LSMW - Access to Specific Objects Permissions to specific users

Hi guys,
I want to know if it is possible to allow access to specific users that are in charge of the execution of a specific object of and LSMW.
Regards,
Eric

Hi guys,
One solution i got right now (but it isn't the ideal), is to debug the execution step of the LSMW in order to find the name of the program that iit's been call and the one that its call inthe step in wich the files are been specify. Then develop a "Z" program that calls both of them and give the user the access to this new transaction.
Any better sugestion?.
Regards,
Eric

Similar Messages

PCD Business Objects Permissions for Authenticated users

Hi All,
I am working on SRM7.0 Business package installed on Portal NW7.01.
I wanted to understand Which permissions should i provide to "Business Objects" PCD Folder for Authenticated users.
Should it be Administrator "None" and End User "ON"
Or Should it be Administrator "Read" and End User "ON"
Regards,
Ashish Shah

Hi Sandeep,
I was wondering what is the need of assigning permissions to "Everyone" Group and "Authenticated Users"
2. Group: Everyone(built in group)
Administrator:Read
Enduser:checked
3. Group:: Authenticated Users(built in group)
Administrator:Read
Enduser:checked.
If i am not using Anonymous users , should i only assign this permission?
Group:: Authenticated Users(built in group)
Administrator:Read
Enduser:checked.
Regards,
Ashish Shah

I have a requirement where I have to give the list of users who can access a specific computer. I am new with PS. Do you have a script to list users that can access a computer object of AD ?

I have a requirement where I have to give the list of users who can access a specific computer define in AD.
I am new with PS.
Do you have a script to list users that can access a computer object of AD ?
I have executed the following script but it does not give me the access rights of who can access the computer 'computername'
How can i have this information. please help
Import-Module activedirectory
$computer=get-adcomputer "computername" -properties ntSecurityDescriptor
$omputer.ntsecurityDescriptor.Access | select-object -expandproperty IdentityReference | sort-object -unique

I would say that, since the OP has so little info, there are no policies in use. It there were then this question would never be asked the way it is being asked.
I had a client call with a letter from their insurance company; an accountant with malpractice insurance. THey asked the same question inmuch the same way. "What computer can you users access?" The question should be more like
"Do you have a policy that restricts access to computers and do you audit for compliance?"
I have had other clients whose insurance asked the question in that way. It produces a better view of what should be happening and how to show compliance.
I recommend that companies being asked these questions by their legal departments or insurance companies should contract with a god computer security consultant to assist with answering these very tricky questions. Of course if it is just you boss's
curiosity then you may need to discuss his requirements with him in more depth.
¯\_(ツ)_/¯

How to remove blocks from buffer cache for a specific object

hi everybody,
is it possible to remove blocks which belogns to a specific object (a table for ex) from buffer cache.
as you know, there is
alter system flush buffer_cache;command but it does it's job for all buffer cache. if you ask me why i want this, for tuning reasons. I want to test some plsql codes when they run as if they are running for the first time (reading from disk).
ps: I use oracle 11g r2

Hi mustafa,
Your performance will not degrade if you run the query second time ( if i understood correctly, you worry about the performance if you execute the procedure second time). Executing/running the code/sql statements over and over again will have following two good benefits.
1) This will avoid hard parsing (Hard parsing is resource intensive operation and this generally increase the overall processing time.
2) This will avoid physical read IO (You gonna see the benefits if data blocks already cached and you dont have to spend time in reading blocks from disk. Reading from disk is much costlier and time consuming operation as compared to data in RAM)
Having that said sometime bad written queries will acquire more blocks then required and consume most part of buffer cache, and this can some times effect the other important blocks and force to flush out from buffer cache.
Oracle have built some intelligence for large full table scan operations for e.g will doing full table scan(I hope you already know what is fts) oracle will put its blocks at end of LRU chain. So these will be the buffers will would flush out first then any other.
From oracle documentation:
"When the user process is performing a full table scan, it reads the blocks of the table into buffers and puts them on the LRU end (instead of the MRU end) of the LRU list. This is because a fully scanned table usually is needed only briefly, so the blocks should be moved out quickly to leave more frequently used blocks in the cache.
You can control this default behavior of blocks involved in table scans on a table-by-table basis. To specify that blocks of the table are to be placed at the MRU end of the list during a full table scan, use the CACHE clause when creating or altering a table or cluster. You can specify this behavior for small lookup tables or large static historical tables to avoid I/O on subsequent accesses of the table."
Regards
Edited by: 909592 on Feb 6, 2012 4:37 PM

