Navigation through a new role and persistence of user properties

Hi there,
I have a question related to roles and user-experience in the SAP Enterprise Portal.
Depending on the preference of the portal user I would like to offer a different navigation by assiging a new role to the user.
For example initially a role offers the navigation show below:
Role 1:
Toplevel navigation: Entry A Entry B Entry C
After a user request for a different navigation the order of the toplevel navigation changes.
Role 2:
Toplevel navigation: Entry B Entry C Entry A
In order to realize this, I created two worksets for Entry A. By using merge-ids and a difference in sorting I managed to move the Entry A to the end of the toplevel navigation bar after assiging role 2.
However I noticed that iView properties set by the portal users under role1 are lost after assigning the role2. Is there any way a user can keep the properties set under a previous role when getting assigned to a new role that has the same page?
Thanks in advance,
Arko

FacesContext context = FacesContext.getCurrentInstance();
context.getApplication().getNavigationHandler().handleNavigation(context,
null,
"<<NAVIGATION STRING>>");
Thanks,
Navaneeth

Similar Messages

Portal 7.0 and CRM 5.0 Create a new Role and enabling Quick Create.

Hi Experts,
In our Portal Scenario, we need to create a new Role and to customize it with some iviews(CRM BSP iviews).
The role was created and it works fine; in fact in the navigation it is possible to navigate in these BSP application:
1)Account
2)Products
3)Activities
My question is the following: I see that in the standard role <b>com.sap.pct.crm.salesmanager</b> (contained in the Business Package for my SAP CRM 5.0) it is possible to see in the portal desktop the functionality "Quick Create", how it is possible to enable the "Quick Create"??
Kind Regards.
Eugenio

Hi Eugenio,
Did you find how to do that? I am facing the same problem.
Regards,
Mauricio

Have been here before but still have not resolved a fix for a black screen when I try to access a PDF file...Now I've got a new iPad and need the User Guide which is only available inPDF

Have been here before but still have not resolved a fix for a black screen when I try to access a PDF file using Safari...Now I've got a new iPad and need the User Guide which is only available in PDF and FireFox will not work.

Hello,
'''Try Firefox Safe Mode''' to see if the problem goes away. Safe Mode is a troubleshooting mode, which disables most add-ons.
''(If you're not using it, switch to the Default theme.)''
* On Windows you can open Firefox 4.0+ in Safe Mode by holding the '''Shift''' key when you open the Firefox desktop or Start menu shortcut.
* On Mac you can open Firefox 4.0+ in Safe Mode by holding the '''option''' key while starting Firefox.
* On Linux you can open Firefox 4.0+ in Safe Mode by quitting Firefox and then going to your Terminal and running: firefox -safe-mode (you may need to specify the Firefox installation path e.g. /usr/lib/firefox)
* Or open the Help menu and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
[[Image:FirefoxSafeMode|width=520]]
''Once you get the pop-up, just select "'Start in Safe Mode"''
[[Image:Safe Mode Fx 15 - Win]]
'''''If the issue is not present in Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one. Please follow the [[Troubleshooting extensions and themes]] article for that.
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before opening Firefox for normal use again.''
''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''
Thank you.

Associate roles and permissions to users that existe on a database

Hi,
i want realise a secure authentification i used ADF Configuration but i found out that i cant bring my users from my database. i can just create new users with roles in Jdeveloper.
do you how we can bring users to Jdeveloper and associate to them roles and permission ?

