New user access issue

i have one business user which i have added through EAS and this user is in MSAD and added into one of the group in Native directory. This users group has access to planning application provision and i can see him in this group and has access to the planning application. but when he tries to connect through essbase addin he can not connect to the planning databse.
Thanks in advance for the reply.

I am using the planning version 9.3.1 and first i tried to add the user from EAS and update the security but when user complained about the access i went to shared service and first remove him from the group refreshed the security and then i add him in the group from the shared service. the other users in the same group dont have any problem and this user can access other database but he can not connect to the specific one database only. Also the error says that user has not permitted access to the database.
Thanx john.

Similar Messages

New user Access

How to give the new user access for Hyperion Planning application.Please provide any document for application access.

Duplicate: User access

How to invalidate old sessions when new user access appl on same machine

hi all,
I am using Mozilla browser to access my web application.User one access my application using his credentials .but i left that browser open.after that I am opening the another Mozilla window and accessing my application using different credentials ex:user2 credentials .user 2 also can access my application.but when i open the first browser ..am automatically getting second user session.how can we avoid this problem.
Application is using session identifier(jSessionID) as the URL parameter for session management.
is it possible to invalidate the old session when new user access on same machine.
thanks,
Vishnu

VishnuReddy wrote:
hi all,
I am using Mozilla browser to access my web application.User one access my application using his credentials .but i left that browser open.after that I am opening the another Mozilla window and accessing my application using different credentials ex:user2 credentials .user 2 also can access my application.but when i open the first browser ..am automatically getting second user session.how can we avoid this problem.That shouldn't occur. Either you explained it the wrong way (or I interpreted it the wrong way), or there's huge bug in your login/logout logic. After opening another window inside the same session, you should still be logged in as the first user.

New user--first issue last night

Last night one of my video podcast was playing in my ipod like a song and not a video. It was showing a small square with video and words beside it? Don't understand why this happened. Has anyone had this experience. I had to resync a few times to make this video disappear. Issued resolved itself but as a new user this made me very nervous. Thanks

Are you accessing the video podcast through Video - Video Podcast? Also make sure that under Video Settings, TV Out is set to Off.

New user - Some issues I want to resolve

I purchased my mac 2nd hand about 6 weeks ago (24" Mid 2007, 2.4GHz Core 2 Duo, 4GB RAM) and got it home and set it up and everything has been working flawlessly. Also purchased a magic mouse & trackpad which have also been working fine.
I received an email last night from a friend with some PDF docuements for work, and since then I have been having some issues. Dont know if this has any relevance whatsoever or just completely coincidence.
Issues I have encountered so far are :
1) I noticed was my trackpad was real laggy, to the point of unusable.
2) I can hear a buzz/hum which I never used to hear, hard to tell if it's the optical drive or hard drive, but something sounds like it is constantly spinning - im a bit anal about things like this and it really bugs me, especially as it wasnt doing this before
3) My WiFi connection is proving to be problematic coming from sleep / cold boot. If I click on the WiFi icon in the taskbar it will not display any available networks and just says "looking for networks". If I then click on "Join network" > "Show Networks" this then shows me available networks. If I then choose my network, it takes a long time (about 30-60 seconds) to display the WPA2 password box. I then enter my password and I see the icon in the taskbar goto a full 5 bars, but the screen where I enter my password still says "Connecting..." and eventually results in a "Connection failed!" even though the connection is actually there and I can browse the internet.
4) Generally feeling "laggy", eg opening System Preferences can take 30+ seconds
What I have tried to do to fix these problems
1) Unpaired and repaired which seems to of rectified the issue
2) Finding it hard to differentiate if the hum is from optical or hard disc. If I hold my hand on the back of my Mac I can feel vibration close to the centre, by the stand support.
Have tried running Disk Checker to see if it identifies any S.M.A.R.T errors but all came back ok. It did find some faults with Disk Permission's which I fixed.
3) This is the one that is really annoying me and have tried several recommendations found on the internet, including ;
Turning wifi on/off
Turning router on/off
Changing settings in energy saver
Removing saved wifi networks / re-adding
Removing passwords from keychain
Updating to OS X 10.8.5
4) As I am a new user, I do not fully understand what I am doing yet, but I have opened up the Activity Monitor and noticed that there is a high CPU load quite consistently (also back of mac appears quite hot to the touch). I have noticed that parentalcontrolsd seems to be consuming a lot of CPU time, even though I dont have parental controls on. It is usally 80%+ CPU. Also ocspd appears to be quite a cpu hog too (constant 20-50%)
This all happened on Friday 13th! lol
Any help with any of the above would be appreciated.