Audit specific objects for specific users

audit statement has the option to choose audit by user list
audit object has the option to choose audited objects
now i need to audit specific objects, i.e. user A's tables accessed by a specific group of users, let's say ALL users other than A
Is it a simple way to achieve this goal? (audit A's tables that accessed by all database users other than A)
Thanks!

sorry, the link works now. However, there is nothing new in 10G, same as I read from 9i document. See my highlight below in the quoted document text, my requirements is the combination of them ( specific users and specific objects). Thanks anyway.
<quote
Table 8-1 Auditing Types and Descriptions
Type of Auditing (link to discussion)      Meaning/Description
Statement Auditing      Enables you to audit SQL statements by type of statement, not by the specific schema objects on which they operate. Typically broad, statement auditing audits the use of several types of related actions for each option. For example, AUDIT TABLE tracks several DDL statements regardless of the table on which they are issued. You can also set statement auditing to audit selected users or every user in the database.
Privilege Auditing
     Enables you to audit the use of powerful system privileges that enable corresponding actions, such as AUDIT CREATE TABLE. Privilege auditing is more focused than statement auditing, which audits only a particular type of action. You can set privilege auditing to audit a selected user or every user in the database.
Schema Object Auditing
     Enables you to audit specific statements on a particular schema object, such as AUDIT SELECT ON employees. Schema object auditing is very focused, auditing only a single specified type of statement (such as SELECT) on a specified schema object. Schema object auditing always applies to all users of the database.
Fine-Grained Auditing
     Enables you to audit at the most granular level, data access and actions based on content, using any Boolean measure, such as value > 1,000,000. Enables auditing based on access to or changes in a column.
/quote>

How to get customer-specific objects into PCUI ?

Hello,
we want to get an Z-table as tab page of the business partner-application into PCUI. It should 'only' be possible to create new entries - today there is no need to modify or delete records.
Does there exist something like a "cookbook" on this task or has anyone of you experience how to get customer-specific objects (without using EEWB) into PCUI ?
Thanks in advance
Martin

Option 1:
If you are good in ABAP.
You can add new tab in which create a new Field group. Assign it to a model access clas in which handle the table update.You can get the details in PCUI cookbook itsel.
Option 2:
If you are good at java
Develop an FM to update the table.
Call the FM from webdynpro
Include this webdynpro as HTML viewer in PCUI.
Regards,
Abdul Raheem S

View ADSI properties for an AD object from a specific DC

Hello all,
What I'm wanting to do is to view the ADSI properties of an active directory object by querying a SPECIFIC DC. My plan is to use this information to check whether adprep has replicated to all DC's in the domain.
For example, the following command gets me the ADSI information for an AD object from some DC for Domain1:
[adsi]'LDAP://CN=ActiveDirectoryUpdate,CN=ForestUpdates,CN=Configuration,DC=Domain1,DC=net'
However, I would like to get this information from a SPECIFIC DC, not just from any DC. I have also been tampering around with get-adrootdse, but am unable to determine how to drill down under a specific "naming context" object (like to return
the "cn=activedirectoryupdate,cn=forestupdates" object under the configuration naming context object like the command above):
Foreach($namingcontext in (Get-ADRootDSE -server DC1.Domain1.net).namingcontexts){
get-adobject $namingcontext -Properties *
Anyone have any ideas how I can use the [ADSI] adapter or get-adrootdse to return specific AD objects from a specific domain controller?

Nevermind, I believe I found my answer:
http://blogs.technet.com/b/heyscriptingguy/archive/2005/05/17/how-can-i-access-active-directory-on-a-specific-domain-controller.aspx

How to cast an Object into a specific type (Integer/String) at runtime

Problem:
How to cast an Object into a specific type (Integer/String) at runtime, where type is not known at compile time.
Example:
public class TestCode {
     public static Object func1()
Integer i = new Integer(10); //or String str = new String("abc");
Object temp= i; //or Object temp= str;
return temp;
     public static void func2(Integer param1)
          //Performing some stuff
     public static void main(String args[])
     Object obj = func1();
//cast obj into Integer at run time
     func2(Integer);
Description:
In example, func1() will be called first which will return an object. Returned object refer to an Integer object or an String object. Now at run time, I want to cast this object to the class its referring to (Integer or String).
For e.g., if returned object is referring to Integer then cast that object into Integer and call func2() by passing Integer object.

