Purchasing Security - By User ID
I am working on a security requirement in Purchasing. We would like to prohibit people from changing other people's purchase orders.
I know about authorization object m_best_ekg, which allows you to have different security levels by purchasing group. What I don't like about using this object is that we will have to maintain the security role for every person that comes in & out of our company that has purchasing authority.
Does anyone have any suggestions besides the use of the purchasing group?
Thank You.
proper training and education on company policies.
Similar Messages
-
Security error - User is not allowed to execute Proces - Resolved
Enabled security on my domain by editing message-handlers.xml :
<inbound-flow>
<!-- <message-handler id="default" />-->
<message-handler id="security" />
</inbound-flow>
commented out <property id="SecuredProcesses" > .. </property> to apply security to all processes.
Now when I initiate process through BPELConsole I tick the WS-Security and use bpeladmin/welcome1 as credentials (I'm logged into console as this), I get the following error. In fact I get the very same error if I make up a username/password.
<2007-10-24 08:17:41,343> <ERROR> <archi2.collaxa.cube> <BaseCubeSessionBean::lo
gError> Error while invoking bean "delivery": [com.collaxa.cube.engine.handlers.
HandlerInvocationException: Error while invoking inbound message handler.
An error has occurred while attempting to invoke the inbound message handler cla
ss "class com.collaxa.cube.security.Authenticator" for the message "". The exce
ption reported was: User is not allowed to execute Proces, User[true] process [f
alse]
ORABPEL-02175
In bpel.xml of the process itself I have this:
<?xml version = '1.0' encoding = 'UTF-8'?>
<BPELSuitcase>
<BPELProcess id="SQTest2" src="SQTest2.bpel">
<partnerLinkBindings> ....snip...
</partnerLinkBindings>
<preferences>
<property name="user" encryption="plaintext">bpeladmin</property>
<property name="pw" encryption="plaintext">welcome1</property>
</preferences>
</BPELProcess>
</BPELSuitcase>
If I don't supply username/password then I get "Could not apply security [No username provided, security expects user]" which sounds right enough.
I'm using the default authentication scheme system-jazn-data.xml and using 10.1.3.3 patchset on linux.My own fault, putting user credentials in wrong place in bpel.xml:
<?xml version = '1.0' encoding = 'UTF-8'?>
<BPELSuitcase>
<BPELProcess id="SQTest2" src="SQTest2.bpel">
<partnerLinkBindings> ....
</partnerLinkBindings>
<configurations>
<property name="user" encryption="plaintext">bpeladmin</property>
<property name="pw" encryption="plaintext">welcome1</property>
</configurations>
</BPELProcess>
</BPELSuitcase> -
I purchased the multi-user iworks (yes back when it was new, 2009 or 2010 and recently had to replace my white imac's hard drive (but didn't pay to fix the CD drive). My iworks does not have a serial number on the box and now that my CD drive isn't working how can I reinstall this software?
Buy or borrow an external USB optical drive.
See the confirmation email or covering letter to obtain the serial number. If you have lost it, contact the supplier. -
HI All,
We are using Oc4j version 10g 10.1.3 , and while starting conatiner getting below warning , let me know if anyone have solution for this,.
14/01/10 01:01:29 ********** user-manager (see application/server descriptors) will no longer be supported in the next release of this product!
Please take the appropriate actions to migrate to an alternative strategy! **********
2014-01-10 01:01:29.833 WARNING J2EE SECUR-00100 ********** user-manager (see application/server descriptors) will no longer be supported in the next release
of this product!I just checked my BIOS and my current setting is set at IDE although it also mentions that the default should be AHCI. Currently I have a dual boot of Windows 7 (need it for Tax software) and Arch
So I guess, when I get the new HDD, I will first set it to AHCI and then install the OSes on it. See if NCQ helps any, and if not I will turn it back and re-install (if I have to). I am planning to have Windows only in virtualbox in the new drive.
