Provide Read-Only Permission using Category Permissions

I am wondering if we can provide read-only access to PMs on specific Project Plans. using category/group based security permissions.

Yes it is possible, but with so little details about your configuration and need, we can't help you much. I'd suggest that you take a look to the RBS feature.
Using the RBS, you can configure security categories so users belonging to group associated with this category can only see in read only projects which are not belonging to the given category or projects owned by users at the same level of RBS.
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

Similar Messages

Error when Read only permission set when filtering data before loading with Excel 2013 Addin

Good afternoon :)
I have an MDS issue that is making me lose my mind.
I have some permission set to an Entity. It is a read only permission in the entity but I tried to put inside every field and same thing happen.
Every time an Entity has any kind of read only permission assigned to it or its fields, Excel Addin show an error when we try to load it. When Entity has more rows than the maximum rows in the Settings pane, it will show you an option to filter data. When
you try to use this filter, Excel show an error message but you can press OK and everything works fine.
There is the message:
The thing user, my user do not want it :( And I don't know how to get rid of it.
Do anyone have an ideia on how to fix it ?
In the debug set of the addin, there is this message:
2014-10-22T11:38:42.152        8440 EXCEL.EXE            EXCEL.EXE
Generic          EventType: Error, Message: Unobserved exception in TaskScheduler. Exception:'System.AggregateException: One or more errors occurred. ---> System.NullReferenceException: Object reference not set
to an instance of an object.
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at System.Windows.Forms.WindowsFormsSynchronizationContext.Send(SendOrPostCallback d, Object state)
   at Microsoft.MasterDataServices.ExcelAddInCore.ExcelHelpers.ExecuteOnUIThread(SendOrPostCallback callback)
   at Microsoft.MasterDataServices.ExcelAddInCore.DataView.FinalizeUIOperation(Boolean mdsOperation)
   at Microsoft.MasterDataServices.ExcelAddInCore.DataView.<>c__DisplayClass53.<LoadData>b__51(IAsyncResult ar)
   at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar, Func`2 endFunction, Action`1 endAction, Task`1 promise, Boolean requiresSynchronization)
   --- End of inner exception stack trace ---
---> (Inner Exception #0) System.NullReferenceException: Object reference not set to an instance of an object.
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at System.Windows.Forms.WindowsFormsSynchronizationContext.Send(SendOrPostCallback d, Object state)
   at Microsoft.MasterDataServices.ExcelAddInCore.ExcelHelpers.ExecuteOnUIThread(SendOrPostCallback callback)
   at Microsoft.MasterDataServices.ExcelAddInCore.DataView.FinalizeUIOperation(Boolean mdsOperation)
   at Microsoft.MasterDataServices.ExcelAddInCore.DataView.<>c__DisplayClass53.<LoadData>b__51(IAsyncResult ar)
   at System.Threading.Tasks.TaskFactory`1.FromAsyncCoreLogic(IAsyncResult iar, Func`2 endFunction, Action`1 endAction, Task`1 promise, Boolean requiresSynchronization)<---

Rafael,
Is this still an issue?
Thanks!
Ed Price, Azure & Power BI Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

Upload a value in read-only field using Webservices or Workflow

Can you please let me know if is feasible to upload a value into a read-only field using webservices or workflow
If so, can you please provide an example?
Thanks

Using WS, you cant update the field value, if it is set as "Read-Only" @ the object - Field definition level, but you can update that using WS if it is set as "Read-Only" @ the layout level. Same applicable to Workflows too
-- Venky CRMIT

Getting my External HD out of "Read-Only" permission...