GDS123 wrote:
Problem:
How to cast an Object into a specific type (Integer/String) at runtime, where type is not known at compile time.
There is only one way to have an object of an unknown type at compile time. That is to create the object's class at runtime using a classloader. Typically a URLClassloader.
Look into
Class.ForName(String)

How do I count objects of a specific type in a Vector? Java 1.3 source.

How do I count the objects of a specific type in a Vector?

isInstance may allow too much for your needs as it allows any object which can be typecast to 'type' while you seem to want to limit to objects which are exactly of the type 'type'. In such a case you could do this:
for (Enumeration e = attachmentTypes.elements(); e.hasMoreElements();)
Object check = e.nextElement();
if (check.getClass().equals(type)) {
counter++;
}Javadoc of the isInstance() method:
http://docs.oracle.com/javase/1.4.2/docs/api/java/lang/Class.html#isInstance%28java.lang.Object%29
(I link to the old Javadoc given you mentioned Java 1.3 compatible source)

Retrieve a set of specific objects

I am looking for a way in JDO to retrieve and update sets of specific
objects using a single SQL statement of the form:
SELECT * FROM <ManagedEntity> WHERE <pk> IN (<pk1,pk2,...>)
This is a relatively frequent and important use case for the types of
applications that deal with graphs, such as for modeling telecommunications
networks. I will describe below the specific behavior as taken from JSR 142:
OSS Inventory API, specifically the Resource Inventory EJB Session Facade.
(See http://jcp.org/jsr/detail/142.jsp and
http://jcp.org/jsr/detail/144.jsp, which defines the API design patterns
followed by http://java.sun.com/products/oss/ .)
(1) ResourceInventoryEntityValue[]
getResourceInventoryEntitiesByKeys(ResourceInventoryEntityKey[] keys,
String[] attrNames)
This is one occurrence of the operation pattern get<ManagedEntities>ByKeys.
When the ResourceInventoryEntityValue implementation is a JDO
PersistenceCapable class, and the ResourceInventoryEntityKey holds the
primary key of each object of interest, the result set should be selected
with a single SQL statement.
(2) void removeResourceInventoryEntitiesByKeys (ResourceInventoryEntityKey[]
keys)
This is one occurrence of the operation pattern
remove<ManagedEntities>ByKeys. The identified instances should be deleted
with a single SQL statement.
The problem is I do not see any obvious JDOQL syntax or operations on the
JDO interfaces that would allow me to accomplish the above. On the positive
side, Kodo is handling the other patterns extremely elegantly (pretty Java
in WebLogic Server) and efficiently (pretty SQL). It is only this one ByKeys
pattern that I can't see a way of doing nicely in JDO.
Any help would be appreciated.
Ben

