Prevent user from the view on demand connection in the desinger but not XI

When I give an user/group view on demand access to a connection (universe connection), they can refresh the webi report sucessfully. But this also opens up the connection in the designer for the user/group. This might allow them to build additional universe based on various tables the connection may have access to.
How do I prevent an user seeing/using the view on demand connection in the desinger?

HI
Can we try this?
Open java administration launchpad.
Select Business Objects enterprise Applications.
Select "Designer"
It will show the rights for the group\user, place the cursor and click advanced under "net access"
The advanced right windows open expand "Designer" and find Create,Modify,Or delete connections
Set the right to "Explicitly denied" .Apply ok
The new and edit buttons will now be grayed out for the particular user\group.
Hope this will help
Regards
Kultar

Similar Messages

Prevent user from update view object

Hi all is there is any way to prevent user from update view object at runtime, but if he have a privilege to Update he can update.
i put all user privilege in a variable in session, but how to use it to prevent user from update .
or ho w to make updateable view just for create or insert data not update it;
thnx in advise

Hi Mohammed,
> tow view object bad way it means to page (as i think project 50 page mean to create 100 page )??
Untill the Question is clear Answer will not be clear U never mentioned the Quantum of Pages u gng to work in POST....
> disable commit button but if user have privilege to insert a new record ??
Did u think this statement means something.. A user who has no privilege to commit the data wht is the purpose of giving privilege to add the data?????????
> if i disable table or form and user try to create new record is new fields will be enabled or will be as previous row.
This too i cant understand?? the user doesnt have access why should he need to create row.. u can disable the Create button too.....
> by the way is there is any way to catch Sql Statement that will be committed when user press commit .
While user press commit and u gng to call the ApplicationModule Commit so u can have a hold on doDML() method of the corresponding entity else if u gng to insert though a procedure or function
U can restrict the same before u calling the same.......
Regards,
Suganth.G

Please,I want to stop users from visiting particular wensites while connected to the internet. How do I configure Firefox to automatically stop users from visiting such dangerous sites?

Please,I want to stop users from visiting particular wensites while connected to the internet. How do I configure Firefox to automatically stop users from visiting such dangerous sites?

Thanks, Ronda! I haven't been able to try your suggestion because I fried my router! So I need to get a new wireless router before proceeding.
(I may start a new thread about getting a new router, but I will look for answers first to my questions and only start one if I cannot find answers.)
After I get a new router, I will try what you suggested and report back here.

Is there a way to prevent AnyConnect from caching the username of the last person who connected to the VPN?

Is there a way to prevent AnyConnect from caching the username of the last person who connected to the VPN?

This can be done via specifying the "RestrictPreferenceCaching" parameter as described in the Anyconnect Admin Guide here:
By design, AnyConnect does not cache sensitive information to disk. Enabling this parameter extends this policy to any type of user information stored in the AnyConnect preferences.
•Credentials—The user name and second user name are not cached.
•Thumbprints—The client and server certificate thumbprints are not cached.
•CredentialsAndThumbprints—Certificate thumbprints and user names are not cached.
•All—No automatic preferences are cached.
•false—All preferences are written to disk (default—behavior consistent with AnyConnect 2.3 and earlier).

CE10 how to prevent user from view hostrical instance

hi,
We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came back with all the crystal reports on the server that started with employees, even the one the user doesn't have access to. My greatest concern about this is that users can view historical instance and it is sensitive data. Does anybody know whether or not this is a bug in CE10? Is there a patch/fix for this? Is there any configuration change that I can make to
prevent users from being able search all the reports on the server rather just their own reports? Any help is greatly appreciated.
Regards,
Susan

hi,
I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS. If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder? When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal. What am I missing?
Thanks for your help!
Regards,
Susan Johnson

Is it possible to prevent users from viewing a page in Edit Mode?

