Multi user application control data access

Dear all,
i am using Oracle Developer Suite 10g and database 10g, windows xp plate form.
i want to develop multi user application regarding education.
i have two questions.
1. i take a start from creating an HR database which have 30 tables.
this database has 10 users.
the users will log on from their own schema.
how they will access the HR schema?
should i create a public synonym for each table in the HR Schema?
or should i create a view for each table in each user schema?
or should i grant select,insert,update etc to each user on HR schema?
2. i want to control the data access for each user.
i.e. every student could access his own academic record. each teacher access his own related record, the manager the owner and so on.
how to accompolish this task? oracle roles are not sufficient for this purpose.
Your help is highly appriciated.

How about you start with the basic stuff, like the 2 days developers guide:
http://www.oracle.com/pls/db112/to_toc?pathname=appdev.112/e10766/toc.htm
and make it to the advanced developers guide:
http://docs.oracle.com/cd/E11882_01/appdev.112/e25518/toc.htm
and work your way through the concepts manual:
http://www.oracle.com/pls/db112/to_toc?pathname=server.112/e25789/toc.htm
and everything else which sounds interesting to you in here:
http://www.oracle.com/pls/db112/portal.portal_db?selected=5&frame=
As for your first question this should be covered here:
http://docs.oracle.com/cd/E11882_01/network.112/e16543/authorization.htm#BABHFJFJ
i want to control the data access for each user.This is also documented:
http://docs.oracle.com/cd/E11882_01/network.112/e16543/vpd.htm#CIHBAJGI
cheers

Similar Messages

Multi-users sharing iTunes data on Tiger?

Dear friends, I've spent some time unsuccesfully searching for an answer on this - can anyone help please?!
I have used my iMac g4 for about 3 years and share it mostly with my daughter. Last week I decided to set her up with her own account using the multi-user facility. However, I want her to be able to access out iTunes music which is in my account. I tried moving the iTunes music folder into the shared area, but then neither of us could access music, we both had empty music libraries.
Is there a simple way of allowing new users to access both the existing iTunes or other data without making copies of all the music in both user's accounts? Ta muchly.

Hello there and thanks for your input!
Actually, I am able to run iTunes with my music files in the new account I set up for my daughter, without iTunes being loaded in my own account. I noticed during reading many pages of help that you do need iTunes loaded in the 'orginators' account for any Macs that you have in a network (up to 5 in the network).
In my case I copied my iTunes Music library into my Public area and then logged into my daughter account to 'point it' to my music library. It does look as if I can delete and add music too, although I haven't tried that yet.
I've just pasted in the following from iTunes help (that I followed): -
Learn how different accounts on an single computer with iTunes can share music.
Tip: If you are trying to share music between multiple computers see one of the following articles:
Windows: Sharing your iTunes library across computers
Mac OS X: Sharing your iTunes library across computers
If you want to share music with other users on your computer , then follow the steps below.
To share your music with other accounts on the computer:
Mac OS X (Click for more)
Quit iTunes.
Locate your iTunes Music Folder. It is stored by default:
~/Music/iTunes or ~/Documents/iTunes/.
These folders cannot be accessed by other accounts on the computer. In order for other users to be able to access your music, you must move it to a publicly accessible location.
The Public folder in your home directory (~/Public), or to another folder outside your home directory that other users have access to, such as /Users/Shared. Tip: The tilde "~" refers to your home folder. For more information see Mac OS X: Using Your Home Directory.
Drag the iTunes Music Folder to a publicly accessible location. Important: Do not move the iTunes folder, the iTunes 4 Music Library file or the iTunes Library.xml file.
Open iTunes.
From the iTunes menu, choose Preferences.
Click Advanced.
Click the Change button.
Navigate in the Change Music Folder Location dialog to the location of your iTunes Music folder.
Click Choose.
To listen to another account's music files:
Open iTunes.
From the iTunes menu, choose Preferences.
Click Advanced.
Deselect the "Copy files to iTunes Music folder when adding to library file" option.
Click OK.
From the File menu, choose Add File to Library. Note: Windows users can also choose Add Folder to Library to add a folder of songs.
Navigate in the Add File To Library window to the location where the other user's music is saved (the iTunes Music folder in the case above).
Click Open.
Repeat these steps for each account that is listening to shared music.
When another user of the computer has imported new music from CD, repeat steps 6 through 8 to add the music to your library.
Thanks for you link to the iPhoto help - I'm sure I will want to do that next!!
Regards
Paul

