Need help in security model !!

Hi All,
I am new to the security api-s provided by java. Can anyone tell me how I can define policy and security context in java. Is there any api for that??
Let me tell u , what exactly I need. I want to implement Role Based Access Control in my application. I want to give some privileges to my users in accesing methods of an object.How can I do that?
Thanks in advance,
Shruti

Similar Messages

HT5621 Need help for security question. I forgot passwrd rescuee email. How to reset rescuee email?

Need help for security question. I forgot passwrd rescuee email. How to reset rescuee email?

How to reset your Apple ID security questions.
Go to appleid.apple.com, click on the blue button that says 'Manage Your Apple ID'.
Log in with your Apple ID and password. (If you have forgotten your Apple ID password, go to iforgot.apple.com first to reset your password with a password recovery email)
Go to the Password & Security section on the left side, and click on the link underneath the security questions that says 'Forgot your answers? Send reset security info email to [email]'. This will generate an automated e-mail that will allow you to reset your security questions.
If that doesn't work, or there is no rescue email link available, then click on 'Temporary Support PIN' that is in the bottom left side, and generate a 4-digit PIN for the Apple Account Security Advisor you will be contacting later.
Next, go to https://getsupport.apple.com
(If you see a message that says 'There are no products registered to this Apple ID, simply click on 'See all products and services')
Choose 'More Products & Services', then 'Apple ID'.
A new page will open.
Choose 'Other Apple ID Topics', then 'Forgotten Apple ID Security Questions'.
Click the blue 'Continue' button.
Select the contact option that suits your needs best.

Hi, I need help to secure my linksys wireless router, i tried the setup guide but i didnt work..

hello
I need help securing my linksys wireless router with speed boosters. In august me and some friends took over this rented house, and with the house we got their old internett system, we use a linksys router, This nett is open for everyone, but we want to secure it for other users. We didnt get the manual and i've tried the guide on your site but it says it cant be changed. The old owners didnt either know what to do. Is there some help i can get with this? Is there some buttom i can push to reset it and then make it possible?

Connect your computer using wire to router. Open setup page of router by typing http://192.168.1.1 in browser's address bar, and typing password as "admin" and no user name, if admin doesn't work reset router and do above step again. Go to wireless tab, here change wireless network name from linksys to any other name. Save the settings. Go to wireless security sub-tab here change security mode to WPA personal etc, and enter you secret key in passphrase/shared key, Save the settings.This secret key will be security key of your wireless network.

Need help with Toshiba model 42TL515U TV FAN

I recently had an error message pop up on the tv that says the tv fan went out. The tv has worked perfectly since i purchased it untill now. I'm very unhappy about it since i have taken great care of it the entire time and it is not my fault but toshibas for selling me the tv with a faulty internal fan and OF COURSE it tells me fan went out after my warranty just ended. I need help, answers and customer support because this is rediculous...

If there truly is a fan in the TL515U you can easily open up the TV, look at the fan specs, and replace it.
I bet the fan used in it are the ones used in computers.

Need help w/Securing a Complete Directory

I have an application that which has a simple backend db to
"login". The URL is connected with an "https://" and it goes to the
login screen with the username and password just fine and displays
what I want. However if I copy and paste the URL into another
browser window it displays the page w/o asking for the username and
password. How do I fix this???
I also have an "error.cfm" page but it doesn't seem to work
effectively. Need help and ideas please! URL (s) in question are
listed below.
Thanks!
https://www.ext.colostate.edu/mg/staff/login/login.cfm --
Login Page -- when I enter the username and password all is good -
it display the page called.
https://www.ext.colostate.edu/mg/staff/index.cfm
now 1 of 2 issues. If I copy and paste the index.cfm page I
get your basic "error" - I have the following CFIF statement on the
index.cfm page
<CFIF IsValidLogin.Login_Match IS "0">
<CFLOCATION
URL="https://www.ext.colostate.edu/mg/staff/login/login.cfm">

<CFELSE>
<CFSET Session.LoggedIn = "1">
<CFLOCATION URL="../index.cfm">
</cfif>
2nd problem. I get into the page all is fine but if I click
on anything that is connected to a pdf, doc, etc.... and copy and
paste the URL into another browser it displays and I don't want it
to. (example:
https://www.ext.colostate.edu/mg/staff/CurrUnits/CMG/018ANS-HW-CMG.pdf)
HELP! What do I need to change. Thanks to all who respond in
advance.

