Profile issue for internet user

Hi,
I am new to ICH. I have an issue with the internet user of the supplier. The issue is
"When user connects to ICH portal, he can able see all the orders and not only the orders sent to his company". He should not see all other orders which are not relevant to him.
I checked the roles and profiles for this user and also relation ship with the BP. He has assigned only to his company.
Can anyone suggest/ advice the solution how to resolve. what are the other checks to be done to restrict this user.
Please help me out on this issue.
Regards
Kishore

Hi Kishore
Check if supplier Business partner (Org Type) has been assigned in supplier location.
Then assign the supplier internet user to supplier BP (Org Type). Please confirm that Supplier business partner is not assigned to any other location. He should be assigned to only his location.
Use the std roles provided by SAP for supplier users. This set up should solve your purpose.
Best Luck
Pravin

Similar Messages

ISA B2B logon Error: No valid private connection for internet user

Hello ,
i used isauseradm to create a user zzweb with all authorizations for B2B..
now when i try to log to
http://host:port/b2b/b2b/init.do with the user zzweb
i have a runtime error with the logs :
EXCEPTION]
#1#com.sap.isa.businessobject.BORuntimeException: Error getting private connection for internet user:com.sap.isa.core.eai.BackendException: Error: No valid private connection for internet userzzweb
     at com.sap.isa.businessobject.BusinessObjectHelper.splitException(BusinessObjectHelper.java:78)
     at com.sap.isa.user.businessobject.UserBase.login(UserBase.java:313)
     at com.sap.isa.businessobject.User.login(User.java:143)
     at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:295)
     at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:368)
     at com.sap.isa.user.action.UserBaseAction.performLogin(UserBaseAction.java:126)
     at com.sap.isa.user.action.LoginBaseAction.ecomPerform(LoginBaseAction.java:77)
     at com.sap.isa.isacore.action.EComBaseAction.doPerform(EComBaseAction.java:353)
     at com.sap.isa.core.BaseAction.execute(BaseAction.java:211)
     at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
     at com.sap.isa.core.RequestProcessor.processActionPerform(RequestProcessor.java:674)
     at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
     at com.sap.isa.core.RequestProcessor.process(RequestProcessor.java:391)
     at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
     at com.sap.isa.core.ActionServlet.process(ActionServlet.java:243)
     at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
     at com.tealeaf.capture.LiteFilter.doFilter(Unknown Source)
     at com.sap.isa.isacore.TealeafFilter.doFilter(TealeafFilter.java:61)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
what does this error means..?
i also realised that zzweb was not created in CRM backen? should it be created ?
many thnx for help ..
Message was edited by: Blackman

Its a late response... but if someone gets the same issue here is the solution.
When you register try uppercase password . That should take care of that issue.
The problem is with function module CRM_ISA_IUSER_SWITCH , Note 946536.
Although the note says 5.0 the problem exists with ISA 4.0 too

EP implementation for Internet users

Hello,
I need to Implement EP for internet and intranet users, in which for internet users I need to fetch the summary data of R/3 applications.
how shall we proceed with the implmentation of portal for internet users, pls suggest some blogs showing portal implementation for internet users.
Regards
Vishal

Hi,
To make available portal for both internal and external users, you've to setup a reverse proxy in DMZ. Your portal will reside in intranet and external (internet users) will access portal via reverseproxy.
For reverseproxy there are 3 main options.
- Apache as a ReverseProxy
- ReverseProxy with IIS and ISAPI Filter
- Using Web Dispatcher as reverse proxy.
Now look at the following diagram;
    EXTERNAL USERS                INTERNET
          |
     REVERSEPROXY                 DMZ
PORTAL SERVER                     INTRANET
Internal Users will access portal normally with/without SSL. External Users will access portal with/without SSL via RProxy.
This is how we setup and working well. We Used Apache as ReverseProxy on SuSe with SSL enabled.
But testing WebDispatcher on SuSe for load balancing.

