RBAC - associate user to view confusion

Attemptiong to associate usernames with specific views once they login.
Views have been successfully created and associated with username, but when the user logs in - they have to enter "ena view xxxx" before the view applies to them.
My understanding from readin the RBAC material is once the user logs in, they would automatically be under the control or into that view mode.
Environment;
ISR Routers - 1800, 2800, 3800
IOS - Advipservices
Ver - 12.4(22)T
AAA - No ACS, TACACS+, or RADIUS -- just AAA New-Model
What am I missing??
Config Snippet
aaa new-model
aaa authentication login default local
aaa authentication login console local
aaa authentication login vty local
aaa authentication login local_auth local
username nocoper view NOCOPER password 7 045504050031495C49
parser view NOCOPER
secret 5 $1$mUXP$w1Oqpr/rCvkhjcviGfkE8.
commands configure include-exclusive line
commands configure exclude interface
commands exec include configure terminal
commands exec include configure
commands exec include show running-config
commands exec include show

Users can be associated with a local CLI View by a return attribute from AAA or in local Authentication configuration. For local configuration, the username is configured with an additional view option, which matches the configured parser view name. These example users are configured for the default SDM Views:
username fw-user privilege [privilege-level] view SDM_Firewall
username monitor-user privilege [privilege-level] view SDM_Monitor
username vpn-user privilege [privilege-level] view SDM_EasyVPN_Remote
username sdm-root privilege [privilege-level] view rootUsers who are assigned to a given view can temporarily switch to another view if they have the password for the view that they want to enter. Issue this exec command in order to change views:
enable view view-name

Similar Messages

  • How to associate users with views

    Hi,
    We are working on SRM 5.0 and CCM 2.0, and we have created views for the procurement catalog and have published the catalog.
    Problem: When we click on the procurement catalog in SRM we want the view associated to the logged in user to show up.
    Kindly suggest how to achieve the same.
    Thanks,
    Swetha

    Hi Swetha,
    In the user master (SU01) under the Personalisation tab, there's a task called "Assign Catalog Views to Roles". Click on the "/CCM/VIEW_ASSIGNMENTS" and you will see the views you created in CCM2.0. There you can select the appropriate view for your user.
    Regards,
    Paula.

  • Hiding fields in standard user management view

    Hi all,
    How to hide fields in user management views.
    Like in the create user view, suppose I want to hide the <b>additional information fieldgroup</b>. how can I do it?
    I have the par file and tried to comment the code which is related to the additional information field group. But when we try creating an iview from the new par(modified par-i changed changed the name ) I do not c the portal component called <b>create user</b>. I am a bit confused.
    Can anyone help me out regarding this.
    thanks,
    Paul

    Hi Paul
    Have a look at
    http://help.sap.com/saphelp_webas630/helpdata/en/d1/956f8b86b2a949913ed22d253e0012/content.htm
    and http://help.sap.com/saphelp_webas630/helpdata/en/91/646d498fd94142a37e90a3b848e45e/content.htm
    By setting the default values you can either have them displayed or hidden.
    Hope this helps,
    Regards
    Uma.

  • Can new PWA views be created whereby a filter can be set and associate to the view by default? (Project Server 2013 ONLINE)

    My main question is: Can new PWA views be created whereby a filter for that view can be set, and associate to the view by default? (Project Server 2013 ONLINE)? and can I have a filter set to filter on person logged on to...
    In previous versions of Project Server, when CREATING a PWA view, we were able to apply/ define a filter for that view.  Does not seem like it is the case in Project Server 2013 Online.  And if I remember, we could also use the URL Guid_view_id. 
    Please confirm; and / or tell me how-to.
    What I was hoping to do is the following... Given that our standard that we have adopted for reporting time is 'My Timesheets' (fyi, Single Mode Entry=ON), we have some resources who have others who do it on their behalf via 'My Tasks' (ie., accomplished
    by using the 'Assignment Owner' field, accordingly).  Therefore, when entering time on someone else's behalf within 'My Tasks', we like to present the user that is logged in only the tasks that they are are assigned to update on others' behlaf.
    I know that there is another more elegant approach to doing this which may be to use the Delegation feature. But since we are trying to stick to Sharepoint Security mode for now, this is not an option for the time being.
    Any help appreciated would be greatly appreciated.
    \Spiro Theopoulos PMP, MCITP. Montreal, QC (Canada)

    Hi Spiro,
    1- You still can define in Project Online a filter in the view settings, it is located just above the category setting. Here is a screenshot of the summary project center view:
    2- The view GUID is not anymore in the URL, since the URL triggers an action only on the webpart and not on the whole page. I agree this is annoying since it was great to send a URL with a specific view.
    3- Concerning the access to my timesheet versus my task, I'm not sure to get a full understanding but on a general way, it is much more easy to deal with those situation using categories which you cannot do with the SP permission mode.
    Hope this helps,
    Guillaume Rouyre, MBA, MVP, P-Seller |