How to get Current Log in BO user name in data access driver

In universe, to get the current log in user is via @Variable('BOUSER').
Right now, I need to be able to get the user name in the data access driver. I am writing a customized data access driver because we need to patch some where clause on the the query generated by the universe based on the logged-in user info. I only think of using end_sql parameter or adding an universe level filter to patch the @Variable('BOUSER') to the query, which would not work if user want to use customized query.
Can anyone tell me how to get currentBO user name from connection server ? or how @Variable('BOUSER') is translated into the logged-in user name in the universe?

Shweta,
The link you provided was the Auditor guide for BO 6.x, I'm not sure it that is going to help Karen or not.
Karen,
There is function called connection
(usage: =connection([Query Name]), where [Query Name]
denotes the name of the tab for the query under Edit Query)
Here is some of the output from connection:
4;ODBC18;MS SQL Server 2000166; VERSION=7; USER=xxxxx;
PASSWORD=; DBTYPE=Relational; DATABASE=xxx_xxxx;
ODBC_USER=xxxxxx; ODBC_PASSWORD=; BO_DSN=xxxx_xxxx;
BO_DRV_CONNECT_MODE=0; 224; VERSION=6; Name=xxxxx; Shared=4;
LoginTimeout=600; Timeout=600; Pool Time=60; Array Fetch Size=10;
Array Bind Size=5; RecommendedLenTransfert=1000; Password_Encryption=x;
AliasTable=; MeasureDimension=; Hint=; ConnectInit=; ArrayFetch=1;
I'm not sure if this info helps out either, being that connection provides info on a post-processing basis and it sounds like you need to get out ahead of the SQL generation. The @variable('bouser') would seem like the place to be, however, in allowing custom SQL to take place you loose the bouser due to an individual could customize the SQL to the point that it gets unwantingly yanked out. The end_sql might be your answer...
Thanks,
John

How to get current logged-in user name in data access driver or in universe

In universe, to get the current log in user is via @Variable('BOUSER').
Right now, I need to be able to get the user name in the data access driver. I am writing a customized data access driver because we need to patch some where clause on the the query generated by the universe based on the logged-in user info. I only think of using end_sql parameter or adding an universe level filter to patch the @Variable('BOUSER') to the query, which would not work if user want to use customized query.
Can anyone tell me how to get currentBO user name from connection server ? or how @Variable('BOUSER') is translated into the logged-in user name in the universe?

I do not know your EJB Service. But you should pass the credentials of the current logged on portal user to your service. That's not by default I think.
I had a similar problem with CAF developed webservices. I had to turn on permission checks in my web service and passed the credentials via logon ticket.
Regards, Bernd

Controlling data access at universe level

Hi,
I had a doubt in universe regarding the implementation of security.
Existing process: We had a portal called flex (intranet site)which the BO report has been integrated and for opening the report the name of report was clicked (hyperlink)
This report should show the data specific to the user profile logged into the portal.
Now if we want to restrict the data at universe level for each individual users accessing the report in portal our idea is to create a dervied table (which contains a list of userid's and project id's)in universe so that who ever logged into the portal and clicks on report he will see the data only related to profile
For example: The scenario would be a manager residing in a region need to see the list of projects which he is assigned to but not all of them.
Could you please let me know how can implement at universe. Kindly let me know if you need any futher information.
Thanks,
Eswar

Another way to do this is: (a) in your universe create a table that has a list of user names a long with their BOUSER id; (b) associate that list with fact tables or d imensions in the database, either using joins or by using a where clause as a filter or in an object definition using the syntax @variable(bouser); below is an exerpt from BO Designer guide.
Example:
@Variable
In the universe for a human resources database, you have an object called
Employee name. You want to restrict the returned data for Employee name
to the values authorized in the database for each user. This would allow
you to control what employee information each user is allowed to see. This
information is defined by their database profile.
You insert the @Variable function in the WHERE clause as follows:
Employees.Employee_Name = @Variable('BOUSER')
When the object Employee name is used in a query, the data is returned

Multi-user -application

i want to create an application , installed at a windows
2000 server with multiple access for many users.
the application should run at the server. but the gui should shown at the client. i dont want to use applets and there should be no installation or plugin at the client-
side.
what should be the best technique?
thanks a lot
greetings povray

Thanks
i have found an answer for my problem. there is the java web-start-project.Found at java.sun.com.
you have to download this file and install at your client. but after this you can start any java-application over the net like an client-server-connection .

