PROJECTS Security

Hi,
How can I put security on the specific Projects. For example, I want to create a Project and it should display only to a specific department. It should not be available in any Module for any Actual Transaction like Timecard, PR, PO...etc.
We are using Project Management, Project Costing & Project Manufacturing (12.0.6) and I do not want this Project to be available or display for any actual Transaction. I want this Project to be as a Stand alone i.e., Only for Project Management without any integration.
How can I achieve this task. Do I need to go for Multi - Operating or Multi - Org concept or Is there any standard feature available to achieve this.
Appreciate your quick reply.
Regards,
Khan.
Edited by: Mumtaz.Khan on 21/03/2011 01:31 ص

Thanks Dina for your suggestion.
My management is not ready to go for another Operating Unit. I gave them some workaround solution. Like:
1. Setup Organization Security Profile for a specific Organization.
2. Create a Secured Project.
3. Do not approve the Project (As they want to use only Project Management, so they will not see this project in any actual transaction)
With the above setups, I am able to fully achieve my requirements but still I want to explore more options. So, if you have something else then do share with me.
Regards,
Khan.

Similar Messages

How to checkin document with 'Projects' security group

Hi everyone,
i want to checkin a document thru a java class, and set it to Projects security group, also i want to set folder, userlist, grouplist...
Does anyone know how to define these things in java class before execute the CHECKIN service, or there are any extra service needed to run?
Thanks

Hi
I am putting the snippet on how to do a checkin for content RIDC :
public class TestRIDCCheckin {
* @param args
public static void main(String[] args) {
// Create a new IdcClientManager
IdcClientManager manager = new IdcClientManager ();
try{
// Create a new IdcClient Connection using idc protocol (i.e. socket connection to Content Server)
IdcClient idcClient = manager.createClient ("idc://hostname for ucm:intradocserverport");
// Create new context using the 'sysadmin' user
IdcContext userContext = new IdcContext ("sysadmin");
// Create an HdaBinderSerializer; this is not necessary, but it allows us to serialize the request and response data binders
HdaBinderSerializer serializer = new HdaBinderSerializer ("UTF-8", idcClient.getDataFactory ());
// Databinder for checkin request
DataBinder dataBinder = idcClient.createBinder();
dataBinder.putLocal("IdcService", "CHECKIN_UNIVERSAL");
//dataBinder.putLocal("dDocName","TestRIDCCheckin");
dataBinder.putLocal("dDocTitle", "Test RIDC Checkin");
dataBinder.putLocal("dDocType", "ADACCT");
dataBinder.putLocal("dDocAccount", "");
dataBinder.putLocal("dSecurityGroup", "Public");
dataBinder.addFile("primaryFile", new File("/home/oracle/cis"));
dataBinder.putLocal is used set the metadata and details for the content .
Hope this helps
Thanks
Srinath
Edited by: srinathmenon on Aug 20, 2010 1:23 PM

Projects Security Group

Hi, can anyone tell me (under collaboration) what's the difference between user1 and user2 under this circumstances:
1. Projects being the security group that comes as default in the system.
user1 - Projects(RWD)
user2 - Projects(RWDA)
where local access (ACL) and account (Prj) permissions are the same?
2. Prj being the Account that comes as default in the system.
user1 - Prj(RWD)
user2 - Prj(RWDA)
where local access (ACL) and Projects (Security Group) permissions are the same?
Thanks!

any help? plz

Projects Security Question

Hi,
We just enabled projects security using the profiles cross projects view and update for a particular responsibility.We use this view(PA_EXPEND_ITEMS_ADJUST2_V) in some of our deliverables.When using this view we get the quantities but burdened cost comes in as blank.Any light will be highly appreciated.
Is there some other profile which we need to enable ?
Regards,
Joseph

