Logon as different user from within report

Hi,
I would like to logon as a different user within the report. Reason is, that I don't have the opportunity to change how the report is called. Due to some security issues, I would like to do something like "CONNECT scott/tiger@myoracle" from within the report.
Any ideas?
Thanks!

Hi Chris,
Based on my research, on the windows 8.1,we could add "Run as different user" on Start in Group Policy.
Please perform the following steps:
1.Press Win+R, and type"gpedit.msc",then press Enter.
2.In the left pane, click/tap on to expand User Configuration, Administrative Templates, and open Start Menu and Taskbar.
3.In the right pane of Start Menu and Taskbar, double click/tap on Show "Run as different user" command on Start.
4.Select Enabled, click/tap on OK.
5.Reboot the computer.
Hope these could be helpful.
Regards,
Kelvin_Hsu
TechNet Community Support

Similar Messages

Windows 8.1 Run as different user from search function

Hi There,
After about a year of Windows 8 I was actually quite enjoying the ability to type a program name in start menu and then use right click to run as a different user. which is achieved via changing local security policy (i.e. running rsat tools
as a domain admin account etc). However, Now that Microsoft have decided that a search bar should appear when you start typing from the start menu, although this now displays the applications in the sidebar you can no longer right click and run as different
user. This means that for me windows 8.1 is now less user friendly than its older brother. Has this function been implemented and am I just missing something?
Thanks,
Chris

Hi Chris,
Based on my research, on the windows 8.1,we could add "Run as different user" on Start in Group Policy.
Please perform the following steps:
1.Press Win+R, and type"gpedit.msc",then press Enter.
2.In the left pane, click/tap on to expand User Configuration, Administrative Templates, and open Start Menu and Taskbar.
3.In the right pane of Start Menu and Taskbar, double click/tap on Show "Run as different user" command on Start.
4.Select Enabled, click/tap on OK.
5.Reboot the computer.
Hope these could be helpful.
Regards,
Kelvin_Hsu
TechNet Community Support

Collection based permissions to different users in SCCM Reporting

Hi,
I have 7 remote locations, and hence i have created 7 different collections, and for each of them i have 7 different admin ID's.
I require that, each location should able to view reports but in the prompt section for selecting collection, they should be able to view only those collections for which they have rights.
How can i achieve this?
Pls help

What is the issue in CM07, Can't it done using Instance rights ?
No, it can't be done in CM07 using instance right. Instance rights are not used in reporting at all, instance right are only used in the console.
This is easy enough to prove:
Create a test collection
Create a test user
Grant the test user access to only that test collection
Create the report will the following query:
Select
Name from
v_Collection
When you execute this report as the test user you will see all collections not just the one that you granted them permission too.
BTW this has been one of the biggest complaint of CM07/CM12 (it now work in CM12R2)
http://www.enhansoft.com/

How to logon with different user when use of SPNego

Hi
We have implemented SPNego as Windows Integrated Authentication - but how to logoff the portal to log on with another user?
Since the users are authenticated when logging on the network from their client pc - the user will be using the standard logon page. But when logging off the portal - the users are automatic redirected and logged back in to the portal.
I have created a HTML page which the users are redirected to by use of the ume.redirect.url. But how to logon to the portal again?
When entering the portal url - the users are once more directly logged in due to the SPNego configuration.
I need to develop a new logon page where the users are able to enter another uid and pw to enter the portal.
Regards
Kay-Arne

Hi Kay-Arne
The whole idea of Windows authentication is to remove the need for a user to enter a username and password. If you want a user to not get the automatic log on, then you'll need to access the portal with a URL that is in a different domain
Cheers

How to execute a transaction with a different user from the logged user?

Hello Experts!
I'm trying to find out a solution about this scenario: our users need to release a Purchase Order (ME28) and/or a Service Entry Sheet (ML85) in SAP from a WEB based application through TIBCO, but the requirement is to execute this operation with the same SAP User name of the user (with his authorization) and not with the TIBCO user that is logged to SAP.
Is there someone that could suggest me a real time solution and how to develop it? I really appreciate your contribute and I'm at your disposal for any further information.
Thank you very much!
Alessandro

Hi Rob!
Thank you for your help, but I can't apply this solution, because we need to execute the transaction with a specific user name and not a generic user, besides our user have different authorization, for example the user Mr. Rossi can release only his Purchase Order but not the PO of another user Mr. Bianchi. Moreover we need to see the PO released/modified from a specif user name. So this is our constraint.
Bye Ale.