Apex3 on XE over SSL for internet users

Folks,
I've been thrown in the deep end - I've created an Intranet in Apex3 on XE and now I need to make it available to outside parties over the internet. Due to the nature of the content it really should be only be available over SSL.
I have seen by other posts that suggest running Apache as a proxy for XE/Apex is the way to go and found what I thought was the answer on Apache's site (http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html) as well as defaulting Apache to an Apex site (APEX charts and reverse proxy (Houston we have a problem!!)
However I don't seem to be able to marry up these settings (not being an Apache guru) into one solution for Apache defaulting to an Apex app (for intranet users) AND the same app but running under SSL for internet users !
Any assistance would be greatly appreciated !!

Wayne,
This is discussed on the XE forum over here:
How to Enable SSL in Oracle XE
Joel

When spanning new tabs (firefox) my users are asked to re-authenticate with pages already signed into. Can you tell me how to fix this issue for firefox users?

With some research I found regedit setting called “TabProcGrowth” that allows tabs to span without re-authenticating with certain browsers. Can you tell me how to fix this issue for my Mozilla Firefox users? Our current version of Mozilla Firefox is: 24.5.0 (x86 en-US). This was first noticed with a product called Confluence that we use in our Tech Support area. Users are having to reenter their password every time they click on a new link in confluence. Any help would be appreciated.
Thank you,

Hi Bernie:
As long as you are accessing your internal server on http:// or https:// then I would expect the normal rules to apply. To see whether some external requests are being blocked, you might try using Firefox's Web Console, Network tab.
You can open the console in the lower part of a tab using either:
* Ctrl+Shift+k
* "3-bar" menu button > Developer > Web Console
* (menu bar) Tools menu > Web Developer > Web Console
Click "Network" on the top bar of the Web Console.
Then use the address bar or a bookmark to launch Confluence in the same tab. Each request made by Firefox should be displayed along with the result. You can click a row for more details.
When I look up "TabProcGrowth" it seems related to the Protected Mode feature of IE8 and newer, which is not (yet) applicable to Firefox. http://blogs.msdn.com/b/askie/archive/2009/03/09/opening-a-new-tab-may-launch-a-new-process-with-internet-explorer-8-0.aspx
However, if Confluence is heavily reliant on plugins such as Flash or Java, that could be a factor because plugins are run out-of-process in Firefox. In that case I suggest checking with Confluence for suggestions.

Enterprise Portal Log off Issue for External User

Hello
We are facing a Enterprise Portal log off issue for one of our external users.
User is logged in and clicks on the "Log Off" link .
User is prompted as seen below:
Are you sure you want to logg off?
Choose Yes or No
Click on Yes and popup window goes away and nothing else happens.
These problems logg off issue problem happening on Internet Explorer 6 but from from firefox browser, its working.
Also popups are not blocked on IE.
EP version with SP level is EP 7.00 SP12.
Even though from Internet explorer 6, i can log in and log off with internal user.
Please advise for the log off problem .

Hello
I added the value ume.logoff.redirect.url =https://poqwas.synenco.com/irj/portal
on Config Tool Global Paramter settings.
Then restart the server.
But I am getting the same problem.when I login with external user ID, then make log off. Nothin Happen...
Please advise

Exposing OIM functionality for internet users

We have a plan to upgrade IAM components to 11g release and leverage some of the functionality/service of OIM like self service and delegated admin for external users through internet. It is a obvious security concern to expose the OIM app as such to the internet users to achieve the same. And I believe our requirement is sure not one-off case.
Considering this, few queries to all the experts
1. What should be the ideal approach to achieve this?
2. Any recommended architectural docs/links/discussion thread for similar requirements and solutions?
3. I can think of one approach to achieve this would be to build an app integrating same with OIM using APIs.
Regards,
bkalita

Hi Kevin,
you NEED to work with the UME action Manage_My_Profile in order to enable user to view and modify their profile.
Any user with a role that has this UME Action can do the above. You assign UME actions to portal roles in the portal in the PCD Studio. Here a short description:
1. Go to Content Administration -> Portal Content
2. Change the super_admin_role for example by navigating to Portal Content -> Portal Administrators -> Super Administrators -> Super Administration
3. On the right pane switch the Property Category to "User Management Permissions"
4. Look for Manage_My_Profile and set it to "Yes"
5. Save the role and check your profile again
Hope this helps,
Robert
PS: Unfortunately there is no possibility to only view the user attributes, yet. This should be possible with the UME action Read_My_Profile introduced with NW2004s.
Only by integrating the LDAP read-only you would be able on other releases to achieve the same.

