Need an ACE rule for display rights to all BP's

In our ISA application we already have custom logic to control which accounts an ISA can create an order for, as we move to a more channel management solution the ACE rights is limiting the user to only see the account the user is assigned to when launching the B2B ISA.
I looked at rule with object type = ACCOUNTCRM and Rule Id = SUPERUSER_CUSTOMERS but adding that right did not get me any further.

If User 1 has just Role A (SAP_CRM_ECO_ISA_WU_B2B_FULL) then the ISA B2B application works as expected, all BP's are visible.
If user #2 has 2 roles = Role A ( SAP_CRM_ECO_ISA_WU_B2B_FULL ) and role B (SAP_CRM_UIU_CHM_PARTNERMANAGER ) and role B is an ACE user group element to limit what transactions the user can see.    This same role or ACE limitation is preventing what accounts are visible in B2B ISA.  So I am tryign to create a right to also assign to role B to allow all BP's to be visible.

Similar Messages

  • In which condition we need to use Rule for substitution/validation

    Hi Gurus,
       I want to know in which condition I need to use rule instead of directly putting these elements in prerequisite? for example:
    Case1
         Rule:TTYPEARAPO--- BSEG-MATNR <> '' AND BSEG-WERKS <> '' AND BSEG-XBILK <> 'X'
         Prerequisite:TYPEARAPO
    Case2:
         Prerequisite:BSEG-MATNR <> '' AND BSEG-WERKS <> '' AND BSEG-XBILK <> 'X'
    My question is the difference between case1 and case2?  Thanks.

    Wei Gu,
    In the example you have given, there is no difference between these two cases.
    However, imagine that you have to use this same condition in multiple steps / prerequisites / substitutions. In that case, it will be better design to create a 'rule' and then use it at all the places.
    It makes future changes and/or maintenance more manageable.
    HTH,
    Manish Patel
    Sr. SAP Solutions Consultant

  • Need help with Rules for mail accounts

    Today I deleted a rule for a mail account and now I cant receive mail in 4 of 8 accounts. I'm not experienced with Mac's Mail program. Id there something you have to do for multiple accounts to recieve all mail? I can send but not receive.
    Help!
    ~ Tammy

    It's hard to believe that deleting a rule could have a bearing on the ability to receive messages from any account... unless that rule did something that prevented subsequent rules to process the messages that you apparently can't receive now.
    That is, either having deleted the rule has absolutely no bearing on your problem, or the problem is that those messages are now being processed in an unexpected way by some of your other rules.
    What type of accounts are these (POP, IMAP, .Mac)? What does "I cant receive mail in 4 of 8 accounts" mean?

  • Need driver (*.inf) files for HP OfficeJet 5610 All-in-one

    I am setting up a print server and it needs *.inf driver files for my HP OfficeJet 5610 All-in-one printer. Where can i find them? I've installed the drivers on my PC, but they come as *.exe files that will not extract to give the *.inf files. Can anyone help?

    Hello, First I would like to say that I dont like what HP does, I dont want all your software cloging up my computer. What I want if for the hardware I have purchased from you to work the way I want to. Nothing more nothing less. Please give your customers the chance to pick the software they want and not fill up the pc with trash.
    PlanoStar You will find the x86 inf file in the Windows XP Package, it about an 68mb download, just extract EP-CDB-enu_NB.exe using Winrar.
    And ofcourse after the hours spent, with HP trolling you, you would think you are done. Think again. Microsoft will pick up the tradition with some Install x86 Medea ntprint.inf BS. to solve this problem download the files needed from here.
    It will save you hours instead of mounting AIO images and whatever.
    Ps. I have just registered with HP with the sole reason of making this post, and I would just like to say that hp support is rubbish.

  • Do I need to download drivers for an HP 8600 all in one printer after upgrading to Mavericks from Mountain Lion?

    I am about to upgrade my Mac's OS from Mountain Lion to Mavericks.   I recently networked to my Mac on our home wireless network an HP 8600 all in one printer/scanner and an HP LaserPro 127.   I saw a note posted in a non-Apple forum stating that the Mavericks upgrade should include the drivers needed to run these products on Mavericks.   Is that correct or will I need to download a new set of drivers from HP after I upgrade to Mavericks?
    Any guidance would be appreciated.