Hello,
The resp should have the profile "PA: Cross Project User -- Update" enabled. Then he can view the costs.
OR
User should have the control 'Allow Labor Cost Query' attached to his role to view the Cost columns if the role based security is enforced.
You can use the query below to determine whether the person is allowed to query the cost columns for the project in concern.
SELECT 1
INTO dummy
FROM pa_project_role_types_b rt
, pa_project_players pp
     , pa_role_controls rc
WHERE rt.project_role_type = pp.project_role_type
     AND rt.project_role_id = rc.project_role_id
     AND rc.role_control_code = 'ALLOW_QUERY_LABOR_COST'
     AND TRUNC(sysdate) >= trunc(pp.start_date_active)
     AND TRUNC(sysdate) <= trunc(NVL(pp.end_date_active, sysdate+1))
AND pp.person_id = X_person_id
AND pp.project_id = X_project_id;
OR
check if PA_SECURITY_EXTN package is customized.
Thanks,
Sathish
www.projectsaccounting.com
Edited by: Sathish Raju on May 19, 2009 5:30 PM

Collaboration Projects security group query

We have installed the Collaborative Projects component. When I create a Project by default it takes Projects as its security group & prj as accounts.
We want to add custom SG & accounts in my Projects.
any idea how to achieve this??
Thanks in Advance.
Edited by: user11264760 on Jun 12, 2009 10:00 PM

any help? plz

Implementing security for the Projects in OWB

Hi,
Can we able to implement the security for the individual projects?
Thanks
Vinay

Hi,
do not know exactly what kind of security you want to implement. But the below is the excerption from OWB User guide about implementing security at Project level...
You should be able to find more info in OWB User Guide.
Freezing Projects
If you want to freeze the project MY_PROJECT and prevent access to all its contents,
the following restrictions will apply:
You cannot create, edit, or delete any objects under a frozen project.
You cannot invoke any of the services that modify objects within this frozen
project. For example, you cannot perform an MDL import, a source import, or a
snapshot restore in this project.
You can deploy, export, and execute runtime procedures within a frozen project.
You can validate and generate within a frozen project.
You cannot add or remove any objects from a frozen project to a snapshot.
The frozen project security policy is implemented within Warehouse Builder through
the following files. These files are located on your installation CD under:
samples/security_feature/frozenproject.
frozenProject.pkb: Holds the implementation of the security policy.
frozenProject.sql: Contains a table of the structure as shown in Table 192. The
administrator can freeze projects by inserting them into this table and setting the
isFrozen flag to 1.
HTH
mahesh

Projects Analytics Security

Hi,
Has anyone implement the Project security by using key members?
Can you shear about the data security settings

Hello,
The resp should have the profile "PA: Cross Project User -- Update" enabled. Then he can view the costs.
OR
User should have the control 'Allow Labor Cost Query' attached to his role to view the Cost columns if the role based security is enforced.
You can use the query below to determine whether the person is allowed to query the cost columns for the project in concern.
SELECT 1
INTO dummy
FROM pa_project_role_types_b rt
, pa_project_players pp
     , pa_role_controls rc
WHERE rt.project_role_type = pp.project_role_type
     AND rt.project_role_id = rc.project_role_id
     AND rc.role_control_code = 'ALLOW_QUERY_LABOR_COST'
     AND TRUNC(sysdate) >= trunc(pp.start_date_active)
     AND TRUNC(sysdate) <= trunc(NVL(pp.end_date_active, sysdate+1))
AND pp.person_id = X_person_id
AND pp.project_id = X_project_id;
OR
check if PA_SECURITY_EXTN package is customized.
Thanks,
Sathish
www.projectsaccounting.com
Edited by: Sathish Raju on May 19, 2009 5:30 PM

Error in Interfacing Project Invoices to AR - No Active Project Manager

I am getting an error while transferring a projects invoice to AR.
I am running concurrent program 'PRC: Interface Invoices to Receivables' program from a responsibility that was created as per the client project security requirements.
The output gives an error message - 'No Active Project Manager Found'.
Note:
- The project manager is active on the project.
- The person record of the project manager is active with an active HR assignment.
- The project manager role is not end dated.
When I run this same program from the standard Project Implementation Super User responsibility for the same project, the invoice gets interfaced to Receivables without any error.
Why does this happen ?
Is this concurrent program dependent on any menu / function / profile option ? If so, which one ?
Regards,
Prakash

