'Protecting' your derived roles from being maintained on object level

I'm redesigning an authorization concept that has been polluted in the past by maintaining object level values in the derived roles instead of the master roles.
Now I would like to build in a kind of warning or authorization so that future role administrators can adjust master roles on object level, and derive the roles from the master, but are not allowed (or get a warning) to change object level values in the derived roles themselves.
I'm looking for a warning similar to the warning you get when you are trying to change an organizational level value within the object rather than change the orglevel table.
I have looked for entries in table PRGN_CUST, but found none.
Also, the authorization checks for deriving roles [seem to be similar|http://help.sap.com/saphelp_nw04/helpdata/en/2b/84653f1b76b11ae10000000a114084/frameset.htm] to actually maintaining a role, so no distinction can be made here.
Knowing al this, II think the answer is: 'no, this is not possible' but if you have dealt with the same problem successfully, please let me know.
Kind regards,
Lodewijk Borsboom

Hi Lodewijk,
There are exit paths in SU01 and PFCG which might (have) help(ed) but SAP removed the documentation on them because as (to my knowledge) as the code was integrated into BAPIs and org. management these exits (like many which have gone before them) caused no end to confusion over time.
I heard that they would at some ponit be replaced by BADI's but I guess the same problem exists there and I have to date not seem any of them released.
I have the documentation if you are interested but which release are you on? I suspect that SAP might even remove the exit coding anyway.
As the other's have stated, I would also go for a detective control. You can always wipe the mistake out again from the master and this will let you know that someone is not sticking to the rules or doesn't understand the concept.
This is also an advantage when compared to an error message or warning which only they see...
Cheers,
Julius

Similar Messages

Protecting your jar file from been extracted

Please i noticed that the java jar file of a software can easily be extracted to review the class files with winrar which allows just anyone to have access to your class file and decompile to get source codes, allowing pirating of the software. How can I lock the jar file to prevent extraction of my class files.

1. why are you mocking others instead of answering the question ? some one wants to protect his jar file. the solution is simple.
2. you can use google to search, here is result :
http://stackoverflow.com/questions/1280702/protecting-java-jar-files-for-distribution
http://stackoverflow.com/questions/9633455/how-to-protect-a-jar-file-from-being-decompiled
http://www.thegeekstuff.com/2008/06/protect-your-java-code-from-reverse-engineering/
http://answers.google.com/answers/threadview/id/431511.html
http://stackoverflow.com/questions/1879061/how-to-protect-java-codes-against-decompiler
http://viralpatel.net/blogs/2009/07/protect-java-code-decompilation-using-java-obfuscator.html
http://www.coderanch.com/t/430716/java/java/Protect-class-file-not-decompile
http://stackoverflow.com/questions/7324708/are-jar-file-insecure-what-can-done-apart-from-code-obfuscation
http://stackoverflow.com/questions/3647255/how-do-i-copy-protect-my-java-application
http://www.javaworld.com/javaworld/javatips/jw-javatip22.html
http://stackoverflow.com/questions/12088/do-you-obfuscate-your-commercial-java-code
3. it is true if you can use basic methods that EJP mentioned, there would be no need for obfuscators, nor native library use.
but there are many situations that you can't do any of those methods.
4. EJP claims that he probably is the one "who have had perhaps 40 times as long as you've had to think about it."
here is the problem that made me use both obfuscation and native library :
My company released a simple java library that scanned a document (directly from scanner or camera device).
the documents were exam papers.
Use some OCR techniques to convert image to text so some other application could calculate the score using it's api.
For marketing purposes, the company needed to publish a 7-day trial version of this library.
So, as you can see I'm eager to hear what you want to suggest.

How to protect my jar file from being downloaded

How can i protect my jar file from being downloaded by users by accessing it through the web site.
Now everybody can just type the url www.mysite.com/applets/myApplet.jar
And download it to his computer.
I realize that anybody who really wants to download it he will get it anyway, but I want to make it harder.
thanks in advance

Your browser has to download the jar file if it's going to run the applet. That's applets work. The browser downloads the classes and then runs them locally.
I suppose if you wanted to make something to make it difficult for users to explicitly download the jar, you could set some kind of permission flag when the HTML is page is rendered, and then unset it some amount of time (10 seconds?) later, and then only let the user download the jar when the flag is set. But this would be fragile and irritating and unhelpful. It would probably break more than you'd like and not prevent download very much (it wouldn't take long to figure out what was happening), and besides nobody is ever going to try to steal your code.

Security Issue: How to create a derived role from the Base role

Hi All,
Kindly let me know how can i create a derived role from the base role?
Please respond at the earliest.
Thanks in advance.
Ramesh.