Lync 2013 - Address Book Synchronization Issues for External Users

I recently deployed Lync Server 2013 in my organization. Everything works fine except for the address book synchronizing issues and the mobility access. I would really appreciate if someone could share their knowledge as I have done lot of troubleshooting,
not sure if I have missed something. Please note my setup below for the External Web Services.
Lync Front End:
Listening: 8080 4443
Published: 80 443
I have published my External Web Services URL and the following ports are open: 4443, 443, 8080
When I look at the Lync Client Configuration, ABS Server External URL is pointing to https://lyncexternalweb.domain.com:443/abs/handler. However, GAL Status is still pointing to my internal Front End FQDN: https://internal.domain.com:443/abs/handler.
For machines that are joined to the domain, the address books synchronizes with no issues. For machines that are not joined to the domain and for external users, GALContacts and GALContacts.DB files are not event generated for the users profiles.

Hi Anthony,
Please note the findings below:
1. I was checking the Lync Client configuration on one of the PC that is not joined to the domain, still on the domain network via site to site VPN connection. I noticed that the Connected Lync Server varies: sipinternal.domain.com, sipexternal.domain.com,
lync.domain.com (Pointing to the Edge Server IP).
2. Edge Server External Settings: Single IP address with the FQDN set to lync.domain.com for all 3 services and the following ports configured. Access Edge Service: 5061, Web Conferencing Edge Service: 444, A/V Edge Service: 443 with NAT enabled public
IPv4 address. I have checked the replication status between the Front End and Edge Server, it is up to date.
3. In regard to the https://lyncdiscover.domain.com, I don't have the lyncdiscover.domain.com published, but it is pointing to the NAT enabled public IPv4 address which is assigned for A/V Edge Services.
4. For the port forwarding, I am using the Cisco Meraki router.
Please advise if there are there is something that I am missing.
Thanks!

How to create custom profile provider for fba user

Hello Every One
I have one SharePoint 2010 web application and on this FBA is configured. With help of code how can I get and set custom property for a user in
“aspnet_Profile” table in Database.
I have also try this config setting in web.config but not able to set or get profile property.
<anonymousIdentification enabled="true" />
<profile defaultProvider="AspNetSqlProfileProvider">
<providers>
<clear />

<add name="Demo_ProfileProvider" connectionStringName="fbaSQL" applicationName="/" type="System.Web.Profile.SqlProfileProvider,System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
</providers>
<properties>
<add name="ThemeName" type="String" allowAnonymous="true" />
<add name="NoOfVisits" type="int" allowAnonymous="true" />
</properties>
</profile>
</system.web>
thanks
navaratan
Navaratan Sharma

Solution for this problem is
do following entry in web.config
<anonymousIdentification enabled="true" />
<profile enabled="true" defaultProvider="AspNetSqlProfileProvider">
<providers>
<clear />


<add name="AspNetSqlProfileProvider" connectionStringName="fbaSQL" applicationName="/" type="System.Web.Profile.SqlProfileProvider,System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
</providers>
<properties>
<add name="ThemeName" type="String" allowAnonymous="true" />
<add name="NoOfVisits" type="int" allowAnonymous="true" />
</properties>
</profile>
</system.web>
code for get and set Profile property is
protected void OnClickbtn(object sender, EventArgs e)
try
ProfileBase profile = System.Web.Profile.ProfileBase.Create(HttpContext.Current.User.Identity.Name);
profile["ThemeName"] = txtTheme.Text;
profile["NoOfVisits"] = int.Parse( txtNoOfVisits.Text);
profile.Save();
catch (Exception ex)
protected void OnClickbtnGet(object sender, EventArgs e)
try
ProfileInfoCollection profiles = ProfileManager.GetAllProfiles(ProfileAuthenticationOption.All);
foreach (ProfileInfo profileInfo in profiles)
ProfileBase profile = ProfileBase.Create(profileInfo.UserName);
// add condition for user
txtTheme.Text = (string)profile.GetPropertyValue("ThemeName");
txtNoOfVisits.Text = Convert.ToString((int)profile.GetPropertyValue("NoOfVisits"));
SPUser user = SPContext.Current.Web.CurrentUser;
catch (Exception ex)
thanks
navaratan
Navaratan Sharma

Privacy issues for end user

The interactive form I have designed will be completed by people who are very conscious of their privacy. I imagine that most of them will not be happy to email their data, as this leaves easily found "breadcrumbs" on their computer.
Is there any way this data can be sent without going through the email process? Would submitting to a URL overcome this problem, or are there other "privacy issues" for the end user which may come into play?