"sarathy", I think (but don't quite KNOW just yet!!!) that I need to type into my browser's location bar as a part of the url for the jsp the "webapps" folder which is under the main installation for Tomcat! And, to quote your last posting to me "hey before you test your clock.jsp... can you see the examples of tomcat ?.. if not there is a problem in tomcat installation.. may be setting paths and stuff. Do you know on which port you installed ?.. the def is 8080 try http://localhost:8080/", I can answer with a resounding YES to being able to see and execute all of the various jsp and servlets, so maybe I will counter what I earlier indicated in my last post that there is something basicly wrong with my Tomcat installation, like it being installed into the wrong folder.
No, like I said up above, i think that if I only make sure I type into the web browser's location bar the "webapps" folder first, then the "jsp" folder, then finally the name of the particular jsp file which I choose to work with, then I will be quite okay on being able to consistently see my jsp whenever I want to. Please respond back to me if you agree/concur with my analysis or maybe you don't and wanna give me an alternative method of doing this. I will gladly even listen to a different approach to doing this because I am getting pretty desperate with my efforts to "get it right" with being able to execute either a jsp or a servlet.

Need help with Data Model for Private Messaging

Sad to say, but it looks like I just really screwed up the design of my Private Messaging (PM) module... *sigh*
What looked good on paper doesn't seem to be practical in application.
I am hoping some of you Oracle gurus can help me come up with a better design!!
Here is my current design...
member -||-----0<- private_msg_recipient ->0------||- private_msg
MEMBER table
- id
- email
- username
- first_name
PRIVATE_MSG_RECIPIENT table
- id
- member_id_to
- message_id
- flag
- created_on
- updated_on
- read_on
- deleted_on
- purged_on
PRIVATE_MSG table
- id
- member_id_from
- subject
- body
- flag
- sent_on
- updated_on
- sender_deleted_on
- sender_purged_on
***Short explanation of how the application currently works...
- Sender creates a PM and sends it to a Recipient.
- The PM appears in the Sender's "Sent" folder in my website
- The PM also appears in the Recipient's "Incoming" folder.
- If the Recipient deletes the PM, I set "deleted_on" and my code moves the PM from Recipient's "Inbox" to the "Trash" folder. (Record doesn't actually move!)
- If the Recipient "permanently deletes" the PM from his/her "Trash", I set "purged_on" and my code removes the PM from the Recipient's Message Center. (Record still in database!)
- If the Sender deletes the PM, I set "sender_deleted_on" and my code moves the PM from the Sender's "Sent" folder to the "Trash" folder. (Record doesn't actually move!)
- If the Recipient "permanently deletes" the PM from his/her "Trash", I set "sender_purged_on" and my code removes the PM from the Sender's Message Center. (Record still in database!)
Here are my problems...
1.) I can't store PM's forever.
2.) Because of my design, the Sender really owns the PM, and if I add code to REMOVE the PM from the database once it has a "sender_purged_on" value, then that would in essence remove the PM from the Recipient's Inbox as well!!
In order to remove a PM from the database, I would have to make sure that *both* the Recipient has "purged_on" value and the Sender has a "sender_purged_on" value. (Lot's of Application Logic for something which should be simple?!)
I am wondering if I need to change my Data Model to something that allows my autonomy when it comes to the Sender and/or the Recipient deleting the PM for good...
One the other hand, I believe I did a good job or normalizing the data. And my current Data Model is the most efficient when it comes to saving storage space and not having dups.
Maybe I do indeed just need need to write application logic - or a cron job - which checks to make sure that *both* the Sender an Recipient have deleted the PM before it actually flushes it out of my database to free up space?!
Of course, if one party sits on their PM's forever, then I can never clear things out of my database to free up space...
What should I do??
Some expert advice would be welcome!!
Sincerely,
Debbie