i found this tutorial that is that what i did :
1. Start up weblogic server (Run .. Start Server Instance)
2. Log on to weblogic console ( http://localhost:7101/console/ )
3. Use default username/password weblogic/weblogic1
4. Create a datasource to connect to the schema where the authenticating database tables are (Services .. JDBC .. Data Sources)
5. Use unique name for datasource. Use JINDI name of jdbc/
6. Enter database name, schema name and password and test
7. Add new Authentication provider (Security Realms .. myrealm .. Providers .. New)
8. Enter datasource name, type SQLAuthenticator click Ok
9. Going back into provider, change control flag to Sufficient
10. Select Provider Specific tab and choose Plaintext passwords, password algorithm SHA-1
11. Shut down weblogic
12. Edit config.xml file in JDEV_DIR/system11.1.1.2.36.55.36/DefaultDomain/config and replace sql authenticator sql statements with those from web blog
13. Restart weblogic.
14. Go to users/groups tab in securty realm and view users and groups imported from database
15. Set control flag for other providers to "Sufficient"
source : http://brent.hmdclinical.com/2010/03/using-database-tables-as-weblogic.html
but the step 12 i dont know what i need to change and with what ?

HOW TO CREATE ROLE AND ASSIGN TO USER

Dear all
1- Create ROLE data_entry
2- Now open the Form Builder --> open Mennu.mmb --> F4,it open the property pallete --> Set use secturity option
YES and in Module Role option set Roles --> form_entry
5- Press F3 (Come back in Navigator Pane) then double click on Mennu, it open Mennu which is attached Forms then
double click on that one Form which attach Role with it --> click on Item Role --> and attach the Role
6- Go start Mennu --> Oracle Form6i-Admin --> Build after this it will ask
‘Enter System Passwors’ then Give the Local Password.
'Enter database connection ( e.g. t:node:SID) [LOCAL] ' Give ORCL ( but me confused what should i give over
here)
7- Create User DEO Identified By DEO
8- Grant DBA to DEO
9- Grant data_entry to DEO
When i run my application and get login by DEO user then i receive this Error:
FRM-10247: No activate items in root menu of application.
please let me know where i am making mistake
Thanks in advance
Regards,

Hi,
Just check your second point.
- Now open the Form Builder --> open Mennu.mmb --> F4,it open the property pallete --> Set use secturity option
YES and in Module Role option set Roles --> form_entryHere, you are using "form_entry" role to the menu but you've granted data_entry role to the user.
Hence, at run time forms is expecting user with form_entry role, which it's not getting.
Hope it helps.
Please mark answer as helpful / correct, if it helps you
Navnit

Istore 11.5.10 - creating a new site and assigning existing users to that

Hi,
I need to create a new site in iStore and assign all the Canada customers to that site. Can you please let me know how to do this.
I though that I would create a custom responsibility ABC_IBE_CUSTOMER same as IBE_CUSTOMER and attach that responsibility to the new site and the same responsibility to all the canada custoemers and when they login they will directly been directed to the new site in the customer UI. But it did not happen like that. I might be missing many things inbetween. Can you please let me know the step by step process to achieve this.
Thanks,
Srikanth

function(){return A.apply(null,[this].concat($A(arguments)))}
Why adobe has not issued an update!!!.
Agreed. I'm disappointed that no patch has yet been issued. Hope we don't have to go on explaining this for the next 12 months.

