Providing a Read-Only Version of OEM to App Developers

Hello forum...
In perusing OEM with one of our developers, he noticed when looking at Top Activity that one of his queries was using the wrong index and it helped him resolve a long-standing speed issue in his app. My dilemma now is that they want access to OEM, justifying such access by saying that it might help them resolve issues in all of their queries. They're bright people, but I've read horror stories of people accidentally dropping tables through OEM. I'm paranoid enough about my mouse movements and keystrokes without having to worry about what our developers might do by accident.
Is it possible to provide a read-only access version of OEM to my developers, more specifically to access to functions under the "performance" tab? if so, what roles and privileges should such a user have?
Many thanks in advance...
Dan

You could grant view only as stated, but that just for OEM functionality.
To allow developer access to the Performance page, we followed the doc from Metalink:
How to: Grant Access to non-DBA users to the Database Performance Tab
Doc ID: 455191.1
Instead of granting OEM_MONITOR role, the following roles/privileges can be assigned directly to the user:
Roles:
->CONNECT
->SELECT_CATALOG_ROLE
System Privileges
->ANALYZE ANY
->CREATE TABLE
Profile
->DEFAULT

Similar Messages

Read-only version of transaction FBL5N.

Hello Everybody,
I have to create a GOTO report from a query, where the jumping target should be the read-only version of transaction FBL5N.
Please let me know what is the read-only version of transaction FBL5N.
Thanks in advance
Shameem

Hi Siggi,
If I am right, I would be able to create the GOTO report, by specifying the jump target as the Transaction FBL5N.
And whenever the user uses the GOTO option, he would be able to only view the invoice details and not change anything.
Thanks,
Shameem

Want to create a Read Only user for a given app owner user

Hi Folks,
We have an application owner schema, lets call it OWNER, which has different objects living under it.
Now, for certain reasons, the app group wants a read only user which should be able to view objects living only in OWNER. It would only be able to read things, and have no create or alter types of priv to be able to change anything.
The first idea was to create a new user (e.g. RO) and give this explicit grants (select only) for all objects in OWNER. Though this works, is a maintenance havoc, since everytime there is a new object in OWNER, you have to remember to give explicit grants to all RO (or RW ) kind of users.
What i am looking forward to is, some sort of privilege or role concept that apply on the user level, and not on object level. something that allows me to say, all objects of this schema (e.g. OWNER) are visible to user RO. Other restrictions on RO would control read or write behaviour.
Does this thing exist ? please point me to the documentation/example..
regards
raghav..

CREATE OR REPLACE TRIGGER myTest.trg_mytest
AFTER DDL
ON myTest.SCHEMA
DECLARE
     lv_obj_type VARCHAR2(20) := TRIM(UPPER(ora_dict_obj_type));
     lv_evt_type VARCHAR(20)      := TRIM(UPPER(ora_sysevent));
     lv_obj_name     VARCHAR2(30) := trim(UPPER(ora_dict_obj_name));
     lv_role_name     VARCHAR2(30) := 'myTest_RO';
     lv_stmt          VARCHAR2(4000) := NULL;
     ln_job_nr     NUMBER;
BEGIN
     IF lv_evt_type != 'GRANT' --lv_obj_type <> 'OBJECT PRIVILEGE' --
     THEN
          DBMS_JOB.SUBMIT(ln_job_nr,'begin execute immediate ''grant ' || ' select on ' ||
                                   lv_obj_name || ' to ' || lv_role_name || '''; END;');
     END IF;
   INSERT INTO TB_EVT_LOG(d_date, description)
   VALUES(SYSDATE, lv_obj_name || '~~~~ created ' || lv_obj_type || '~~~~' || lv_evt_type );
   EXCEPTION
     WHEN OTHERS THEN
       RAISE;
END trg_mytest;
/This works. But, my problem is that it is not able to filter out the Grant statement itself, Its logging an entry for the grant (as a ddl operation as well).
what am I doing wrong here ?
regards
raghav..

F4 / Value Help on a Read-Only Field in a WD app

Hi friends,
I am struggling to put up a F4 help on an input field which has been set up as read-only. The idea is to have the field as read-only, and allow the user to select any value from the predefined values using F4/value help.
Now, I get the F4 help working if the field is NOT in a read only mode, However, the moment I set it to READ ONLY , the F4 help vanishes.
Is there a way to have the F4 help associated with the field even when the field is a read-only ?
Thanks.