Ok, I just recently purchased my Mac used from my school, and because it has a marginally small Harddrive, I purchased an external drive to suppliment. But, after installing the device drivers, the HardDrive claims to be "Read Only" meaning that I can't store anything on it, defeating the purpose...Can anyone help me figure out how to change my permission settings on the Hard Drive so that I can use it? Thanks.
eMac Mac OS X (10.3.9) External Hard Drive

Select the disk in the Finder and choose Get Info from the File menu; next, check the disk's format.
If the disk's format is Windows NT Filesystem, use the Disk Utility in the /Applications/Utilities/ folder to erase the disk.
If the disk's format is MS-DOS, FAT32, or Mac OS Standard, look on the drive for a physical switch which might control the ability to write to the disk.
If the disk's format is UNIX File System or any Mac OS Extended variant, change the permissions in the Ownership & Permissions section of the Get Info window so you can write to the drive.
(16442)

Newly created folders give "staff" read-only permission

When I create a new folder in my home directory it has the following permissions:
Me: Read & Write
staff: Read only
everyone: No Access
Other (non-admin) accounts seem to belong to staff and thus have read access to any non-standard folders in my main (admin) home directory.
1) How can I change the staff permissions on these folders (Finder gives me an error)? Is this only possible using sudo chmod?
2) How can I change the default permissions to stop giving default access to all users through the staff group?
Thx,
Chris

Other (non-admin) accounts seem to belong to staff and thus have read access
to any non-standard folders in my main (admin) home directory.
The easiest solution is just not to keep confidential folders that you create yourself at the top level of Home. You could instead create a single enclosing folder to hold that all that extra material, call it, say, "My Other Stuff", and put it in your Documents folder where it would be protected from all other users. You could then create descriptive subfolders within in it, which would also be protected.
If you still instead want to alter the permissions of folders that you create yourself and you don't want to use Terminal, take a look at [BatChmod|http://www.macchampion.com/arbysoft/BatchMod/Welcome.html].

Read Only Permission on project site (PS 2013)

In Project Server 2010, if someone could see all projects, and had the “View Project Site” permission (basically the Executives group), you would end up with only Read rights on a project site. You could view stuff, but not edit anything.
In Project Server 2013 we are having an issue with giving read only access to project sites. After comparing our customized groups/categories with the ‘out of the box’ Portfolio Viewers security permissions we have actually given our groups less permissions.
We want these users to be able to see all projects, but only have read only permissions on the project sites. That is not happening. The executives end up with contribute permissions similar to what a team member with assignments on a project
would get.
any feedback will be appreciated.
Thanks,
Ali Al . Consultant & Development Manager.

Hi Paul,
This issue was fixed in the November 2014 cumulative update for Project Server 2013:
Hotfix KB2899547 for Project Server 2013 November 11, 2014 (Projectserverwfe-x-none.msp; Projectservermui-<Language-Code>.msp)
http://support.microsoft.com/en-us/kb/2899547
The fix is also included in the cumulative update for Project Server 2013:
November 11, 2014 Cumulative Update for Project Server 2013 package
http://support.microsoft.com/en-us/kb/2889949
More recent updates will include this fix.
Brian Smith published a blog with additional information:
Project Server 2013: Project now controls the Visitors group on Project Sites
http://blogs.technet.com/b/projectsupport/archive/2015/02/03/project-server-2013-project-now-controls-the-visitors-group-on-project-sites.aspx
Thank you,
Suzanne
Microsoft Corp.
Suzanne Sylliaasen [MSFT]

How can I make a file not read only? Using LV6.0, I have tried the Access Rights VI w/o luck.

I am talking about any file in windows 98 that has the read only box checked when I look at the properties of the file from Windows Explorer. I can can get rid of the check from the properties box, but I want to do it programmaticaly in LabView.

Hi,
Wire in '448' to the 'New Permissions' of the Access Rights VI. This will set the file as readable, writable and executable. I just tried this (on WinNT, though).
The 'permissions' parameter is a 16-bit integer where the least 9 bits are used. Of these, for Windows, bits 8, 9, and 10 (0-indexed) are important (i.e. if these are set = integer 448). See online Help for full details.
Hope this helps,
Khalid

Grant read only permission on my stored procedure.

I have a requirement like give reaonly access on my stored procedure to another user , not even execute permission on that steored procedure.
Could you please let us know the command ?

Marwim wrote:
You can read the source of any PL/SQL code in dba_sourceBut that requires a priv such as select any dictionary to be granted. Why would you want to give a schema access to reading any and all source code in the database?
This is why I think it is important that the OP provides the reasons behind the question of granting read-only source code access.
Security is a critical component of software engineering. The basic security principle is to grant the absolute minimum privileges required to s/w and users to get the job done. Granting access to a schema read access to a dictionary view like DBA_SOURCE violates it.
If userB wants to see userA's source code - then why not have userA simply mail it to userB, or check the code into a common source code repository?