Need help to check multiple conditions and set AD user properties

hello All,
I have a data csv sheet where information as follows, using below information I need to update AD account attributes based on below conditions . I have full right and I can set any user properties. So this is not access right issue.
samaccountname,Othertelephone,language,employeeId
abcd                      XXXXXXXXX     EN         SMS
Now I need to check following conditions:
Othertelephone = if this should not be blank ,if so display message " filed is blank " and no changes should allowed in further attributes and it should abort
language= this field should only contain EN or FR value if No display msg " error in language field " and no further changes to the user attributes and it should abort
employeeID= this field should only contain OTP or SMS value if Not filled display msg " error in Employee ID field " No further changes to the user attributes and it should abort
changes to user will permit when all attributes is filled. I do the testing taking samaccountname , othertelephone and employeeId into consideration but it did not helped. Getting error
THIS is complete Code Of my Task where you need my focus on conditions
group=Get-QAdGroup -SearchRoot "domain/vpn group"
Import-Csv D:\VPN.csv |
ForEach-Object{
if ($_.samaccountname -eq "")
   Write-Host "SAMACCOUNTNAME is blank"   -fore red
else
$user=Get-QAduser $_.samaccountname
if ($user.memberof -contains $group.DN)
Write-Host "$($_.Samaccountname) user is allready a member" -fore red
else
Add-QADGroupMember $group $_.Samaccountname
If ($_.othertelephone -eq "")
Write-Output "$($_.samaccountname) telephone Number is blank"
else
if ($_.EmployeeID -notmatch 'OTP' -and 'SMS')
Write-Output "$($_.samaccountname) EmployeeID field is not correctly field")
Else
Set-QADUser $_.SamAccountName -ObjectAttributes @{telephonenumber=$_.othertelephone;EmployeeID=$_.EmployeeID}
error
Set-QADUser : Access is denied.
At C:\Users\g512263\AppData\Local\Temp\5f8facb6-f942-4c3d-b924-8953d9a706da.ps1:37 char:8
+                    Set-QADUser $_.SamAccountName -ObjectAttributes @{telephonenumber=$_.othe ...
+    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Set-QADUser], UnauthorizedAccessException
    + FullyQualifiedErrorId : System.UnauthorizedAccessException,Quest.ActiveRoles.ArsPowerShellSnapIn.Powershell.Cmdlets.SetUserCm
   dlet

<title>Untitled - PowerGUI Script Editor</title>
Hello JRV,Thank you for your time, There is no comma in my csv file , I double check. below I wrote a simple code.I removed all the conditions and just try to set the EmployeeID and it is working fine with same file.But as soon as I add conditions it gives access denied. as well as if I remove employee Id from your previous code and only try to set telephone No. still it gives access denied.I am just trying to figure out what is causing this.
$group=Get-QAdGroup -SearchRoot "com/Group"
Import-Csv D:\VPN.csv |
ForEach-Object{
if ($_.samaccountname -eq ""){
Write-Host "SAMACCOUNTNAME is blank" -fore red
}else{
$user=Get-QAduser $_.samaccountname
if ($user.memberof -contains $group.DN){
Write-Host "$($_.Samaccountname) user is allready a member" -fore red
}else
Add-QADGroupMember $group $_.Samaccountname
If ($_.othertelephone -ne "")
Set-QADUser $user.SamAccountName -ObjectAtt Aributes @{telephonenumber=$_.othertelephone}
} else
Write-Output "$($_.samaccountname) phonenumber is blank"
If ($_.EmployeeID -ne "")
Set-QADUser $_.SamAccountName -ObjectAttributes @{EmployeeID=$_.EmployeeID}
}else
Write-Output "$($_.samaccountname) EmployeeID field is blank"
If ($_.Preferredlanguage -ne "")
Set-QADUser $_.SamAccountName -ObjectAttributes @{Preferredlanguage=$_.preferredlanguage}
} else
Write-Output "$($_.samaccountname) PreferredLanguage field is blank"

Navigating through objects in flex and refreshing them

In an mxml file called Rate,
I have a vertical box called stepsVB and an array called steps.
This stepsVB is activated in a state called "states"
when currentState = "" i see something else.
steps contain objects of mxml files. step1.mxml, step2.mxml, step3.mxml and step4.mxml
when i click on the next button, I navigate from step1 to step2 and so on using
stepsVB.removeChildAt(0);
stepsVB.addChildAt(steps[2], 0);
when i move from step1 to step2 and step2 to step3 and change my currentState to "", if I press my next button, i see step3 instead of step1.
How do I move to step1 instead of step3. Also, I need to execute my creation complete method for each step as I move.
In other words, I need to set it up in such a way that the whole flex file refreshes. How do I accomplish this?
Your help is greatly appreciated.
Thank you very much
Nikhil