Great Solution ! This works.
However, there is a small problem with the usage of browsers. If you use Mozilaa/ Chrome, then even the 1 px width of dummy field show up. However with IE the 1 px does now not show up, so the F4 help comes up right next to the original field. But that is not something significant !

Give the read only access to user on Apps Schemas!

Hi,
How we can create the database user and give the access on APPS schemas(INV, PO etc).
Please assist me.
Thanks,
Faziarain

Dear Hussein,
I followed anil passi forum for creating apps read only schema , but only issue is we have multiorg enabled .
what is the modification dowe need in this step.
Step 4
Write a after logon trigger on apps_query schema. The main purpose of this trigger is to alter the session to apps schema, such that the CurrentSchema will be set to apps for the session(whilst retaining apps_query restrictions).In doing so your logon will retain the permissions of apps_query schema(read_only). Howerver it will be able to reference the apps objects with exactly the same name as does a direct connection to apps schema.
conn apps/&1 ;
PROMPT CREATE OR REPLACE TRIGGER xx_apps_query_logon_trg
CREATE OR REPLACE TRIGGER xx_apps_query_logon_trg
--16Jun2006 By Anil Passi
--Trigger to toggle schema to apps, but yet retaining apps_query resitrictions
--Also sets the org_id
AFTER logon ON apps_query.SCHEMA
DECLARE
BEGIN
EXECUTE IMMEDIATE
'declare begin ' ||
'dbms_application_info.set_client_info ( 101 ); end;';
EXECUTE IMMEDIATE 'ALTER SESSION SET CURRENT_SCHEMA =APPS';
END;
Thanks and Regards

How to make final (read-only) version of a *.vi

... so that the *.vi is only runable but not editable...

becktho wrote:
...Additionally you can create an installer where the rte is included or it is downloadable (I think for free) from NI.
Thanks! Yes, the runtime engine is a free download. The recents versions are quite large, so I usually don't include the runtime with the installer to keep the distribution small.
(The runtime version must match the LabVIEW version used to built the executable. However, you can install as many runtime versions as you need. If the correct runtime version is not installed, it will let you know what version it needs).
LabVIEW Champion . Do more with less code and in less time .

Full version of Acrobat interfering with newer Reader-only version

Hi,
Our office manager has a full version of Acrobat (v. 6) installed on Windows XP machine. She has also installed Reader v. 9 - it USED TO WORK - but she also had a virus earlier this year and got a cleaned-up system.
Now, when she tries to open a pdf file to the Reader, there's an error message about Version 6 is too old to view pdf files (usually these are ones she's trying to read off the web) and it closes.
Any work-arounds?
thanks in advance!
Dana

Acrobat and Reader will co-install using the current versions, but Acrobat 6 is too old to completely support the control of file associations - whichever package was installed last will take control of the PDF file type and in your case it sounds like Acrobat 6 won that battle. To get PDFs opening in Reader by default you'll have to manually reassign the file type in Windows Explorer's menu or uninstall and reinstall Adobe Reader so it becomes the last registered application.
See this KB for a matrix of Acrobat and Reader versions up to 9, showing which will work together and what happens if they don't; and my blog post about the new co-install features of Acrobat and Reader X.