Thanks Danmaster - after investigation I find I have been using SOAP for some time now. I've just never been conscious of its acronym. So if I have been communicating between applications using a communication protocol I have been using SOAP (Simple Object Access Protocol).
I am starting to think I'm really clever now.
Just because I have been submitting forms through http and then using CGI scripting on the server to convert and email me the results, I never thought that SOAP was such a vital component.
So perhaps the LiveCycle Designer will just allow me to create automatically what I have been hard-coding for years.
I really should have asked that "if the client submits via http through the LiveCycle form, will they be shown any hints that the data has been submitted".
Cheers

SICF settings for internet users

Hi All,
Can anyone tell how to configure hrrcf services in SICF for maintaining logon data as internet users. Now we are maintaining Standard SAP User and it works. Example: Service "hrrcf_start_int" in the logon data table rather than using Standard System User we would like to configure Internet User.
Thx
Anand

Hello Prajesh,
please try out this little ABAP coding which should return something like
<html><head><meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">...
or "HTTP Connection error":
REPORT z_google_http_test.
DATA: client TYPE REF TO if_http_client,
      html TYPE string.
****Create the HTTP client
TRY.
    CALL METHOD cl_http_client=>create_by_url
      EXPORTING
        url    = 'http://www.google.com/'
      IMPORTING
        client = client
      EXCEPTIONS
        OTHERS = 1.
    client->send( ).
    client->receive( ).
    html = client->response->get_cdata( ).
    write: / html.
    client->close( ).
CATCH cx_root.
    WRITE: / 'HTTP Connection error'.
ENDTRY.
Regards
Gregor

Front - end print with new access method G - having issues for some users

Hi Gurus,
Recently we have implemented the new access method G for front-end printing. it is working fine for 90% users in our company. but some users having problems in printing to WINDEFAULT using this new method.
Here is the SAP GUI trace file for the error that they are getting.
(Error)(25.09.09 15:42:36.444):    CALL METHOD "CreateControl"[DispID=5] OF [#1/0x0AE31790/1/{83658045-6571-3232-7082-797884697868}]
                    #0: LONG "101"
                    #1: STRING "SAPFPRINT.sapfprintCtrl.1"
                    #2: LONG "0"
                    #3: LONG "10"
IDispatch::Invoke raised exceptionException occurred
(Error)                       :
(Error)                       :    ****************************ERROR OCCURED IN MODULE: [{83658045-6571-3232-7082-797884697868}]******************************************************************************************************
(Error)                       :    PROGRAM_ID                                 |MODULE_NAME              |METHOD_NAME       |ERROR DESCRIPTION         |VERSION                    |GUI VERSION               |MODULE_PATH              |
(Error)                       :    *****************************************************************************************************************************************************************************************************
(Error)                       :    {83658045-6571-3232-7082-797884697868}     |Class name not found     |CreateControl     |Create control failed     |Version info not found     |Gui Version not found     |Module doesnot exist     |
(Error)                       :    *****************************************************************************************************************************************************************************************************
(Error)                       :
(Error)                       :    Exception fire by :SAP Frontend Server
(Error)                       :    Exception info:Create control failed
(Error)                       :    Exception code:65535
Did any one face this error? what could be the resolution?
We are already on SAP GUI 710 patch level 11
DISP+Work : 229
Appreciate your answers
Thanks,
Srini

Usually this means, that some necessary controls are not properly registered in the registry and hence can't be found. You may solve that by removing the SAPGUI from the PC completely, booting the machine and reinstall the GUI.
Markus

