Outline access permissions in Planning
Is there any way of having a report of the permissions than are given to the outline members in Planning 9.2.0.3 (via Administration->Dimensions->Assing Access).
We want something like:
Product
100 user1: read, user2: write
100-10 user2: none
100-20 user2: read
100-30
200 user3: none
Or something like:
Product
100 user1: read(idescendats), user2: write(idescesdants)
100-10 user2: none(member)
100-20 user2: read(member)
200 user3: none(idescendats)
...
Hi,
Here is an example of SQL query that retrieves permission information, just run it against you planning database.
It has been wrote for SQL server but can easily be modified for Oracle.
SELECT usr.object_name as Username,mem.object_name as Member,
'Access Rights' = CASE acc.access_mode
WHEN -1 THEN 'None'
WHEN 1 THEN 'Read'
WHEN 2 THEN 'Write'
WHEN 3 THEN 'Write'
ELSE 'Unknown' END,
'Relation' = CASE acc.flags
WHEN 0 THEN 'Member'
WHEN 5 THEN 'Children'
WHEN 6 THEN 'Children (inclusive)'
WHEN 8 THEN 'Descendants'
WHEN 9 THEN 'Descendants (inclusive)'
ELSE 'Unknown' END
FROM
hsp_access_control acc, hsp_object mem, hsp_object usr
WHERE acc.object_id = mem.object_id
AND acc.user_id = usr.object_id
-- AND mem.object_name = 'optional by member name'
Cheers
John
http://john-goodwin.blogspot.com/
Similar Messages
-
Filter and general access issues from planning to essbase
Hi all,
V 9.3.1 Planning
I am working on a planning system where the business owners would like to restrict the lock and sending of data via smartview. Basically, users are bypassing parts of planning and going directly to essbase rather than forms. They had individual user filters setup but they would like to move to groups. I am using the importsecurity utility to try and achieve this. However, the access granted and filters are producing the following behaviour
1)Group has essbase write access - if this is enabled there appears to be unrestricted access via smartview. Take it away and #NoAccess appears despite security being applied to certain members using the importsecurity utility. I have read that this can be a bit of a loose canon when granted and conflicts with filters.
2) Cannot create filters - I wish to remove all user filters from within planning. However, the importsecurity sl_clearall command doesn't clear them (as I thought it would but appear to be wrong). I cannot create any filters. An error appear saying 'Failed to create Security Filters for the following users: xxxx' Is it possible to delete the filters?
3) If I refresh the security filters I get errors saying 'the following filters could not be created' but they are in EAS (I deleted all filters before hand). I have run the updateusers utility which tidied up msad users but still errors are reported.
The objective is to restrict each group to be able to write to the permitted part of the application and read where necessary. The permissions in planning need to match essbase.
I would appreciate any help.
Thanks,
Nathan
p.s this is the same app relating to the thread about the application owner posted yesterday for those who viewed or commented :)Knowledge base had some useful articles on this.
Edited by: NathanG on 07-Jan-2011 03:14 -
READWRITE VS WRITE Access Permissions - Dimension/Dataforms
Hi,
From what I know there are 3 types of access permissions for dimensions, dataforms etc - READ, WRITE, NONE (none is the default). I wanted to know if there is any difference between READWRITE and WRITE access permission.
The thing is when I exported the security using the ExportSecurity.cmd utility I observed that dimensions set manually in Planning were showing READWRITE as access permission where as, those dimension/members that were given access permission using a security file were showing WRITE.
Ofcourse in security file we did mention it as WRITE so it showed up but for dimensions set manually it was showing READWRITE - why is this difference? Is READWRITE the right way of mentioning the access permission?
Please let me know.
~ Adella
Edited by: Adella on Sep 16, 2011 6:49 AMThe correct values to use for security import files are READ, READWRITE, or NONE as defined in the documentation - http://download.oracle.com/docs/cd/E17236_01/epm.1112/hp_admin/frameset.htm?ch03s07.html
Cheers
John
http://john-goodwin.blogspot.com/ -
Provisioning varying admin access levels by Planning plan types
How can I provision admin access levels by plan types? For example, I'd like to grant a user full admin access to one plan type, but limit their access for another plan type within the same application? The plan type I want to limit them to is basically a workforce plan type which I do not want to allow them to have any admin access to. Anyone know how to do this?
I took a look at the blog and my current setup design mostly follows what is on the blog. I too have a workforce plan type along with other plan types in the Planning application. What I'm trying to see if it's possible is to setup a user with admin access to manage and modify the member outlines for 2 out of the 3 plan types in Planning, but not give him access to the workforce plan type as that has sensitive compensation information. But it appears that if he's granted admin access to modify the application outline, then he would be able to grant himself access to the workforce members, which then means I can't provision him with limited admin rights while also preventing him from access to the workforce information.
-
I am trying to import developed images from LightRoom 5 Photoshop 6 for further editing. I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, or you do not have necessary access permissions or another program is using the file. Use the 'Properties' command in the Windows Explorer to unlock the file. How do I fix this? I would greatly appreciate it if you would respond with terms and procedures that a computer ignorant user, such as me, will understand. Thanks.
