Question about permissions in portal content

Hi all,
I'd like to ask you guys a question about permissions given to pages in the portal content (EP 6.0).
When a user accesses a page that contains an iView (for example one for a Web Dynpro, or for a BSP), and the page permissions are correctly set for the user (or a group the user is member of), everything works fine and the user can see and use the application contained in the iView.
If the Page has no permissions set and the user tries to access this page, an empty page appears instead and the "Detailed Navigation" column appears on the left.
I know I should not let the user see the link to the page he is not authorized to use (this is done managing the roles given to the user), but I'd like to know from you if it is possible to show a message like "unauthorized user" instead of the empty page that appears.
Can you also tell me how to keep the "Detailed Navigation" column hidden on the extreme left?
Thank you for any hint you can give to me.
Lorenzo

Hi Lorenzo,
a way how you might go ahead and hide or show content for specific user groups is via roles merging (see documentation <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm">http://help.sap.com/saphelp_nw2004s/helpdata/en/53/89503ede925441e10000000a114084/content.htm</a>
In essence, this means that you create for example 2 roles (A and B): A contains some content everyone can see, B more secure content for another group. You merge those 2 roles via a merge ID - and if a user has both roles, he sees the content in this workset with all the navigation options. If somebody only has role A, he will only see this content.
Maybe this is someting that could help with you considerations (always depending on the number of items that are affected, this might be a useful way, or leading to too much confusion, because you have too much different roles).
Best regards
Jana

Similar Messages

  • Return Standard Permissions to Portal Content Objects

    Hello experts,
    I was changing the Permissions of some portal content objects and accidentally I've modified the permissions of all the Portal Content Objects (including the standard objects). I clicked the "Reset child permissions" button of the Permission Editor of the "Portal Content" folder. Do you know any way to return the standard permissions?
    Best regards and thanks in advance

    Hi,
    If you have another portal then you can transport permissions from the first to the seccond portal.
    Cheers,
    Benjamin Houttuin

  • Disable question about opening internet downloaded content?

    Hi all,
    Is there anyway to disable the question snow leopard asks you about to open content that you downloaded from the internet?

    HI,
    If you diable that warning, you could be asking for problems... might want to read here.
    http://www.macosxhints.com/article.php?story=2009081808315511
    If you still want to diable that dialog go to Safari/Preferences and select the General tab.
    Deselect: Open "safe" files after downloading.
    Carolyn
    Message was edited by: Carolyn Samit

  • Question about Sent Mail folder contents

    Hi Everyone.
    this question requires a fair amount of background -- I tried my usually very helpful users' group and didn't get any responses. Here's the story:
    I upgraded my macbook pro to Leopard partly because I thought Time Machine would make me backup more regularly (it has). I have a few sporadic backups from prior to the upgrade, and then I backed up right before I upgraded. I had a disk error during my first attempt at an archive & install, found that the disk was wiped, thanked my lucky stars I backed up beforehand, ran disk utility on the disk, and then did an erase & install instead.
    After the upgrade, I used the migration assistant to restore my user account from my backup. At some point after the fact, I noticed that my sent mail mailbox in mail.app for my primary email account was missing all my emails except for the period from 3/30/05 to 4/15/05 and from 1/07 to 4/07.
    I thought I was hosed, but today I found I had another backup on a second disk, and that one has 10,614 emails in the sent mail folder (to be precise Sent Message (account name).mbox/Messages/). After importing, I have all of those sent emails restored in a folder in mail.app.
    However, during this process, I went and checked my Sent Messages mailbox in my current Library folder for this user account. In that folder (Library/Mail/Mailboxes/Sent Messages (this account).mbox), all of the files (content_index, Incoming_Mail, IncomingTable_ofContents, mbox, and tableofcontents) show an incorrect(?) created / modified / Last opened date of 5/26/05. The Info.plist file has the correct dates, and the Messages folder does, too. Those same files are in the Sent Messages folder on both of my backups, and have the same date (5/26/05) listed.
    I actually pulled all of the files listed above with the weird dates and removed them from the Sent Messages.mbox folder. That doesn't seem to matter to mail -- everything still seems to be working just fine.
    So, my question is, are those files crucial, or are they cruft from multiple generations of OS updates and mail.app updates that are no longer needed? It seems like no new versions were automatically generated when I removed the old ones, and mail doesn't seem to be broken.
    I've been using mail.app at least since 2004 and the emails in the sent mail folder trace back to a Pbook G4 that started with OS X 10.1 (maybe even 10.0 -- my memory isn't as good as it used to be) and was upgraded with each major release, then I migrated to the current MacBook Pro and upgraded it from Tiger to Leopard. So I've probably used the migration assistant (or archive & install) to help me move files (or did it manually) through one laptop changed and four OS upgrades.
    Any ideas about this Sent Messages question or in general about how I might clean up my Mail folder are appreciated.
    Thanks!

