PUBLIC ACCESS TO BA - EXCLUDING USERS

IF YOU GRANT PUBLIC ACCESS TO BUSINESS AREAS, IS THERE A WAY TO EXCLUDE CERTAIN USERS?

Hello,
My comments inline:
I want users to NOT authenticate but be able to post comments on the wiki pages.
Go to the Wiki home page as an admin user, under the 'Admin functions' category in the side bar select 'Settings'. On the settings page, you will see a category named 'Comments'. Edit this to select 'Anyone' from the 'Commenters' drop down list. This will allow anyone to add comments. However, they must first be able to view a page before commenting on it. So in Directory.app in the 'Services' tab, select 'Anyone' from the 'view' drop down list.
I do not want users to edit the wiki, I only want them to be able to post to the wiki.
It's my understanding that users will not be able to post unless they can edit, with the exception of comments.
Have users authenticate to comment on wiki's but not be able to edit, delete, etc the main content of the wiki.
Then select 'Authenticated users' from the 'Commenters' drop down list on the 'Settings' page, and in Directory.app in the 'Services' tab select 'Group Members' from the 'edit' drop down list. The obvious problem with this however is that the user (that you want to be able to comment) can not be a member of the group or the permission doesn't work as intended.

Similar Messages

ITunes U Public Access Issue -- iTunes Fails to Launch

Hello,
I've been notified of an issue with our iTunes U public access link. When users go to our itunes.clemson.edu page and try to access our public content via the Log In No ID Required link, iTunes does not launch.
This occurs when the user is off campus and not on the Clemson network (using IE). If the user VPN's into our network, things work as expected. This should not be a problem since the public content is available to anyone who wishes to view the Clemson iTunes U page.
We also have the same issue when users are off campus and try to gain access to our private content by authenticating with their campus userid and password. When they are on the Clemson network, everything is accessible, but when they are not, iTunes seems to be unavailable.
You should try this...
- go to itunes.clemson.edu
- try to access the public content via the "Log In No ID Required" link and reply with what happens here. (The link is an image link on the right side of the page just under the Clemson on iTunes U banner)
Nicholas
mcelve2 at clemson dot edu

Your users may be running into an issue specific to their browser. You might want to read these threads:
http://discussions.apple.com/thread.jspa?messageID=2404380
http://discussions.apple.com/thread.jspa?messageID=2927738
Unfortunately there's behavior in some browsers that doesn't always launch iTunes successfully based on previous dialog messages the user may have dismissed or unknowingly choose the wrong option.

Some users cannot "see" broadcast Public Access SSID but can all others...

I've had 4 users in the last 3 days who've reported not being able to see our broadcast "public access" wifi SSID. Numerous users (even in same area, attached to same AP) can see it - however some cannot. The do see all of the other broadcast SSIDs, just not the public. The public is open and broadcast with security enabled. Does anyone know if this is a client issue - possible with a recent AV or MS security update? ("protecting" clients from unsecured networks by not displaying them?)

If you notice that at a given time some users can and other can't see the ssid, it almost points to the client side. Compare drivers from the two clients and see if the driver versions are the same or old.

Revoke PUBLIC access to package - find out which users have access

We're in a situation where an audit required that we revoke PUBLIC access from a package. The problem is that when we did this the functionality stopped working. Does anybody know a quick way to tell what users have access to any package?

Found answer

Setting up access points for public access

Okay, here's the situation. I have a PowerMac G4/1.25GHz dual processor running Server X 10.3.9 with four Mac clients (a small law office). Up until recently, everyone had also been running (client) 10.3.9, but I started upgrading some of them to 10.4 (currently 10.4.5). When I did this, they started running into problems with Word sometimes giving a "network or file permission error" when attempting to save documents to the server. After weeks of posting questions to Word support and trying everything in the book that I could think of, I found Apple recently posted what appears to be the answer to this (article 302979, "Microsoft Office applications fail to save to a server volume." The problem? I have all four users logging into the same account on the server, and when one of them logs out, it zaps everything in a Microsoft-created temp folder on the server, including temp files created by open documents created by other clients. Sheesh.
I had everyone set to use the same account because they have no need of document security -- everyone should be able to get into everyone else's files on the server, period. So, because of this snafu, I've created separate accounts for each of the users. My problem now is that, if user "X" creates a file or folder on the server, user "Y" cannot modify it because it is created as read-only. Strangely, if someone modifies an existing file, it doesn't change the user rights at all -- not sure why.
I'll admit to being a bit of a novice with Server X but am familiar with parent/child folder permissions -- I think I've got everything set right, but I must obviously be missing something. Here's what I've got setup, and what I've tried. If anyone can point out how I've got this setup improperly, I really need to get this fixed... thanks.
I have a single sharepoint ("workfiles"). I used the "public" folder as an example, and set the owner to "root" and the group to "staff". Further, I set the owner, group and everyone privileges to "read & write". I've also tried setting the group to "admin". All the individual user accounts I've set are also setup as admin users. I've tried setting each users's primary group as "staff (20)" or "admin (80)". I've copied all these privileges to all enclosed items, which does reset everything to public access, but as soon as someone creates a new folder or file, that folder/file becomes private to that user (it shows up with the creator's username as "owner" (r&w), group as "admin (read-only), and others as "read-only" as well.
PS: If upgrading the server to Server X 10.4 would help, I'm sure I can arrange that.