Go to PFCG and Create a role with desired Name.
In the Description Tab, on the Left Side there is a text box for "Derive From "
enter the Base role.
Now your newly created role is derived from the Base role.
Save the newly created role and again run PFCG, enter the Base role name and execute.Select Edit role. Go to Authorization tab.
Edit Authorization.
In the Menu Adjust Derived -> Generate and Adjust derive
This will Generate the derived role.
Now you may go and check the authorization in the derived role.

Is there a way to prevent your iMessage txts from being shared on all your apple devices?

Is there a way to prvent your iMessage txts from being shared on all your apple devices?

Hi,
not sure where to find original post. In RDB, it is MSP_EpmTask_UserView.TaskClientUniqueId.
Sorry, if there are now 2 answers.
Regards
Barbara
To increase the value of this forum, please mark the replies that helped to solve your issue as answer. If you find answers to questions from other forum participants to be helpful, please mark them as helpful. Your participation will help others to find
an appropriate solution faster. Thanks for your support!

How to strongly protect the step types from being modified by others?

how to strongly protect the step types from being modified by others?

Hi Jacky,
You can make a property of a step uneditable by changing the property
flags for the step. First, you want to be able to view the hidden
properties so that you can change the flags for these properties as
well. You do this by going to Configure>>Station Options
and selecting the Preferences tab. Check the box for Show Hidden
Properties. Once you have done this you can select the step type
from the types palette. In the window to the left, you can expand
the tree for the type to see all the properties of that step.
Right click on the property that you do not want users to be able to
edit, select Properties. Then click the Advanced button.
Here you will see a list of the setable flags. Check the box for
PropFlag_NonEditable. You can then do this for all the properties
of the step that you do not want users to edit.
Thanks,
Caroline Tipton
Data Management Product Manager
National Instruments

Protecting web page photos from being copied

Is there a way to insure the photos on a webpage gallery in iweb cannot be copied? For example like a photographer site who doesn't want copyright photos copied.
Thank you!

Welcome to Apple Discussions,
If you can see it on the web it can be copied.
You have 3 options:
1.) Password protect your site so only those that you provide access to can see the photos. (Doesn't prevent copying, it just limits the pool of people that have access to it.)
2.) Add a watermark to the images (This is what many professional photographers do. It doesn't prevent copying, but it makes it very obvious where the photo came from. Programs like Aperture have watermarking features built in.)
3.) Don't put it online if you don't want it copied.

Protect bbm chat history from being deleted

Hi Guys
I'm still new here, plz help me, is it possible for me to stop the bbm chat history on a Blackberry from being deleted? Maybe set a password before deletion will take place?
Plz help

Hi Catman78,
There is no such option of setting password for deletion. You can check the below KB article for checking memory leak -
KB02843 What is the Low Memory Manager feature on the BlackBerry smartphone
Alternatively you can save chat history in your media card. Check the below KB article -
KB18406 BlackBerry Messenger conversations are lost following an application load process of a BlackBerry smartphone
tanzim
If your query is resolved then please click on “Accept as Solution”
Click on the LIKE on the bottom right if the post deserves credit

Protecting the jar files from being web access

I have a jnlp file which is put under tomcat webapps folder, say (\webapps\TEST\launch.jnlp), with the jar and lib files put in the subfolder (\webapps\TEST\folder1\*.jar AND \webapps\TEST\folder1\lib\*.jar).
My question is how can i prevent user from direct access to the jar files via typing http://www.someip.com/TEST/folder1/main.jar ? I tried the following methods but it seemed not working:
1. Change the folder permisson in \webapps\TEST\*.*, but when user type the above hyperlink they can still get the jar file
2. put the jar and related files under \WEB-INF\, but now this time running the launch.jnlp, it returns an error saying that it can't access/find the WEB-INF.
Is there any method? Or should I say, when you published jnlp to web, the related jar files are forced to be accessed by everyone.

Sounds easy to me: encrypt your xml, then instead of just storing your key as plain bytes do some reversable operations on it (xor masks, reversions, whatever you like), just do them in many different points (and classes) of your code, have some parts done by methods that actually check application is running under JWS with proper codebase, scramble it all, and suddently the whole stealing operation won't be worth the effort. Obviously you should have many private (and package protected) methods, seal packages and so on. Maybe, somehow, you can even use reflection to identify calling classes (not sure, never looked for anything similar).
What else? write down some c++ code into your own dll/JNI library and make it do something too, so they'll even need to decompile the dll. If you know first execution is always online you can send another xor key and store it with persistence service or write it down to windows registry. You can keep making it harder as much as you like, even just with silly code like
Math.ceil((new GregorianCalendar.getField(Calendar.YEAR)%2000)/1000)*((int)('c'-'a'))just to retrieve the number 2. If you distribute such code through many lines and methods, once you scramble it, most people will give up.
Bye.