How to create a multi-user application

Hello,
I have an Application developed in Portal3.0.
I have used portal30 schema where I created this application.
Now, how can I make this application accessible to multiple users? where should I create these users/Roles? How can I give grants on some of my Application Objects(Forms/Reports/Dyn. Pages).
Your help is greatly appreciated.
Thank you.
Sincerely
Madhav

Hi,
If you look at your application from the Applications tab in the Navigator view, you should see a link called 'Grant Access'. If you click on that, you will have the option to give users access (manage - where they can build stuff; execute - where they can just run stuff that you build, etc.) to your application. You also have the option to publish your application as a provider in this screen, so that your forms/reports/etc. can show up as portlets.
Hope this helps.
-melissa

IFS For Controlling Data Access

We have a requirement where we want to be able to allow access to particular classes of files based upon the NT Application that is actually reading/writing the data.
For example - we want Word to be able to write our files but Notepad not be able to.
Does anyone have any experience/suggestions on whether this is do-able with IFS?
Thanks,
Mike.

Probably not. The SMB Server does not know which application is accessing the SMB Server.

Data Access control in J2EE technologies/apps

Hi Guys,
I am working on a project that requires that i implement a mechanism for controlling data access to the content that is displayed on the pages of a Struts based web application.
First off to clarify, i am not refering to the ability for different users to log on to a specific page and or view specific pages. That is a different type of access control. I am more interested in the "Data Access" i.e. where multiple users can view the same page but the data that is displayed depend on the data access control privileges they have.
I am intersted to know of the different approaches/frameworks out there to implementing "data access" control. Is there a framework out there for this kind of thing?
Im thinking to do this the controls/privileges need to be configured (i.e. data access categories, users etc) somewhere probably in the database. The rules can get quite complicated so im wondering whether there is already a framework that i can use to accomplish this rather than implementing it from scratch.
Thinking about how it will work, the rules the govern the access are very specific to our business domain so i am not really sure whether it is possible if there is any third party framework that i can use that is very generic and will allow the rules to be configured.
Thanks

you are right, access control is very application dependent, and is therefore not a good target to turn into a generic framework.
In my opinion the king of security frameworks is Spring Security, so you could take a look at that.
[http://static.springsource.org/spring-security/site/|http://static.springsource.org/spring-security/site/]
Other than that, I have used a simple setup using Javaserver Faces. I had a user bean with a set of boolean flags indicating the user's capabilities (directly mapped to a database table) and in the components I would have rendered="#{user.userRole}" attributes where necessary, to conditionally switch off elements when the user wasn't allowed to see it, in some cases rendering a readonly view in stead.
Its a chore to test, but quite easy to maintain and to read IMO.

Applications with multi-users?

Exist there downloadable example apllications witch use multi-users managed by sessions Beans.

Thanks for your answer.
Another questions...
I have problems with my multi-users application (like you saw it). In fact, sessions mix between them.
1) Do you know if there are any configuration for sessionBean to accept many users?
2) Do you know if it's possible that tomcat or sun apllication server mix the sessions?
Thanks

How to send one email to multi-users using JavaMail ?

I am using JavaMail API. I am working in "sending emails to users", I had already tested "one email to one user" and got success but when tried to send one email to multi-users then I failed to do that?
Can anyone help me to do this?
I have used the below code to send to multi-user:
Address[] toAddr = {new InternetAddress(_to),new InternetAddress (to2)};
msg.addRecipients(Message.RecipientType.TO, toAddr);
But it is static only 2 users. I want to send to multi-users dynamically taking datas from database.
I have tried by using below code but it doesn't work.....
InternetAddress[] emails;
while (resultset.next()) {
temp = resultset.getString(1);
emails.setAddress(temp);
i++;
Address[] toAddr = emails;
msg.addRecipients(Message.RecipientType.TO, toAddr);
Thank you in advance...
-ritesh

I think you're confused about some basic Java programming techniques.
There are two obvious ways to do this.
1. Call the addRecipient method in a loop.
2. Collect all the recipients in a List, convert it to an array, and call addRecipients.