In Activity Monitor, select the processes with the high CPU use and quit them using the Quit button at the top left.
Also try a restart.

WebLogic 10.3.0 WLI Domain - Microsoft AD administrator user access issue.

Hi SOA Experts,
We are facing issue of getting noaccess exception on console (below) when doing datasource testing using Microsoft AD administrator user. The same works fine when testing using WLS embedded LDAP administrator user in WLI domain. In plain WLS 10.3.0 domain (without WLI) with same Microsoft AD configuration they do not see this issue, they are able to successfully test data source using both embedded WLS administrator and Microsoft AD administrator user.
I enabled security ATN and ATZ debug flags and below is my observation.
In plain WLS 10.3.0 domain I see that default weblogic administrator user in embedded LDAP is part of administrators group. Microsoft AD administrator user is part of Administrators group from MS AD.
Whereas in WLI domain I see that default weblogic administrator user is part of Administrators & IntegrationAdministrators groups. In WLI domain Administrators group is again part of IntegrationAdministrators group (below is debug logs).
Below is Plain WLS Domain Debug log
####<Dec 6, 2010 5:20:14 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)
'> <<WLS Kernel>> <> <> <1291674014123> <BEA-000000> < Subject: 2
Principal = weblogic.security.principal.WLSUserImpl("weblogic")
Principal = weblogic.security.principal.WLSGroupImpl("Administrators")
Below is WLI Domain Debug Log
<> <1291669863989> <BEA-000000> <XACML Authorization isAccessAllowed(): input arguments:>
####<Dec 6, 2010 4:11:03 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <>
<> <1291669863989> <BEA-000000> < Subject: 3
Principal = weblogic.security.principal.WLSUserImpl("weblogic")
Principal = weblogic.security.principal.WLSGroupImpl("Administrators")
Principal = weblogic.security.principal.WLSGroupImpl("IntegrationAdministrators")
The issue of Microsoft AD administrator user not able to test datasource in WLI domain seems to be happening because of IntegrationAdministrators group which comes by default with WLI domain (in plain WLS domain we do not have this group). Looks like the datasource which is being created in WLI domain seems to be being treated as WLI resource and user accessing it is being checked if it part of IntegrationAdministrators group. In this case weblogic default administrator user is part of IntegrationAdministrators, for which we do not see issue where as Microsoft AD administrator user which is not part of IntegrationAdministrators seems to be having problem.
Below is snipper of Microsoft AD administrator user in Debug logs
####<Dec 6, 2010 4:13:31 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <>
<> <1291670011687> <BEA-000000> <XACML Authorization isAccessAllowed(): input arguments:>
####<Dec 6, 2010 4:13:31 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <>
<> <1291670011687> <BEA-000000> < Subject: 2
Principal = weblogic.security.principal.WLSUserImpl("MSADAdminUser")
Principal = weblogic.security.principal.WLSGroupImpl("Administrators")
Also one more observation about datasource which is created is in plain WLS & WLI domain created datasource resource type is shown as “jdbc” which is expected, but in addition in WLI domain I observe that created datasource resource type is marked as JMX and DS is being considered as application (below), not sure if this has something to do with the issue.
Below is WLS domain debug log, below you can see that datasource is being treated as JDBC resource which is expected.
####<Dec 6, 2010 5:21:03 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1291674063776> <BEA-000000> <com.bea.common.security.internal.service.AccessDecisionServiceImpl.isAccessAllowed Resource=type=<jdbc>, application=, module=, resourceType=ConnectionPool, resource=testDS, action=reserve>
Below is WLI domain debug log, below you can see that datasource is being treated as application and it says resource type as JMX
####<Dec 6, 2010 4:12:17 PM EST> <Debug> <SecurityAtz> <slsol10> <AdminServer> <[ACTIVE] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1291669937755> <BEA-000000> < Resource: type=<jmx>, operation=get, application=testDS, mbeanType=weblogic.j2ee.descriptor.wl.JDBCDataSourceBean, target=Name>
I created user in embedded LDAP in WLI domain with same name as MS AD administrator user and assigned it to Administrators group, that obviously works but is not acceptable solution.
Below is exception thrown on console when testing datasource using Microsoft AD administrator user.
weblogic.management.NoAccessRuntimeException: Access not allowed for subject: principals=[MSADAdminUser, Administrators], on Resource weblogic.management.runtime.JDBCDataSourceRuntimeMBean Operation: invoke , Target: testPool at weblogic.rmi.internal.ServerRequest.sendReceive(ServerRequest.java:205) at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:222) at javax.management.remote.rmi.RMIConnectionImpl_1030_WLStub.invoke(Unknown Source) at javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.invoke(RMIConnector.java:978) at weblogic.management.jmx.MBeanServerInvocationHandler.doInvoke(MBeanServerInvocationHandler.java:544) at weblogic.management.jmx.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:380) at $Proxy92.testPool(Unknown Source) at com.bea.console.actions.jdbc.datasources.testjdbcdatasource.TestJDBCDataSource.begin(TestJDBCDataSource.java:114) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at org.apache.beehive.netui.pageflow.FlowController.invokeActionMethod(FlowController.java:870) at org.apache.beehive.netui.pageflow.FlowController.getActionMethodForward(FlowController.java:809) at org.apache.beehive.netui.pageflow.FlowController.internalExecute(FlowController.java:478) at org.apache.beehive.netui.pageflow.PageFlowController.internalExecute(PageFlowController.java:306) at
- BoyelT