Anyhoo, while I was in the BIOS I found two things which I had questions about :
1) Under Onboard Devices --> Integrated NIC , my setting is currently set at "On w/PXE" and it says the default should be just "On". Would it be ok to change it back to On since its a single machine and its not booting an OS on any server. I just don't want to have to re-install anything now since I will be doing that in the new HDD.
2) How would I know whether my BIOS would support a 64 bit OS in Virtualbox? I checked some setting under Virtualization, but they weren't very clear.
I will edit this post and let you know exactly what settings were present under the Virtualization sub-section. -
Hey I am curious how can I get the .ipa compiled file for iOS to be able to read all the directories on the iPhone?
I made a file browser but I cant get to the pictures
I tried adding the entitlements in Flash Builder 4.6 in the descriptor file like this:
<key>com.apple.security.files.user-selected.read-only</key>
<true/>
<key>com.apple.security.assets.movies.read-only</key>
<true/>
<key>com.apple.security.assets.pictures.read-only</key>
<true/>
in the
<iPhone>
<Entitlements>
<![CDATA[
I got Push notifications working and accepted in the app store but it can't read the pictures directory when browsing for a file
I know the app id and stuff is set up right or I wouldnt have been able to get it accepted in the app store. In the entitlements area of course I have the application identifier set and aps-environment and keychain access groups and whatnot set up right.
When I try to put the app onto the iPhone with iTunes it just says 'Entitlements are not valid' (does not mention anything about mismatched ids) I can't find anything about how to add this entitlement and I could have sworn I saw a thing that said I can just use the descriptor file to add entitlements in some of the documentation I have it set to use air 3.4
Is there something I am doing wrong, how do I get apple to just put these entitlements in the mobileprovision file, I cant seem to edit it, if I do I also get an error in itunes that is some hex code...Did you ever solve your problem?
I just transfered my web hosting and e-mail to bluehost. I had some of the same problems you are having. I noticed you have your incoming server set to bluehost.
Incoming mail server: (SSL) box610.bluehost.com (sever requires authentication which I already have done)
If bluehost is your server this is what worked for me:
Account Information
Account type— POP
Description—anything you want
Email Address—in your case would be [email protected]
Full name— first and last name
Incoming server—mail.magnus.com
User name—[email protected] Notice it is the @ symbol not a +
password— your password . Remember they are case sensitive
Outgoing Mail server—select edit smpt server list from the drop down window
select the + to add a server
Account Information
Description—may be left blank
Server name—mail.magnus.com
TSL Certificate—None
Advanced
Use default ports
Check Use SSL
Authenticate—password
Username—[email protected]
passowrd—your password
Click ok
In the accounts window
Outgoing SMTP— select the server you just created.
Check—use only this server
Select the Advance tab next to the Mailbox Behaviors
Check use SSL— it will be port 995
Authenticate —use password
Ann -
In which table is the relation stored between purchasing group and user?
it seems to be that a purchasing group is related to an user in the client system i am working for now. I cannot find these relations in HR.
In which HRPxxxx is the relation stored? With which transaction can i change the relationship?
thanksHello Theo,
please, clarify your problem.
How do you know concerned user is linked to such purchasing group?
User assignement in the organizational structure is maintained with PPOMA_BBP transaction.
Regards.
Laurent. -
How to secure the users from deleting the work items
Hi all,
I have a question like this.........whether we could secure the users from deleting the work items by someone in the Project and also assigning a specific user to allow them to delete the idoc.
Please help me on this as this is critical.........
Thanks in advance
ChakriOne of t he possible way is, ask the basis team to create users as Service Users and you can determine whether the login user is whether a service or dialog user by using the a bapi BAPI_USER_GET_DETAIL under the exporting parameter logondata with field USRTYP where if the logged in user is Service user then this field will be populated as S if the user is a dialog user then it will be populated as A.
