LSO: How to restrict employee from accessing LSO Web based course.

Hi Gurus,
We have a requirement where we need to restrict few section of employees from accessing the LSO web nased courses. I know this can be done from Structural Authorization concept.
Can anyone tell me how to implement this structural authorization of section of employees. or any link mentioning step-by-step process will be great help.
Thanks,
Swet

Hello Satya,
The status comes from entries in Table T77BW. I don't recommend that you change the status as I don't know what issue may occur.
Relevant coding in RHPQ_INDIVIDUAL_PLAN_READ.
IF history_tab-endda < sy-datum.            "begin note 588403
pplans_tab-state_id = att_state_id.
pplans_tab-statetxt = att_statetxt.
ELSE.
SELECT SINGLE * FROM t77bw INTO wa_t77bw
           WHERE context = 'EVENT_BOOK'.
IF wa_t77bw-new_state IS INITIAL.
    pplans_tab-state_id = '02'.
ELSE.
    pplans_tab-state_id = wa_t77bw-new_state.
ENDIF.
Regards,
Manny

Similar Messages

How to restrict employees from accessing managers data using custom security profile

Hi,
I am using custom security profile for restricting the employees from accessing supervisors details(PG.SEGMENT2=4). I have written the custom code as below :
Responsibility :US Super HRMS Manager
ASSIGNMENT.PERSON_ID
IN
(SELECT PAF.PERSON_ID FROM PER_ALL_PEOPLE_F PAF,
PER_ALL_ASSIGNMENTS_F PF,
PAY_PEOPLE_GROUPS PG,
PER_PERSON_TYPE_USAGES_F PPU,
FND_USER FNU
WHERE PAF.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PAF.EFFECTIVE_START_DATE
AND PAF.EFFECTIVE_END_DATE
AND PF.PEOPLE_GROUP_ID=PG.PEOPLE_GROUP_ID
AND :EFFECTIVE_DATE BETWEEN PF.EFFECTIVE_START_DATE AND PF.EFFECTIVE_END_DATE
AND PPU.PERSON_ID=PAF.PERSON_ID
AND PPU.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PPU.EFFECTIVE_START_daTE AND PPU.EFFECTIVE_END_DATE
AND PAF.PERSON_ID=FNU.EMPLOYEE_ID
AND PAF.PERSON_TYPE_ID =2
AND PPU.PERSON_TYPE_ID
IN(2,62)
and PAF.person_id = FND_PROFILE.value('user_id')
AND PG.SEGMENT2=8)
and using "restrict the people visible to each other using this profile".
I have assigned the security profile to HR user responsibility
But when I query the supervisor name in HR User responsibility , it is not restricting me from viewing supervisor details.
When I query for first time, its restricting me to view others details, but when I close that click on torch button and try searching, its allowing me to access manages details.
Can any one please let me know what setups need to be done for restricting employees from viewing supervisors data.
I have gone through the document "Understanding and Using HRMS Security in Oracle HRMS" but didn't got any idea.
Please suggest.
Thanks & Regards,
Anusha.

Hi All ,
i solved the problem by using event 01 of header view and using the table "Extract" .
Regards,
Neha

Restrict DBA from accessing User's Tables

How to restrict DBA from accessing objects created by a user?
Regards
Sumit

mbobak wrote:
Hi Ed,
Actually, if I understand it correctly (and I may not, as I've never installed or used Database Vault and the presentation I saw was a long time ago), my understanding of the security model is that the "DBA" that has system level privileges, is separate from the "security administrator" role, which is the person who decides which user can see what application data. In Database Vault parlance, the DBA has access to the system, system views, etc, but not the application data. The application data lives in a different "realm". There can be multiple "realms", and you must be assign specific rights in the different realms to access different data. The DBA doesn't get access to any realms.
If you do not assign those two roles to different people, then you might as well not configure Database Vault at all.
At least, that's my understanding.
-MarkMark,
That was pretty much my understanding as well. But even when I worked for a credit card processing company, they didn't have that separation of duties - even though the auditors kept asking for ways to keep the DBA's out of the database.
And even with strictly defined separation of duties, wouldn't it still come down to someone who having to have the keys to it all? How about the guy who has the password for "root"?