rp0428,
I think I am starting to see my evil ways and where I went wrong...
> Unfortunately his design is just as denormalized as yours
I see that now. My bad!!
> the last two columns have NOTHING to do with the message itself so do NOT belong in a normalized table.
> And his design:
>
> Same comment - those last two columns also have NOTHING to do with the message itself.
Right.
> The message table should just have columns directly related to the message. It is a list of unique messages: no more, no less.
Right.
> Mark gave you hints to the proper normalized design using an INTERSECT table.
> that table might list: sender, recipient, sender_delete_flag, recipient_delete_flag.
> As mark suggested you could also have one or two DATEs related to when the delete flags were set. I would just make the columns DATE fields.
>
> Once both date columns have a value you can delete the message (or delete all messages older than 30+ days).
>
> When both flags are set you can delete the message itself that references the sender and the message sent.
Okay, how does this revised design look...
MEMBER --||-----0<-- PM_DISTRIBUTION -->0-------||-- PRIVATE_MSG
MEMBER table
- id
- email
- username
- first_name
and so on...
PM_DISTRIBUTION table (Maybe you can think of a better name??)
- id
- private_msg_id
- sender_id
- recipient_id
- sender_flag
- sender_deleted_on
- sender_purged_on
- recipient_flag
- recipient_read_on
- recipient_deleted_on
- recipient_purged_on
PRIVATE_MSG
- id
- subject
- body
- sent_on
Is that what you were describing to me?
Quickly reflecting on this new design...
1.) It should now be in 3rd Normal Form, right?
2.) It should allow the Sender and Recipient to freely and independently "delete" or "purge" a PM with no impact on the other party, right?
Here are a few Potential Issues that I see, though...
a.) What is to stop there from being TWO SENDERS of a PM?
In retrospect, that is why I originally stuck "member_id_from" in the PRIVATE_MSG table!! The logic being, that a PM only ever has *one* Sender.
I guess I would have to add either Application Logic, or Database Logic, or both to ensure that a given PM never has more than one Sender, right?
b.) If the design above is what you were hinting at, and if it is thus "correct", then is there any conflict with my Business Rule: "Any given User shall only be allowed 100 Messages between his/her Incoming, Sent and Trash folders."
Because the Sender is no longer "tightly bound" to the PRIVATE_MSG, in my scenario above...
Debbie could send 100 PM's, hit her quota, then turn around and delete and purge all 100 Sent PM's and that should in no way impact the 100 PM's sitting in other Users' Inboxes, right??
I think this works like I want...
Sincerely,
Debbie

Need help about 2948g model by s/n FOX0529011C

Help please to understand what model of 2948g series switch have serial number FOX0529011C I would like to bay this one,but i don't know what is this (I need onlu 2948g-layer 3 model). The seller don't know too
Thank you

Hi again,
Problem solved, here is what I did:
*An Https service is required, go the transaction SMICM, click GoTo->Services,
*If no https service is listed, create one (port = 443),
You can check SMICM trace file in order to make sure sapcryptolib settings (profile parameters etc.) are correct:
[Thr 8700]   profile param "ssl/ssl_lib" = "C:\usr\sap\...\exe\sapcrypto.dll"
           resulting Filename = "C:\usr\sap\...\exe\sapcrypto.dll"
[Thr 8700] =   found SAPCRYPTOLIB 5.5.5C pl26 (Mar 6 2009) MT-safe
[Thr 8700] =   current UserID:xxxxx
[Thr 8700] =   found SECUDIR environment variable
[Thr 8700] =   using SECUDIR=C:\usr\sap\...\sec
[Thr 8700] = Success    SapCryptoLib SSL ready!
[Thr 8700] =================================================

