based security. So you may be able to leverage the J2EE environment to do much of the work for you. The J2EE security model is described in the security chapter of the BluePrints book at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html
hope that helps,
Sean

Limit user Access to Return Data in Report

Similar Messages

Maybe you are looking for