Permissions in KM folders - BIuserhome

Guys,
I am trying to help some users out on their KM BEx bookmarks. They need to be modified and they don't understand how.
I added a role like com.mycompany.xyz to the "BIuserhome".
I have that role "com.mycompany.xyz" assigned to my user.
So when I navigate to /root/BIuserhome I can only see my own directory.
Is there some actions that I need to add to the role?
Mike

Hi Mike,
I just re-read your initial post, you could also try assigning your new role as a System Principal User under Sys Admin > Sys Config > KM > CM > Utilities > System Principals > Roles. This will give your user 'Special' permissions over all content, see http://help.sap.com/saphelp_nw70/helpdata/en/19/56f28fbd4e11d5993b00508b6b8b11/frameset.htm
Regards,
Lorcan.

Similar Messages

How do you change permissions of "Home" folders on a Mavericks Server??

I have a test server and test machine. I installed Mavericks and the OSX server app onto my test server and installed Mavericks onto my test mac.
I have created a Folder which will house the home folders of users, made this into a shared folder, ticked the option that allows it to be used as a homes folder. I seem to have read/write access to the folder but I have not got access to the folders within the home folder; the users home folders. As an administrator I need access to all the folders.
I changed permissions to add myself read/write access to the folders but then this breaks the home sync and when the user logs in I get an error message that says the "Home folder is not where it is supposed to be" or something along those lines.

You can enable root by gui if needed.
/System/Library/CoreServices/Directory Uitily
When you open the Directory Utility you will have to click the lock on the lower left and authenticate as an admin user. Next go to the menu bar and the "edit" menu. Click edit, then click "enable root user". It iwll prompt you to create a root password. Once you do you will have the "other" option at the login window after restart. Or if you just enter username and password, use "root" for username and the password you created for password.
When you are done doing whatever you need make sure to reopen Directory Utility and disable the root user.

Do not have permissions to my folders

I just upgraded to mavericks and now all my folders are marked as no permissions.

Try this: open Disk Utility, select Macintosh HD on the left and use the Verify Disk button. If repair is needed, run Repair Disk and repeat until no errors are found. Then do the same for Permissions; Verify and Repair and repeat repair until there are no errors.

What r the default permissions for rooted folders (/Applications & etc.)?

Hi.
i've got corrupted attributes for /Applications folder (no user/no group owner), which were not corrected with disk utility Repair permissions.
So i'd like to correct them manually.
Could anyone tell me about default attributes for rooted folders? (/Applications, /Library, /System and etc.)
Or may be a link to some manual where i could find that out?
Thank you in advance!

from my notes:
The sticky bit should be set on the root "/" folder of the drive.
The correct permissions for the root drive are
owner:root, group:admin, chmod:1775
#these must be set in single user mode, you cannot set these while booted#
Boot into single user mode:
mount -uw /
chown root:admin /
chmod 1775 /
reboot
After rebooting Set the following Directory permissions:
/Applications; root:admin, chmod 0775
/Developer; root:admin, chmod 0775
/Library; root:admin, chmod 1775
/System; root:wheel, chmod 0755
/Users; root:admin, chmod 0755
Run the following commands on the /Applications directory:
sudo chmod -R -N /Applications
#clears out any ACL's, there should be no ACL's on your apps#
sudo chown -R :admin /Applications/*
#Sets group to admin on all your apps note: do NOT change owner.#
Kj

Permissions problem copying folders from Leopard to Lion

I just got a new iMac (running Lion) to replace my old G4, running Leopard (10.5.8).
I'm trying to copy entire folders (with many items inside) from the old G4 to the new iMac.
I get a message saying something to the effect that "One or more items can't be copied because you don't have permission to read them" ...
I'm the only one using the machines so it's not a question of ownership or user accounts.
Is there any way (I guess with Terminal or Unix commands) to change the permissions en masse for all the items in a folder at once? I can certainly get info on any individual item or folder and change the ownership that way, but that'll take a long time for folders with many items.
Thanks, in advance, for any help you can provide.

Hello, easiest way is with BatchMod, it's much better/easier than the Finder for recursive Permission changes...
http://www.lagentesoft.com/batchmod/index.html
Use the Apply to enclosed items checkbox after dropping a Folder on BatchMod.