This issue has been resolved.
The problem of Microsoft active directory administrator user not able to test the datasource in WLI domain is caused because of IntegrationAdministrators group & IntegrationAdmin role which comes in WLI domain. Assigning the Microsoft Administrator group to IntegrationAdmin role from WebLogic console has resolved the issue.
Below are steps for assigning the MS AD administrator group to IntegrationAdmin role from console in WLI domain.
======================================================
- Login to console and click on "Security Realms" and "myrealm"
- Go to "Roles and Policies" tab and expand "Global Roles" tree and "Roles" tree view under it.
- Click on "View Role Conditions" link for "IntegrationAdmin" role.
- Click on "Add Conditions" button select Group (default) for "Predicate List" drop down box and click Next button.
- Specify MS AD admin group name for "Group Argument Name" text box and hit on Add button.
======================================================
- BoyelT
Edited by: BoyelT on Dec 20, 2010 1:36 PM

CUIC Scheduler user access issue

This one has me stumped.
We recently finished an upgrade for a client that included a transition to a new virtual environment. I built out two 9.1.1 clusters, and did a disaster recovery restore from the old prod systems into the new prod system. After much foul language we got everything working, except an issue with runnihg scheduled reports.
If a superuser makes an edit to the report, like changing the scheluded run time, a normal level user can no longer make a change to the report. The superuser has to then delete the report, and the user recreate it. Even with the new reports, if the superuser makes a change, it locks out the user.
This is CUIC 9.1.1, and I am not seeing anything strange in the web interface. My CUIC fu is weak here, so any help would be greatly appreciated

I see this behavior in CUIC 8.5 as well. The workaround is for the superuser to do a "Run As" (from Security -> User List) as the user who made the schedule, then edit the schedule from there. The schedule will then stay owned by that user instead of the superuser.
-Jameson

SAP Business One 8.81 PL08 Mobile APP CRM Standalone User Access issue

Dear All
Is any facing the problem of Mobile application user with CRM Standalone license ,this user always has a permission denied problem (he is assigned all the licenses required .and authorization on the SAP is full . SSL certificate is installed ). I have installed the troubleshooting (.zip) file which dosent show up the panel .
Any Idea how to resolve?
Regards
Dayal

Hi Dayal,
well, it is neither recommended, nor tested or supported. Such installation attempt would go on your own responsibility. Of course you can try if, for example, a newer version from 8.82 works here, but this should be tested extensively, depending on how other processe are based on it.
Actually your 8.81 PL08 should not have reported problem since B1if version 1.10.0 should have been included in this package and last update action, maybe you can check here again.
In general, we recommend you upgrade to version 9.1 currently, unlike version 8.81 this version is in maintenance and offers all improvements, new features and bugfixes from the last 3,5 years.
I'm sure it's worth to consider a general upgrade.
I wish you success!
Best, Peter