Hi Prakesh,
Were you able to generate Invoice and AR Invoice Number in PJB?
Try run Oracle Projects Invoice Data Collection Test n Oracle Projects (PA): Security Health Check
check.
Regards
Raghavender K

Prevent a user from changing the Project ID in P6 EPPM 8.3.7

Does anyone know if there is a Global or Project Security Profile privilege that will prevent a user from changing the Project ID on an existing Project? We are using Primavera P6 EPPM 8.3.7
Thank you,
Eric

Hi,
Below project security profile may help you,
Edit Project Details Except Costs/Financials
Determines whether the profile will enable users to edit fields in General, Dates, Defaults, Resources, and Settings tabs in Project Details. To assign a project baselines, users must also have the "Assign Project Baselines" project privilege assigned to their profile.
Regards,
Marcos

Business Rule Security not refreshing?

I have a business rule project that contained a bunch of rules and have a user that is part of a group that was granted launch access to that project. If I remove a rule from the project, in theory that user should no longer see that rule in Planning but that's not happening. The user still sees all the rules including the ones that used to be in the project but have since been removed.

1) I've verified that the sec. group that the user belongs to is only provisioned with business rule "basic user". Also verified that the rule that was taken out of the project does not contain any access previlges of it's own
2) No overlapping projects
3) Have already tried refresh security from SS, migrate users in HBR, Planning migrate\refresh with no luck
It seems like some sort of refresh disconnect because like I said, user can still see rules that don't have any rule level access previlge assigned but did at one point exist in a project that did enable access via project level access. Once I took the rule out of the project, security to it should have gone away.
Thanks

What are the foreign security certificates for?

I see a lot of foreign security certificates stored for FireFox. What are these and can I delete them? Some are from Taiwan, China, Turkey and Spanish countries.

That are built-in root certificates that are used to trust websites that you access via a secure (https) connection.
You can't remove a built-in root certificate.
You can edit the trust bits of built-in root certificates and uncheck all trust bits to prevent Firefox from using the certificate as a root certificate if you really want to, but that isn't recommended.
*http://www.mozilla.org/projects/security/certs/policy/
*http://www.mozilla.org/projects/security/certs/policy/MaintenancePolicy.html

Security with struts

hy!
one more question:
is it true, that each page in the folder "WEB-INF" or a subfolder of "WEB-INF" cannot be reached from the address line? or does the action also be in the mentioned folder?
or is this nonesense??
if yes, how can i make my project secure, i only want the users to get to the login-page!
tia
ciao david

is it true, that each page in the folder "WEB-INF" or a subfolder of "WEB-INF"
cannot be reached from the address line?Yes. This is a feature of web containers, and not just of Struts.
Here is a link showing how to set it up in Tomcat:
http://jakarta.apache.org/tomcat/tomcat-5.0-doc/realm-howto.html
In struts you add a "roles" property to your action mappings. Only users logged in as those roles can access those urls.

I'm unable to successfully install "renewed security certificates" from the site below

http://www.esic.in/ESICInsurance1/ESICInsurancePortal/PortalLogin.aspx
Please look at the link below to view the screenshots
http://sharatblog-myblog.blogspot.in/

I can't get Firefox to install the CCA India 2011 root certificate either, only installing the NIC CA 2011.cer and NIC sub-CA for NIC 2011.cer is possible.<br />
The CCA India 2007.cer can be installed, but nothing happens if I try to import the 2011 version, so that certificate is either in an unsupported format or something else is wrong.
No action about adding the 2011 root certificate seems to have started.
*http://www.mozilla.org/projects/security/certs/pending/#CCA
*Bug 557167 - Add CCA India root certificate

Re: Project List

Hi all,
I had created few Projects in Projects:Delievery > Create Project. But When i try ro see the list of projects in Projects:Delievery > Projects List.. I could not find anything.. pls help
Thanks
Dinesh