Thanks Abe. Your response was most helpful.
Ben
"Abe White" <[email protected]> wrote in message
news:[email protected]...
Actually, JDOQL does offer a way of doing what you want assuming you'reusing
application identity and you use only a single primary key field:
q.declareParameters ("Collection pks");
q.setFilter ("pks.contains (myPKField)");
Collection results = (Collection) filter.execute (pkCollection);
Now the bad news: Collection parameters were added to the spec between the
proposed final draft and the 1.0 release, and the were not noted in the
spec ChangeLog. Unfortunately, that means that we here at Solarmetricdidn't
notice the addition until someone pointed it out to us recently, and we
haven't implemented it yet. Or actually, we've implemented it internally
as part of a major query rework, but it won't be available publicly for
awhile. You do, however, have other options:
You could do it with "||" clauses:
StringBuffer filter = new StringBuffer ();
for (Iterator itr = pks.iterator (); itr.hasNext ();)
filter.append (pkFieldName).append (" == ").append (itr.next ());
if (itr.hasNext ())
filter.append (" || ");
q.setFilter (filter.toString ());
Collection results = (Collection) q.execute ();
You can also use our filter extensions (assuming you have the enterprise
edition or have purchased the filter extensions module). You could usethe
lit:sqlEmbed extension to embed whatever custom SQL you wanted:
q.setFilter ("lit:sqlEmbed (\"IDX IN (...)\")");
Collection results = (Collection) q.execute ();
Good luck.
I am looking for a way in JDO to retrieve and update sets of specific
objects using a single SQL statement of the form:
SELECT * FROM <ManagedEntity> WHERE <pk> IN (<pk1,pk2,...>)
This is a relatively frequent and important use case for the types of
applications that deal with graphs, such as for modeling
telecommunications
networks. I will describe below the specific behavior as taken from JSR142:
OSS Inventory API, specifically the Resource Inventory EJB SessionFacade.
(See http://jcp.org/jsr/detail/142.jsp and
http://jcp.org/jsr/detail/144.jsp, which defines the API design patterns
followed by http://java.sun.com/products/oss/ .)
(1) ResourceInventoryEntityValue[]
getResourceInventoryEntitiesByKeys(ResourceInventoryEntityKey[] keys,
String[] attrNames)
This is one occurrence of the operation patternget<ManagedEntities>ByKeys.
When the ResourceInventoryEntityValue implementation is a JDO
PersistenceCapable class, and the ResourceInventoryEntityKey holds the
primary key of each object of interest, the result set should beselected
with a single SQL statement.
(2) void removeResourceInventoryEntitiesByKeys(ResourceInventoryEntityKey[]
keys)
This is one occurrence of the operation pattern
remove<ManagedEntities>ByKeys. The identified instances should bedeleted
with a single SQL statement.
The problem is I do not see any obvious JDOQL syntax or operations onthe
JDO interfaces that would allow me to accomplish the above. On thepositive
side, Kodo is handling the other patterns extremely elegantly (prettyJava
in WebLogic Server) and efficiently (pretty SQL). It is only this oneByKeys
pattern that I can't see a way of doing nicely in JDO.
Any help would be appreciated.
Ben

BW 3.5 - How can I select TADIR objects in a specific date range?

Hi everybody,
I have the necessity to obtain a list of BW objects in a specific date range. I have observed that using TADIR table it is impossible because a timestamp is not present. I have also the necessity to group the BW objects using the object type of the TADIR table (e.g. PROG for Program).
Any idea?
Many thanks in advance for your kind support.
Regards,
Giovanni

Hi Giovanni
I would suggest you try put table TADIR in SE11 and generating a "Where-Used List (CtrlShiftF5)" Also you should try double click on data element SOBJ_NAME in the database view of TADIR and generate a Where-Used List on that field, then you can see the relationships of the table/field.
I hope this works for you
Good Luck
Ben
Please Assign Points if Useful

Using 'Preview Layouts' on specific objects

Hi everyone,
I would want to know if it is possible to import CR layouts in SBO, and use it with the menu "Preview Layouts" on personalized objects.
When I try to import a CR layout with the Report And Layout Manager of SBO, I choose my RPT file, check the Layout radio button, and open the List Of Documents. But in this list, there are no items which correspond to my specific objects, so I can't link my report and my objects, and when I open a record of my object, the menu "File -> Preview Layouts" is disabled.
So my question is : is it possible to create new Document Types to be able to link my layout and my objects? Or any other solution which can allow me to use "Preview Layouts" on my specific objects?
Thanks.

Hello Charly,
There is a way to add layout on User object. Using a piece of code, you can add your report in the table RDOC putting it in a BLOB field
SAPbobsCOM.ReportLayoutsService rptService = (SAPbobsCOM.ReportLayoutsService)oCompany.GetCompanyService().GetBusinessService(SAPbobsCOM.ServiceTypes.ReportLayoutsService);
SAPbobsCOM.ReportLayout newReport = (SAPbobsCOM.ReportLayout)rptService.GetDataInterface(SAPbobsCOM.ReportLayoutsServiceDataInterfaces.rlsdiReportLayout);
newReport.Author = oCompany.UserName;
newReport.Category = SAPbobsCOM.ReportLayoutCategoryEnum.rlcCrystal;
newReport.Name = "APRS";
newReport.TypeCode = "TypeCode";
SAPbobsCOM.ReportLayoutParams newReportParam = rptService.AddReportLayout(newReport);
newType = rptTypeService.GetReportType(newTypeParam);
newType.DefaultReportLayout = newReportParam.LayoutCode;
rptTypeService.UpdateReportType(newType);
SAPbobsCOM.BlobParams oBlobParams = (SAPbobsCOM.BlobParams)oCompany.GetCompanyService().GetDataInterface(SAPbobsCOM.CompanyServiceDataInterfaces.csdiBlobParams);
oBlobParams.Table = "RDOC";
oBlobParams.Field = "Template";
SAPbobsCOM.BlobTableKeySegment oKeySegment = oBlobParams.BlobTableKeySegments.Add();
oKeySegment.Name = "DocCode";
oKeySegment.Value = newReportParam.LayoutCode;
FileStream oFile = new FileStream("D:\\DEV\\Layouts\\Demo.rpt", System.IO.FileMode.Open);
int fileSize = (int)oFile.Length;
byte[] buf = new byte[fileSize];
oFile.Read(buf, 0, fileSize);
oFile.Dispose();
SAPbobsCOM.Blob oBlob = (SAPbobsCOM.Blob)oCompany.GetCompanyService().GetDataInterface(SAPbobsCOM.CompanyServiceDataInterfaces.csdiBlob);
oBlob.Content = Convert.ToBase64String(buf, 0, fileSize);
oCompany.GetCompanyService().SetBlob(oBlobParams, oBlob);
Then you have to associate your form to the reportType using this line of code in your form's constructor:
oForm.reportType = "ReportType"
Hoping that can help you
Best regards