License issue for EP users

Hi,
I created certain WD application based on Z- functional module like delivery report, outstanding, sales order .My data source is ECC. I mapped single ecc users to multiple ep users.
Now i want to provide the login facility to the n- numbers of ep users by keeping the ep server outside the firewall. But we have limited ecc user license.
So, wether it is necessary to buy the each and every ep users license who want to logon to the portal or by user mapping (by single ecc user),multiple ep users can logon to the portal?
Thanks,
Kundan
Edited by: Kundan 2009 on Mar 10, 2010 1:43 PM
Edited by: Kundan 2009 on Mar 10, 2010 1:44 PM
Edited by: Kundan 2009 on Mar 10, 2010 1:50 PM

Hi Kundan,
If your system is ABAP + JAVA, then you don't need licence for EP user.
It will comes uder licence for your SAP backend System.
Thanks
Arun

HR Authorization issue for specfic User

Dear all,
One of the HR user , he can run payroll on particular site ,
i have assigned Org key of site to master data on the particular role .
User tried to run payroll using pa30 with personnel no (one of store user) .
but system is not take any value and its not showing any error also .
For example pls check below detail i have tried my user id and system has shows below details of the user (below details is one of the store user ).
Personnel no.   2941
Name         A Mohammed Younus
Personnel ar ZOSO                            EE group   A
Subarea      STCH                            EE subgrp 3E
Kindly suggest to resolve the issue
Note : 1, i have deleted the user and i have recreated role .
2, i have copied another user role (he can run payroll) to effected user ,even though he cant able to run payroll.
Edited by: satheesh0812 on Dec 17, 2010 9:29 AM

Dear all,
I dont thing so there is no issue with Role ,only issue with Structure Auth..
Becoz pls check below Authorization Object.
Changed    HR: Master Data
Authorization level            E, M, R, W
Infotype                       *
Personnel Area                 *
Employee Group                 *
Employee Subgroup              *
Subtype                        *
Organizational Key             20000156, 20000157, 20000201
In OOSP for particular Org key .
Auth profile              Auth.Profile name
CTHR_CHENNAI     CTHR_Chen
Auth profile             No Plan Vers Obj Type   Object I         Maint Eval.path Status vec
CTHR_CHENNAI     1     01               O                   20000156              O-S-P     12
CTHR_CHENNAI     2     01               O                  20000157             O-S-P     12
CTHR_CHENNAI     3     01               O                  20000201            O-S-P     12
In OOSB details
IN OOSB I have assigned Authorization profile to UserXXX, user can see all employee details in PA30 except one employee details , can
User name Autho.profile                           Start date        End date            Exclustion Display Objects
XXXX          CTHR_CHENNAI                     01.01.2005     31.12.9999
If i give Autho.profile --> all instead of CTHR_CHENNAI ..
HR executive can able see all employee details in PA30 ...
Let me know where exactly issue is there ...
Kindly suggest...

Unable to view pdf - initially thought to be user / OS issue for new user to MAC.

Unable to view pdf created in Live Cycle Designer ES2. I initially thought this was a user / OS issue when I created a document for someone who is new to a MAC laptop. She could not view the document through email. Unfortunately, I began seeing the same error in my own document folders when searching for another document showing as icons instead of a list. I can open the file without a problem although I see the error she sees only while viewing the icons in my folder. I am using a Windows 7 PC. Now, I also know that if the document is downloaded, it can be viewed.
Other notes:
If trying to access the form via the internet, the same error is seen through Chrome, Firefox, and Mozilla but NOT through IE
Everyone seems to have the latest or a very recent READER
The form is compatible with Reader versions 7 and up
Again, downloading from the internet to the computer appears to allow the file to open properly
Document cannot be viewed on the Galaxy Tab 2 via Chrome or the pre-installed Internet Browser, nor can it be viewed through the Reader after download to tablet. I did not try on an Apple iPad.
All parties involved are up-to-date with virus protection.
Below is a link to the exact message received when trying to open the document.
https://www.dropbox.com/s/wmjqzwyriovg9vi/Adobe%20Error.pdf

Sorry, this is a user to user forum and we're just customers who help out when we can, so things don't always happen right away.
Reader, Regardless of OS or device, is as the name implies, only a Reader. There are different mail settings between Mac Mail Outlook and Thunderbird as well as Andsroid's mail app, whose name escpoaes me.
Have you checked in the Live Cycle Forum? There are people there with FAR more experience using LC developed forms. It's part of my Creative Suite, but I've never even opened it myself.

Profile issue for internet user

Similar Messages

Maybe you are looking for