New User -- Security Issues

Hi folks,
... I just Installed Oracle 8i server enterprise version; configured another PC to access the server and all seem to work.
I created a database with a net name service testdb and I successfully log on as follows:
user : system
Password : manager
Host String : Testdb
I thenI created two users called User1 and User2 from the command line.
I am SQL Plus, and I need to execute commands to achieve the following:
i. Both users, User1 and User 2 should be able to create their own table, delete their own tables, insert or update, etc.
ii. User1 wants to assign rights to User2 so that User2 can insert, update and select from a table Tab1 created by
User1 but User1 should not be able to delete tables created by User2.
What I did, and Questions that I came up with? -- I will appreciate your help:
I logged on as system and executed:
SQL>grant connect to public;
but when User1 logged on to Testdb and tried to create a table, he got '...no privilege to tablespace "system"'
1. ??? Any command for a user1 to see tablespaces available to him?
2. ??? Is there a command to assign "tablespace" to each each user as an admin? And as a user to assign to a friend?
Later loggeg on as system, I gave User1:
SQL>grant dba to public;
Now User1 now create table tab1 when he logged on with Host string: Testdb.
With user1 connected, he executed:
SQL> grant select, update, insert on User1.tab1 to User2;
3. ??? User1 did not want User2 to be able to "drop" (delete) tab1 but user2 can -- User one only wanted User2 to be
able to insert, select, update but not delete the table. How do we prevent that?
4. ??? As I log on the same machine sometimes as User1 and as User2, sometimes I may not be sure of "whoami"
-- Does Oracle has the who am I command to show the current user?
5 ??? Also is there a command to see the current user's rights: privileges and roles?
Logged on as system again, I run the demobld.sql to be able to use the demo files.
but when User1 logs on, the demo tables were not available to him.
User1 then logged on an run demobld.sql and now he can use the demo tables
Later when logged on as User2, the demo files were not available and User2 had to run demobld.sql again to be
able to use them.
I then said to myself, if I could log on as user PUBLIC, then may be, I could run the demobld.sql and the demobld.sql
could be available to all, but then, can one logon with the user PUBLIC? What is the password for user PUBLIC?
6. ???The point is, is there any way to make all employees have a copy of their own(their modifications should not be
seen by others) demo tables without repeating the process as above for each person.???
Thanks.

1. ??? Any command for a user1 to see tablespaces available to >him? you can run this select statement to find outwhat tablespaces are available for you:
SELECT * FROM USER_TABLESPACES
when u create a user he shld be assigned to a tablespace named USERS and a temporary tablespace named TEMP
your create statement shld be :
CREATE USER USERNAME IDENTIFIED BY PASSWORD
DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP;
in order for you to create a table u shld have a disk quota on that tablespace:
CREATE USER USERNAME IDENTIFIED BY PASSWORD
DEFAULT TABLESPACE USERS TEMPORARY TABLESPACE TEMP QUOTA 5M ON USERS;
and should been granted the create table system privilege.
GRANT CREATE TABLE
TO USERNAME;
this shld solve ur problem 1.
3. ??? User1 did not want User2 to be able to "drop" (delete) >tab1 but user2 can -- User one only wanted User2 to be
able to insert, select, update but not delete the table. How do >we prevent that? a user cannot delete a record/s if he is granted :
GRANT INSERT, SELECT, UPDATE
ON TAB1
TO USER2
only, but look at your problem 2 you granted DBA to all users (PUBLIC) meaning your giving them everything. the reason why he can do anything in the db even dropping u as a user.
4. ??? As I log on the same machine sometimes as User1 and as >User2, sometimes I may not be sure of "whoami"
-- Does Oracle has the who am I command to show the current >user? u can type :
SQL> SHOW USER
at the prompt.
5 ??? Also is there a command to see the current user's rights: >privileges and roles? for OBJECT rights and privileges u can query the data dict views :
TABLE_PRIVILEGES
COLUMN_PRIVILEGES
for SYSTEM rights and privileges u can query the data dict views :
SELECT * FROM USER_SYS_PRIVS
SELECT * FROM USER_ROLE_PRIVS
I then said to myself, if I could log on as user PUBLIC, then >may be, I could run the demobld.sql and the demobld.sql
could be available to all, but then, can one logon with the >user PUBLIC? What is the password for user PUBLIC? you cant log-on as public, USER1 and USER2 are members of the public, if u wanted everyone to use one copy of the demo build u can just simply create a PUBLIC SYNONYM of those tables in the script file. u can just say:
CREATE PUBLIC SYNONYM SYNONYM _NAME
6. ???The point is, is there any way to make all employees have >a copy of their own(their modifications should not be
seen by others) demo tables without repeating the process as >above for each person.??? if thats ur plan u can install the demobild.sql to all the schema of ur users that is they take their own copy of the tables.
wish i was able to satisfy ur queries.
jully abuan manuel
philippines

LDAP/OID Users granting other users access issue

Hi,
I have created 4 users (User1, User2, User3, User4) and 2 groups (Group1 and Group2)
User1 is the Group1 owner and User2 is a member of Group1
User3 is the Group2 owner and User4 is a member of Group2
I have made both groups private.
I have given User2 manage privilege on a portal page and have logged in as User2 and edited the page.
When User2 tries to Grant access to the page, they can see all the users in the OID ie User1, User3, User4, Portal etc
My thoughts were that User2 would only be able to grant access to other users in his group(s).
Basically, I want to be able to control which users a user can grant access to on a page. Is this possible?
Thanks
Joel.