Changing read/write permissions recursively on folders

I moved a folder of images for a website that I was working on from my laptop to my desktop computer. It arrived there with the folder and all subfolders locked. The folders are three levels deep as it was organized as the pages on the site are organized. I tried unlocking and giving myself read/write permission on the root folder, but it doesn't unlock the subfolders. I have been having to unlock and change the permission on each one. Is there any way to do this to all the folders at once? Someone else needs to use the laptop so going back isn't an option at present.
Mary

Use Get Info and set the desired permissions, then select Apply to Enclosed Items from the tool drop down menu at the bottom of the Get Info window.
If that doesn't work you can use the Terminal application in your Utilities folder. At the prompt enter:
sudo chown -R username:username
place a space at the end of the above line then drag the folder you want to change to the command line. Press RETURN. You will be asked to enter your admin password which will not be echoed.

Permissions problem: Public folders/Shared Calendars across domains with Linked accounts

I have a linked mailbox that is accessed by an account in a trusted domain. The account can access e-mail, send e-mail, free-busy search, etc, just fine. However, there seems to be a permissions issue with the public folders and shared calendars.
When trying to access the public folders for which permissions have been assigned to the linked account from the trusted domain account, I get an error, or just can't see the folders. The only way I can view public folders is by setting default permissions
on the folder to 'Read'.
I've found some other threads that reference this problem, and a blog that no longer exists as the solution:
http://social.technet.microsoft.com/Forums/en-US/exchangesvrclientslegacy/thread/5fdf4cd7-3543-4b5d-94cc-317446ddaa46
If anyone has any ideas or the solution that was shown in the above referenced blog, I'd be very grateful!
-shane

Hi,Shane,
I believe you can try James' suggestion in the link
http://social.technet.microsoft.com/Forums/en-US/exchangesvrclientslegacy/thread/6c88569d-e693-46f4-a8fa-e1f9e5b6234e/ to get it solved.
Per the
Detecting and Correcting msExchMasterAccountSid Issues it says,
Active Directory does not enforce simultaneous performance of all these tasks, nor does it enforce removal of the Associated External Account or
msExchMasterAccountSid if an Active Directory account is re-enabled.
Regards,
Sharon
Sharon Shen
TechNet Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.

File permissions on shared folders - How-to in 10.7?

Hi,
Could someone point out where the File Sharing setting sof 10.6 have moved in 10.7 (if they are still there?)?
The File Sharing window was great, with access to folders AND sub-folders, and the ability to access detailed privileges.
In 10.7, this feature is not available in Server Admin, and in Server, it is quite simple, with no access to:
sub-folders and
detailed privileges.
Has this feature moved, or is it dropped? Look like a very basic feature for a server...!
If I look at the alternatives, there is Finder, but there is no access to detailed privileges. All I see is "Custom" privileges, and that's it.
Also, the feature Show Effective Permissions Inspector in the File Sharing window also seems canned... Has anyone found it elsewhere?
Thanks for anyone's input.
BTW, I get the feeling that I might NOT upgrade my 10.6 clients to 10.7... It looks like a painful upgrade (or "downgrade"??) and I'm not sure I will risk it. Am I the only one with this feeling, or am I missing something??

Hi,
Could someone point out where the File Sharing setting sof 10.6 have moved in 10.7 (if they are still there?)?
The File Sharing window was great, with access to folders AND sub-folders, and the ability to access detailed privileges.
In 10.7, this feature is not available in Server Admin, and in Server, it is quite simple, with no access to:
sub-folders and
detailed privileges.
Has this feature moved, or is it dropped? Look like a very basic feature for a server...!
If I look at the alternatives, there is Finder, but there is no access to detailed privileges. All I see is "Custom" privileges, and that's it.
Also, the feature Show Effective Permissions Inspector in the File Sharing window also seems canned... Has anyone found it elsewhere?
Thanks for anyone's input.
BTW, I get the feeling that I might NOT upgrade my 10.6 clients to 10.7... It looks like a painful upgrade (or "downgrade"??) and I'm not sure I will risk it. Am I the only one with this feeling, or am I missing something??