Restrict employees from charging time to projects they are not assigned to

Can anyone help me on how tr restrict the employees from charging time to project networks that they are not assigned to?
I have assigned the resource to the project network and can see that in the CAT2 worklist but I am not able to restrict employees from charging time agains projects that they are no assigned to.

You have to validate the data in CATS Userexit.IMG - Cross application components - Time sheet - Customer specific modifications - Create SAP enhancements for the time sheet. Here is a short overview on what they are called and what they do.
CATS0001 (Set up worklist): This one defines a worklist in the upper part of the CATS screen
CATS0002 (Supplement recorded data): Here you can add values to customer defined additional fields or even modify the data entered by the user
CATS0003 (Validate recorded data): This one is to check entries for whatsoever
CATS0004 (Deactivate functions on the interface): CATS got a lot of buttons. Here you can get rid of the ones you don't need.
CATS0005 (Customer field enhancements): You can add fields to CI_CATSDB here to later on use to display or enter additional data
CATS0006 (Validate entire time sheet): Mainly serves to validate the hours entered if you don't use HR
CATS0007 (Subscreen on Initial screen): Customer popup, defines data valid for the entire time sheet(row)
CATS0008 (Determine recipients for the approval workflow): You can connect CATS to a standard workflow so that superiors can approve times entered before they are transferred (HR, CO, PS...)
CATS0009 (User-Defined Text Fields in the Data Entry Section): You got two 40 character text fields in the data entry part you can fill with this exit - display only
CATS0010 (Display User-Defined Fields in the Worklist): Same as above for the worklist
CATS0011 (Customer-Defined Functions): Add your own functions to the menu
CATS0012 (Customer Subscreen): Define CATS header
CATP0001 (Determine Target Hours): Define your own target hours

How to restrict the change access in CRM for OLTP orders

Hi Guru's,
Please let me know how to restrict the change access in CRM for the orders that are created in ECC. The ECC orders will only for display in CRM but not for change,
We have the orders that are created in ECC, it will flows to CRM and should restrict the access to get in to the change mode in CRM but as of now CRM system is allowing change mode for ECC orders and ending up with errors.
Is there any additional middleware parameter that needs to be added to SMOFPARSFA table to get this functionality! Please advice! Thank your for your help.
Regards
Suneel

Hi.
You can use the PFCG role to control if the user is able to create, change, delete or only display a business transaction type.
Regards.

How to insert data from access to sql server ?

How to insert data from access to sql server ?
Please help me
thanks

phamtrungkien wrote:
How to insert data from access to sql server by JAVA?The first four words of my last post:
masijade wrote:
JDBC with two connectionsGet a resultset from the jdbc-odbc bridge access connection, cycle through it and add batch insert commands to the jdbc connection to sql server. Give it a try and if the code has an error, then post your code ans ask a question.
The real question, though, is why you think it absolutely necessary to use Java for this.

Restricting Employees from enrolling or changing benefits

Hi All,
We have a new Legal plan introduced this year in employee benefits. I want to restrict employees from enrolling or changing this benefit if the life event is not Hire or Open.
I made the Hire and Open life events eligible. Do I need to make all other life events Ineligible or making these two eligible is enough? Having only these two eligible is not stopping me from enrolling in them when "Dependent lost eligibility" event triggered.
Any help or any pointers greatly appreciated.
Thanks,
CAH

Bump

Block IPs from accessing WLC web management

Hi all,
I have tried using access control list to block certain IPs from accessing WLC web management. I apply the ACL to interface management, but it seems like no effect at all.
How can I block or permit some IPs so only certain IPs can access WLC web management ?
Thanks in advance.

I need deal with this matter also... So here's what I found:
- you must use CPU acls - interface acls won't do what you want;
- it appears that once you use an acl, you must explicitly define each type of traffic you want to allow, since an implicit deny all action occurs.
I'm working on trying to restrict admin access to controllers in order address policy compliance matters. I'm disappointed at the lack of better documentation and practical examples on acls...
If anyone can shed some light on this topic I think two of us would appreciate it...