Have you tried restoring the Preferences yet?
-
I am trying to import developed images from LightRoom 5 into Photoshop 6. I am receiving this message and the images will not open.....'Could not open scratch file because the file is locked, you do not have necessary access permissions or another program is using the file. Use the 'properties' command in the Windows Explorer to unlock the file'. This has not happened before. How do I change this?
Could not open a scratch file because the file is locked or you do not have the necessary access privileges. (…) | Mylen…
Mylenium -
I have PS 6 and just purchased an iMac and am running OS 10.10.1 (Yosemite). When i try to Save or Save As a file I get the following message: Could not save as "Whatever.psd" because this file is locked, you do not have necessary access permissions, or another program is using the file. Use the Get Info command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder. Any suggestions? Thanks.
Photoshop: Basic Troubleshooting steps to fix most issues
Look under Troubleshoot User Permissions.
Gene -
When I quit Photoshop CS6, the following message appears:
" Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
If I try to change the Workspace in PS6 from Essentials to any other Workspace, the following messsage appears:
"Could not apply the workspace because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder."
I have checked the Sharing and Permissions section of the "Get Info" panel accessed from the Finder and I have set Read and Write Privileges for my user account for Photoshop CS6. System and Admin are also set to Read and Write.
I have a MacBook Pro with OS X Version 10.9.5 and have all available updates for Photoshop CS6, Lightroom 5 and Bridge CS6.
I tried uninstalling the program and downloading it again and reinstalling, but nothing changed.
Can you help?
Thanks,
cjpnmYou may get better help in Photoshop General Discussion
The Cloud forum is not about using individual programs
The Cloud forum is about the Cloud as a delivery & install process
If you will start at the Forums Index https://forums.adobe.com/welcome
You will be able to select a forum for the specific Adobe product(s) you use
Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll
If FINDER means Mac, read below (and try to give more information when asking a question)
Mac 10.9.3 workaround https://forums.adobe.com/thread/1489922
Enable Mac Root User https://forums.adobe.com/thread/1156604
-more Root User http://forums.adobe.com/thread/879931
-and more root user http://forums.adobe.com/thread/940869?tstart=0 -
Adobe Photoshop CS6 Extended
"Could not open a scratch file because the file is locked, you do not have necessary access permissions, or another program is using the file."
I've tried finding and checking and fixing permissions but no success.
This happened from one day to the next. I think it has to do with the sn attached to the disk rather then the motherboard. I have the suite co-installed with Symphony 5.05. I've tried reinstalling.
What's to b done? The rest of the Creative Suite 6 (AE, AI etc.) works fine.
Anyone...?
LouiHave you tried restoring the Preferences yet?
-
Read-only access permissions for new files/folders?
System:
Clean Install on new intel Xserve
10.4.8 Server w/ Open Directory
Windows clients can read/write completely fine...
Clients connecting using AFP (whether Standard or Kerberos authentication) can access files, but when new files/folders are created on the server, they register as full permissions for the user who created them, but not for the rest of the group.
The share(s) in question are set using POSIX from WGM: Full access for owner/group/everyone (changed it to this thinking it would help, but it does not). Of course, no one can make changes to a newly-created/deposited files/folders, which is just plain silly.
I can chmod the permissions recursively from a script (which fixes the problem, of course) on a regular basis so that its not (as much of) an issue, but there is still a 5-minute lag for the script to kick in, since we don't want to bombard the server with chmod requests every minute....which is unnecessary in the first place!
I have plenty of other setups which are identical but have no such issue...
Any reason why POSIX permissions on the share are being ignored from every user account?
Thanks,
k"That's default posix behaviour no matter what access permissions you set on the sharepoint."
I'm afraid this is dead wrong. What matters most is how you set permissions on the share, not if you've chosen to inherit vs. using POSIX. POSIX is still used in inherit functions, though you can use ACL's to override them. In this case, ACL's are not being used on those shares (though we tried it).
After all, why would Apple (let alone anyone else) even offer the ability to change POSIX permissions on a share if it didn't have any effect? That would be somewhat contradictory in nature.
Like I said before, I have several other installations which are identically setup that have no such issues.
As for Windows, it is also not set to inherit permissions; we're setting those explicitly. And they work fine.
Any other ideas?
Thanks,
k -
Check in new documents in DMS with specific access permissions
Hi,
we have an RFC which creates new documents in DMS.
This calls one after another these FBs:
- CVAPI_DOC_CREATE
- CVAPI_DOC_CHECKIN
- BAPI_DOCUMENT_CHANGE2 for a additional classification of the new document
Now we have a new request from our customer: to give the document specific access permissions.
We try the following:
- manually check in a document template with the necessary permissons.
- the permissions are given in a classification ("O,MW-T-D*,IB,02/03/52/53")
- This is named "authority characteristic" and is checked somewhere else, I do not really know how this works in detail ( but it works)
- check in a new document with a reference to the template and in expectation that the new document has the same classification and therefore the same access permissions
- If I do this manually in CV03N is does work
- We do this with CVAPI_CHECK_IN_WITH_TEMPLATE - but this FB does not copy the classification ( only the description and the attached original documents , and the documentnumber of the new document is an mandatory parameter which is not allowd in our case since we use internal creation of document numbers)
My question is: Is this a possible way to create new documents with specific permissions
Is there a possibility to give the permissions to the documenttype instead of give them to every single document of this documenttype ?