User with Read-Only permission can write

Hi,
I have two Macs on a local network. I am sharing a folder on Mac-A and would like users to have read-only access to it. It is important that users cannot modify the data in this folder.
On Mac-A:
Selecting System Preferences->Sharing->File Sharing, I added the folder to "Shared Folders". Next, I added the user account "bob" and assigned Read-Only access. User bob is not an admin and shows up as a "Sharing Only" account under Accounts.
On Mac-B:
I connect to Mac-A as user bob and I can see the shared folder. I then am able to create and delete files in the "Read-Only" share. I've verified using File->Get Info that user bob does indeed have only read access.
What am I doing wrong and what can I do to enforce read-only access?
Thanks!

Maybe your Mac-B user account has the same (short) user name
as your Mac-A user account. Matching user names or short user names
could make the Mac-B account able to Read & Write to your shared folder.
Because I think you can log in with short user names to a server
as well. I guess passwords should be matching as well,
and perhaps the user ID's (System Preferences -> Accounts
-> right-click on user) also?
Cheers,
Vincent Verheyen.

Mounting read-only LUNs using ocfs2

Trying to hard mount a read-only LUN that has previously been formatted with ocfs2. Cannot find much on hard mounts and what options I need to use to get it to work.
Any help appreciated
Rgds
Rodney

Re,
an I/O error ad this point means nothing :-/
What distribution and kernel you are running ?
Do you really need a cluster file system ?
Packages installed ??
#>rpm -qa | grep ocfs2
Kernel module launched ?
#>lsmod | grep ocfs
..and --> why are you using ocfs2, do you really need it ?
RH
#>service ocfs2 status ..
SLES
#>rcocfs2 status
*T

Customer MasterPage & Read Only Permission

Hi,
I have added the code below to the masterpage, but only administrator can see the effect on the relevant page and not users with read permission. Why is that and how can I fix that?
Any help would be appreciated.
<script type="text/javascript" >
ExecuteOrDelayUntilScriptLoaded(retrieveSpecificGroup, "sp.js");
function retrieveSpecificGroup() {
   var clientContext = new SP.ClientContext.get_current();
   this.collGroup = clientContext.get_web().get_siteGroups();
    clientContext.load(collGroup, 'Include(Title,Id,Users.Include(Title,LoginName))');
    clientContext.executeQueryAsync(Function.createDelegate(this, this.onQuerySucceeded), Function.createDelegate(this, this.onQueryFailed));
function onQuerySucceeded() {
    var groupEnumerator = collGroup.getEnumerator();
        var oGroup = groupEnumerator.get_current();
    while (groupEnumerator.moveNext()) {
    if( oGroup.get_id() == 25 )
             alert("25");
    else if( oGroup.get_id() == 26 )
             alert("26");
    else
             alert("None");
function onQueryFailed(sender, args) {
    alert('Request failed. ' + args.get_message() + '\n' + args.get_stackTrace());
</script>

Make sure, you Check-In, Publish and Approve the master page. Only after its published and approved, changes will be visible to read only users
Ram Prasad Meenavalli | MCITP | MCTS SharePoint | MCPD SharePoint | http://www.spdeveloper.co.in