Whenever I try to open Firefox it says cannot establish connection, maybe your firewall is preventing us from accessing the web.

Whenever I try to open Firefox it says cannot establish connection, maybe your firewall is preventing us from accessing the web. Even though I've let Firefox through my firewall, this message still appears. And whenever I try to redownload it, it just says installation failed. It does this with all installations... Is there something wrong with my computer? How do I fix it?

Sometimes you only disable the user interface of security software, but the firewall or anti-virus services are still running in the background.
It is possible that your security software (firewall, anti-virus) blocks or restricts Firefox or the plugin-container process without informing you, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox and the plugin-container process and the updater process.
See:
*https://support.mozilla.org/kb/Server+not+found
*https://support.mozilla.org/kb/Firewalls
*https://support.mozilla.org/kb/fix-problems-connecting-websites-after-updating

How do I access the web-based utility

I just purchased a wireless router...WRT300N. I want to access the "web-based utility" in order to update the firmware.
How do I access the web-based utility...help!
Thanks.

Access the router’s web-based setup page.
For instructions, click here.
Linksys Easy Answer 4030, applies to WRT300N
Upgrading the Linksys Router's Firmware
Hope this helps,
Lilla
Westell 6100 modem/router; Linksys WRT54GL v1.1 router firmware 4.30.9; Linksys WPC54G v2 Notebook Card; CenturyTel DSL using PPPoE

Is there a way to access the web-based setup for my router if I cannot access the internet?

Okay, I need to change the ip address settings on my router. I have a WRT54G Wireless router. I cannot access the internet on my computer connected to the router, and do not know how to change the router settings without accessing the web-based setup page. So, back to my question. Is there a way to access this page if I cannot connect to the internet?

On the back of the router is a small reset switch. Using a paper clip or other small item, press the switch in and hold it for a few seconds. This will reset the router to the default IP address of 192.168.1.1. Enter that address in your web browser, and be sure your computer is attached to the router by an Ethernet cable. Don't attempt to do this using the wireless connection.
Once you have reached the web configuration utility you can change the DHCP settings.
To give your PC a static IP address you will need to open your network connections panel and, assuming your using Windows XP, make the changes from dynamic IP to static there.

How to restrict users from printing documents and exporting to local file

Hi SAP gurus,
I have two questions.
1. How can I restrict users from printing a document? i.e. billdoc? I would like to know if I could block it though authorization. If yes, what auth obj to use?
2. How to restrict certain users from exporting to local file? the System> List>Save-->Local File. I have tried restricting it using auth object S_GUI but it seems it is only applicable to older versions of SAP. im on ecc6.
Thank you in advance.

Hi,
Check this:
Create your own gui status and attach it to the list in the event START-OF-SELECTION.
In the menu painter extra -> adjust template.
Make it a list status and you will see all the standard list options appear including list->download
Deactivate the ones you don't want.
If you just want to prevent users from downloading the list you can achieve this with authorization object S_GUI, activity 61. Menu option will still be there though.
Please note that if you remove authorisation for S_GUI activity 61 then all downloads will not be possible.
If you just want to disable downloads only for a particular report, you can try this test program:
Code:
REPORT ztest.
DATA: PROGNAME LIKE SY-CPROG value 'Z_CHECK_AUTH',
        FORMNAME LIKE SY-XFORM value 'F_CHECK_AUTH'.
START-OF-SELECTION.
    CALL FUNCTION 'SET_DOWNLOAD_AUTHORITY'
         EXPORTING
              FORM    = FORMNAME
              PROG    = PROGNAME
         EXCEPTIONS
              OTHERS = 1.
WRITE: / 'TEST'.
You also need this:
Code:
PROGRAM z_check_auth.
FORM f_check_auth USING pe_result TYPE i.
pe_result = 5.
ENDFORM.
Also have a look at the exit SGRPDL00.
Hope this helps you.
Rgds,
Raghu

How to restrict login from client?

