OBIEE 11g:Restrict Admin user (Weblogic) to upload certain set of files

Hello All,
We are running OBIEE 11.1.1.7.1 on local machine. We have a requirement which should limit Weblogic (Admin user) to upload .exe, .bat, .dll file etc or any such unwanted file in catalog or should only be able to upload required files. I am struggling to achieve this.
Could any one help us in this?
We do not want to remove upload permission from Weblogic user.
Thanks in advance.
Regards,
Andy

its not possible to restrict only certain type of files. the only option you have is to take out upload privileges for weblogic user and then follow the manual process of copying the catalog items like opening the catalog manager(offline and online) and copy the required items as required,So in that you way you can restrict the copy of other extensions apart from .catalog
by the way may i know who is that person who want to upload the other extension files into catalog folder with Admin user? Because only couple of them will have access to weblogic user to be able to make or do any changes.

Similar Messages

Restrict regular users to use only certain ldm command options

I would like to restrict regular users to use only certain ldm command options, for example only list, bind/unbind, stop/start
What is the best practice to do it?
Thanks

Solution provided by one of my colleagues:
Installing sudo and configure sudoers file "User privilege specification" section similar to the following example:
# User privilege specification
root ALL=(ALL) ALL
user1 host1 = /opt/SUNWldm/bin/ldm ls *
user1 host1 = /opt/SUNWldm/bin/ldm stop *
user1 host1 = /opt/SUNWldm/bin/ldm stop -f *
user1 host1 = /opt/SUNWldm/bin/ldm start *
user1 host1 = /opt/SUNWldm/bin/ldm bind *
user1 host1 = /opt/SUNWldm/bin/ldm unbind *
**Note*: asterisk should be at the end of each row. They are not displayed in the posted message...*

New OBIEE 11g Installation - Cannot start weblogic

Hi Everyone,
Hoping someone can help,
I have just install OBIEE 11g on Windows XP, when I click 'start BI services', I receive the following error when trying to start Weblogic.......
JAVA Memory arguments: -Xms256m -Xmx512m
+.+
WLS Start Mode=Production
+.+
CLASSPATH=C:\MIDDLE~1\ORACLE~1\modules\oracle.jdbc_11.1.1\ojdbc6dms.jar;C:\Middl
ewareHome\Oracle_BI1\bifoundation\jdbc\jdk16\bijdbc.jar;;c:\MIDDLE~1\patch_wls10
+35\profiles\default\s.....etc+
+<Aug 31, 2011 2:58:29 PM BST> <Critical> <WebLogicServer> <BEA-000386> <Server s+
ubsystem failed. Reason: weblogic.security.SecurityInitializationException: Auth
entication denied: Boot identity not valid; The user name and/or password from t
he boot identity file (boot.properties) is not valid. The boot identity may have
been changed since the boot identity file was created. Please edit and update t
he boot identity file with the proper values of username and password. The first
time the updated boot identity file is used to start the server, these new valu
es are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot i
dentity not valid; The user name and/or password from the boot identity file (bo
ot.properties) is not valid. The boot identity may have been changed since the b
oot identity file was created. Please edit and update the boot identity file wit
h the proper values of username and password. The first time the updated boot id
entity file is used to start the server, these new values are encrypted.
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.do...etc...
+<Aug 31, 2011 2:58:29 PM BST> <Notice> <WebLogicServer> <BEA-000365> <Server sta+
te changed to FAILED>
+<Aug 31, 2011 2:58:29 PM BST> <Error> <WebLogicServer> <BEA-000383> <A critical+
service failed. The server will shut itself down>
+<Aug 31, 2011 2:58:29 PM BST> <Notice> <WebLogicServer> <BEA-000365> <Server sta+
te changed to FORCE_SHUTTING_DOWN>
The above considered, my guess is that I need to add the correct username and pasword to a file somewhere (possibly boot.properties?)
Would anybody be able to provide instructions on how to do this? i.e. I'm not sure on the format of info to be entered and which uname/password weblogic might need.
Having looked in the Middleware Home, it looks as though weblogic is wlserver_10.3
Any advice appreciated.