Hi,
If you want to map your actionscript class to your server's
Java class. You can run a util function
registerClassAlias("dev.echoservice.Book",Book);
where "dev.echoservice.Book" is the fully qualify name of
your java class. Book is your actionscript class.
Calling this util before you make your remoteobject call. You
can put this in your actionscript class constructor, it makes this
call whenever you create your class. However, it seems to be better
to call it when the class is loaded. To do so you can declare it as
static
public static var a:* =
registerClassAlias("dev.echoservice.Book",Book);
OR
You can also declare it as metaData in your class as:
[RemoteClass(alias="dev.echoservice.Book")]
However, I found someone saying that it didn't work in sdk
compilation, but webtier compilation. It might be some
configuration issue. I haven't tried it yet.
To display the properties in the dataGrid, you just have to
either use Array or ArrayCollection. If databinding is involved,
the datagrid need to know the Collection.Change event. It is better
to use ArrayCollection, therefore, adding new item to
arrayCollection the datagrid get repopulate.
hope it helps!
William Chan

When to set iwtUser-role and other per user schema using custom athentication?

I have written my own authentication module and would like to set per user schema on login. Can I write iwtUser-role, iwtCalendarProvider-calendarUserPassword, etc from the authentication class?

Yes you can, after the authentication is complete you get the profile object and then set whatever value you want to set for particular attributes you want to set ..

New role created and Security zone.

When I create the new role and I need to set the properties for that role. Then after I try to add this role to user and have user test the access.
Why there are some error happen and I need to go to 'security zone' by follow path from the error, then my new role into security zone, then user can access without any problem.
Please anyone explain why do we need to add role again in security zone even though we already set the property to that role in 'content administration.' Please let me know the difference. Thank you very much.

Hi,
Security Zones are used to prevent unauthorized users from accessing iviews, Portal Components and Portal Services through a direct url used outside of the portal environment. It will be controlled by means of progressive safety levels and permissions, which are assigned by the system administrators to authorized users in the permission editor.
Regards,
Saraswathi

Create a new role in SRM 7.0 and Portal

Dear All,
We are using SRM 7.0 with Portal. We created a maintenance table in SRM. This table must be maintained from time to time by the key users. But they want to maintain in from Portal, not from SRM.
When i was using SRM 4.0, it was simple, i was creating a new role from PFCG and assigning the table to the role. Then i was be able to see and maintain it from web. But it is not that simple now in Portal side. Because i created a new role and assigned the table to that role in SRM, but nothing happened in Portal side.
Can anyone advise me the steps ? How am i going to show and maintain this table in portal ?
Thanks in advance,
Best regards,

Hi,can you share your solution with me. I have the same question but not smart as you.
Thanks in advance.
WuLin
SRM

How to set new role for new custom entity only

I created a new custom entity, I want to create new role for it only. So I created new role and set custom entity User role. But When I login the user with created role, it show now right to access CRM.
Awen

Are you trying to grant access so that users can use this custom entity but no other data at all?
You will still have to include access to all sorts of bits of CRM just to make the user interface work - especially the things on the Business Management and Customization tabs of your security role. You also need to check these 6 settings:
Special privileges in CRM Security Roles
If this is the only security role you plan to give to your users, I would suggest you start from a standard role and remove access to other entities, rather than start from blank and work upwards.
Hope this helps.
Adam Vero, Microsoft Certified Trainer | Microsoft Community Contributor 2011
UK CRM Guru Blog

PFCG role creation and input from users

I know that when you create a new role and add transactions to the menu you will get some default authorization objects in the role.
After that you will need to fill out activities for transactions;
For ex: display, create, change
I also know that during testing when you run /nsu53 you will need to add some additional objects in the role.
If the user does not know which activites he/she need or even for example for order types
OR, ZNON, KE
How can i help if the user does not know what he/she needs.
The way I'm doing this currently is by giving the user the transactions he/she needs and then have them run /nsu53 and I fix the problem.
Thanks
jo

Jo,
As I have worked in situtations similar to the one you describe where the user performing the testing doesnt know which activites/values they need access to contribute to productive role build/testing sessions. Some of the things I have done to help them are:
1) Educate the user on the Authorization Object and Fields. You can typucally hit (F1) for more information related to the object/field.
2) Tie the object values back to actual SAP Tables with data to show user configuration of the system and values that are options.
3) Find someone from the process/business side who understands the requirments or has done the configuration to support the process and have an educational/testing session together.
Thanks.
Matt