    Hi mcubed33,
    Welcome to the Support Communities!
    The article below may be able to help you with this.  Click on the link below for more information:
    OS X: Printer and scanner software available for download
    http://support.apple.com/kb/HT3669
    Apple delivers third-party software for scanners and printers using Software Update. To set up your printer or scanner, just connect it to your Mac. If software is needed and available, OS X automatically downloads and installs it.
    This article is a comprehensive list of currently supported printer and scanner models and associated software provided by third-party vendors as of 23 January 2014.
    OS X Mavericks: Set up a printer
    http://support.apple.com/kb/PH14143
    Cheers,
    - Judy

  • I have iMac G5.  Need VGA adaptor for display port.

    I have an old iMac Power Mac G5 8.2.  I need a VGA adapter for display port so we can use it in our TV studio in my elementary school.  What kind do I need to get?
    Mini-DVI and mini-display don't fit.

    2nd Display Support:
    Mirroring Only*
    2nd Max. Resolution:
    1024x768*
    Details:
    Apple reports that this system has a "VGA output port for video mirroring on an external display or projector", and supports output resolutions of "640 x 480 pixels at 60Hz, 800 x 600 pixels at 75Hz and 1024 x 768 pixels at 75Hz". However, the hardware is capable of using an external display in dual or "extended desktop mode", Apple just blocked the capability in firmware to protect sales of more expensive Macs. Unsupported third-party hacks are available.
    http://www.everymac.com/systems/apple/imac/specs/imac_g5_2.0_20.html
    The port is actually Mini-VGA...
    http://www.amazon.com/s/?ie=UTF8&keywords=apple+mini+vga+to+vga&tag=googhydr-20& index=aps&hvadid=7263599887&hvpos=1t1&hvexid=&hvnetw=g&hvrand=157245001668280529 38&hvpone=&hvptwo=&hvqmt=b&hvdev=c&ref=pd_sl_3j1o7iu5si_b

  • Exempt small set of users from ACE rules (PCUI)

    Hello: we have a requirement to restrict access to data within the Lead
    and Opportunity transactions for internal employees.
    Our business rule is that only those employees that are a partner on
    the lead, or on the sales team on the opporutnity, can have access to
    the transaction.
    This question is about a small set of users that need to be exempt from
    this ACE rule: headquarters administrative personnel.
    All users will use the PCUI user interface to access these transactions.
    Can you advise: what is the best practice for exempting the
    headquarters personnel from these ACE restrictions?
    We have considered creating a separate, non-ACE-relevant security role
    for the headquarters/exempt personnel, but are concerned that this
    approach will be a security maintenance headache over the long term.
    Thank you for your help. -Matt

    Hi Matthew,
    A parallel layer to ACE is unnecessary. ACE can handle different set of users through the classified user groups. These groups can accomodate the Read/write/no authorizations very well. All you require to do is some configuration for usergroups and then some coding in OBF, AFO and AFU classes.
    Hope this helps.

  • [SOLVED] Help needed with iptables rule with unusual setup

    Hi I recently setup hostapd on my netbook so I could share a wireless network with my phone and I'm having trouble because my netbook is also hosting a Jetty sever (Subsonic media streamer).
    My setup is as follows
    [CABLE MODEM]===[WIRED ROUTER]=====[NETBOOK] ))))) [PHONE]
    The wired router provides the DHCP server.
    On my netbook I created a (br0) bridge between eth0 and wlan0 and started hostapd. That all works fine when I'm not trying to host my Jetty server on my netbook.
    The netbook has the IP 192.168.0.8
    The phone has the IP 192.168.0.6
    I do not want to give the Jetty server root permissions just so it can run on port 80. So instead I start it instead on port 4040 and then use a iptables rule to redirect connections to port 80 to port 4040.
    Before I setup hostapd on machine I used to use the following.
    iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 4040
    However when I'm using hostapd and try to access websites on my phone its web browser is ALWAYS REDIRECTED to my jetty server. I'm not really surprised at this as the rule I mentioned above is for any destination or any source.
    I tried this rule:
    iptables -t nat -A PREROUTING -d localhost -p tcp --dport 80 -j REDIRECT --to-ports 4040
    This didn't work. On my phone I could access websites as expected but nobody (tried external from network and internally) could access the jetty server on port 80. Does anyone know why this rule doesn't work?
    I tried this rule:
    iptables -t nat -A PREROUTING \! -s 192.168.0.6 -p tcp --dport 80 -j REDIRECT --to-ports 4040
    This rule worked (Redirect port 4040 connections to port 80 if the connection isn't from my phone). But this is NOT very good at all as it means I would need a separate rule for every wireless device that connected to my netbook (via hostapd). Also if the IP address of my phone ever changes this rule becomes useless too!
    Does anyone have any ideas?
    Any help would be greatly appreciated.
    Thanks.
    Last edited by delcypher (2010-07-24 20:17:35)