Permissions of KM folders - synchronously editing possible

Hi all,
have experienced the following issue: two users are synchronously edited (and were able to save) the permissions of one and the same folder. No one from them got a message that the object is actually modified and therefor locked.
Does anybody know why? It´s an error or a feature?
Thanks,
Andre

Hi!
It's a feature
The last save wins. The save operation itself is atomic.
bye, Dirk

Remove KM permissions for childs folders and not for the father folder.

Hi Forum
   I am removing a "some_group" permisssion of a subfolder in a repository, but how can i remove only this subfolder permission and not the father permission ?
For example:
     I want the next the repository with the "some_gruup" permission for the father folder:
      /Folder
     But i want to remove the "sub_folder1" and "sub_folder2" permissions for "some_group", i haven´t do it because this is like an inherited permission of the father folder.
      /Folder/sub_folder1
      /Folder/sub_folder2
     But when i

I found the solution in the post The specified item was not found. by Avishai Zamir
The code is:
IAclSecurityManager asm = (IAclSecurityManager)sm;
IResourceAclManager ram = asm.getAclManager();
IResourceAcl ra = ram.getAcl(newResource);
/******************* BEGIN if the most important code ********************/
if(ra == null) {
     ram.removeAcl(newResource);
     ra = ram.createAcl(newResource);
/*******************     END of the most important code ******************/
IResourceAclEntryList rel = ra.getEntries();
IResourceAclEntryListIterator it = rel.iterator();
while (it.hasNext()) {
     ra.removeEntry(it.next());
Edited by: Josue Cruz on Jun 25, 2008 9:48 PM
Edited by: Josue Cruz on Jun 25, 2008 9:50 PM
Edited by: Josue Cruz on Jun 25, 2008 9:51 PM
Edited by: Josue Cruz on Jun 25, 2008 9:53 PM

Permissions For Home Folders Having Permissions Changed On Boot

Whenever I boot my install up, I am unable to log in to my account(s) using GDM. I get a message mentioning that it cannot write .ICEauthority for some reason. If I try to delete the file using "rm .ICEauthority", it says that I do not have permission to do so. If I try "sudo rm .ICEauthority", it works. Whenever I log in, I can't seem to be able to save anything; it keeps saying that permission is denied. If I using a TTY console run "sudo chown -R ryanmcclure *" and "sudo chown -R ryanmcclure .*", it suddenly works again. However, if I log out and try to log in, it all happens again. This happens on my account and another standard user account. I ran "ls -l" on a few directories, and the permissions don't seem to be absolutely correct; a few of them say "root:ryanmcclure" when it seems like "root:root" should be correct (This is when I run it under the directory "/"). Something seems to be absolutely terribly wrong with my partitions. I can give any of you the readout of "ls -l" of any directory/file if you need to see exactly what it is like upon boot. Any help would be appreciated on this mess!
By the way, if I were to paste the readout of a command on here, should I use pastebin or should I simply enter the readout on the forum reply?