Need help with Security when running AS3 inside browser

Hi,
I am fairly new to flash, but a fairly experienced
programmer.
I have created a game that runs perfectly and communicates to
a WinSock server over port 4000 to publish its final score to.
Using simple XMLSocket and Send.
When I run the game in the standalone flash player everything
works perfectly as it should
However when I embed in a HTML page or similar it goes wrong.
The game works fine, but the final posting to the WinSock socket
server fails. I have retrieved the error message.
ioErrorHandler: [SecurityErrorEvent type="securityError"
bubbles=false cancelable=false eventPhase=2 text="Error #2048"]
My server is a local server to me running IIS 6. Everything
runs fine by the standalone flash player so I know ports are clear
and firewalls are not the problem.
Searching around google and forums I have found out that in
9,0,124,0 (the flash I am running) that they made some security
enhancements, namely you need to post a crossdomain file.
My file is sat in the wwwroot of my webserver where my flash
swf is hosted and looks like
<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
</cross-domain-policy>
I have also tried adding the following to the 1st section of
the swf file
Security.loadPolicyFile("
http://mydomainname.com/crossdomain.xml");
I have tried all conbinations, but I cannot get the flash to
communicate to the socket server when it inside a web browser.
If i run it in the standalone player, everything works
perfectly.
Can someone help me please. I have been googling and ripping
my hair out for ages. This is the final stage of my project and I
am failing at the final step.
Just to add.
My server and testing computer are on the same domain, the
web server is a win2003 server and my testing and coding server is
a XP machine running IE7. They are linked by a ADSL router sharing
the same external IP address but via DHCP addressing. Everything
works fine for port forwarding of the winsocket port.
Just to emphasis, I believe this setup is correct, as it all
works fine when I run in the flash player.
Many thanks

I fixed it eventually.
In flash 9.0.124.0 they now force you to have a socket XML
server running on port 843 a server somewhere if you wish to use
XMLSocket inside a browser.
Nothing to do with domain or crossdomain.xml files.
You need to also call
Security.loadPolicyFile("xmlsocket://x.x.x.x:843") before you
open the socket.
to load in the XML that defines what is allowed.
Search google for AS3 and socket server port 843 and you will
find examples and even a simple Java based server to use.

Need help to read model node input field attribute present in view - first time developer.

Hello Experts,
I am new to CRM Web UI development.
Presently, I am trying to develop a Guided Activity Page having 2 views.
First view has the field Business Partner Number, I have added model Node BuilHeader and the attribute BP_NUMBER while creation of the view.
The Second View consists of 2 fields from the Model Node BuilHeader, namely First Name and Last Name.
The requirement is to enter the BP Number on the first screen then click on the NEXT button from the Guided Activity buttons, on navigating to the Second View, the Names should auto-populate.
I have Created both views and the GP page, the GP navigation is also happening. Initially the fields were showing Not Bound text in value, so I commented the line in GET_I and GET methods to enable the field and remove the Not Bound text. I have created a custom controller with BuilHeader
I have tried doing this but facing the below problems :
1) When I enter the BP number on the first view and press Enter, the value disappears. How to solve this ?
2) Does clicking on the NEXT button on the GP Navigation trigger a Server Roundtrip ?
3) How to read the context node value of BP Number entered on the first view and populate the Name fields on the second view.
Please help.........

you can take reference from from below code as in above case we use BuilHeaderAdvancedSearch search object, to get current entity.
data: query TYPE REF TO cl_crm_bol_dquery_service,.
query ?= me->typed_context->BuilHeaderAdvancedSearch->collection_wrapper->get_current( ).
Do not remove code from getter setter of fields , it will not clear.
Check with http://scn.sap.com/thread/3391203 , for basic understanding of UI.
Regards,
Harish Kumar

Need help identifying which model G4 I have

I've been trying to figure out which G4 I have but have gotten a little confused by this article:
http://docs.info.apple.com/article.html?artnum=42739
Given my model # (M8570) and given that there are only 2 firewire ports it should be a MDD. But, in the table on the link in the Processor(s) row it says its a dual processor. When I go to the System Profiler it shows 1 processor.
I don't think mines a dual. I think its a 1.25 GHz single.
Is the table wrong or am I not reading it right?
Thanks
Tom