Thanks
KerstinMy guess is that at some point you propagated the ACL entry for "everyone deny delete" to all your folders and sub-folders and their contents by selecting Apply to All in a GetInfo window. Try doing a search in the Leopard forums for
ACL chmod
and you'll find a whole raft of discussions about the problem and suggestions for fixes.
Francine
Francine
Schwieder -
When using Migration Assistant to transfer files from my pc, I get an error message saying that an attempt was made to access a socket in a way forbidden by its access permissions. How can I fix this?
You followed:
http://www.apple.com/support/switch101/ -
When I try to sync my IPOD (3rd gen) on ITunes, I receive the following error message - you don't have enough access permissions to perform this operation..can anyone assist?
See:
iPhone - not enough access privileges: Apple Support Communities -
Issues using the outline load command on Planning Version 11.1.2
Hi All
I am trying to add members into the Account dimension using the outline load utility within Planning version 11.1.2 and I am getting the following error message:
Unable to obtain dimension information and/or perform a data load: Unable to create print writer for log file. “D:Oracle\Middleware\user_projects\epmsystem1\Planning\planning1\Data\Log” is a directory. Exception in thread “main” java.lang.NullPointerException at com.hyperion.planning.utils.HspOutlineload.loadAndPrintStatus<Unknown Source> at com.hyperion.planning.utils.HSPOutlineLoad.main<Unknown Source>
The command synatx I am using is:
Outlineload /A:Plan01 /u:admin /I:D:\Oracle\Middleware\user_projects\epmsystem1\Planning\Planning1\Data\account.csv /D:Account /T
Where the headers of the csv import file I have used are:
Parent,Account
and
Account,Parent
I am e studio enviroment so not sure if this will cause issues.
Any help would be greatly appreciated
RegardsHi All
I am trying to add members into the Account dimension using the outline load utility within Planning version 11.1.2 and I am getting the following error message:
Unable to obtain dimension information and/or perform a data load: Unable to create print writer for log file. “D:Oracle\Middleware\user_projects\epmsystem1\Planning\planning1\Data\Log” is a directory. Exception in thread “main” java.lang.NullPointerException at com.hyperion.planning.utils.HspOutlineload.loadAndPrintStatus<Unknown Source> at com.hyperion.planning.utils.HSPOutlineLoad.main<Unknown Source>
The command synatx I am using is:
Outlineload /A:Plan01 /u:admin /I:D:\Oracle\Middleware\user_projects\epmsystem1\Planning\Planning1\Data\account.csv /D:Account /T
Where the headers of the csv import file I have used are:
Parent,Account
and
Account,Parent
I am e studio enviroment so not sure if this will cause issues.
Any help would be greatly appreciated
Regards -
I have this massage every time close ps cc
Could not save Preferences because the file is locked, you do not have necessary access permissions, or another program is using the file. Use the ‘Get Info’ command in the Finder to ensure the file is unlocked and you have permission to access the file. If the problem persists, save the document to a different file or duplicate it in the Finder.You may get better help in Photoshop General Discussion
The Cloud forum is not about using individual programs
The Cloud forum is about the Cloud as a delivery & install process
If you will start at the Forums Index https://forums.adobe.com/welcome
You will be able to select a forum for the specific Adobe product(s) you use
Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll
If FINDER means Mac, read below (and try to give more information when asking a question)
Mac 10.9.3 workaround https://forums.adobe.com/thread/1489922
Enable Mac Root User https://forums.adobe.com/thread/1156604
-more Root User http://forums.adobe.com/thread/879931
-and more root user http://forums.adobe.com/thread/940869?tstart=0
Maybe you are looking for
-
the green button, top left corner of a pop-up screen on MACbook, it's supposed to enlarge the pop-up to full MAC screen size, correct? Mine does not. Sometimes it makes the pop-up screen SMALLER. Appreciate someone solving this for me.
-
Negative Planned Values in CJ40
Dear Guru's, i am getting negative planned values in CJ40 against Order/Network column. I am unable to find the root of this value. Here i am using the network costing, BOM's and MRP run process. So can any one tell me how to find the root of that ne
-
Hi All, We have are facing issue of ESB not propogating header information to endpoint. Did any one face this issue? Following link says, "Some Oracle Enterprise Service Bus features are available in Preview mode and will be supported in a later rele
-
Updating library "processing" starts from scratch every morning!
help! every morning when i start aperture it decides it needs to "process" ALL 12K pictures in my library. in the activity window it says it's "updating library." i have no idea what this means or why aperture needs to do this every day. (once it fin
-
Case that Comes w/ the iPod
Can this case be washed in a washing machine? It's getting a little dirty around the edges, so I was just wondering. iMac G5 (iSight) Mac OS X (10.4.4)