Trying to auto generate roles and privileges

Greetings All,
Oracle Enterprise 11g v11.2.0.1.0 on Windows Server 2008
I have a database with many schemas. One of the schemas is referred to as the CM_MASTER schema in that it has been granted the following: dba, create user, drop user, alter user, create any table, select any table, and a few others, all with the “with admin option” clause.
We have developers that need select only access to the tables and views of the non-master schemas. My plan was to create a unique ROLE for each schema, then grant select on each table and view in that schema to that unique role. Then grant the appropriate role(s) to each developer hence giving them read only access.
I can accomplish the above manually while logged on as the CM_MASTER schema.
I am trying to create a procedure owned and executed only by the CM_MASTER schema that creates a new role and then grants to that role. The procedure accepts a parameter containing the user name of the target schema. The procedure is able to create the role (create role scott_r) successfully.
However, I am getting an insufficient privileges error (see below) after the role has been created, when trying to issue the “grant select on scott.some_table to scott_r” command via "execute immediate".
Any ideas what privilege(s) the CM_MASTER user needs in order to be able to issue the grant(s) to the role?
Error message below:
exec gen_schema_role('scott');
Error report:
ORA-01031: insufficient privileges
ORA-06512: at "CM_MASTER.GEN_SCHEMA_ROLE", line 30
ORA-06512: at line 1
01031. 00000 - "insufficient privileges"
The procedure code is below:
The utl_file.put_line commands were added for debugging but nothing gets output.
When the "execute immediate" lines are commented out, the output from the utl_file.put_line commands displays the correct SQL create and grant statements.
create or replace
procedure gen_schema_role(p_db_user in varchar)
as
v_role_name varchar2(30);
v_bat_out utl_file.file_type;
cursor get_object_names is
select object_name from dba_objects
where owner = upper(p_db_user)
and object_type in ('TABLE','VIEW')
and status = 'VALID'
and object_name not like 'DR$%'
and object_name not like 'XT%';
begin
v_bat_out := utl_file.fopen('SR_BACKUP', 'Create_Roles.sql', 'W');
v_role_name := substr(p_db_user,1,28) || '_r';
utl_file.put_line(v_bat_out, ' ');
utl_file.put_line(v_bat_out, 'create role '||v_role_name);
execute immediate 'create role '||v_role_name; <<-- This seems to work, the role gets created
for a in get_object_names
loop
utl_file.put_line(v_bat_out,' grant select on ' || p_db_user || '.' || a.object_name || ' to ' || v_role_name);
execute immediate 'grant select on ' || p_db_user || '.' || a.object_name || ' to ' || v_role_name;
end loop;
utl_file.fclose(v_bat_out);
end gen_schema_role;
Thanks,
Snyds

sb92075,
I just tried, and YES the SQL is able to apply the "grant select" statements to the newly created role.
I wanted to call this new procedure from the procedure that creates a new user by scheduling a job to perform an IMPDP job to import a base schema (using the remap schema clause).
Any suggestions how to automate generating this role?
Thanks,
Snyds

LMS 4.1 - Roles and Portlet

Role management in LMS 4 is a nightmare.
Is there a documentation which map the tasks and the portlets ?
For exemple, which tasks do i need to view device availability portlet ?

It helped me to copy the existing system generated roles and use those as a template for my own role generation. For example, I wanted to have a role that could view all configuration and device information for a select group of devices, but could not write any changes to the devices. The HelpDesk role almost does this but even some of the performance reporting was unavailable to them. The HelpDesk and Network Operator roles combined had just a bit too much authority, but I started with those two roles as a template and then removed configuration capabilities from the new role and had my own role with View only capability. It's a bit time consuming, but much easier if you start with the roles they give you.

Navigation through a new role and persistence of user properties

Similar Messages

Maybe you are looking for