In our law firm, the server (10.4.4), we have set access to read/write access so staff can open client files/folders, edit then and close, etc. That seems to be working okay. Before the tech worked on permissions, if someone created a letter another staff member could open it, but it was read-only.
The problem we are having is that if a file that is clicked on stationery pad and we want to edit it, it will not allow us to. For example, if we need to edit our letterhead that normally comes up as an untitled document, if I unclick the stationery pad box, it unclicks, but it still comes up as an untitled document. I even tried to unclick a stationery pad on a document that I created before the server upgrade and it wouldn't let me.
If I create a brand new document and put it on stationery pad, it comes up untitled as it should. If another user on another desktop wants to make changes, they unclick the stationery pad box, but when they open it, it comes up untitled and in checking get info, the stationery pad is selected.
The tech set it up as follows:
Share Points and All tabs:
General tab: box to share this item and its contents is clicked
Access tab: owner, group and everyone have read/write privileges
If select dial at bottom to propagate permissions, all boxes are checked, except for access control list, which is shaded.
I cannot drag/add anything to the control list and the pencil and the minus sign is shaded
Protocol tab: Both boxes, share item using AFP and Allow AFP guest users are clicked. But for better security in reading the article, this should be unchecked.
Also under the protocol tab: the inherit permission from parent radio dial is clicked, not the use standard POSIX behavior.
What are we missing?
Thanks, Cheryl

Trying to compare FCP with Media 100 for a Public Access studio

Hi all,
I am new here. I do most of the review of products for our Public Access studio. We have a couple of existing Media 100 systems and we are considering adding or upgrading our NLE capabilities. Our studio manager had a chance to look at FCP being used at our high school and she came back with a number of impressions that I wonder about and would like to vet with people who know more about FCP. So, any comments would be helpful.
The high school media person demo’d FCP for her and let her play with it a bit. After looking at it herself, she says she would definitely say Media 100 is easier to understand/use, especially if you've never used non-linear editing before. That is fairly typical of the people doing Public Access production in our town.
However, it looks to her like there are a lot of tools that come with FCP that Media 100 either doesn't have or are not easily found in it. For example, she feels FCP’s set up looks more complicated and confusing compared to Media 100’s, but in FCP you can have up to 99 video lines in a program, where with Media 100 we're just going back and forth between the a and b video lines. Plus you can have up to 99 Audio tracks on FCP as well, where our max at the moment is 8. Now as to when you would need 99 video or audio tracks, she is not sure, but it is definitely a capability that we don't have in Media 100.
Titling looked easier to her on Media 100. With FCP there were a lot of filters involved and hoops to jump through, plus she couldn't do a word with each letter a different color, for example, unless she did each letter on a different track.
The media person warned her that FCP is really large. Apparently the program itself takes up like 35 GB of space on the hard drive, and a typical 30 min. project comes in at over 100 GB! She couldn't believe it, but she was assured it’s true. Even with our longest programs, like like a School Committee meeting thqat went 3 1/2 hours, it would came in at a max of 30 GB on the Media 100. She got the impression this big difference was so because Final Cut renders everything you do, including rendering any edits you make on your footage as new files, and stores it all in a huge folder. She thinks with Media 100, you import the footage and use it as is - the only things it will render are screen freezes, transitions, and color effects. Is that sort of comparison correct (and fair), or is something being missed?
She says in her experience that something like iMovie is the most basic as far as what you can do, then Ulead would be a step above that- the editing is basically the same, but you have a few more options. Media 100 would be next as far as ease of use and understanding of the program. FCP seemed a little confusing even to her. Comments or insights?
G4 Mac OS X (10.4.7)