Limitations of read-only JE Environments

Hello all,
I realized recently that our documentation on the limitations of read-only Environments is lacking. So for the next JE release I updated the javadoc for EnvironmentConfig.setReadOnly. The new text is pasted below. If you're using, or thinking of using, a read-only environment, be sure to take a look. I apologize for the lack of documentation in the current release, especially if you've used a read-only environment without understanding these limitations and this has caused problems for you.
--mark
setReadOnly
public EnvironmentConfig setReadOnly(boolean readOnly)
Configures the database environment to be read-only, and any attempt to modify a database will fail.
A read-only environment has several limitations and is recommended only in special circumstances. Note that there is no performance advantage to opening an environment read-only.
The primary reason for opening an environment read-only is to open a single environment in multiple JVM processes. Only one JVM process at a time may open the environment read-write. See EnvironmentLockedException.
When the environment is open read-only, the following limitations apply.
. In the read-only environment no writes may be performed, as expected, and databases must be opened read-only using DatabaseConfig.setReadOnly(boolean).
. The read-only environment receives a snapshot of the data that is effectively frozen at the time the environment is opened. If the application has the environment open read-write in another JVM process and modifies the environment's databases in any way, the read-only version of the data will not be updated until the read-only JVM process closes and reopens the environment (and by extension all databases in that environment).
. If the read-only environment is opened while the environment is in use by another JVM process in read-write mode, opening the environment read-only (recovery) is likely to take longer than it does after a clean shutdown. This is due to the fact that the read-write JVM process is writing and checkpoints are occurring that are not coordinated with the read-only JVM process. The effect is similar to opening an environment after a crash.
. In a read-only environment, the JE cache will contain information that cannot be evicted because it was reconstructed by recovery and cannot be flushed to disk. This means that the read-only environment may not be suitable for operations that use large amounts of memory, and poor performance may result if this is attempted.
. In a read-write environment, the log cleaner will be prohibited from deleting log files for as long as the environment is open read-only in another JVM process. This may cause disk usage to rise, and for this reason it is not recommended that an environment is kept open read-only in this manner for long periods.
For these reasons, it is recommended that a read-only environment be used only for short periods and for operations that are not performance critical or memory intensive. With few exceptions, all application functions that require access to a JE environment should be built into a single application so that they can be performed in the JVM process where the environment is open read-write.
In most applications, opening an environment read-only can and should be avoided.
-----

You've asked an interesting question! I'm afraid that the answer is that it's not possible in BDB JE today.
What you'd really like for your second case is part of the type of functionality provided by MVCC (Multi-Version Concurrency Control). In case you're not familiar with that term, MVCC is the database feature which guarantees that all reads made in a transaction will see a consistent snapshot of the database and that the transaction will successfully commit only if no updates it has made conflict with any concurrent updates made since that snapshot. Unfortunately, while our sister product, BDB (C) has that feature, we do not yet support it.
I think your alternatives are to do achieve your point in time snapshot from the file copy based backup, from the second process, or from an application level mechanism that locks out other updates.
Regards,
Linda

Unable to save Word documents when accessing them directly from the site because the document never converts from a read-only even though the User chooses to enable editing

Issue has only popped up recently and cannot reproduce in a Test environment. Unaware of any SharePoint changes, so hoping someone can point me in the correct direction.
Previously Word document did not have to be physically checked out, but rather the editing of the doc also checked out the doc in a document library. This is the way we want it to remain –
no manual check-out process. Now if a doc is edited without being checked-out, there is an issue with the process as the application thinks the doc is read-only (message received when trying to save the doc) even if enable editing is selected. The
following message appears when you try to save the document:
This message can appear if you have been editing a file that was opened as read-only. A file opened as read-only will have (Read-Only) appended to the file name as it appears in the title bar of Word. You can still save the document, but you must
save it by using a different file name. If you use Windows Explorer to change the read-only properties of the file, while the file is open in Word, it will not enable Word to save the file. Word must open a non-read-only version of the file in order to save
it by using its original file name. If you have not made any changes to the file, you can close it, and then use the following steps to make the file writeable. 1. Click the File tab, and then click Open. 2. Browse to the file and right-click it. 3. Click
Properties, and then clear the Read-Only check box. 4. Reopen the file. If you have made changes to a read-only file, you can save it, and then use the following steps to give the modified file the original file name. 1. Click the File tab, and then click
Save As. 2. Enter a different file name, and then click Save. 3. NOTE: Adding "Rev1", or "Mod1" to the original file name may help you to remember it later. 4. Click the File tab, and then click Close. 5. Open Windows Explorer. 6. Browse
to the original read-only file. 7. Rename the read-only file. 8. Browse to the new file. 9. Rename the new file to the name of the original file. Do not delete the read-only file until after you have determined you no longer need it.
Previously, when check-out was optional, a file was checked out automatically when someone opened it for editing, unless it was already checked out. The editing commands notified the User that the file is being/was checked out. The real issue is the
word doc can no longer be saved as the application still believes the doc is read-only.