Issue regarding open word file and read only mode using c# & MS-word interop

i am programmatically open a word file for search and highlight keyword. my routine is working fine. the problem is when i am opening the file programmatically then a dialog come and ask me to open file in read only mode. the dialog look like below one
actually i do not want to open the file in read only mode because people can open and like to change and save. so guide me what i can do to not to open the file in read only mode.
here is my full code. just have a look and tell me what is wrong in my code or tell me any trick as a result i can open the file not in read only mode. here is my code.
private void button1_Click(object sender, EventArgs e)
            object fileName = "";
            string filePath = "";
            string strSaveasPath = "";
            DialogResult result = openFileDialog1.ShowDialog();
            if (result == DialogResult.OK)
                fileName = openFileDialog1.FileName;
                //strSaveasPath = Path.GetDirectoryName(path.ToString());
            //fileName = "Z:\\C0000000003.doc";
            List<string> _list = new List<string>();
            _list.Add("tridip");
            _list.Add("arijit");
            //object fileName = "D:\\CVArchievePath\\C0000000001.doc";
            object textToFind = "test";
            object readOnly = false;
            Word.Application word = new Word.Application();
            Word.Document doc = new Word.Document();
            object missing = Type.Missing;
            try
                doc = word.Documents.Open(ref fileName, ref missing, ref readOnly,
                                          ref missing,
ref missing, ref missing,
                                          ref missing,
ref missing, ref missing,
                                          ref missing,
ref missing, ref missing,
                                          ref missing,
ref missing, ref missing,
                                          ref missing);
                doc.Activate();
                object matchPhrase = false;
                object matchCase = false;
                object matchPrefix = false;
                object matchSuffix = false;
                object matchWholeWord = false;
                object matchWildcards = false;
                object matchSoundsLike = false;
                object matchAllWordForms = false;
                object matchByte = false;
                object ignoreSpace = false;
                object ignorePunct = false;
                object highlightedColor = Word.WdColor.wdColorGreen;
                object textColor = Word.WdColor.wdColorLightOrange;
                object missingp = false;
                Word.Range range = doc.Range();
                foreach (string line in _list)
                    textToFind = line;
                    bool highlighted = range.Find.HitHighlight(ref textToFind,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing,
ref missing);
                System.Diagnostics.Process.Start(fileName.ToString());
            catch (Exception ex)
                Console.WriteLine("Error : " + ex.Message);
                //Console.ReadKey(true);
            finally
                //doc.Close(missing, missing, missing);
                if(doc!=null)
                    System.Runtime.InteropServices.Marshal.ReleaseComObject(doc);
                if (word != null)
                    System.Runtime.InteropServices.Marshal.ReleaseComObject(word);
                word = null;
                doc = null;
                GC.Collect();
                GC.WaitForPendingFinalizers();

I know it's a very old issue and I reached to this page looking for a solution. Finally, I have found a fix to this problem.
The problem is that we create an instance of Word and do not close it correctly. This makes program believe that the file is already open and hence you're getting the respective message of file being locked by you.
Set the visibility of your application to true and then when you close it both file and instance should close and you will not get the problem again.

How to provide Read only / Execute access to an existing schema?

Hi,
My instance version details are as follows:-
Oracle Database 10g Enterprise Edition Release 10.2.0.5.0 - 64bi
PL/SQL Release 10.2.0.5.0 - Production
"CORE 10.2.0.5.0 Production"
TNS for Solaris: Version 10.2.0.5.0 - Production
NLSRTL Version 10.2.0.5.0 - Production
I have 50 users in this instance. One of the user is USR1. I want to create another user say USR1_RO, who should have full access to his schema and Read and Execute privilege for all the existing and new objects in USR1 schema alone.
I am new to oracle security concept. When I checked with my DBA he is suggesting me that the USR1_RO can have only read access to existing objects.and newly added objects to USR1 schema after the USR1_RO creation won't be visible to USR1_RO.
If read only access is given to all object to USR1_RO user then he will be able to see other user objects also say USR2, USR3. Which I don't want to happen.
Is there any work around available to get my wish fulfilled? A new user with Read and Execute Privs on another specific user objects (old and new). The issue I am facing with the suggested approach is when ever I add a new object to the usr1 schema I have to chase the DBA to grant the privs to USR1_RO.   Also I don't want USR1_RO to see everything in my instance.
Regards,
Subramanian S.