    I have both POP and IMAP email accounts.
    The IMAP is easy. Until you delete it is visible on both phone and computer. Once you delete it is gone from both, although with providers like Google, you can still un-delete it. Google, among others, provides free IMAP email.
    For POP, there is a setting in Entourage preferences, (maybe in mail.app, too) that will let you decide to automatically delete the mail from the server, manually delete the mail from the server, or automatically delete after a period of time. I set my pop account to automatically delete from the server after one month. You set up the iPhone the same way - to leave it on the server. This way, a message will download to both your computer and to the iPhone. If you are working at your computer, you can still manually delete the message from the server so that it does not go to your iPhone, since you have already handled it. But even if you never delete from the server, it will automatically delete in a month so that you do not go over your email limit (if any) for your ISP.
    Also, with my POP account, I set up the phone to automatically send a copy to me of all outgoing messages. This way my computer has a copy of everything I send from the phone.

  • Question about backing up Portal LDAP

    I have a question I want to migrate my production Portal Profile
    Server(LDAP) to a test development enviroment
    And all i need is my ldap.ldif file...
    Has any one tried this?

    yes, u must have LDAP access to the profile server admin port (8900).
    Tore
    "James Karocki" <[email protected]> wrote in message
    news:9js8tk$[email protected]..
    I have a question I want to migrate my production Portal Profile
    Server(LDAP) to a test development enviroment
    And all i need is my ldap.ldif file...
    Has any one tried this?

  • Question about permissions

    I have 2 users in a computer that mounts a directory from a server via nfs.
    That directory is used to share files between users.
    When a user creates a file in that directory the permissions are rw-r--r-- (the default umask 022). Since it is a shared directory, I would like new files to have rw-rw-r-- permissions.
    I do not want to change the default global umask of 022, because that is ok everywhere else. I just would like to set an umask 002 only in the shared directory.
    Any ideas about what direction to follow
    Regards
    :shock:

    Stourm wrote:
    I got my new MacBook Pro and wanted to import items from the Time Machine backup of my old one. I didn't want to do a complete import though, so I went ahead through the setup of my MacBook instead of using migration assistant, and created my account, etc. After fully updating my new MacBook, I then decided to pull my Pictures, Music, Movies, and Documents off of my Time Machine backup from my old one. I connected to my backup and then ran migration assistant to import those items. I selected them and told it to import, but it said that it couldn't create the user account because there was one already named that on my system ( I used the same name on this new MacBook as my old one ) so I just told it to transfer it to a new account called temp. It did that and moved over the items that I had selected.
    When I went to the folder of the temp user to copy those items over, I did not have permission to do it. That directory was locked, even though I was an administrator of this computer. I went to the permissions of the user "temp" and added my user account, then gave my self read & write permissons. I then told it to copy those changes to all folders (forget the exact setting for this but that is what I did) and it worked fine.
    you *should not* have done this. in general, you should NEVER use "apply to enclosed items" on ANY system created folders and the startup drive. that includes your home folder, your Desktop folder, your Pictures folder etc. y=use it ONLY on folders you make yourself. The reasons is that such folders often have hidden ACLs and by using "apply to enclosed items" you propgate them to everything inside. in particular any home directory has "everyone deny delete" ACLs which will prevent you from changing, renaming or deleting anything with that ACL without entering an admin password. this is why you see that custom field in permissions. where exactly are the items with such permissions located? you need to clear those ACLs from them.

  • Question about permissions repair

    I repaired permissions and one thing that I got was:
    Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.
    Should I be concered?

    this message is harmless and should be ignored. everybody gets it.
    http://support.apple.com/kb/TS1448

  • Question about permissions repair, strange messages

    The following was the result from my recent repair after installing 10.5.1 Are these results normal with so much not being repaired?
    Warning: SUID file "usr/libexec/load_hdi" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/DiskManagement.framework/Versions/A/Resources /DiskManagementTool" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Reso urces/Locum" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Install.framework/Versions/A/Resources/runner " has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/readconf ig" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/writecon fig" has been modified and will not be repaired.
    Warning: SUID file "usr/libexec/authopen" has been modified and will not be repaired.
    Warning: SUID file "System/Library/CoreServices/Finder.app/Contents/Resources/OwnerGroupTool" has been modified and will not be repaired.
    Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.