Hello everyone,
I would like to know if it is possible to prevent users from accessing a portal page in Edit Mode. Currently, the users do not have access to any links that take them to edit mode, but if they add &_mode=16 to the end, they view the page in edit mode. Granted, they don't have permissions to add or edit content, but I would like to keep them from seeing this.
I am using 9.0.4.1
Any help or suggestions would be greatly appreciated!
Jim

hi jim,
you cannot really configure this in portal. if somebody manually appends &_mode=16 we display the default edit mode, but fully enforce security. this means that the user cannot see anything he is not allowed to see: like pending items, hidden, expired or deleted items. as you said he also cannot add, edit or delete any items.
regards,
christian

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in Oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

Thanks for your advise.
However, I missed to mention that we have two set of users One is for Finished Goods and another for Spares.
Only Spares users need to be prevented from creating Direct/Manual Sales Orders in Oracle.
As you suggested, if this will be done at Form level, that may Disallow FG users also to create Manula Sales Orders which should not be the case.
Further, I tried to test one scenario through Processing Constraints but it did not work.
Application
OM
Validation Type
Entity
Temp
Short Name
TBL
Validation Semantics
Created By
Equal To
User(Myself)
Processing Cosntraint
Application
OM
Entity
Order Header
Constraint
Operation
User Action
Create
Not Allowed
Conditions
Group
Scope
Validation Entity
Record Set
Validation Template
101
Any
Order Header
Order
Above Created
Please advise.

GPO to prevent users from accessing the root folder of their profile doesn't work

Hi,
Here's the scenario:
In a Windows 2012 RDS I created two groups called RemoteApp users and remote desktop users.
These groups are defined in the collection for the corresponding RD Session hosts.
These groups are not included in any other group, but they are located under an OU -called Remote Users.
In the domain controller I have created a GPO named "Restrict access to root drive" which is linked to the Remote Users OU.
The GPO I selected is - "Prevent users from adding files to the root of their users files folder"
This doesn't seem to work. I have waited more than a few hours to allow the 90 minutes update, plus used the gpupdate /force
but when a user clicks on the RemoteApp (Excel in this example) then access to the C: drive (which is the root folder of the user's profile) is enabled, and the user can create folders and save files under C:.
I tried to run gpresult for the specific user but the GPO I created wasn't mentioned.
I thought this would be a straight forward mechanism, but somehow it looks like something is missing.
I have read about loopback and expanding, but not sure if this is what needs to be done, and if yes - I'd appreciate if I can get step by step instructions. Everything I found so far was VERY vague.
Thanks !
One more detail that may be relevant - the DC is a Windows Server 2012, and the session host is a Windows 2012 R2.

> These groups are not included in any other group, but they are located
> under an OU -called Remote Users.
>
> In the domain controller I have created a GPO named "Restrict access to
> root drive" which is linked to the Remote Users OU.
>
The USER accounts need to be in the OU your GPO is linked to. Despite
their name, GPOs do NOT apply to groups, but to users (and computers).
Groups only provide an additional layer of filtering...
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Is it possible to prevent users from using the ''Purge'' option from the ''Recover deleted items'' in Office 365?

Hi,
After speaking with a Microsoft engineer over the phone, I've been told that there is no way to prevent users to go to their OWA and manually Purge specific items from the ''Recover deleted items''. The Microsoft tech told us to place the desired mailboxes
on a litigation-hold and that all data will be recoverable... but only from the time you place the mailbox onto Litigation-Hold and previous items, which doesn't take effect for new-coming emails.
1- From what I understand, any new items coming in the mailbox after the Litigation-Hold is put in place will still be ''purgeable'', right?
2- Is there a way (PowerShell, Security group, etc.) that can prevent a user from using the Purge option?
We are very surprised that there is absolutely no thread that talks about this issue, which in our opinion, is a major legal and security flaw from Office 365. This is a main concern for us to actually go with Office365. For instance, this means that at
any given time, if a user exchanges emails with a competitor, they can manually purge emails sent and receive as soon as it is sent/received, even after Litigation-Hold is in place.
Thank you for your reply and let us know if you have more questions.
Normand Bessette, IT support technician, Newad Media

Thank you for the reply.
Is there still a way to prevent users from using the Purge option, like with a Powershell script to disable Purge?

I keep getting the message "mail cannot connect to the server-." when it clearly can and does. How do I prevent these messages from appearing?