Hi,
According to your description, you give the domain admin full control over files on the old file server, but you cannot move the files to the new file server. After pull the files from the old to the new file server, the domain admin can only read the files
on the new file server.
How did you move the files from the old file server to the new file server? Did you setup replication between the two file server or use robocopy?
Please check the files permissions on the new file server to see if the permissions are changed, then share the folder on the new file server to everyone to see the result.
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Execute "Save As" on PDF Form open, Create Read-Only

I need to create a read-only version of my form so that I can protect the original, so I thought that I could put a app.execMenuItem("SaveAs"); as a new document script to force the user to save as when they open, but it seems to not be working. The file is in a shared dropbox folder, so just a simple read only is not going to work. Is there a better way to achieve what I am doing, or do I just need to change my code?

Oh man! I was really hoping that wasn't going to be the case! Thanks a lot man, I appreciate the help!
I'll leave this forum open for another week, maybe someone else has something experimental to try, thanks everyone!
-tech_geezy

Textarea with Read Only Condition Type

A have a textarea (database field with Varchar2(4000) with the Read Only Condition Type set to Request != Expression 1. Works fine, except that data presented as a long 1 line text (like a Displayed text) when condition meet (no vertical scrollbar).
Am i missing some additional settings.

the easiest way to get the read-only version of your textarea item to appear more like your read/write version is to add some style specifications into the "Read Only Element Table Cell(s) Attributes" field that's right below where you specified your read-only conditions ("Expression 1" and "Expresssion 2"). as the name suggests, values entered into that field end up in the table data tag for the cell in which your read-only content is placed. added style specifications for height and width would help you control how the text is spread across your page. you can/should also consider using background and color style attributes to color the table cell the way we're used to seeing read-only data ("grayed out"). so though my colors are way off, a string like this...
style="width:16px;height:30px;background:#C5D5C5;color:666666;font-weight:bold;font-size:12pt"
...in that "Read Only Element Table Cell(s) Attributes" field would format your read-only data closer to what you're going for. at the least, it'd give you an idea for the type of control you have.
for extremists, there's also another approach: if you want absolute and total control over the way your textarea item's data is displayed, you could display your item's data in an HTML region instead of as the item directly. for instance, you mentioned you liked that scroll bar. you could achieve the scroll bar by defining your table, the scroll bar class, and table cell in an HTML region. say we saved your textarea item's data to a hidden item called P1_MY_TEXTAREAS_DATA. i'm pretty sure this html would let you show that data in that scrollable non-updatable format you're shootin' for...
<style type="text/css">
.scrollarea{
font-size: 10pt;height:250px;width:100%;text-align:left;
background-color:#ffffff;color:black;padding:0px 0px 0px 0px;margin:0px;overflow: auto;
float:left;}
</style>
<div class="scrollarea">
<table summary="" width="100%"><tr>
<td style="width:16px;height:300px;border:4px;margin-left:4px;margin-right:9px">
&P1_MY_TEXTAREAS_DATA
</td></tr></table><div>
...see? by defining your own table, you get the easy opportunity to wrap it in those div tags that call the scrollarea class. also note that i just referenced the content of your textarea item with that ampersand syntax (&P1_MY_TEXTAREAS_DATA). you could, of course, keep things cleaner by defining your scrollarea class in a css, but that's your call.
hope this helps,
raj

InDesign CS4 Files Open as Read-Only (Mac)

Having a problem where InDesign CS4 files sometimes open as read-only versions. This happens when opened by double-clicking through Finder, force opening by dragging the file over the ID icon in the Dock, or when opened through ID (file > open). If it's relevant, the ID file contains links to InCopy files that have been made using the Assignments Panel. System is Mac OS X 10.6.2. Any help &/or insight is greatly appreciated!