Hi all,
11gR2
How do I restrict login from client users, because I want to backup our database using expdp, and I do not want anybody updating the database.
I can not use the startup restrict becuase some client have dba privs.
I am thinking of shutting down the listener, but there are other database using this listener.
Is there option in the listener so that I can disconnect only the servicename PROD1 database? or do I need to stop the listener and edit it and remove PROD1 then start it again?
Any more briliant ideas?
Thanks a lot,

KinsaKaUy? wrote:
Hi Pavel,
I not trying to make a backup of my db. But I do not want to use rman as this is complicated to restore. What's complicated about
oracle: rman target /
rman: restore database
rman: recover databaseIf you are dpending on export as your backup ...
1) you will lose all transactions since the export was taken
2) you will need to rebuild a database from scratch in order to have something in which to import.
The most flexible,easy, and space friendly backup is export. and I beg to disagree to anyone saying that export dump is not a backup.
In fact this is the best backup utility Oracle has ;)
Thanksssss"In fact this is the best backup utility Oracle has "
That falls under the heading of "if the only tool you have is a hammer, every problem looks like a nail."

How to read/write from Access database

Hi everybody
I need a little help for doing what I wrote in the topic!
I use LabVIEW 6i student edition, do Ireally need to install the Database
connectivity toolkit?

Hi Vicio,
There are a couple of different methods to communicate with Access in LabVIEW, and some are more difficult than others. You can use ActiveX Automation to open Microsoft Access and control many aspects of the Access Application. For actual database manipulation however, the Access automation classes rely upon the Microsoft DAO (Data Access Object) and/or ADO (ActiveX Data Object) classes. These classes can be used independently or through the Access automation classes to read and write data into an Access database. These classes can be difficult to use and may require a fair amount of SQL knowledge to accomplish a complicated task. Attached is a very simple example of how you can use DAO from the Access automation classes to read an Access table.
For more information about the Microsoft Access automation classes, DAO or ADO classes refer to the Microsoft website and Developer Network:
MSDN
It is also possible to use Dynamic Data Exchange (DDE) communication between LabVIEW and Access. DDE is a Microsoft technology that preceded COM and ActiveX. DDE is NOT recommended as it is considered by most to be obsolete. However, examples still ship with LabVIEW that demonstrate how to communicate with MS Access using DDE. The examples are located in ..\LabVIEW\examples\comm\access.llb
Note: The LabVIEW Database Connectivity Toolset is the preferred method of database communication with LabVIEW. The LabVIEW Database Connectivity Toolset offers many powerful tools and extended capabilites for quickly accessing databases. The LabVIEW Database Connectivity Toolset offers connectivity to most popular databases through Microsoft ADO technology, complete SQL Functionality, and the ability to save records in XML format. It provides both easy-to-use and advanced functions to allow common database operations as well as detailed database accessibility. The LabVIEW Database Connectivity Toolset is sold separately or in the LabVIEW Enterprise Connectivity Toolset along with the LabVIEW Statistical Process Toolkit and the LabVIEW Internet Developers Toolkit.
Sincerely,
Feroz
National Instruments
Attachments:
Access_ActiveX.vi ‏43 KB

Netbeans game sample - how to restrict sprite from walking over a water

Hello,
I am new with Java game and Netbeans.
I have tried creating the 2nd level - Dessert and have added the sprites and the water pool. The water pool is added as a tiled layer. However, when running the program the Karel sprite walks over the water pool. How do I restrict it from doing this much like the Forest level?
Thanks in advance.

Thanks morgalr for the information.
I've found the matrices in the sample as you mentioned.
However, Netbeans has created a new feature that allows drag and drop creation of tiled layers, scenes and sprites. Matrices for the tiled layers will be generated by Netbeans and the codes are not editable.
The same tiled layers were used in both Forest and Desert scenes. However in the default Forest scene it worked but with the new Desert scene it doesn't.
If anybody have tried this would appreciate some oppinions.
Thanks.

LSO: How to restrict employee from accessing LSO Web based course.

Similar Messages

Maybe you are looking for