    Well looks like I fixed my own problem.
    I added a LOG target in the PREROUTING chain like so
    iptables -t nat -A PREROUTING -p tcp --dport 80 -j LOG --log-prefix 'cheesy-redirect'
    iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 80
    When I looked at /var/logs/everything I noticed this.
    dan-netbook kernel: cheesy-redirectIN=br0 OUT= PHYSIN=eth0 MAC=00:26:18:73:ea:28:00:09:5b:5d:0a:33:08:00 SRC=178.102.41.92 DST=192.168.0.3 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=51411 DF PROTO=TCP SPT=48219 DPT=80 WINDOW=49640 RES=0x00 SYN URGP=0
    The destination is 192.168.0.3 ! Which is very very weird. This the IP address I had told my router to give my eth0 card in the past when I wasn't using a network bridge (br0). I was connected to the network using 192.168.0.8 on br0. The eth0 interface wasn't assigned an IP address.
    192.168.0.3 was also the IP address I setup for static port forwarding (which I forgot about) so when I accessed my jetty server from outside my network all packets would of been forwarded to 192.168.0.3
    I should never of received those packets as I was 192.168.0.8 not 192.168.0.3 at the time of logging so how I even received these packets is a mystery to me. Maybe the router software is buggy
    Fixing was pretty straight forward I changed the port forward to go to 192.168.0.8 and then tried connecting to the jetty server externally and noted in the log
    cheesy-redirectIN=br0 OUT= PHYSIN=eth0 MAC=00:25:d3:46:4d:0d:00:09:5b:5d:0a:33:08:00 SRC=178.102.41.92 DST=192.168.0.8 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=65326 DF PROTO=TCP SPT=33597 DPT=80 WINDOW=49640 RES=0x00 SYN URGP=0
    So the correct redirect rule is
    iptables -t nat -A PREROUTING -p tcp --dport 80 -d 192.168.0.8 -j REDIRECT --to-ports 80
    which works nicely
    One last question though. Does anyone know how I can use a hostname rather than 192.168.0.8 which points to whatever the IP address of br0 is set to? localhost points to 127.0.0.1 so that doesn't work.

  • Need to Export Outlook for Mac emails to Outlook in Windows

    I need to get back to my windows system from mac. I am using Outlook 2011 for Mac right now (all my orders are received by mail) and need to shift to windows system because of constantly glitch in mac. Earlier I was using windows system and I could easily migrate my outlook windows emails to outlook mac, but the opposite process just doesn't seem to work. I am just reversing the previous orderbut the emails from outlook mac won't import in outlook windows.
    Please suggest the solutions.
    It will be very helpful.

    Try this tool that i found apple store:-
    Olm to pst converter ultimate

  • ACE: Different Sticky rules for different URLs

    Is there a way to apply different sticky rules (or no sticky at all) depending on the URL for a given site under ACE?
    The reason I want to do this is because I have an extremely common URL that chews up sticky resources when it doesn't matter if the URL is sticky. We have several thousand PC's that have a web based screen saver on them that just pull random pages to be displayed on the users' screen when the screen saver kicks in. These pages do not need to be sticky but other pages on the same farm need sticky. Is this possible?
    Casey