Here is "ls -l" under /
[ryanmcclure@ryanslinuxbox /]$ ls -l
total 1164
drwxr-xr-x 2 ryanmcclure root 4096 Nov 4 10:21 bin
drwxr-xr-x 4 ryanmcclure root 4096 Nov 2 16:42 boot
-rw------- 1 ryanmcclure root 1368064 Oct 25 22:42 core
drwxr-xr-x 18 root root 2940 Nov 5 23:03 dev
drwxr-xr-x 98 ryanmcclure root 4096 Nov 5 23:03 etc
drwxr-xr-x 4 ryanmcclure root 4096 Oct 27 16:56 home
lrwxrwxrwx 1 ryanmcclure root 7 Oct 24 17:37 lib -> usr/lib
lrwxrwxrwx 1 ryanmcclure root 7 Oct 24 17:37 lib64 -> usr/lib
drwx------ 2 ryanmcclure root 16384 Oct 25 18:53 lost+found
drwxr-xr-x 3 ryanmcclure root 4096 Oct 27 21:17 media
drwxr-xr-x 4 ryanmcclure root 4096 Oct 27 15:05 mnt
drwxr-xr-x 5 ryanmcclure root 4096 Nov 1 21:02 opt
dr-xr-xr-x 153 root root 0 Nov 5 23:03 proc
drwxr-x--- 14 ryanmcclure root 4096 Oct 31 23:50 root
drwxr-xr-x 25 root root 640 Nov 5 23:03 run
drwxr-xr-x 2 root root 4096 Nov 3 16:51 sbin
drwxr-xr-x 4 root root 4096 Oct 23 10:30 srv
dr-xr-xr-x 13 root root 0 Nov 5 23:03 sys
drwxrwxrwt 17 root root 380 Nov 5 23:07 tmp
drwxr-xr-x 11 root root 4096 Oct 30 15:30 usr
drwxr-xr-x 13 root root 4096 Nov 3 16:51 var
Here is my fstab:
# /etc/fstab: static file system information
# <file system> <dir> <type> <options> <dump> <pass>
tmpfs /tmp tmpfs nodev,nosuid 0 0
# UUID=477ee67f-92c2-4a28-89fe-eb499284a319
/dev/sda1 / ext4 rw,relatime, 0 2
My username is ryanmcclure.
I am unsure of my user's primary group, as I do not know how to find that. "groups ryanmcclure" gives me
sys lp wheel games network video audio optical storage scanner power users
"id ryanmcclure" gives me
uid=1000(ryanmcclure) gid=100(users) groups=100(users),3(sys),7(lp),10(wheel),50(games),90(network),91(video),92(audio),93(optical),95(storage),96(scanner),98(power)
If I didn't post the correct information, let me know the command and I'll get it up here in no time.

Public Folders Permissions Tab Missing on one pc but not another

this has to be pc related but i just can't find any info anywhere. when i log into a pc and startup outlook and go to public folders, i cannot see the permissions tab on the folders at all. but if i go to another pc, same OS and office version, i CAN see
and edit the permissions on public folders! has anyone else run across this problem?
Exchange Server 2007
Desktops Win7
Outlook 2013

Hi,
Since the issue only happens to specific client, the issue should be related to client side. I suggest we can do the following method to narrow down the issue:
1. Start Outlook in safe mode(Start > Run >type “Outlook /safe”> Enter) to check whether the issue persists.
2. Perform a clean boot for Windows to have a try.
If the issue doesn’t happen in safe mode, the issue may be caused by any third-party add-ins. We can disable third-party add-ins one by one to find out the root cause.
If the issue persists in Outlook safe mode but not occurs after performing a clean boot, please disable the related third-party program in Windows to resolve the issue. For more information about clean boot, please refer to:
http://support.microsoft.com/kb/929135/en-us
Regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Winnie Liang
TechNet Community Support

Folders permissions are changing. Cannot find the cause.

I am running multiple Windows server 2008 R2. And the clients are running either Windows XP SP3 or Windows 7 SP1.
I have a folder to hold all of the users home folders. D:\Users\Staff In this folder are all of the users folders. Each server has a similar folder structure.
During the day folder User1 will change its permissions and lock out the administrators. After fixing the issue, it will happen again. It may be on User1 again or it may be different users. And it can be multiple users. The users do not have the ability
to change permissions.
On the local server I turned on "Audit object access". When the policies refresh, the settings are turned off. So I have been unsuccessful in finding the cause. I have checked the Group Policies and nothing is turning off Audit object access. It
seems as if the change in the permissions on the folders happens at the same time as Audit object access gets cleared.
If I create a GPO with Audit object access turned on, the settings are locked and turned off but the winning GPO is the GPO turned on.
We started filtering out the desktop.ini file because it was making the folders all look like My Documents.
We started noticing this issue over the summer. I do not know how long it has been happening.
I have been trying to catch the offending process with Audit object access, AccessEnum, EventViewer, and ProcMon.
Any help is appreciated.
Charles

Hi,
I think we may not able to change that option directly once it is applied the change you make on Folder Redirection policy may not be refreshed to clients even it displayed as changed on server side.
Thus if issue still exists, test to create a new policy to replace the old one. You can create a new policy in a new OU and move users into the new OU, or create a new policy which "direct folders to new location" and folder redirection folders
will be moved to a new place once a user logged on.
If you have any feedback on our support, please send to [email protected]

Temporarily Take Ownership of folders to set permissions

So I am attempting to run a script when a server builds that sets permissions on certain folders. However, the administrator group does not have access to these files. Is there a way to temporarily take ownership of these folders so I can make the permission
changes and revert the ownership back after. Any thoughts?
Thanks.