Now in more efficient way of fixing this is get the list of users for whom you donot want to give the authorization of deleting workitems and assign the appropriate role for all the listed users...
for roles and authorizations i hope the basis team is the right team to consult.... -
HT3209 I need to find out where to locate previous app purchases and which user did it
How can I locate previous apps that have been purchased and which user on my account made the purchase
You can see previous purchases by these instructions:
http://support.apple.com/kb/ht2519
or you can view the purchase history through iTunes on a computer:
http://support.apple.com/kb/HT2727
I'm not aware of any way on an iPhone to see which account a given app was purchased through, though, other than by logging into each account in turn and looking at the list. If you have the apps synched to iTunes on your computer, you can see the purchasing account by doing a Get Info on the app.
Regards. -
Block Project Purchase Requisition using User Status
Dear All,
We need a copy of TECO, we tried to create a new status using BS22 transaction but its totally new activity of creating the system status. This transaction does not allow to copy an existing status. is there any other way to do so
We alos tried to block the Purchase Requisition using user status, but its not working. Please guide
Thanks in advance.
MurtazaYes, you are right I need the said status for WBS Element. I have assigned it to relevant WBS Elements but not working.
Let me explain the scenario little more, there are activities having commitments (Purchase Requisitions), we need to process the existing PRs but new commitments must be blocked. we need to use status on WBSE to control it so that if we need to re-open the new commitments, we can do it by disabling the status.
Murtaza -
when downloading itune update on my PC (vistia)it says, error getting security: C:\Users\shawn\AppData\roaming\Microsoft\InrternetExplorer\Quick Launch\GetLastError:87, how do i fix this
As you can see below, when I right click, I have no such option. In the User Account Settings, I'm operating as the "System Administrator".
Any other suggestions? -
Javax.security.auth.Subject and weblogic.security.acl.User
Hello,
We are trying to move some old authentication code (Weblogic 5.1) to JAAS
which comes with Weblogic 6.1. Here is my problem:
I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
Any suggestions?Hello,
We are trying to move some old authentication code (Weblogic 5.1) to JAAS
which comes with Weblogic 6.1. Here is my problem:
I can succesfully authenticate the Subject through my RDBMS Realm. But then, the rest of my code uses weblogic.security.acl.User
and not javax.security.auth.Subject for authorization and other tasks. So, how can I extract weblogic.security.acl.User from javax.security.auth.Subject?
I tried subject.getPrincipals(), since User indirectly implements Principal, but it comes back empty.
Any suggestions? -
Problem while loading security information (users/roles) from repository
Iview have stopped connecting to our MDM, All repositories, all IViews Very strange
Here is what I see in the logs.... Any ideas? Please if you have seen this before only
Marty
com.sap.mdm.extension.MetadataException: Problem while loading security information (users/roles) from repository 'PORTAL_CUSTOMERS'
at com.sap.mdm.extension.MetadataManager.loadRoleCache(MetadataManager.java:559)
at com.sap.mdm.extension.MetadataManager.internalGetRoleSet(MetadataManager.java:502)
at com.sap.mdm.extension.MetadataManager.getRoleSet(MetadataManager.java:471)
at com.sap.mdm.extension.MetadataManager.createMetadataKey(MetadataManager.java:464)
at com.sap.mdm.extension.MetadataManager.getRepositorySchema(MetadataManager.java:197)
at com.sap.mdm.uwl.MdmUwlConnector.createUserSessionContext(MdmUwlConnector.java:1463)
at com.sap.mdm.uwl.MdmUwlConnector.new_retrieveItems(MdmUwlConnector.java:546)
at com.sap.mdm.uwl.MdmUwlConnector.getItems(MdmUwlConnector.java:129)
Caused by: com.sap.mdm.commands.CommandException: com.sap.mdm.net.ConnectionException: java.io.IOException: Unexpected socket read. Result is -1.
at com.sap.mdm.security.commands.GetUserListCommand.execute(GetUserListCommand.java:72)
at com.sap.mdm.extension.MetadataManager.loadRoleCache(MetadataManager.java:526)
Caused by: com.sap.mdm.net.ConnectionException: java.io.IOException: Unexpected socket read. Result is -1.