What about SSL or LDAPS !
Can't seem to find any java examples which would support services of type:
ldapbind -U 1,2 for java API !

New user with issues

I have photoshop Element 9 (new), down load went well. I am trying to use two photos an make one. Have issues, for one can not seem to get transfer to take place and second I keep getting kicked of the photoshop each time I try to edit. Any answers!!!!!!

Where did you download it from?

Multiple SAP User Access Issue?

Dear Expert,
SQL Express 2005
Wndows Server 2003
Client PC RAM 1GB
Server RAM 16GB
SAP Version 8.8 PL15
14 Store Procedure
When multiple user connected with SAP (Logedin) at that time any user add any SAP document then all remaining user hanged approx 2 min after successfully add all user working normally.
Please Suggest me as early as possible
Thanks,
Srujal Patel

Hi Srujal.......
This is purely due to heavy customization may be thorugh Addon or through Stored Procedure.
Try nullifying effect of these 14 Stored Procedures and DC Addons if any and then ask users to add the documents. I am sure they wil work normally. This may happen because of FMS also.......
Regards,
Rahul

New user Audio issues

We just got Apple TV and are having an issue with audio. The problem happens when we try to switch back to DirecTV we don't get audio. We're using an Optical Digital Audio Cable.

not sure what directv is but sounds like your issue is with the receiver and not with the appletv to me

New user email issue

I purchased a MacBook Pro today. I followed all the setup directions and can receive email but cannot send it. Roadrunner is my email provider. It shows the outgoing server is offline. I have verified the setting is not offline. I added my gmail account and it works, but it sends everything through the gmail server, showing it came from my gmail account, even when it was originally sent from the roadrunner account. I've tried all the fixes I have found but nothing is working. Sure could use some help.
Thanks.

Scott,
Thanks for the reply. No, that didn't help. But I did call Roadrunner, who checked that all was working correctly on their end. They advised they have been seeing similar problems with the 10.5 version and that Applecare had been able to change some of the settings to fix the problem. So I called Applecare who had me uncheck the SSL box on the outgoing server and change the authentication to none. Works like a champ now. Thanks again for your response.

New User - Install Issue to Production Server

We purchased CR 2008 and the server license. We purchased from CDW and my IT guy sent me a Link to an install.
I am developing with VS 2008, Sequel Server 2005 and ASP.NET.
Is there another install for the Server? When I run the program on the Server I get an error message.
Could not load file or assembly 'CrystalDecisions.Web, Version=12.0.2000.0, Culture=neutral, PublicKeyToken=692fbea5521e1304' or one of its dependencies. The system cannot find the file specified.

I am considering dumping CR even if I have to eat the $2K I just paid. Please assist...
The duplicate CR menu items have been fixed once I uninstalled and reinstalled. So Thanks...
Now my original problem of CR not working on my production box is still with me.
I started to Copy the dlls from my Local to Production using the 'Copy To Local' function in VS 2008. Now I am getting the error below.
Looking on my production box, i don't see any of the versions 12.0.2000.0.
C:\WINDOWS\assembly
' Error From Browser
The system cannot find the file specified.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.Runtime.InteropServices.COMException: The system cannot find the file specified.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
Stack Trace:
[COMException (0x80004005): The system cannot find the file specified.
   CrystalDecisions.ReportAppServer.ClientDoc.ReportClientDocumentClass.Open(Object& DocumentPath, Int32 Options) +0
   CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.Open(Object& DocumentPath, Int32 Options) +95
   CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.EnsureDocumentIsOpened() +356
[CrystalReportsException: Load report failed.]
   CrystalDecisions.ReportAppServer.ReportClientDocumentWrapper.EnsureDocumentIsOpened() +419
   CrystalDecisions.CrystalReports.Engine.ReportDocument.Load(String filename, OpenReportMethod openMethod, Int16 parentJob) +884
   CrystalDecisions.CrystalReports.Engine.ReportDocument.Load(String filename) +84
   WebApplication1._Default.Button1_Click(Object sender, EventArgs e) in C:\DotNet\teast_cr1\WebApplication1\Default.aspx.vb:15
   System.Web.UI.WebControls.Button.OnClick(EventArgs e) +111
   System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +110
   System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10
   System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13
   System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1565
Edited by: john_ms_d on Jul 18, 2011 9:36 PM

New user access issue

Similar Messages

Maybe you are looking for