Mekac is right; if you don't have at least 'ReadPermissions' access to the file/folder, you usually can't get the current owner. If you have the SeBackupPrivilege granted, though, you can take a look at it under the right conditions. If you want to do that
manually, let me know, otherwise you can try the 4.0 preview version of the
PowerShell Access Control module:
$CurrentPath = "c:\FileOrFolderPath"
$AddAceParams = @{
Principal = "Administrators"
FolderRights = "FullControl"
<#
Method 1 (technically a one-liner)
#>
Get-SecurityDescriptor $CurrentPath -PacSDOption (New-PacCommandOption -BypassAclCheck) | ForEach-Object {
$OriginalOwner = $_.Owner
$_ | Set-Owner -PassThru -Apply | # -Force here would suppress prompt
Add-AccessControlEntry @AddAceParams -PassThru |
Set-Owner -Principal $OriginalOwner -Apply # -Force here would suppress prompt
<#
Method 2 (Multiple lines)
#>
$OriginalOwner = Get-SecurityDescriptor $CurrentPath -PacSDOption (New-PacCommandOption -BypassAclCheck) | select -ExpandProperty Owner
Set-Owner $CurrentPath #-Force
Add-AccessControlEntry $CurrentPath @AddAceParams -PassThru |
Set-Owner -Principal $OriginalOwner -Apply #-Force
Both examples should do the exact same thing. The important part is the '-PacSDOption (New-PacCommandOption -BypassAclCheck)', which enables the backup privilege and opens the file/folder in a special way to allow you to look at the security descriptor even
if you don't have permission to. You need to do that to guarantee the ability to save the current owner. If you have any questions about what's going on, please let me know.
It's actually possible to make the permission changes using the SeRestorePrivilege without taking ownership first, but there are a lot of "gotchas". I'm still trying to figure out if I'm going to include that capability in the final version
of the module.
By the way, version 4.0 currently still a preview build, so some of the syntax will be different before it's finalized. One area where the previous examples will definitely fail later is with the 'New-PacCommandOption' cmdlet (it's been renamed
to 'New-PacSdOption' in the latest unreleased build).