Hi,
I am not sure on windows but on Linux, I run the below command first time and it then stores the password in boot.properties.
startWebLogic.sh -Dweblogic.management.username=weblogic -Dweblogic.management.password=<PASSWORD> -Dweblogic.system.StoreBootIdentity=true &
If I memory is correct, the boot.properties are under the domain.... ~/AdminServer/security/ folder.
Cherrish Vaidiyan

OBIEE 11g BI Admin tool not working on Windows 7 64bit - Any alternative???

Hi Experts,
I installed OBIEE 11G on Win 7 64 bit after a long struggle it went well but the admin tool is not starting..........After a search in the forum i came to know that 64 bit os can run obiee client tools. is there any work around for this? I don't want to move to 32 bit os again after taking this much struggle in installation.............can any one suggest me an alternative to work with admin tool. Using VMware 32 bit windows is an option but I don't want to go with it.
Bellow is the screen shot of the error.
http://img42.imageshack.us/img42/9389/biadmintoolerror.png
Thanks in advance,
DK
Edited by: user12296343 on Sep 19, 2010 6:28 PM

"There is currently no standalone, Windows 64‐bit Oracle Business Intelligence Client Tools installer, however the Windows 32‐bit Oracle BI client tools are compatible with 64‐bit Windows platforms per the certification document."
Source: Oracle Business Intelligence Developer Client Tools Installer (11.1.1.3.0)
http://download.oracle.com/otn/nt/bi/111130/biee_11.1.1.3_client_install_README_13_JAN_2011.pdf
The Certification Document: System Requirements and Supported Platforms for Oracle Business Intelligence Suite Enterprise Edition 11gR1
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/bi-11gr1certmatrix-166168.xls
Tab: Current System Certificatin
Row: 46

OBIEE 11g installation stuck at step 12 of 14 (0% copying files...)

Hi All,
I am installing OBIEE 11g on Windows7 32Bit OS.
I have done with all the steps till step 11 without any error. However, ASA it starts the step 12 (i.e. Configuring WebLogic- Copying files...), installation stuck at 0% and do not continue. I waited for 8-10 Hrs but it never started copying files.
Also, I tried the installation numerous times, but every time I got the same problem.
I verified the logs as well, but there was no error.
Please help me to resolve the issue.
Regards,
Ashish

Yes, I got an idea, install OBIEE in a supported platform as your it's not supported at the moment:
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/bi-11gr1certmatrix-166168.xls

How to restrict contributor users to edit only few set of pages

Hi All,
We wanted to restrict some of the contributor users to edit only few set of pages,
is that possible to implement ?
Can somebody please give some pointers
Thanks
Hari

I was looking for a hint in the documentation and could not find any. This means that either it is something obvious (not to me, unfortunately), or this concept is not native to the Site Studio. This means that all contributors are equal - at least, the section http://docs.oracle.com/cd/E21764_01/doc.1111/e10614/c01_intro.htm#i422918 seems to be written in that way.
What could you try?
This section, http://docs.oracle.com/cd/E21764_01/doc.1111/e13650/ssxa_creatingsites.htm#CIHGGCFB , suggests that all contributors are assigned the role WCMContributor. There is probably no finer distinction than that a user has this role or not.
Then, each of used objects (namely, region definitions, native/contributors files) have its metadata. You could try to give read-only access to those contributors who won't edit the region.
Last thing, which looks the most promising, but also the most complicated, is that you will dynamically change the region template, based on a user logged in (a sort of self-defined contrib mode). An example can be found in this thread: Display Contributor Regions dynamically (note that the example is about languages, you will need to implement your own logic!)

Upload a set of files from presentation server to app server.

Hello,
I need an urgent help.
I know how to use GUI_UPLOAD fm for simple file uploading.
However, my requirement is that in my report program(on selection screen) I give the source directory(presentation server) and the target directory
(application server). The report has to get all the files from the presentation server (from this source directory) and has to upload each file to the application server in the target directory.
Could anyone please help me in this?
It would be very helpful if anyone can put the code / standard example if there is any mechanism in ABAP to get the set of files from the presentation server, given the directory name.
THanks a lot for your help,
Best Regards,
Pramod S.