For your read only role/username you can:
set up this procedure to run for any new user to grant RO rights on Schema Owner ( powner ):
CREATE OR REPLACE PROCEDURE SYS.GRANT_SX_SCHEMA (
powner varchar2 ,
puser varchar2)
IS
fnd NUMBER := 0;
sqlstr varchar2(500);
BEGIN
   FOR obj in ( SELECT object_name, object_type from dba_objects
                   WHERE owner= powner
                   AND object_type not in
                      ('SYNONYM','TRIGGER','INDEX',
                            'PACKAGE BODY',
                              'TYPE BODY','LOB','LOB SEGMENT','DATABASE LINK')
                       AND object_name not like 'BIN$'
LOOP
BEGIN
    sqlstr := '' ;
    IF obj.object_type = 'TABLE' then
         fnd := 0;
         SELECT count(*) into fnd FROM dba_external_tables
         WHERE table_name= obj.object_name ;
         IF fnd = 0 then
                    IF substr(obj.object_name,1,2)='GT' THEN
                               sqlstr := sqlstr ||'GRANT SELECT,INSERT,UPDATE,DELETE ON ';
                    ELSE
                               sqlstr := sqlstr ||'GRANT SELECT ON ' ;
         END IF;
     ELSE
              sqlstr := sqlstr ||'GRANT SELECT ON ' ;
     END IF;
ELSIF obj.object_type = 'VIEW' then
      sqlstr := sqlstr || 'GRANT SELECT ON ' ;
ELSIF obj.object_type = 'MATERIALIZED VIEW' then
      sqlstr := sqlstr || 'GRANT SELECT ON ' ;
ELSIF obj.object_type = 'PACKAGE' or obj.object_type ='PROCEDURE' or
obj.object_type = 'FUNCTION' or obj.object_type ='TYPE'   then
            sqlstr := sqlstr || 'GRANT EXECUTE,DEBUG ON ' ;
ELSIF obj.object_type = 'TYPE' then
        sqlstr := sqlstr ||'GRANT EXECUTE ON ' ;
ELSIF obj.object_type = 'SEQUENCE' then
       sqlstr := sqlstr ||'GRANT SELECT, ALTER ON ' ;
ELSE
       sqlstr := sqlstr ||'--unhandled--'||obj.object_type;
END IF ;
sqlstr := sqlstr ||powner||'.'||obj.object_name ||' to '||puser ;
execute immediate sqlstr;
END;
--- AS for automatically running this whenever new object is added , avoid BUT IF YOU HAVE TO DOIT --
then try calling this with TRIGGER on CREATE ANY OBJECT at Database level, But better you call it from
script that creates the objects to refresh all objects grants in original owner schema.

Read only permission and already formatted to fat32

Please need some help
Message was edited by: Shinjitom

it say the usb need to be reformatted but i cant cause it says `'
Volume Erase failed with the error:
File system formatter failed."
and it is brand new 4gb usb but dont know why it is saying last opened 1969

Read only permissions as an Admin & force ejection of osx disk; Other disk?

I have had problems with permissions on my computer for about 2 years now. In the past two years, I've reinstalled my OS about 10 times. In the past month, though, the problems have escalated. I can no longer burn my files to disk successfully because the disk is always ejected before the process can complete. This happened on occasion in the past, but now it happens every time.
I had an external biometric hard drive which I used to back up my files, but after about 10 months of use, it stopped working. I ordered a new one and sent the old one in for repair, but all of my backups were gone.
When I got the new one - it is smaller and more portable, which is a plus, it had already been formatted. I tried to reformat, but within minutes I had no control over my settings and even though I am listed as the only user, I had read only permission for the new drive and had no ability to change any system preferences.
Time to start from the Snow Leopard disk and try to repair permissions, etc. Did repair permissions and reset the permissions under the "Change Password" window in Utilities. When I tried to startup again, I only got a blue screen.
I have a firmware password, so when my drive wouldn't start, I tried again with the option key down and the startup disk in the optical drive - only to find it force ejected over an over. Then I noticed that not only were my two volumes visible, but another Network Server was fading in and out. Currently, my network was unplugged and I have never connected to an external server. Again, I should be the only user on my system.
I have returned the newest hard drive in exchange for a new one, but am uncertain of what to do now if I am unable to reinstall the OS. I have posted the photos I took with my iPhone to show the screen with the three volumes visible and will post the link shortly. Please help!

Image of the screen can be seen here: http://gallery.me.com/iphone/asrodrig1/100033#0

Provide Read-Only Permission using Category Permissions

Similar Messages

Maybe you are looking for