Time Machine and File Permissions

'Twere I to rate this question's technicality on a scale of 1 through 10, it would rate 8. Just warning you. Unix people will be especially useful for this.
Okay, so, before the problems started, my hard drive had three partitions. One for OS X, one for file storage for Ubuntu Linux, and one called the "Swap" partition, which somehow relates to Ubuntu (the Ubuntu installer put it there, I've no idea what it's for). Here's a makeshift diagram of what my partition map used to be:
I ran out of space in my OS X partition. You see, I've recently had the fortune to obtain some rather fantastic software. The downside is that the software (and it's files) take up roughly 53GB. I won't trouble with you what it actually is (though it should have dawned on some people by now). Between OS X and Ubuntu Linux, OS X prevailed. As far as I'm concerned, Linux will have to wait 'till I have a larger hard drive.
So, I fired up Disk Utility, and tried to remove the two Linux partitions. It told me it was "Preparing to erase [insert Linux partition name]". It told me that for an hour. After one hour, I said screw it, I'll do this the "hard" way.
My initial plan was to back up my data, and completely reformat my drive, reinstall Leopard, and have it restore from my Time Machine backup. Now, my external drive is not big enough to hold a complete system-wide backup. I had to leave some stuff out. Here's the list of exclusions, taken directly from the back up logs:
Excluding System files: 16.3 GB (242143 items)
Excluding /Developer: 0 bytes (1 items)
Excluding /Users/Audacitor/Downloads: 7.9 GB (18 items)
Excluding /Applications/Creative Suite 3: 3.2 GB (13214 items)
Excluding /Applications/Disk Images/Macromedia: 240.5 MB (4 items)
Excluding /Applications/Utilities: 484.2 MB (111 items)
Excluding /Users/Audacitor/.Trash: 97.3 MB (2142 items)
Excluding /System: 108.2 MB (5874 items)
Excluding /Users/Audacitor/Library/Calendars/Calendar Cache: 144 KB (1 items)
Excluding /Users/Audacitor/Library/Safari/WebpageIcons.db: 52 KB (1 items)
Excluding /Users/Audacitor/Library/Mail/Envelope Index: 680 KB (1 items)
Excluding /Users/Audacitor/Library/Icons/WebpageIcons.db: 20 KB (1 items)
I am uncertain as to why it excluded those last four entries. I didn't ask them to be excluded, so I assumed that was something Time Machine does automatically.
The backup worked normally, or so it seemed. After about a half hour, it told me it was done. I hastily (read; stupidly) unplugged the drive and prepared to reformat my drive. So excited was I to reach my new software, that I made the utter and completely foolish move of not double checking that everything I needed was backed up. If I had, I might never have this problem, and even if this problem were destined to happen, I could have at least saved my Pictures folder (fortunately, most of it's contents are safely residing on my iPod).
So, I wiped my drive. Specifically, I booted into my Leopard Install DVD, and went for the Erase and Install option. The install commenced and finished without a hitch. I brought my "new" computer up, enjoyed the theatrics of the intro movie and started running through the setup. I came to the step where it asks if I want to transfer files from another Mac, from another volume on my Mac, from a Time Machine backup, or not at all. I of course clicked for a Time Machine back up. The first sign of trouble was that my backup didn't show up (despite having my external plugged in). I felt a pang of fear, but it didn't worry me too much, and I thought to myself that I'd just use Migration Assistant later on (the Leopard setup sequence specifically stated I could do this if I so wished).
So I went straight to my desktop and fired up Migration Assistant, and went through the steps till it asked me to select a Time Machine backup. But there were none to select from. I waited a full minute, my fear growing steadily to terror. Finally, I realized that my data was gone, and flipped out. My inner geek, which was screaming at me to calm down and look inside my external, was shackled and thrown into a tiny corner of my now completely panicked mind. This lasted for roughly two minutes. After regaining myself, and opened my external. It contained one folder named Backups.backupdb. I opened it, and inside I found Neomiranda (Neomiranda is the name I gave my computer). So far so good. Inside the folder of Neomiranda, I found 2008-02-20-060526.inProgress. Another 30 seconds of flipping out over the idea of .inProgress. After awhile, I had the sense to right click on it, and hit the "Show Package Contents" option.
Inside were three folders, with three corresponding log files. I quickly realized that each one was a backup. The first two were empty, which I anticipated. Those were my two attempts while figuring out what to exclude, so I could get a backup to fit on my external. The third contained another Neomiranda folder, which contained all my data. Everything except my Pictures folder was there.
So, I went back and forth, manually restoring my data. When I'd finished, I started up a few apps to check that everything worked. Not everything worked. Mail wouldn't even get a bounce from the dock, Firefox told me there was a copy of itself already running, and iTunes complained that I had either a locked disk or insufficient permissions. Acting on iTunes' advice, I set out comparing the permissions of various folders I'd copied to the permissions of their equivalents on another, fully functional, system. Everything checked out. Nothing was locked, and everything had the correct permissions. I fired up Disk Utility and had it a run a permissions repair. It spat out a great deal of stuff that it apparently found wrong, and apparently fixed, but ultimately, it had no effect.
I cannot find anything wrong with any permissions, but I've got a feeling that's where the problem is. Why? Because any time I want to do anything to a folder I've copied, or anything inside a folder I've copied, it wants my admin password. Despite no apparent differences in permissions between folders I don't need a password for and between folders I do need a password for, I need a password for folders I have copied from my backup.
I've not looked into file ownership, as I couldn't find a way to even find out who a file belongs to, much less actually change ownership to anything. If I end having to use chown at a bash, fine with me, but I'm not a Unix man. I'll still need help with it (though I do know how to use the man command).

Same problem and for months now. I haven't been able to find a solution, but I suspect that's because I don't know exactly what's wrong.

Permissions in KM folders - BIuserhome

Similar Messages

Maybe you are looking for