Opening Word, Spreadsheets or PDF from within Report 6

We have documents stored into the database and want to retrieve them using Reports 6. I know that report 6 does not support these file formats within the preview. But is there another way to invoke or open other viewers like acrobat or word from Report 6 or any other way to make it work? Have seen it work in a application using reports 6 but don't have the source to see how the have done it. Please help me out here.
Thanks,
Amé

I'm browsing through the help but there is nothing. I think it needs to be done with some url statement which will invoke a servlet once the report is runned on the 9ias webserver. In report itselves i see no way to getting to show the BLOB content in the report. There must be people out there who have done this, it seems to me this must be a standard operation. So why has Oracle not documented this properly?
Amé

Error Calling Oracle Stored Procedure From Within Report

Hi,
I have a report that calls an oracle stored procedure which returns a ref cursor. The report is working ok in our development environment when called from our development website through .NET.
When the report is moved and accessed from our UAT website we get the following error :-
Failed to open a rowset. Details: ADO Error Code: 0x Source: Microsoft OLE DB Provider for Oracle Description: One or more errors occurred during processing of command. Failed to open a rowset. Details: ADO Error Code: 0x Source: Microsoft OLE DB Provider for Oracle Description: ORA-06550: line 1, column 7: PLS-00306: wrong number or types of arguments in call to 'RHS_GET_CAND_SECTION_REFS' ORA-06550: line 1, column 7: PL/SQL: Statement ignored Native Error: Failed to open a rowset. Error in File C:\WINDOWS\TEMP\temp_d663a952-bef6-4bf7-bf1a-5e288afdb612 {9B6DFB38-A436-4940-9D80-B4C23DFFFF19}.rpt: Failed to open a rowset.
If we open the report manually we are prompted to enter database connection info. If we enter the UAT connection details the report runs ok. If we save the report and try to open it from UAT website through .NET it now opens ok.
If we then move that same report back to the development environment and open from our development website it fails with the same error above.
Both connections are using Microsoft OLE DB drivers and the Oracle databases are the same version (10.2.0.1.0).
Is the connection information being stored in actual report and somehow being used when the report is opened through .NET?
Any help appreciated
Regards
Paul

Hi,
Please let me know if the issue occurs with the crystal reports designer, if you are facing issues with the .NET application then a need to create a post [here|SAP Crystal Reports, version for Visual Studio;.
Regards,
Hitesh

Why two different users from same login group not able to access the database object(stored procedure)?

I have SQL login group as "SC_NT\group_name" in server. There are multiple users using this login group to access database objects. User "A" can able to access db object(stored_procedure_1) from .net application. But when user "B"
tried to access same db object(stored_procedure_1), its showing like
Error: The EXECUTE permission was denied on the object 'stored_procedure_1', database 'test',schema 'dbo'.
Both the users are using windows authentication for access the objects. Could you suggest me the way to resolve this?
Venkat

Thanks for your response
Erland Sommarskog....
my stored procedure "stored_procedure_1"
does not has any granted permissions to execute. But still user A
able to execute the sp from UI, where user B not able to do it. If any permission provided for a particular object, then only it will display in the above query whatever u have given.
Any other possibilities??
Venkat G

BI Publisher Enterprise 11g prevent users from scheduling reports

Hi there
I have created an intranetreptuser that I would like only to have access to running reports in BI publisher and not scheduling them.
I also created an application policy that only has the one policy: runreportsonline and granted that policy to an intranetreptuserrole application role, which the intranetreptusers group is a member of.
however when I log in as an intranetrptuser that is a member of the intranetreptuser group, I can still schedule jobs.
I thought the application policy not having the scheduleReport grant would prevent this?
the only thing I can think of is that the BIConsumer application role has an authenticated role member which the intranetreptuser is hence a member of and so does inherit the policy scheduleReport?
Any thoughts?
thanks

Please contact your Oracle Sales Representative. They should have the official answer to your question
thanks
Jorge

How do I prevent transactions submitted by different users from getting intermingled?

We are using ColdFusion 8 with Oracle. I have a situation where 2 users are creating entirely separate records (there is no relationship between them) at the same time, and then they attempt to make changes to them. Once they have submitted their changes, their records re-display to them, but the users can now see parts of the other's record in their own. We are using cftransaction, but we are not using cflock in our code. It is my understanding that cflock should not be necessary in ColdFusion versions later than 4.5. Is that correct? If so, what can I do to remedy the above? Any help would be greatly appreciated.
Jane

What do you mean, precisely, by "the users can now see parts of the other's record"?
What's the code you're using to update the DB, and what code are you running to refetch the data & displaying it?
And is the data updated correctly in the DB, or is it being munged?
<cftransaction> and <cflock> are only superficially related in that they effect kinda the same thing, but the former acts on the database (or - more to the point - is an instruction to the database to handle operations transactionally), the latter on CF code. But the two are not connected in such a way that one specifically needs to use one or the other or both at the same time.
Adam

Hot to check SAP's OS user from within SAP?

Hi all,
How (if possible) can i check SAP's OS user on SAP level. Is there a transaction i can check?
Thanks!