Welcome to the family, maybe.
I switched from M100 about four years ago, I was never so glad to give that company the boot. A direct comparison just isn't possible but I'll try to answer some questions. There is a Media 100 forum on creativecow.net.
she says she would definitely say Media 100 is easier to understand/use, especially if you've never used non-linear editing before.< </div>
Yes, absolutely, M100 has always had an elegant and refined interface. However, the paradigm in FCP is not opaque. It's far more interesting, deeper, more complex. So, yes, it's a bit tougher to grasp. But don't sell your students/users short. They'll get it.
99 tracks is marketing BS. The serious work is done with nesting. How many public access pieces need more than 5 or 10 video tracks?
Titling in FCP depends on third party filters like Boris or tools like LiveType and Motion. The basic titling tools in FCP are lame and difficult to use, in my opinion, compared to the elegant titler in M100 (as long as you don't launch Graffiti).
The installation includes tens of gigs of animation, movie and music loop resources that you don't need to load. The suite includes Motion, LiveType, Soundtrack Pro, DVD Studio Pro and FCP.
If you're shooting DV, a 3-1/2 hour show is, umm, well, you look it up, DV is DV. But if you're capturing 3 hours from each of three cameras, that's a lot of DV.
Rendering depends on lots of things. M100's native codec handles lots of realtime stuff that FCP can't unless you've got a huge Macintosh. Previewing is not a big deal at lower rez in FCP, you get used to it. .
FCP is really scary. You can look at thousands of "I'm in way over my head, HELP!" posts here. But all those folks find they slip right into the Apple paradigm, the weirdly new workflow and start exploring the wide new world of serious editing that FCP opens up. You'll hate it for a few months because it's so dramatically different from M100. You'll love it, though.
If you want to continue the thread, give the rest of the disaffected former M100 users a few days to post their comments. There are many of us here. Then maybe start a new thread, one question at a time.
bogiesan

SAP systems for public access with OSS ID

Hi, experts,
I heard that there is a community in SDN which allow users to access SAP systems (such as CRM, XI/PI, etc.) to test and try things.
(1) Is that true ? What is the URL ?
If not, is there any site for public access to SAP systems with or w/o fees ?
(2) Is there Test Drive for XI/PI ? Could not locate it under downloads.
Thanks.
Hans

Hi Hans,
As far as I know there is no such site with public OSS ID and free XI test drive.
But you will get plenty of material from SDN.
-Pinkle

You do not have access to any End User Layer tables

Hello Guru's!
I'm having an issue with connecting/using EULs on Disco 10g - I have already installed 10g Admin and configured 2 EULs and also imported the sample data - they are all owned by DISCO user -
When I connect to http://discoserver:7778/discoverer/viewer, I get a connection screen - no connections are listed, so I click create connection - I give it a name, put in disco as my user, put my password in, put db_connect_string into the appropriate field, where db_connect_string is my actual connect string - and it gives me this error:
Error
Authentication Failed.
(You do not have access to any End User Layer tables)
I have access to these, as I'm the EUL owner - I've also tried this tho with other users that I have granted access to in the admin too (I've even granted access to these EULs to public - still no luck) - should I be using the db user and password or are there other places in 10g that I set up disco users?
If I should be using the db user and pass, why won't it see my EULs?

Hopefully CupJr got his answer as it's been over 2 years!
However, if you're having the same problem ...
1. is this an Apps EUL and you're connecting as a database user (ie: the owner of the EUL)?
2. have you set the gateway connection info correctly (again if an Apps EUL)? - found at: Tools -> Options -> Connection.
Russ

How to exclude user account for auditing.

I would like to know how to exclude user account from the audit policy, such as below.
AUDIT SELECT TABLE BY ACCESS WHENEVER NOT SUCCESSFUL ;
thanks in advance.
May

Security team request to reduce the amount of the audit data based on the user account. Can I use FGA to implement it?possible as it lets you specify the conditions necessary for an audit record to be generated:
FGA policies are programatically bound to the object (table, view) by using the 'dbms_fga' package. It allows you to create any desired condition,
for example: Audit an event only when the following conditions are true:
A table is accessed between 6 p.m. and 6 a.m. and on Saturday and Sunday.
An IP address from outside the corporate network is used.
A specific column has been selected or updated.
A specific value for this column has been used.
more detail available on Oracle by example
http://www.oracle.com/technetwork/articles/idm/fga-otn-082646.html

Public Access content usage data

Can anyone give me a sense for the kind of success in terms of numbers of general traffic users to iTunes U Public Access content that your school is achieving? We are unable to get authentication for private courses working, so are left with the public access content and would like to gather some numbers to give to the public relations folks about potential benefits so they can take over.
rreo at gmu dot edu

Can anyone give me a sense for the kind of success in terms of numbers of general traffic users to iTunes U Public Access content that your school is achieving? We are unable to get authentication for private courses working, so are left with the public access content and would like to gather some numbers to give to the public relations folks about potential benefits so they can take over.
rreo at gmu dot edu