    Create a more specific Layer 7 class map and instead of calling sticky serverfarm use serverfarm.
    for example
    sticky http-cookie COOKIE STATIC
    cookie insert browser-expire
    timeout 5
    serverfarm WEBFARM
    serverfarm host WEBFARM
    rserver SV1 80
    inservice
    rserver SV2 80
    inservice
    class-map match-any APP1-VIP
    2 match virtual-address 10.86.178.160 tcp eq http
    class-map type http loadbalance match-all Condition1
    2 match http url .*
    3 match http header Host header-value 172.16.31.*
    4 match http header User-Agent header-value .*MSIE.*
    class-map type http loadbalance match-all Condition2
    2 match http url .*
    policy-map type loadbalance first-match L7_COOKIE_STATIC
    class Condition2
    sticky-serverfarm STATIC
    class Condition1
    serverfarm WEBFARM
    policy-map multi-match CLIENT_VIPS
    class APP1-VIP
    loadbalance vip inservice
    loadbalance policy L7_COOKIE_STATIC
    loadbalance vip icmp-reply active
    loadbalance vip advertise active
    Syed

  • What cables do I need to connect my 2013 macbook pro to my HD tv? I know I need mini display to HDMI, but male? female HDMI??? and also, do I need a separate cable for sound?

    what cables do I need to connect my 2013 macbook pro to my HD tv? I know I need mini display to HDMI, but male? female HDMI??? and also, do I need a separate cable for sound?

    Actually you need a Thunderbolt to HDMI adapter. It will carry both audio and video.
    This one will work: Mini DisplayPort | Thunderbolt® to HDMI® Adapter w/ Audio Support

  • Advice needed - multiple monitors, what software is right for this?

    I have an Intel Mac Pro (10.6) at work with 4 monitors, with screen sharing activated. I have an Intel mac Pro (10.6) at home with 2 monitors. I'd like to be able to do screen sharing, and the clients I've tested so far are driving me nuts - I can't figure out how to see all the monitors (one at a time if need be). What's the right solution - will ARD allow me to see the other monitors conveniently, or do I need Mobile Me, or ?? Advice would be greatly appreciated.
    thanks,
    Mike

    Hi Mike
    If the remote computer has multiple screens attached, ARD gives you the option to show all as one large screen or individual 'sessions' for each screen.
    ARD 3 features here-
    http://www.apple.com/remotedesktop/upgrade.html

  • Need help choosing processor and display for X240 please

    I'm about to purchase an X240 today or tomorrow and, after doing multiple forum searches and reading a 67-page X240 thread elsewhere, I would really appreciate some help choosing a processor and a display. If it makes a difference, I've decided on:
    *Windows 7 Pro 64 bit
    *8GB of RAM
    *256GB SSD
    I intend to use the laptop for viewing/editing Word documents and Powerpoint presentations, streaming movies, and streaming recorded lectures. I'm not sure what lecture viewer/player my school uses yet, but I do know that it has options to play the lectures at accelerated speeds (1.5x, 2x, etc.) and that I will definitely need to use this feature. I'm not computer literate enough to discern whether the processor type has any effect on this. I will use an external drive if I need to download and save any lectures. I also plan to do some infrequent and basic photo editing with Windows Photo Gallery and MS Paint. I'm willing to pay extra for a smoother/faster experience, but I don't want to go with the i7 processor if it's overkill for my purposes or if there are other significant trade-offs besides price.
    As for display, I'm torn between the regular HD (1366x768) IPS Non-touch, regular HD IPS Touch, and FHD IPS Touch.  Re: HD vs FHD, I've been using a 1280x800 13.3" non-IPS display for the last 6 or 7 years, and I'm pretty happy with it except for the limited viewing angles. Wouldn't regular HD on a 12.5" screen be a step up in resolution? A lot of the reviews of the regular HD on the X240 express disappointment with the "low" resolution, but I don't know if it's really that bad, or if people just have much higher expectations/standards than I do. I'm leaning towards regular HD because my glasses are so strong that increasing the sharpness of what I see also has the side effect of making things appear smaller (minimization error), so I'd probably have to mess with text/DPI scaling if I went with FHD, which isn't a perfect solution from what I've read. I'd only consider getting a touch version if I need FHD (since it doesn't come in non-touch), or if it somehow makes the HD display sharper or more vibrant--I have no intention of actually using touch features.
    Apologies for the length, and thanks in advance for any advice! :-)