HI Pramod,
After you get the data into the internal table, you need to pass the internal table, record by record into the application server.
data: wa_file type string.
data: tab_file like table of wa_file,
pcount type i.
CALL METHOD CL_GUI_FRONTEND_SERVICES=>DIRECTORY_LIST_FILES
exporting
DIRECTORY = 'C:\test'
FILTER = '.'
FILES_ONLY = 'X'
DIRECTORIES_ONLY
changing
FILE_TABLE = tab_file
count = pcount.
loop at tab_file into wa_file.
clear it_data.
refresh it_data.
CALL METHOD CL_GUI_FRONTEND_SERVICES=>GUI_UPLOAD
exporting
FILENAME = wa_file
changing
data_tab = it_data.
open dataset <filename> for output in text mode encoding default.
if sy-subrc = 0.
loop at it_data.
transfer it_data to <filename>.
endloop.
close dataset.
endif.
endloop.
Thanks,
Ravi Kanth

Repost:: OBIEE 11g BI Admin tool not working.

Hi, could anybody give me any ideas on this?
I installed 11g on my machine in a Windows 7 environment but am unable to start the BI Administrator.
I do "start Bi services" and get two command windows, one says server started in RUNNING mode, the other says server started in ADMIN mode
when I click on BI Administration I get an error window that says Oracle BI Administration tool has stopped working
All help is appreciated.

"There is currently no standalone, Windows 64‐bit Oracle Business Intelligence Client Tools installer, however the Windows 32‐bit Oracle BI client tools are compatible with 64‐bit Windows platforms per the certification document."
Source: Oracle Business Intelligence Developer Client Tools Installer (11.1.1.3.0)
http://download.oracle.com/otn/nt/bi/111130/biee_11.1.1.3_client_install_README_13_JAN_2011.pdf
The Certification Document: System Requirements and Supported Platforms for Oracle Business Intelligence Suite Enterprise Edition 11gR1
http://www.oracle.com/technetwork/middleware/bi-enterprise-edition/bi-11gr1certmatrix-166168.xls
Tab: Current System Certificatin
Row: 46

OBIEE 11g issue - same user assigned to the multiple application role

Hi All,
We are facing an issue when assigning a user to the multiple application role and applying the data level filter on the different column of the same table.
For example, we have a table Department with three columns Department No, Department name, Department location.
Application Role A1 and A2 are created.
Data Level security Applied on the application role A1: Department Name='Finance'
Data Level Security Applied on the application role A2: Department location='US'
The user "User1" is created in LDAP and is assigned to both the Application roles A1 and A2.
When logged in with "User1", none of the filters of Role A1 or A2 is applied in the report. If this user is assigned to only one role, either A1 or A2, then the filter is applied. It seems the filter will not be applied if a user belongs to multiple roles with data filter applied on the same table across these roles.
Please reply if anyone has faced similar issue.

Hi All,
Regarding the above issue to update the analysis we came up that the user if assigned to the multiple group with the data filter applied on the same column of the table is getting an *"OR"* join.
We had a requirement to get an "AND" in the query condition. Please let us know if any one faced the issue and the resolution of the same.
Regards,
Jyotshna

How groups are assigned in OBIEE 11g if a user is present in more security

Suppose we have security provider1 & provider2 having the same user. If provider 1 is in top of list and it have group 1 assigned to the user1 , then how can i get group2 assigned to user1 in provider2?

The problem was with user filter.

Installing OBIEE 11g on an existing Weblogic on OEL 5 64 bit

Hi All, I'm trying to install OBIEE11g on a machine where Weblogic server, SOA SUite, BAM and MPM are already installed.
The OS is OEL5 64 bit.
As per the installation guide I need to go with the "softare only" installation type.
I do, It pass all the pre-check, but when it ask me to select the meddleware home, and I select the middleware home with all my other fusion componentst it comes with this error:
INST-07407: unable to detect machine platform or jvm bit
Java is installed, JAVA_HOME is settet, running java version it comes with the right one.
Any help is really welcome.
Thanks
Cla

Ok, I've found the cause of the problem. I was using the java version shipping with the OS
#java -version
java version "1.6.0_17"
OpenJDK Runtime Environment (IcedTea6 1.7.5) (rhel-1.16.b17.el5-x86_64)
OpenJDK 64-Bit Server VM (build 14.0-b16, mixed mode)instead of a supported version downloaded from Oracle website:
#java -version
java version "1.6.0_23"
Java(TM) SE Runtime Environment (build 1.6.0_23-b05)
Java HotSpot(TM) 64-Bit Server VM (build 19.0-b09, mixed mode)Cheers,
chris