Thanks, and thanks Rodney too. I'll ignore the tag on the case and dive inside. FYI I bought the machine from CDW on 5/13/04.
I'll pop it open a little later but I have a question about the reliability of the profiler. I have another post in the 10.3.9 section asking about why my MS Office apps aren't showing up in the apps section and now the sales order stuff being missing.
Where is the info that the profiler is displaying coming from? This is what's listed in the Hardware Overview:
Machine Model: Power Mac G4
CPU Type: PowerPC G4 (3.3)
Number Of CPUs: 1
CPU Speed: 1.25 GHz
L2 Cache (per CPU): 256 KB
L3 Cache (per CPU): 1 MB
Memory: 768 MB
Bus Speed: 167 MHz
Boot ROM Version: 4.4.8f2
Serial Number: YM4118ECPC1
And in the Firewire section it lists only the 400 mb/sec bus.
The only 1 CPU 1.25 GHz 167 MHz bus config I've seen (like in MacTracker) would make this an MDD 2003. If that turns out to be the case, then the whole problem is the tag on the case.
I'll post back what I see inside.
I really appreciate all the help. The reason behind this search is 1) because I will probably be selling the unit soon (have a mini) and 2) we're having trouble getting a Sonnet wireless card to work. In both cases having an accurate description helps.
Tom

Need help with DVD model/Firmware update info

I am sorry to post here but have found no other way to try and get help or information about a Toshiba, (supposedly) slim style internal DVDRW unit, TS-632H, for our computer. The label on the unit says Toshiba Samsung, and the complete number on the label is Tsst corp CDDVDW TS-632-H. (This is what is also shows in Device Manager/Properties for the unit. We are trying to find the (real) model of this unit so we can determine the firmware version to make sure we have the latest version on the unit and to see if there are any specific drivers for the unit. Thank you for your help and again, sorry if this may be the wrong forum and maybe directing us to an appropriate forum would be appreciated if there is such one. Thank you.
Message Edited by Cmptrguy on 04-12-2009 04:11 PM

The information you see in the Device Manager is correct. If you can furnish the full model# be of great assistance. There, try this-- Free Download TSST DVD Drive Firmware for Toshiba Notebooks You should be concerned that the driver is up to date as it more of an asset to you.

Need help with security

Hi. I'm new to this list, and pretty new to web services. I'm
currently trying to apply security to an existing application, and
i've been studing the tutorials at sun web
(http://java.sun.com/webservices/docs/1.4/tutorial/doc/). In the
simple sample, in the build.xml file, there's a 'gen-server' target
which i believe creates ties of the service, right? Well, i do the
same step in my application (just before packaging into a raw war
file), and move all the generated files, together with my server
compiled classes, to the WEB-INF dir. Therefore i have all that class
files in /WEB-INF/classes/hello (i'm doing this with a helloword
example). Included in those files, theres a file called
"HelloIF_Tie.class", which i assume is the tie for my service, created
by the 'gen-server' target.
After this i create a raw war file using the jar tool, and take the
generated file to a dir named "dist". Then i try to create a cooked
war file using the wsdeploy tool. However when i try to run the
application, the server seems to ignore any security options i have
configured. Looking into the deployable war file i found that it had
generated quite a few more class files
(HelloIF__HelloService__Tie.class between them), and that in the
jaxrpc-ri-runtime.xml file there was the following line:
tie='hello.HelloIF__HelloService__Tie'
This seemed a bit strange to me, since i believed that my tie file was
HelloIF_Tie.class. Therefore, i tried something: changing that line
for
tie='hello.HelloIF_Tie'
And packaging all into a war file again with the jar tool, everything
runs fine. However its kind of boring doing this every time i change
the server code. So my question is...
is it possible to tell the wsdeploy tool not to generate any tie
files, and use the ones existing in the raw war file???
is there any other solution to my problem???
Im sorry if these questions are stupid, but im still quite novice with
jwsdp and i dont know if im doing things right. Thank you very much.

CQAndroid, help is here! I am familiar with this feature and use it with my own laptop and iPhone and well. It's a great feature! It forwards all of your text messages to your phone and Macbook, if you like. There's a few steps to try. First go to your iPhone Messages settings (Settings > Messages > iMessage) and turn off iMessages and turn it on again. Then go to the iMessages Settings on your Mac and do the same. Also make sure to activate your telephone number in the iMessages settings on your Mac. Try this and keep us posted please. Thanks!
KristieQ_VZW
Follow us on Twitter @VZWSupport
If my response answered your question please click the "Correct Answer" button under my response. This ensures others can benefit from our conversation. Thanks in advance for your help with this!!