This chapter discusses the various security structures used by Oracle Projects: project
security, responsibility–based security, and organizational security.
This chapter covers the following topics:
• Security In Oracle Projects
Security In Oracle Projects
Oracle Projects uses an integrated set of security mechanisms to control function and
data access within Projects applications. These mechanisms are:
• Responsibility-Based Security, page 13-2
• Project Security, page 13-3
• Organization Security, page 13-6
• API Controls, page 13-9
Understanding Oracle Projects Security
Oracle Projects provides several integrated security mechanisms to help you define user
access to organization, project, and resource information, as well as a variety of Oracle
Projects functions. These mechanisms are all based on function security, which is the
foundation of Oracle Applications security.
Using these integrated security mechanisms, you can define Oracle Projects security
at the:
• Responsibility level, across projects.
• Project level, using project roles.
• Organization level, using predefined organization authority roles.
The manner in which you set up your security system depends on how you manage your
projects and the levels of access you want to provide to your users. When you set up
your security features, take time first to consider the types of users that you have and the
levels of data and function access that you think they should have. This study will help
you determine how you want to set up security for your enterprise.
Note: In addition to the mechanisms mentioned above, Oracle Projects
public APIs, the project security extension, and issue and change
management functionality can all have an effect on how the system
grants function access to users.
Security in Oracle Projects 13-1
Function Security: The Building Block of Oracle Projects Security
All the security mechanisms of Oracle Projects are built upon function
security. Responsibility-based security, project security, and organization security all
determine the sets of functions that are available to users. Function security controls
which of those functions the users can perform.
For detailed information about function security in Oracle applications, see Overview of
Function Security, Oracle Applications System Administrator’s Guide.
For a list of Oracle Projects functions that can be controlled using function security, see
Function Security in Oracle Projects, Oracle Projects Implementation Guide: Appendix A
Menus
You use menus to assign groups of functions to either responsibilities or roles. A menu
defines the list of functions that are available to a role or responsibility. Menus can use
submenus to organize large groups of functions.
You can only assign one menu to a responsibility or role at a time. The only exception
to this rule applies when you use role-based security by project status. In this case you
create separate function menus for each project status and then assign each of these
menus to an individual role.
For more information about menu usage in responsibility-based security, see
Responsibility-Based Security, page 13-2.
For more information about menu usage in role-based security, see Using Project
Security, page 13-3.
For more information about role-based security by project status, see Role-Based Security
by Project Status, page 13-4.
I copied the above from the Oracle Projects Fundamentals Guide. Without knowing your security setup in your implementation, it is very hard to give you a good answer to your question. The issue could be in responsibility security, could be in project security, or could be in role-based security. You may be better off on this to contact Oracle Support for help. Support has the advantage of being able to start a web session and see what is on your system, which we cannot do in this forum.
John Dickey

How to do this in ODI

HI Friends,
I m installing ODI.I am using ODI 11 and Oracle 11g version.
And we have One Master repository for Dev and UAT, mainly because we have one physical server for UAT connecting to UAT DB and Dev DB. And a separate Master repository for Production.
So i have few inputs needed from your side:
•Need to check Web agent and ODI Console configuration
•Need to check Topology configuration, physical, logical and contexts.
•Setting up projects
•Security implementation
•Versioning and Solution management
For all these above point i need How to do this any step by step guide andd how much time it will take .
Thanks,
Lony

lony wrote:
HI Friends,
I m installing ODI.I am using ODI 11 and Oracle 11g version.
And we have One Master repository for Dev and UAT, mainly because we have one physical server for UAT connecting to UAT DB and Dev DB. And a separate Master repository for Production.
So i have few inputs needed from your side:
•Need to check Web agent and ODI Console configuration It will take maximum 3 hour if everything goes well.
•Need to check Topology configuration, physical, logical and contexts. Depends on how projects you have and what are the connection details. Still it will take two hour for setup with analysis.
•Setting up projects Depends on requirement.
•Security implementationThis may take more than 4 hours to set the profile properly for each resource.
•Versioning and Solution managementShould not be more than 2 hours for one project
> For all these above point i need How to do this any step by step guide andd how much time it will take .
I gave input for initial setup if everything is ready. But it depends on your architect as well.
Thanks,
Lony

PROJECTS Security

Similar Messages

Maybe you are looking for