Hi ,
Goto Al11 and in directory /home you shall find the Directorys created for all the os level user in that server.
Like sidadm can be found by -
/home /sidadm.
Thanks
Rishi Abrol

"create user" not same as creating user from Administration?

I have created users both from scripts and from the Administration pages and am getting different results.
I created a user from a command line script (e.g., "create user <name> identified by <password>"), and then later granted the user all the privileges from the Administration -> Database users -> Manage Users page.
I created a second user from within the Admin pages - this user has all the privileges and works fine.
The user I created from the command line and then granted all privileges (including "DBA" and all explicit privileges) is NOT working correctly.
Specifically:
1. "select ... from ALL_OBJECTS" returns no records. (ALL_TABLES, ALL_INDEXES, and everything else that I try seem to work ok, but in order to see "ALL_OBJECTS", I have to explicitly qualify it with "SYS.ALL_OBJECTS".)
2. When compiling PL/SQL procedures, etc. in that user schema, the built-in packages are not visible unless I explicitly GRANT EXECUTE on each package to the user (from a system account). At that point, they are accessible.
I tried searching the forums for similar topics and didn't find any. I apologize if this is a redundant post, but it is driving me crazy.
Can someone tell me how to make sure the script-created users get all the appropriate rights, and why when they are granted rights from the Admin screens, they still don't appear to have all the rights?
I would strongly prefer not to drop the user account and rebuild it, as there are already 2200 existing objects (tables, procedures, indexes, etc.) in the user account.

Please disregard this post. While investigating another issue, I discovered that the user account from which I had migrated 600+ tables had (for some unknown reason) empty copies of ALL_OBJECTS, USER_INDEXES, and USER_IND_COLUMNS in the user tablespace, so these got copied over with the other valid tables. Having "local" (and empty) copies was causing most of the issues.

How to setup a form that can be called from multiple reports

Hi,
I want to be able to call the same form from several different reports. How can I set up the returning pages on the form with a variable so, after the form completes its activity, it will return to the calling page?
Thank you
Yannisr

Hi yannisr
I keep track of my page history with a collection plus a few named application items.
On pageload, i push the current page number onto the top of the stack (unless it is already there due to a reload). So any page can return whence it came by branching to the item below the one on top. I have additional logic to recognize when you are traversing "backwards" so that I reduce the depth of the stack each time rather than adding to it indefinitely. For coding convenience, I keep the most recent 3 or 4 pages in named elements as well so that they can be directly addressed. So every page implemnts the Cancel function by redirecting to a page, where the pagenumber is in the application item &<MYAPP>_PAGELAST.
This is handy for many reasons, I find it more practical than breadcrumbs if you have pages that can be invoked from many places in your application. And this saves you from submitting the current page before executing the branch which saves time and is safer (no need to remember not to update the database!).
I normally add links to various master record display pages from within my reports, and the technique described above is perfect for that, because you can link from one page to another and another and then cancel, cancel, cancel your way back. I can post the source code if you think it might be useful.
I am curious to know how you are using your form from within reports. Does it act as some soft of common subroutine to the reports, or is it just a display page for data common to many reports?
Regards
CS

AD Group Membership with User From Domain Outside of Forest

Here's one to twist your brain around -
I have kerberos authentication using Active Directory working between a client's web browser and my web-app hosted in JBoss. I also have limited authorization working by checking group memberships using LDAP. This currently only works if all users are in the same domain. The ever-helpful adler_steven has detailed in another thread (http://forum.java.sun.com/thread.jspa?threadID=603815&tstart=15) how to do a group membership check for all Users/Groups in a single forest using the Global Context.
I need to go beyond the domain and even beyond the forest and try to authorize a user from a trusted domain by checking if the user is a member of a group in my domain. Authentication works fine using kerberos. It's the authorization by group check I am having trouble with. I believe there are two ways to approach this:
Approach #1
Access the MS-specific PAC in the kerberos token from the client to get the group SIDs. The structure of the PAC is nicely defined in this article: http://appliedcrypto.com/spnego/pac/ms_kerberos_pac.html. However, I have no idea how to access the decrypted token. I pass the encrypted token that I receive from the browser to myGssContext.acceptSecContext(...) to complete the authentication.
Question: Does anyone know how to get the decrypted kerberos ticket from there, specifically the authorization-data field?
Approach #2
Try to walk through the Active Directory structures in both domains using LDAP. In the domain group that I am checking, I can see a member attribute that references a foreignSecurityPrincipal object. The CN of this object happens to be the objectSID of the user I am looking for in the remote domain. Unfortunately, I have to check the remote domain server directly to verify that. The foreignSecurityPrincipal object itself does not contain any hint about what user it refers to aside from the SID (no originalDomainName attribute or something similar). It is feasible that I could walk the chain of references back to the remote domain AD server. That would require that my configuration include a list of remote domain servers to check (since I could have users from multiple trusted domains) and that my JBoss server have access to those servers.
Question: Does anyone know of some other LDAP-related way of finding information about a user from a remote, trusted domain without having to hit the server for that domain directly?
adTHANKSvance
Eric