Access to Oracle Database by a specific user from a client system.

Hi All,
I need to restrict a particular client system to access the database only by a specific user credentials. I mean system A(hostname) can only connect the database PQR only and only by user U123. Any help is sincerely appreciated.
Regards
Swapan

Hi,
I solved it by a trigger at logon on V$SESSION which validates MACHINE like [HOSTNAME] and username not like [the_user_I_would_allow].
It works now.
Thanks for your reply.
Regards
Swapan

Navto a page to a specific object status

hello
I want a link to a different page (different stack) in a specific object state, is this possible?
The client wants all pictures in a separate image slideshow. For example, when i click on a small image (no.1), i want to jump to a different stack with that image slideshow, and the correct object state is shown (no.1)
If i click on an other small picture (no.2) i jump to the same object state, and the object state no. 2 is shown.
i cant find any solutions for this - not possible?
thank you very much for any help.
daniel

I don’t work for Adobe and I have no inside knowledge for this.
If you’d like to get that point across, here’s the place to do it: https://www.adobe.com/cfusion/mmform/index.cfm?name=wishform
If you go that route, make sure include not only details on how you want this work but why it would beneficial to you and other DPS users.
Bob

Error generating client-specific objects

Dear all,
while generating environment in maintain operating concern i am getting following error
Message no. KE007
Diagnosis
     The system automatically adjusted operating concern PAPL, or the
     environment of operating concern PAPL was regenerated. An error occurred
     while the system was generating client-specific objects in client 600.
System Response
     Operating concern PAPL cannot be used in client 600.
Procedure
     If this message is contained in the generation log, see the messages
     that occurred before it for details about the error.
     If this message appeared during the automatic adjustment, try to
     generate the environment using the Customizing transaction KEA0.
Activate data structures, generate environment
so i could not generate the environment in development server
kindly help me ..
Thanks and regards
vijay

Dear paul,
Thanks for you reply
Actually the problem is when op.concern was generated in dev.server it was transported to test and production server,but while transporting some request from development my client got dump in development server and so operating concern was changed to transport the requests.Also in old operating concern some characteristics and value fields were added and deleted by user .Now when trying to activate environment (client specific part) it gives above error message.
also we have got reply from sap which is as under:
1)Thanks for the log in details. I was logged in to your system and checked the issue. I found few inconsistencies in the system. Please let me know if you have deleted any characteristic or value fields or if you have done any COPA transports recently.
2)Thanks for the reply, we have changed and deleted characteristicsand value fields. Since we have changed our operating concern PAPL TO PAP1 and then assigned to controlling area PAPL which is not transported
to production server then again we have changed as usual PAPL so we are facing this activation problem .please guide us to solve this problem as early as possible
3)) I am not sure if I can help you resolving the issue as this is purely an inconsistency created by user action. These kinds of issues can be solved only by our remote consulting colleagues. However if you want to restore the old settings you can transport the operating concern through KE3I from your quality or production where the system is working fine.
In test and production my operating concern is working fine ,is it possible to transport request from test or production to development ?
also kindly suggest any other solutions
Thanks and Regards
vijay

LSMW - Access to Specific Objects Permissions to specific users

Similar Messages

Maybe you are looking for