I got a similar kind of problem / error trying to migrate an InDesign Server CS4 solution to another server with InDesign Server CS5.
Windows 2008 server.
I'll describe it, just in case it might give any clues.
Calling an InDesign server "open" script, trying to open an InDesign document, using a network path - although the file is on the same server - resulted in an error message:
System.Exception: 3598: Error from InDesign. Cannot save the document. No destination file supplied.
In the script there is a line, telling Indesign Server to call the save method, if the document is modified, which can be the case after opening a document from another environment, converting to CS5, and links that need relinking and other stuff that either InDesign takes care of, or that the script does.
No lock file ( .idlk ) was created on the server, but until I restarted the InDesign server instance, the file was opened as read-only when I opened it on my own computer (from the same network path on the server). I could then not save it from my own computer (the "Save As" dialogue appeared when I selected "Save" in the File menu).
After restarting the InDesign Service, the file was no longer locked (restarting the sevice automatically clears all open threads to the documents), and I could use and save the file without trouble, from my own computer.
Changing from Local Service to Administrator for running the InDesign service on the server, made the document open. Setting full permissions to the "Local Service" account, on the network share in question, also works, and that's the way I left it.
So my problem had to do with permissions on the network share. Since the service account was not allowed to do certain things, such as "modify" files... something went wrong.
Probably no lock file could be written either, due to permissions... then the open document and locking was handled by the operating system only(?), keeping the document read-only, and reporting other messages than the expected ones. It somehow seems that the document was neither open nor closed on the server (since InDesign Server has no user interface, I can only report what my method calls "saw").
Now - with the permissions of the service account changed - trying to open the document on my computer I get the correct message: "Cannot open the document [...]. You may not have permission or the document may be open already."
(When it was opened in a faulty state - with insufficient permissions - on the server, I could still open it on my computer, but as read-only, due to the missing lock file.)

E-Recruiting "Read-Only" Transactions

We would like to make some for the E-Recruiting functionality that is available to recruiters from the recruiter start page available to support staff in a "read-only" mode. Our immediate need is for read-only version of the Candidate Overview available from Application Management, although a read-only version of the Requisition Maintenance and Candidate Shortlist would be helpful as well. I have tried to create a read-only role for the Candiate Overview by playing with the standard authorization objects P_RCF_APPL, R_FCF_VIEW, P_RCF_POOL and P_RCF_STAT but have had no luck.
Does anyone have any suggestions?
Thanks!

This cannot be handled via authorizations in e-recruiting, because it is a non-exspected behaviour.
You can only realize this by development or modification.
regards

Search help overwrite a read-only field

Hi, I have some problems with search help and hope someone can help me.
My search helps (either standards or customs) work perfectly, but a strange behaviour
occur on Read-Only fields. If I open the Search Help popup and select a value, it overwrite the
READ-ONLY value !!!!!
Hope you can help.

Depending on the support pack level you are on - search helps - freely programmed or otherwise don't seem to trigger off read only fields (I noticed this when we moved to NW7.01)
I've got around this by making the field a link to action - providing the read only link I want as the text, and then calling the following code:
call method cl_wdr_value_help_handler=>handle_application_def_vh
    exporting
      context_element      = context_element
      component_usage_name = 'JOB_SELECTION'
      context_attribute    = 'JOB'.
Where component 'JOB_SELECTION' is my freely programmed value help - implementing WD interface IWD_VALUE_HELP.
This was helpful as I wanted the search help to trigger and the user to be able to update the field but only by using the search help - I didn't want the user to be able to write anything in the field.
it was a particular use case I had - it may or may not fit your needs.
Cheers, Chris

In the new version of Thunderbird it seems impossible to set that attachments are shown as"Read only". It was possible in previous versions. Can anybody help?

In previous version of Thunderbird it was possible to set that incoming attachments are shown as "Read only". The solution was to set browser.helperApps.deleteTempFileOnExit as TRUE. In the latest version, no matter how I set this value,. the attachments ARE NOT shown as Read Only. As I need my attachments to be shown as Read Only, I had to restore older versions of Thunderbird. Does anybody have an idea how I can solve this in the new version of Thunderbird ?

''Wayne Mery [[#answer-672415|said]]''
<blockquote>
hmm, https://bugzilla.mozilla.org/show_bug.cgi?id=1009465 and https://bugzilla.mozilla.org/show_bug.cgi?id=1095893 seem relevant
</blockquote>
I don't see a solution on these links. I am not a computer expert, but it was easy to fix in previous versions of Thunderbird. I can't do it now with the latest version, on either Windows 7 or 8.

Providing a Read-Only Version of OEM to App Developers

Similar Messages

Maybe you are looking for