    Actually I have been doing further research and I personally would either go with the 2.6GHz NON RETINA MBP or cough up the cash and go all out on a 2.6GHz RETINA MBP and upgrade the RAM to 16GB  and upgrade to 768GB Flash storage, I am a student as well so will get a discount which will help.
    My fears are that if I get the Retina model I will not be able to upgrade it even further, I want to keep the computer for at least a good 5 years, during those 5 to 8 years will the current upgrades be enough to keep up with the top games and programs etc? Also I have read that repairing the Retina display model is very diffcult  and it can malfunction commonly, so I am guessing I should get apple care on top of it just to be sure with this particular model?
    I am assuming that they they will bring out the new models out next year and all the chinks and bugs of the current Retina model will be fixed so to speak, of which I have read there is a few... Would it be worth buying the NON RETINA MBP and then selling and upgrading to an improved RETINA MBP model next year?
    Finally if i back up my files on a hardrive would I have to use the USP SUPER DRIVE to install files onto the RETINA MBP or can i directly do this without the USP SUPERDRIVE?
    Thanks

  • I need a ac adapter for a cINEMA DISPLAY 23 "

    I need a ac adapter for a cINEMA DISPLAY 23 "

    Here is the long thread on this issue. Two suppliers are mentioned somewhere in the heap, but please see my ordering summary in my second post there of 03-21-2008. Good luck!
    http://discussions.apple.com/thread.jspa?messageID=6050853&#6050853

  • Need to bypass Material substitution rule for SO created through RFC

    Hello SAP Geniuses,
    I have an external process that creates Sales orders using a RFC calling BAPI_SALESORDER_CREATEFROMDAT2.
    My Users want to create orders for Materials that have substitution rules defined, but they want to bypass these rules when the Sales Orders are created from the external process. Other Users in the same Sales Organization and Distribution Channel need the substitution rule to sell these materials, so config cannot solve this.
    I have already tried detecting when  VBAP-MATNR NE VBAP-MATWA  and calling BAPI_SALESORDER_CHANGE with the original MATNR, but the same substitution occurs in this FM.
    Can anyone point me to a User Exit or BADI that can add flexibility to the Material Substitution mechanism in SD module?

    Jack,
    You are a genius!
    These are the steps I followed to implement this idea:
    1) VOFM -> Requirements -> Material determination -> New rule in the 800 series
    2) Insert code into rule with SSCR key; Activate code; Activate rule.
    3) Run utility program RV80HGEN to create rule in FG V61D -> SAPLV61D -> LV61DNNN -> RV61DNNN -> RV61D8xx
    4) SPRO-> Sales and Distribution -> Basic Functions -> Maintain Prerequisites for Material Determination -> Maintain procedure -> select procedure -> double-click "Control data" -> enter rule into box "Requiremnt". Save.
    5) SPRO-> Sales and Distribution -> Basic Functions -> Assign Procedures To Sales Document Types -> select doc type of interest -> enter procedure name into field "MatDeterm." for doc type. Save.

Maybe you are looking for

  • Best practice for creating RFC destination entries for 3rd parties(Biztalk)

    Hi, We are on SAP ECC 6 and we have been creating multiple RFC destination entries for the external 3rd party applications such as Biz-talk and others using TCP/IP connection type and sharing the programid. The RFC connections with IDOC as data flow

  • How can I creat a dynamic chart legend?

    Will,I want to show multi hosts' dynamic CPU performance (the host ip can be changed).I use those code below for a test: <mx:Application xmlns:mx="http://www.adobe.com/2006/mxml" layout="horizontal" backgroundColor="0xFFFFFF" initialize="init()">    

  • Styling Spry Gallery Captions Within Photos.xml

    My Spry gallery is working just fine other than I'd like to use italics within some of my image captions. I noticed this line of code in photos.xml. <italics font = "georgia"> </italics> I'm wondering if this alludes to the fact that I should be able

  • Using ActiveX to access DirectDraw - where are the Type libraries?

    Hi all. I am trying to poll the monitor to find out when information is written to the screen for a psychophysics exeriment. I have seen the discussion at: http://forums.ni.com/t5/LabVIEW/Implenting-WaitForVerticalBlank/m-p/432112?query.id=74374#M212

  • How come I cannot retrieve the note contents in the Notes Folder

    I was able to read the contents in the NOTES FOLDER yesterday morning.  But by noon time when I tried to retrieve some infor from the NOTES Folder, the folder was 'BLANK" and then went off. Pls advise what happen and how to retrieve the contents in t