Need help re: LX835 models

Hi, wuld appreciate input as I am far from a tech person
Not sure how long the price and 'pay over time' will be available at snbc so If yu can help I would be grateful
I didn't consider Toshiba until recently
2 models - and I am confused
lx835-d3215 & lxd3207
1. LX835-3215 vs. D3207 - $50 difference in price 'today'
2. looking at both descriptions at the website - snbc -these are the differences I found
a. 3215: no tv tuner & has touchscreen
vs. 3207 tv tuner - doesn't seem to be a touchscreen, yet being fairly new to market find that 'odd' so I am not sure if there is a mistake on description page
b. 3215 - Intel® Core™ i5-3210M 2.5GHz Processor
3207 - Intel® Core™ i7-3610QM Processor
Don't know the difference between the 2 processor's & how much this should effect our decision
the last difference between the 2 that I could find
3215 has windows 8
3207 windows 7 w/upgrade
Both: 6gb ram & 1 tb hd
the all in one is all we will have - so the purchase is important to us
we don't have tablets, laptop, etc. this will be 'it'
Yur help is greatly appreciate
p.s. since this will be our only puter - I think having a tv tuner is important as well as having a touchscreen
as it will be a long time before we purchase another computer - part of my confusion between these 2 models, since both fairly new - i'm confused that the LX835-D3207 isn't touchscreen or maybe snbc is incorrect on their description page. frustrating - so your help means alot to us!

I'm new to the community. I was unable to keep checking over the evening. I just saw in my mail box
'yu received a private msg' I don't see the msgs.?
update -Found it - being new to forum - msg. from the Admin.
Re: Question/touchscreen?
I think the model I mentioned - that the info. wasn't there that it was a toucscreen - don't think it is.
I am confused, though - at PC Magazine - which gave an overall good review on the Toshiba All in One - --- seems these are both fairly new to Market - surprising the model doesn't have touchscreen yet has a tv tuner.
Re: Processor
Still interested to learn what is the difference
between - Intel® Core™ i7-3610QM Processor and Intel® Core™ i5-3210M 2.5GHz Processor
pls. don't laugh but I thought the higher # i.e. i7 = the newer version?
Re: Computer/knowledge
I have tried to learn in preparing for when we culd purchase . thru pc mag & cnet, it can be overwhelming
***special note: This is a friends puter so I likely won't have after Mon. 11.5.12 & then culd be until end of Nov. beginning of Dec. before i'll have again.
If someone culd answer --- very grateful.

Need help with security design!

Hi,
I haven't worked with security design very much. Currently I'm about to develop an application to my father which should implement some sort of security.
One of the reasons for this application besides making my father happy is educating myself.
The application is an online image album.
The security could be divided in role-based security and instance level security.
Role-based (NO PROBLEM):
A user cannot delete another user, an administrator can delete users.
Instance-level (DON'T KNOW HOW):
A user can load other users image albums if he/her is allowed/granted to view the album and its images. Note that the user could be granted to view the album, but not all of its images.
My problem is how I should design the "instance-level" security? Should I keep a ACL (Access Control List) with each instance of album and image?
This seems to be a common functionality to add view/load/read/write permissions to an instance in runtime to let a certain user to operate on an asset?
Have searched the Internet but haven't found any nice framework to help me.
Could anyone with some experience please help me out?!
Kind regards, Andreas

Hi,
I ran into the same problem. Could you resolve it?
please give me your feedback.

Need help on security projects

Hi,
we are small network providers. we supply routers, switches, firewalls and also do configurations.
now we are interested in big size projects. For that I want to know, what security projects include?
please provide me full details about security projects. If possible some real time project details.
help would be appreciated in advance.
Regards
skrao

check out the SAFE blueprints on Cisco web site.
http://www.cisco.com/en/US/partner/netsol/ns340/ns394/ns171/ns128/networking_solutions_white_papers_list.html

Need help in security model !!

Similar Messages

Maybe you are looking for