You should be able to work back from the foreignSecurityPrincipal object :-) He says with a wry smile..
This post prompts me to think whether one day someone will draw the entity relationship diagram for AD. Oh well, I've been procrastinating for years, a few more won't hurt !
If it was a user from within the same forest, you should just be able to perform a search against a GC using the objectSID as the search filter. I've forgotten, but I don't think they will be represented as foreign security principals.
Have a look at the post titled JNDI, Active Directory and SID's (Security Identifiers) available at
http://forum.java.sun.com/thread.jspa?threadID=585031&tstart=150 that describes how to search for an object based on their SID.
Now if it is a user from another forest, with which you have a trust relationship, then we begin the navigation excercise.
You'll need obtain the user's SID (either from the cn or from the objectSID attributes) from the foreignSecurityPrincipal object. For example CN=S-1-5-21-3771862615-1804478405-1612909269-2143,CN=ForeignSecurityPrincipals,DC=antipodes,DC=com
objectSID=S-S-1-5-21-3771862615-1804478405-1612909269-2143Then obtain the domain RID, eg.S-1-5-21-3771862615-1804478405-1612909269Next you will have to recurse each of the crossRef objects in the Partitions container, in the configuration naming context (which you will find listed in the RootDSE). The crossref objects that represent trusted domains or forests will have values for their trustParent attributes. A sample query would be something like//specify the LDAP search filter
String searchFilter = "(&(objectClass=crossRef)(trustParent=*))";
//Specify the Base for the search
String searchBase = "CN=Partitions,CN=Configuration,DC=antipodes,DC=com";For each crossRef object, you can then use the dnsRoot attribute to determine the dns domain name of the forest/domain (if you want to later use dns to search for the dns name,ip address of the domain controllers in the trusted domains/forests), and then use the nCName attribute to determine the distinguished name of the trusted forest/domain.dnsRoot = contoso.com
ncName = dc=contoso,dc=comPerform another bind to the ncName for the trusted domain/forest and retrieve the objectSID attribute, which will be the domain's RID. You may want to cache this information as a lookup table to match domain RID's with domain distingusihed names and dns names.String ldapURL = "ldap://contoso.com:389";
Attributes attrs = ctx.getAttributes("dc=contoso,dc=com");
System.out.println("Domain SID: " + attrs.get("objectSID").get());Once you find out which domain matches the RID for the foreignSecurityPrincipal, you can then perform a search for the "real user" .And then finally you should have the user object that represents the foreign security principal !
Just one thing to note. Assume that CONTOSO and ANTIPODES are two separate forests. If you bind as CONTOSO\cdarwin against the CONTOSO domain, the tokenGroups attribute (which represents teh process token) will contain all of the group memberships of Charles Darwin in the CONTOSO domain/forest. It will not contain his memberships if any, of groups in the ANTIPODES forest. If Charles Darwin accesses a resource in ANTIPODES, then his process token used by the ANTIPODES resource will be updated with his group memberships of the ANTIPODES forest. Also you can have "orphaned foreignn security principal", where the original user object has been deleted !
BTW, If I was doing this purely on Windows, IIRC, you just use one API call DsCrackNames, to get the "real user", and then the appropriate ImpersonateUser calls to update the process token etc..
Good luck.

Testing Reports within Reports Builder

I am using Oracle Reports Builder 9i 9.0.2.0.3.
I have created a simple report using a JDBC query and J_JDBCPDS.
I have saved the file as a RDF and a JSP.
I want to test this from within Reports Builder.
I created a simple selection.HTM file that has an HREF to my files
I try
HREF="http://myserver:8888/reports/test/myreport.jsp?J_JDBCPDS='myserver:1433;DatabaseName=mydatabase">My Report</a></p>
and
HREF="http://myserver:8888/reports/test/myreport.rdf?J_JDBCPDS='myserver:1433;DatabaseName=mydatabase">My Report</a></p>
So ...
I start OC4J.
browse to
http://myserver:8888/reports/test/select.htm
click on my links
but both times I get PAGE NOT FOUND.
How can I test the Reports Builder reports with just having Reports Builder?
Thanks,
Jeanne Vural

Jeanne
The href url is wrong in your selection.html page. Firstly for paper layout report, you should go through Reports servlet, that mean your url would be something like:
http://webserver:port//servlet/rwservlet?server=servername+report=reportname.....
For web layout reports also, your url will need the server info and i do not see any server param passed in the url.
Thanks
Rohit

Logon as different user from within report

Similar Messages

Maybe you are looking for