How to restrict end-user from not using certain movement-types in MB1B

Dear Gurus,
My client wants that end user has access to only particular movement types in MB1B.i.e only to 311 and 412,421E.
They do not want any other movement types to be access by end-users in MB1B
How to go about this requirement?
Thanks in advance
Regards
Ram
Edited by: RAMKUMAR WARIYAR on Jun 27, 2009 2:14 PM

hi,
This is possible you can restrict and allow user for movement type which they can do through any t code.
Contact yours BASIS consultant for that
Regards,
Vishal
Edited by: VS on Jun 27, 2009 5:46 PM

Restrict SAP user ID login on certain PC

Hi,
Is there a way to restrict the SAP user ID to login only on certain PC?
Example User ID A can only login at computer A. He cannot login SAP if he using computer B.
Kindly please advise. Thank you.

Hi Li,
Find below two steps: a) To track the user in SAP with any number of logon's and other to restric user from a single login prespective:
Single PC login:
Implement Note 748424.
All logons are then entered with the terminal ID, the user ID, the SAP GUI version, patch level and how many time logged in.
e.g.
Terminal ID User Operating System SAPGUI Version Patch Level Logins
PC111555 USER1 WINDOWS 710 22 7
Tracking user in SAP with multi logins:
It is possible to track the audit log filters using SM19 transaction code. Once the filter is applied, the system will start tracking all the activities of the users (Based on the options you select in the filter.)
You can further use SM20 transaction code to analyze the audit logs where you can find the user login/logout time, transaction executed by the user, amount of time he spent in each screen etc.,
As the audit logs occupy more space, you should be careful while choosing the filter option. The old audit logs can be deleted using SM18 transaction code.
There is also a background system house keeping job that deletes the old logs from the system.
Do let me know if this helps you.
Thanks
Madhu

Create a user in OBIEE 11g

Hi,
I am new to OBIEE 11g.Can any one help to create an user?I mean to say when he types that URL,the user login screen comes and he can use his own user ID and password to do the same.
Regards,
Mainak

Mainak,
To create a new user you have to use the weblogic server admin console.
For example, http://hostname:7001/console.
Here is a good link that explains how to do this.
http://varanasisaichand.blogspot.com/2011/03/obiee-11g-security-creating-users-and.html
Adil
Please assign points if the answer is helpful

Obiee 11g How to let user change password

obiee 11g How to let user change password ？
i not mean use weblogic console。 normal user how to change password。

With 11g, OBIEE essentially uses the 10g notion of external authentication.
By default, this is done by the WLS (Weblogic) LDAP identity store, but it may be done by another supported Authenticator either within WLS, or in the OBIS meta data (i.e. Custom Authenticator or LDAP). As such, OBIEE no longer has any control over user passwords; this is why the steps referenced in note 1102353.1 do not apply to OBIEE 11g, but only to internal/repository-defined users in OBIEE 10g.
So, as with password maintenance in OBIEE 10g when an external authenticator is used, it is within that external authentication system that password is changed, not within OBIEE 11g. There is no option in OBIEE 11g to allow users to change passwords.
There are two work-arounds with which you can change your password:
1) From the Weblogic administration console/WLST.
You need to give such user access into Weblogic console or access to browse through involved MBean hierarchy and other modify permissions. Changing the password using WLST instance is covered here:
Ideally, the console and WLST approaches are used by Administration accounts to manage other users. But the console and WLST can be made to allow other users to change passwords (which will be more or less like carrying out an administrative task by users themselves)
2) Using a programmatic approach.
Here the application that intends to provide password change functionality to its users should implement this functionality on its own (GUI plus call to the relevant Weblogic API). Weblogic provides an MBean that the application can use to accomplish this. See here for more information.
An enhancement request exists for this functionality. This is unpublished bug 11836170 - enable non admin users to change passwords in obiee 11g.

OBIEE 11g:Restrict Admin user (Weblogic) to upload certain set of files

Similar Messages

Maybe you are looking for