Public Access Folder Question

Hello,
In BI Publisher we set up a public access folder called "Guest". I understand by doing this any user can access the folder and the reports in this folder. We do not want the users to access the reports that are in this folder because, the reason why we set up the public access folder was to have just reports in this folder that are being called from a form. *(Which I was told this was the only way to call reports from forms).* Otherwise, we do not want the users to be able to access this folder and to run these reports when they want. The public access folder called "Guest" is under Shared Folders. Since it is under Shared Folders any user can see the folder and have access to it automatically. Can the Administrator put the public access folder under My Folders so the users can't see it or access it but reports can still be called from a form? Or is there another way to set up reports in BI Publisher that can be called from a form?
Any Help would be greatly appreciated.
Susie

What is the reference to use of the guest folder? I think it is based more upon who is logging in, not a specific folder.
http://www.oracle.com/technology/products/xml-publisher/docs/Forms_BIP_v21.pdf

Public Access Point Security

Hi,
Is it possible to extend the concept of layer 2 ethernet vlans to wifi networks, with a system that allocates a VLAN per user (allowing 4096 users) on wifi connection?
I was thinking that this could help prevent Man In The Middle attacks as any new user joining a wifi network would be on their own separate subnet isolated from every other user.
If this is achieved at the SSID level by assigning each one to a VLAN, is it possible to have this happen automatically?
Is this how public access points work already and if so how is a MITM attack launched?
Thanks.

yes and no.
the WLC will only take 512 interfaces so you could do that many /32 subnets if you really wanted to. But you wouldn't be able to max out the 4096
But, what you can do, is enable Peer to Peer blocking, which disallows clients to talk to each other on the same WLAN
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Public Access

who has access to content i post on the cloud? i understand if i send the URL to someone they can click in, but can my content be accessed by third parties surfing?

Hi , i have found out how it could be achieved from administration guide:
Enabling the Ability to Grant Public Access
Before you can allow public access to a particular folder, you must ensure that the
ability to grant public access has been enabled at the Site level.
To ensure that the ability to grant public access is enabled for the Site:
1. Connect to Oracle Content DB as a user with the Content Administrator and User
Administrator roles, such as orcladmin.
2. Change to Administration Mode.
3. Access the Sharing Properties for the root Site folder.
4. Ensure that the option Allow public access to be granted has been enabled.
Allowing Public Access to Oracle Content DB Folders
To grant public access to a particular folder:
1. Connect to Oracle Content DB as a user with the Content Administrator and User
Administrator roles, such as orcladmin.
2. Change to Administration Mode.
3. Access the Sharing Properties for the folder to which you want to grant public
access.
4. Add the special group Public to this folder. If you cannot add this group, make
sure that you enabled the ability to grant public access at the Site level, as
described in the previous procedure.

How to access Sap portal login user in ejb web service

Hi,
I wnt to access SAP Portal login user in my ejb application which resides on the same server.
I am using following code
try {
     IUser user =null;                         IWDClientUser wdUser = WDClientUser.getCurrentUser();
                              user = wdUser.getSAPUser();
                         } catch (WDUMException e) {
                              // TODO Auto-generated catch block
                              e.printStackTrace();
Some additional jar files are required for this?
The same code works fine with webDynpro but not with ejb.
Thanks in advance
Best regards,
Nilesh

Thanks for reply.
I have already added com.sap.security.api in my EJB module project classpath. How to add the same in EJB application Project (application-j2ee-engine.xml)?
Best regards,
Nilesh

How to access data of all users in a page?

Hi all, I am new to APEX and have a query.
I have installed APEX on my local machine, created a workspace, and added a few users with roles.
I am creating an application, similar to a Library app, where I have a table that stores Books information (BOOK_ID, BOOK_NAME, etc). I'd like to create another table BOOK_USER with two columns, BOOK_ID and USER_ID. BOOK_ID would refer to the BOOKS table, and I want USER_ID to refer to the table that stores user details of the workspace that I am using. The data entry would happen from a page that has two LOVs, one for book name (using BOOK_ID as the value) and another for user name (USER_ID, or whatever field APEX uses to store user's ID). Can I do that in APEX? I've found ways to access and authenticate a user for a page, but how to get data of all users in the workspace? In other words, how to get all usernames in a LOV?
As I am new to APEX, I'd appreciate if someone can guide me through the steps, or post links to tutorial, etc.

Assuming that you are using the Application Express User Accounts for authentication, in that case you have to use built-in apex views
selet * from APEX_WORKSPACE_APEX_USERSAnd use USER_NAME column instead of user_id
See http://docs.oracle.com/cd/E37097_01/doc/doc.42/e35125/priv_public001.htm#HTMDB25949

PUBLIC ACCESS TO BA - EXCLUDING USERS

Similar Messages

Maybe you are looking for