See the title
I keep getting the message "mail cannot connect to the server…." when it clearly can and does. How do I prevent these messages from appearing?
help

On your iPad or a Mac?
You posted in the iMac community but your profile indicates an iPad 2.

How to prevent user from deactivating the adobe software

I am working in a training center, We've got 20 machines here installed with Adobe CS3 production premium (not using network license). The problem now i foresee is the software deactivate problem, i found user can deactivate the adobe software even they dont have XP administrator rights.
And what i know about activation of adobe software is that there is a limit of activation count of 30 tries and after that i have to call the adobe technical support for help.
Is there any way that i can prevent user from deactivating the software in terms of registry modification or what other kinds of method.
Thanks
Ivan

If you have 20 machines I assume you have a volume license, which does not require de/activation anyway.
If you have 20 separate licences... well, the only thing I can think of is to block the Adobe Activation domains of adobe.com through the firewall of your network. You should probably contact Adobe directly for more specific info.

Prevent user from closing the applications

Hello,
we would like to deploy to our users web application using Internet Explorer which is published over RemoteApps. Because this application takes long time to load we would like to prevent user from closing application. So we would like that session and application
stays opened when the user clicks on close button on Internet Explorer that is published over RemoteApps.
In other words, we would like to disconnect client from RemoteApp session, but stay logged in and keep the application running in the background.
Is this possible to do?
Thank you!
Best wishes,
Marko

Hello,
thank you all for your answer. I guess this is not a good news. Any other idea how to solve this problem - to start Internet Explorer web application as soon as possible.
Last week I have found a VB script on one forum that would close the RemoteApp Windows without closing the appliaction on server but I can't find it today. Does anybody know something about this script?
Thank you!
Best wishes,
Marko

Prevent user from deleting someone else data

I have a table
create table T(
infoID number primary key,
info varchar2(4000),
user varchar2(1)
and users a,b,c with object priveleges on table T.
What is the best way to prevent user from deleting someone else data?
1. Create a view for each user to interacat with ( where user='a') and revoke privileges from table T.
2. Use procedures or trigers to catch a bad user.
3. ?

Leo is certainly correct that VPD will solve the issue you have described. however another option also exists without the need to create a separate view for each user (as you described) or the use of VPD, the option would be to do something like the following.
create user ownera identified by ownera;
create user usera identified by usera;
create user userb identified by userb;
create user userc identified by userc;
grant connect, resource to ownera;
grant create view to ownera;
grant connect to usera, userb, userc;
conn ownera/ownera
create table mytable ( id number primary key,
userid varchar2(8) not null, mod_date date not null, text varchar2 (100));
create sequence mytable_seq;
create or replace trigger biu_mytable_trg
before insert or update on mytable
for each row
begin
     select mytable_seq.nextval into :new.id from dual;
     :new.userid := user;
     :new.mod_date := sysdate;
end;
create or replace view v_mytable as
select * from mytable where userid=user;
grant select, insert, update, delete on v_mytable to usera, userb, userc;
try inserting and selecting as the various userX users.
Good luck.

How to prevent users from saving and emailing intranet documents externally

Someone in our company needs to upload a pdf to our sharepoint intranet site for internal-only use. How can I prevent users from downloading it and emailing it externally?
I mean, a user could screenshot it I guess, but I need to give management a due diligence answer.

You would need to look into a reverse proxy/firewall that had the ability to block access based on content. This isn't something you can accomplish out of the box with SharePoint (even with AD RMS).
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

How to prevent user from creating jobs

Hi,
we need to prevent user from creating jobs on a dev enviorement. It's a 10.2.0.4 database standard on linux 64bits.
Their schema has only connect and resource roles. Is there a way to prevent them from creating jobs? In 11g it's the CREATE JOB permission, but in 10g i'm not sure how can i do this.
Thanks for any ideas!

On 10g it's probably the CREATE JOB as well.
http://www.oracle.com/pls/db102/homepage
Alternatively you could:
alter system set job_queue_processes=0
http://download.oracle.com/docs/cd/B19306_01/server.102/b14237/initparams089.htm#REFRN10077

Prevent user from the view on demand connection in the desinger but not XI

Similar Messages

Maybe you are looking for