    Same story for me I guess:
    Warning: SUID file "usr/libexec/load_hdi" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/DiskManagement.framework/Versions/A/Resources /DiskManagementTool" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/DesktopServicesPriv.framework/Versions/A/Reso urces/Locum" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Install.framework/Versions/A/Resources/runner " has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/readconf ig" has been modified and will not be repaired.
    Warning: SUID file "System/Library/PrivateFrameworks/Admin.framework/Versions/A/Resources/writecon fig" has been modified and will not be repaired.
    Warning: SUID file "usr/libexec/authopen" has been modified and will not be repaired.
    Warning: SUID file "System/Library/CoreServices/Finder.app/Contents/Resources/OwnerGroupTool" has been modified and will not be repaired.
    Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.

  • Some question about mdm java api and portal content

    Hi Gurus,
    I am new to MDM. I am going to develop some web dynpro application using mdm java api.
    My question is regarding the relationship between MDM version and NW version:
    for example
    1.MDM5.5 JAVA api can be deployed to CE 7.11 server?
    2.MDM7.1 JAVA API can be deployed to CE 7.11 server? or can only be deployed to CE server.
    the same question for the MDM portal content.
    the possible dev environment  for our company would be:
    1.MDM7.1
    2.CE7.2(do we need another EP7 server for the UWL?)
    Best regards,
    John

    Hi,
    I am using Portal 7.0. MDM version is 7.1.
    My problem is ... i am trying to connect WebDynpro (JAVA) to MDM7.1. But am unable to do so. I have a WD Frame in which i have a WD iView and the MDM iView. But i am unable to pass parameters from the WD iView to MDM Item Details iView.
    Note:
    1. I have deployed MDM JAVA API on NWDS
    2. I have specified " * " as a parameter to pass from the URL in the Item Details iView.
    Please help.
    Every help that i have read talks about CE7.1 but not NW 7.0
    -Alpana

  • Unable to see the portal content directory in content administration role

    Hi,
      I am unable to see the portal content directory in the content administration. I am not the super administrator, i have been assigned other roles. But, I am unable to see the PCD. Please help me how this can be sorted out.
    Thanks much in advance,
    Sunitha.S

    Hi Sunita,
    Contact your systen admin people , he/she will assign the Read/Write or Full controls to content_admin_role in the system administration -> Permissions -> select portal content folder and right click the select open Permissions , There he/she has to add content_admin_role in Assigned Permissions category and under Administrator category select Full Control and select End user check box and save the changes.
    Then you can see the Portal Content and you can create /change the portal contents.
    Thanks and Regards,
    Hari

  • Portal Content Directory Invisible

    Hi,
       I could not find my Portal Content Directory in my Content Administration. What could be the problem? Kindly help me out.
    Regards,
    Kalai.

    The problem is due to lack of role as by default the portal content directory will permit only super admin role so if you have created user with out this role then you have to either add your user or the new role to the permissions of the Portal Content Folder....
    You can do this by logging into the user with super admin role and add your user/role to the portal content permissions...
    Permissions can be added either from System administration or from Content Administration ...
    System Administration --> Permissions --> Select Portal Content and add your role or user
    Content Administration --> Dbl Clk Portal Content Directory --> in the display select box select Permissions and add your user / role ...
    this might help as i faced the similar problem ....

  • Disappearance of Portal Content folder on Client Systems

    Hi All,
    The Portal Content folder which is under Content administrattion, System Administartaion is not showned when i opened the Portal with Http://<ipaddress>:<50100>/irj on client machines.
    It is showing simply loading process upto long time finally not showned.
    But on the Server Machine, Portal Content folder is showing properly.
    I tried with even Administartion log on also on the client systems, but am unabel to see the Portal content folder.
    Can you tell the reason and solution what i have to do in order to make appear on the client systems?
    Regds
    phanikumar

    Hi ,
    Try to  log into the user with super admin role and add your user/role to the portal content permissions.Permissions can be added either from System administration or from Content Administration .
    System Administration --> Permissions --> Select Portal Content and add your role or user
    Content Administration --> Dbl Clk Portal Content Directory --> in the display select box select Permissions and add your user / role ...
    Hope this helps
    Regards
    Vineeth

  • About portal content permissions

    Hi!
    I have been searching for this question and maybe it is answered, but i didn't found.
    I put the portal content iView for my administrators users to administrate a part of the portal content, only this, not the Content Administration whole role.
    I tried giving permissions but it only appears Bussines Objects and Netweaver Content Producers folders, not the folders I wanted.
    I'm sure that I have to do something more about permissions. Someone knows?
    Thanks.