Protecting images in slideshow from being copied

Hi, I am new to iDVD and would like to know....
Would a client be able to print from images that I have made into a slideshow using iDVD.
If this is possible how can I protect my images?
John

Hello John,
the short answer is: No.
There is no possibility in iDVD (or DVD Studio Pro,
for that matter) to effectively protect the contents
of a DVD. The industry has been trying for a long
time to protect CDs & DVDs, but there are a lot of
tools freely available on the Net that break these
protections, be that illegal or not.
What you can do is place a watermark (logo/© 2006 by
John) on your pics. This can be done in Photoshop or
iWatermark for example. The drawback is that you need
to place the watermark in a way that it doesn't
interfere with viewing, thus it would be easy to
simply cut the part.
Final thought: the "ripping" of a DVD rarely produces
good quality results, as the MPEG-2 encoded video is
not meant to be edited further. So your client might
not get the hi-res prints he/she expects.
hope this helps
mish
Thanks Mish. I will resort to using a watermark.
Could you advise on the resolution of jpegs to use for a slideshow?

How do I protect a single message from being deleted when I celete a conversation in Hangouts?

If I have a string of 100 messages in a thread, perhaps I want to protect a single response but delete the remainder of the thread. How does one do that in Hangouts?

That's a great question JerryBeeler. I know how important it is to save your messages. Per the app developer, as long as your Hangout History setting is ON, you'll always have access to it. Here is a link to help you http://bit.ly/1pUWkhc.
AdaS_VZW
Follow us on Twitter at @VZWSupport

TS1363 how do you fix your ipod touch from being read as a camera

i ran a test to see what was wrong, and it said it couldnt read the ipod. ive been using this forever and all of a sudden if cant read my ipod. so i read somewhere that itunes can read it as a camera and i looked on my computer and sure enough it showed a camera when i had the ipod plugged in and it would be gone once i unplugged it. anybody pleaseeeee know how to fix this?!?!?

That's normal for the iPod to be read as a camera. I assume you have tried everything in this article?
iOS: Device not recognized in iTunes for Windows
B-rock

All objects are inactive in derived roles (copied from existing derived role)

I need to create more than 1000 derived roles, from existing reference roles.
Reference roles are also derived roles. So I executed LSMW for mass copy.
Eg: Reference role XYZ with parent role XXX
New role(ABC) copied from XYZ ,so ABC is having same values as XYZ and master role also.
Now the issue is after executing the LSMW all roles are copied to new roles, but all objects are inactive in new roles .I am not able to activate the object also.

Hi Colleen,
Issue: I have derived roles for plant XX, now I want to derive same set of roles for YY plant. My reference plant is XX, So what am doing is copying the XX roles to New roles (YY) .No change in object or description, just copy role to new role. And I am using LSMW for the same.
After copy the roles, I will change the description and profile using another script and manually change the org values. But after copy the roles to new roles using script all objects are inactive (In red color),if am selecting the org tab ,I will get message like ,no org levels maintained. Because all objects are inactive .And there are no options (edit) to activate the objects or maintain the fields.
Thanks,
Anusha

Importing master role from ECC into portal throws derived role exception

Hello,
While uploading master and derived role from backend system into the portal I am getting the following exception.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Nested Exception. Failure to execute native function. Nested Exception. ROLE_IS_DERIVED
Does it imply that the derived role is already imported with the import of master role and there is no need to explicitly import the derived role?
The landscape uses role upload tool of portal for UME.
Regards
Pooja

Hi Pooja,
There is a limitation with the role upload tool that the derived roles cannot be uploaded.
The migration is only able to upload roles which have their own menus. Derived R/3 roles does not have menus themselves as they derive them from other roles. The purpose of the migration is to bring the R/3 navigation structures into the portal. Therefore you can only migrate the role from which your role is derived.
Regards
Anja

Protect DLL Files from being deleted or unregistered

I am looking for a way to protect a DLL file from being deleted or unregistered.
My users have an application that uses the same DLL files as another application. This is in a test environment, so when they are uninstalled they step on each other by deleting or un-registering the DLLs.
Any ideas?

Hi,
These apps are designed to delete the DLL file in uninstallation process. You can test to Deny the Delete permission on the DLL file as a test but it may cause a new issue that application think they failed to uninstall itself clearly as the DLL file cannot
be deleted. Just have a try on Deny Delete permission in NTFS security.
If you have any feedback on our support, please send to [email protected]

'Protecting' your derived roles from being maintained on object level

Similar Messages

Maybe you are looking for