File structure and Multi-user access/control

Hi All
Currently evaluating RH. Our plan is to use RH HTML with RoboServer and either SourceSafe or Team Foundation for source control. We will be producing the "printed" manual (PDF) and publishing online help (hopefully html via RH server) from the single source layout
Given that we will edit content in RH's XHTML editor, I'm not clear on when we should create new files or the granularity of multi-user access. We have 17 apps and I plan to use a master project and merging (because we need to link to related topics in other apps).
I'm really not sure what should constitute a file in RH. First off, is access controlled at the file level?
I want to have multiple authors editing the same manual at the same time, so do I need to break the manual into multiple small files (currently it's a single word doc)?
If I do break it into multiple files, what's the best approach: 1 file per topic (or is this a requirement)?
Finally, when I come to generate the PDF, will the files be combined. (i.e. can I have different page-breaks than I have in the RH project)?
Any pointers greatly appreciated
Regards
Mark

Hi,
First off, is access controlled at the file level?
Not sure what you mean by that. In source control, you can check in/out ever file independent. Sometimes dependent files will be automatically checked out, for instance images used in the css when you check out the style sheet.
I want to have multiple authors editing the same manual at the same time, so do I need to break the manual into multiple small files (currently it's a single word doc)?
That be the idea. Anyway, it's not a good idea to have an entire RoboHelp project in a single topic. You probably want to cut up your contents into the small chunck: topics.
If I do break it into multiple files, what's the best approach: 1 file per topic (or is this a requirement)?
In RoboHelp a topic is a HTML file. RoboHelp doesn't force you to split up content into one or more topics. If you are creating help for the web, you want the information to be organized in relatively small chunck so users can quickly scan through it.
Finally, when I come to generate the PDF, will the files be combined. (i.e. can I have different page-breaks than I have in the RH project)?
Not sure what you mean by page breaks. As RoboHelp creates HTML files, there are no page breaks such as in paper manuals. When you create a PDF, you combine the topics you need into a single document.
If a PDF is required for you, you may want to consider not using RoboHelp for your sources. A PDF created by RoboHelp is useful for internal use, but it never seems to get good enough to give to customers. Personally, when a PDF version of a manual is required, I create the manual in FrameMaker and link or import the book into RoboHelp. You can also link Word documents, so you may want to play around with that before deciding whether to use Word, RoboHelp or FrameMaker for your source.
Greet,
Willam

Multi user access in Single application file

Hi,
Is it possible to work Single application but multi-user access in Indesign CS6.
If yes, Please let me know how to access.
Thansk,
Uvaraj S

I'm not sure exactly what you are asking. InDesign files can be edited by only a single user at one time, but any user can open a file not already in use.

Smartview: Audit of Changes & Multi user access

Can anyone tell me how can we check smartview logs (from a Word doc) for an HFM application?
Is it possible to have multi user access to a Word document via SmartView?

Having multiuser access requires that everyone share the Domain file where iWeb keeps its data and that each person only use the latest version of it. Of course each user must also have a Mac and iWeb installed as well. Personally I would stick with blogspot.

Data access disrupters (DAD's)are not being displayed on control panel

Hi,
Data access disrupters are not being displayed on Application server control panel (sid.host.domine > HTTP Server > mod_plsql Services >DAD's ) But users are able to access their applications.
Not able to see database access details through Application server control panel. Can you please tell me where could be the problem exists..
Thanks,
DJ

I am assuming you mean Discriptors (instead of Disrupters) and I am not sure which release of Application Server you are running. But assuming it is 9i (say 9.0.3 on Windows), if you select the OC4J instance or container the applicatlion was deployed to. You will see a link to Data Sources displayed below Application Defaults.
The files equivalent will be found in your <ORACLE_APPSHOME>\j2ee\<INSTANCE_NAME>\config\data-sources.xml

Multi user application control data access

Similar Messages

Maybe you are looking for