    Hi, where did you try giving permissions?
    Check on System Administration > Permissions > Portal Permissions if your settings are compatible
    to your requirements.
    are you doing this in a productive system? If so you may have to deal with security zones, productive systems
    got a tighter security settings
    regards,
    Rafael

  • Portal Unstructured Template Question About Edit Links

    Hi, I have an unstructured template that I'm making. If I want to use an image for my edit link instead of using this #PAGE.EDITPAGE.LABEL#
    How would I block someone who is not allowed from editing a page from seeing the image?

    Hi Lorenzo,
    you can create a new ivew based on the component com.sap.km.cm.navigation or just copy the iView <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/e8/e1401acdfd11d5994200508b5d5211/frameset.htm">Link List</a> located under "Portal Content / Content Provided by SAP / End User Content / Standard Portal Users / iViews / com.sap.km.iviews" and add it to your portal page.
    Here you find more information about <a href="http://help.sap.com/saphelp_nw04s/helpdata/en/b6/29892e91601940bb7a2cd673a1dff5/content.htm">KM Navigation iViews</a> in general.
    After that you go to "Organize Entries" and create some links via Links(Context menu) -> New -> External Link (Internal Links are lins to documents or folders inside KM).
    The last thing you have to do is to set the correct permissions. For that you go to "Content Administration -> KM Content -> documents / Links" where you should see your created links and use the context menu to go "Details" -> "Settings" - "Permissions". Remove the group everyone and add the group of users who should be the only ones to see the link.
    Do this proccess for every link and you should be done.
    Hope this helps,
    Robert
    PS: Feel free to use the colored stars as another way of saying thanks.

  • [Urgent] Some questions about Oracle Portal 10g - 11g upgrade

    Dear friends,
    We are under doing upgrading assessment of Oracle Portal from 10g to 11g. After reviewed the 'upgrading guide', we still have some questions as below:
    1. Whether the 'Instant Portal' feature remain in Oracle Portal 11g? If yes, how to migrate the Instant Portal 10g sites? If no, any workaround?
    2. Whether the old 10g Page Group and Pages will be still available after 11g upgrade? Also can customer import the old 10g transportset into Portal 11g?
    3. How about the customized Portal 10g objects (such as customized template, style, attributes) after 11g upgrade? Still be usable?
    4. Customer use PDK to develop many portlets in 10g. Can they use JDeveloper 11g to migrate their old project to 11g automatically?
    Thank you in advance and any comment are welcome.

    1. Whether the 'Instant Portal' feature remain in Oracle Portal 11g? If yes, how to migrate the Instant Portal 10g sites? If no, any workaround?Instant Portal is not available anymore in Oracle Portal 11g. The Instant Portal page groups will be migrated to standard Portal page groups. Maintenance of the Instant Portal can be done with the standard Portal tools. The Instant Portal tools are not available anymore.
    Whether the old 10g Page Group and Pages will be still available after 11g upgrade? Also can customer import the old 10g transportset into Portal 11g?Old 10g Page Groups are migrated to Portal 11g. They will still be available after the upgrade.
    Export/Import through transports sets has always been limited to instances of the same version. It is not supported between versions as documented in the Administration Guide :
    [11.2.1|http://download.oracle.com/docs/cd/E14571_01/portal.1111/e10239/cg_imex.htm#CCJBCCGD] System Requirements
    Before exporting and importing content, ensure that your system meets the minimum system requirements, as described in this section.
    Notes:
    * Export and import functions only within the same release of Oracle Portal and the same patch release, for example, release 10.1.4 to release 10.1.4 or release 11.1.1 to release 11.1.1. You cannot export and import between two different releases, such as release 10.1.2 to release 10.1.4 or release 10.1.4 to release 11.1.1.
    How about the customized Portal 10g objects (such as customized template, style, attributes) after 11g upgrade? Still be usable?Customized objects get migrated as well. Certain types (e.g. PL/SQL item types) need to be checked after upgrade as the behavior of the PL/SQL code may differ between database versions. This is particularly of concern when the 10.1.4.x Portal uses a 10.1 database. A database upgrade to either 10.2, 11.1 or 11.2 is necessary as Portal 11g is not supported with RDBMS 10.1.
    Customer use PDK to develop many portlets in 10g. Can they use JDeveloper 11g to migrate their old project to 11g automatically?Never done this, but the Portal framework is able to consume JPDK providers which are running in older versions of the toolkit. If the providers are running in standalone OC4J containers, you would be able to upgrade the framework and keep the providers in their OC4J containers. This will allow you to focus on the framework first and worry about your providers later.
    Thanks,
    EJ

Maybe you are looking for