at com.sap.mdm.internal.protocol.manual.AbstractProtocolCommand.execute(AbstractProtocolCommand.java:102)
at com.sap.mdm.security.commands.GetUserListCommand.execute(GetUserListCommand.java:69)
at com.sap.mdm.internal.net.DataSocket.receiveData(DataSocket.java:62)
at com.sap.mdm.internal.net.ConnectionImpl.readInt(ConnectionImpl.java:497)
at com.sap.mdm.internal.net.ConnectionImpl.readInt(ConnectionImpl.java:490)
at com.sap.mdm.internal.net.ConnectionImpl.nextMessage(ConnectionImpl.java:629)
at com.sap.mdm.internal.net.ConnectionImpl.receiveMessage(ConnectionImpl.java:572)
at com.sap.mdm.internal.net.ConnectionImpl.send(ConnectionImpl.java:233)
at com.sap.mdm.internal.protocol.manual.AbstractProtocolCommand.execute(AbstractProtocolCommand.java:99)
com.sap.mdm.commands.CommandException: com.sap.mdm.net.ConnectionException: java.net.SocketException: There is no process to read data written to a pipe.Early this month we upgraded the MDM server to:
MDM Server version: 5.5.63.57
And the portal components:
MDM 5.5 SP06 Technology Patch 3 (Build 5.5.63.57)
MDM 5.5 SP06 Application Patch 3 (Build 5.5.63.57)
MDM 5.5 SP06 Java API Patch 3 (Build 5.5.63.57)
However the issue just began 2 days ago?
We started intgrating MDM Workflow with UWL and assigned Roles and Iviews to the Universal Worklist Configuration
It seems the Iviews work for a while and then after some time everything gives up? Very confounding
And yes we are using standard Iviews (search, Result and detail)
Thanks
Edited by: Marty Monroe on Oct 31, 2008 3:07 PM -
Can anyone help with this situation?
itunes purchase security questions & answers reset and answered correctly. Can not log in with updated answers which state one or both are incorrect.You need to contact Apple to get the questions reset. Click here, phone them, and ask for the Account Security team, or fill out and submit this form.
(94948) -
When adobe XI is purchased how many users are allowed?
when adobe XI is purchased how many users are allowed?
Hi RSC-CFDL,
You can install Acrobat XI software on up to two computers. These computers can be you office computer and home computer.
Regards,
Sumit -
Can i purchase a multiple user license
Can I purchase a multiple user agreement for Final Cut Pro 7?
There are rumours they're looking into it: http://www.macrumors.com/2011/07/07/apple-to-allow-additional-fcp-7-enterprise-l icenses-and-more-on-fcp-x/
Maybe you are looking for
-
No Data in Downtown Los Angeles
For the last 6 months or so, I have been experiencing 0 data in Downtown Los Angeles. Specifically on 9th and Grand. I have reported it three times and have not heard of any solution yet. I did my own researching here in our building and I found o
-
iMac won't start up, disk utility tried to repair disk it shows "keys out of order" error message in red and advises me to back up files, reformat disk and restore backed up files. I have no idea how to back up and restore etc... Help! Please!
-
Infotype data display only authorization in PA30
Hello Friends, I want to give infotype data display only authorization in Employee Master (PA30) to some of my colleagues. I used object P_Origin for the same but it is not working as it has both create and change access. Can anyone suggest how to ta
-
How to revert the plan copy done via CJ9F
Hi Folks, Here is the scenario: No budgeting is used in PS ie. no budget profile is assigned to projects. Initially we are planning cost and revenue for the project and coping these plan value in version "02 : Project Baseline Budget" made for storin
-
Planning 11.1.2 Javascript file locations
Hi guys. We are running Planning EPM 11.1.2 with WebLogic. I am trying to make some changes to the ValidateData.js javascript files. Where would these files be located in 11.1.2? I previously developed jscript changes for EPM 11.1.1.3 and those files