  • ALV view : Problem with user defined views

    Dear Experts,
    We are facing a problem pertaining to user defined views for a ALV table that we have in SAP eRecruiting application in webdynpro ABAP. The problem is as follows.
    There is a candidate application ABC & only ONE person can edit this at a time.In this application ABC there is a ALV table.
    If the user clicks on this application & navigates to the ALV,this ABC application is in normal/edit mode(no one else has opened this ). So, the user can make changes in ABC. In the ALV, he can click on the 'settings 'button and save the STANDARD view as his own user defined view(by adding or removing columns).
    If the user opens the application ABC in display mode(implying that someone else has alraedy opened ABC for editing), when i navigate to the same ALV,the user CANNOT see the views which were saved in the edit mode.Only the standard view is displayed. The user however has the option to again freshly save a view.
    The views created by a user for this ALV should be seen irrespective of the application being opened in normal or display mode.
    To add to the confusion, this problem is occuring only in some systems & not in others. There is atleast one system where the views are displayed correctly to the user.
    On debugging, the table wdy_conf_user has config ids as different where the user views are stored separately for display & edit mode.
    In systems where the user views are displayed correctly, the config id is one & the same ensuring that the user can see all his views irrespective of the mode of the application.
    Any thoughts on how we can rectify this?
    sorry for the long & tedious explanation
    Thanks in advance,
    Sowmya

    See
    michaels>  select xmlquery('declare function local:test_function($namecmp as xs:string?, $inputtype as xs:string?) as xs:string?      
                        return {$inputtype}
                     local:test_function("1","2")' returning content) o from dual
    Error at line 5
    ORA-19114: error during parsing the XQuery expression:
    LPX-00801: XQuery syntax error at '{'
    3                       return {$inputtype}
    -                              ^
    michaels>  select xmlquery('declare function local:test_function($namecmp as xs:string?, $inputtype as xs:string?) as xs:string?      
                        $inputtype
                     local:test_function("1","2")' returning content) o from dual
    O   
    2   
    1 row selected.

  • Shared calendar items in multi-user calendar view

    Hi!
    I have another question:
    The new multi-user Calendar-view is great - but we have one thing, which
    is confusing to our users:
    User A has a shared calendar (the owner of this shared calendar is User
    B). It is clear, that User A can see appointments of this shared
    calendar in his "main Calendar" if this shared calendar is "enabled".
    But User A cannot see the calendar items of this foreign shared
    calendar, if he changes to the new multi-user - view.
    Does this work as designed or is it a bug?
    Thanks a lot
    Wolfgang

    Originally Posted by wpolster
    Hi!
    I have another question:
    The new multi-user Calendar-view is great - but we have one thing, which
    is confusing to our users:
    User A has a shared calendar (the owner of this shared calendar is User
    B). It is clear, that User A can see appointments of this shared
    calendar in his "main Calendar" if this shared calendar is "enabled".
    But User A cannot see the calendar items of this foreign shared
    calendar, if he changes to the new multi-user - view.
    Does this work as designed or is it a bug?
    Thanks a lot
    Wolfgang
    Does User A also have read proxy rights to User B's calendar?
    Also, which version/patchlevel of the client are you using?
    Cheers,
    Willem

  • Mobileme view confusing

    The mobileme view confusingly shows all pictures in all stacks which contain the uploaded pictures, even though only some of them are actually online.
    This is confusing - is there a way to ask it to display only the photos which are actually present?
    For example, the flagged view will only display flagged members of stacks, and note that there are more by writing [3 of 7] instead of [7] in the stack disclosure button.

    If you want a group of people to have access, you typically will create a "group" rather than a bunch of individuals. So if you only want your family to be able to access the photos, name the "Album viewable by:" section "Family" and give it a password. You would then send the user name and password to all of them. Make sense?
    You can keep all these stored. A family one, a group of friends one, a single person, etc.

  • HT2688 Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function.  Can you then connect an iPod touch and copy music from a shared librar

    Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function.  Can you then connect an iPod touch and copy music from a shared library?

    Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

  • How to allow normal/regular users to view a report

    I have been compiling reports in MS SQL 2012 Reporting Services.  the URLs is
    http://test_report:80/reports. I have no problem with viewing the reports because I am an admin but normal users are getting access denied.  this is how I assign permission to user.  Open Reporting Services
    Config Mnger --> Connect --> Click on Report Mnger URL --> click on
    http://test_report:80/reports --> Open a another folder called Reports.  In this "Reports" it has many reports.  --> Click on Folder Settings --> Click on Security --> Click on "New Role Assignment"  -->
    In "Group or user name" text box, I entered user network computer login name, such as: domain_name\bambi --> Ensure "Browser" is checked --> Ok.  I send this weblink to users but they cannot open it because of either access denied
    or not have permission. 
    http://myservername/Reports/Pages/Report.aspx?ItemPath=%2fCorp_Reports%2fReportOfTimeInLieu.  I am unsure why users cannot view my reports.  Please let me know if I had missed any step(s).  I use the Report Builders in Reporting Services
    Config Mnger to compile reports.  Regards,

    so this web link will lead me to Home page:
    http://myservername/Reports/Pages/Folder.aspx.
    at the home page I have folder called Reports: 
    http://myservername/Reports/Pages/Folder.aspx?ItemPath=%2fReports&ViewMode=List
    inside  Reports folder, I have multiple reports, ie: 
    http://myservername/Reports/Pages/Report.aspx?ItemPath=%2fReports%2fReportOfTimeInLieu,
    http://myservername/Reports/Pages/Report.aspx?ItemPath=%2fReports%2fReportOfVacationTime,
    http://myservername/Reports/Pages/Report.aspx?ItemPath=%2fReports%2fReportOfSickDays,
    http://myservername/Reports/Pages/Report.aspx?ItemPath=%2fReports%2fReportOfConferenceDays
    On Home page I click on Folder Settings --> Security --> New Role Assignment --> Group or User name: domainname\bambi --> Role = Browser
    On Home page I click on Site Settings --> Security --> New Role Assignment -> Group or User name: domainname\bambi --> Role = System User
    On Home page I open Reports folder --> Site Settings --> Security --> new Role Assignment --> Group or User name: domainname\bambi --> Role = System User
    Is this how I enable user bambi to 1) enable to open Reports folder and also browse for reports in Reports folder  2) enable user bambi to execute all reports in Reports folder.
    Problem:  user bambi was able to open Reports folder and see all reports saved in it; however, bambi gets a blank page upon selecting a report and open/run it.  bambi should see company logo and report name.  It was a blank white page.
    What did I do incorrectly?
    Thanks,

  • How to create a special view for sharepoint list A and deploy this view to specific user personal view?

    How to create a public view for sharepoint list A and deploy this view to specific user personal view? Is that possible OOTB?

    Views cannot be exported or moved. Can you elaborate your requirement?
    --Cheers

  • How could it be possible to completely restrict other users to view any sites through firefox browser with the help of password ?

    I want complete control of firefox browser for my computer.
    For example:
    There is a similar feature in Internet Explorer which is called 'Content Adviser'.
    To restrict others for viewing sites through Internet Explorer here is what has to be done:
    1. Click to open Internet Explorer.
    2. Click the Tools button, and then click Internet Options.
    3. Click the Content tab, and then, under Content Advisor, do one of the following:
    *Click Enable. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
    *If you've previously enabled Content Advisor, click Settings, and then type the supervisor password. If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
    4. To allow others to view restricted content, click the General tab, and then select the Supervisor can type a password to allow users to view restricted content check box.
    5. To allow others to view unrated content, select the Users can see websites that have no rating check box, and click OK.
    6. If a supervisor password has not previously been set up for Content Advisor, you will be prompted to create one.

    Looks like verdana is selected to 'off' in font book. Not sure if this could be the reason as to why i'm experiencing problems.

  • Prevent user from view line item details in KSB1 report

    Hi,
    how to restricting user from view line item details by double-click on it or highlight an item click on Document?
    Regards,
    Kelvin

    Hi,
    This issue got resolved.
    SAP suggested to execute the program "FAGL_CORR_0001" for company code wise.
    In ECC 5.00 from support pack 10 onwards two new fields has been added to table FAGLFLEXA.  (earlier we are on support pack 9, recently we applied the latest support pack)
    If we can execute the above program FAGL_CORR_0001, the two new fields will filled with relevant data and then we can able to use drill down option.
    This is for your information.
    Message was edited by:
            prasad naga

  • Limited-access user permission lockdown mode and allowing anon users to view list items

    I'm working on setting up a public-facing SharePoint website that will need to support anonymous user access. I'm using the Enterprise Publishing Portal site collection template, so the Limited-access user permission lockdown mode feature is turned on.
    Everything is working great, except allowing users to view a list item. One of the key features I was hoping to leverage was the ability to display custom lists on a web page using a List View web part. Then they could click on an item and see the DispForm.aspx
    so the item's content was accessible, including any file attachments.
    A real-world example is adding an RSS viewer web part to the home page and allowing anon users to click on one of the events to see the details of it. Currently, in lockdown mode, the users gets an authentication prompt. 
    I toyed with the idea of turning the lockdown feature off. However, I'm uncertain of the full impact that would have on security. For example, I know it will allow anonymous users to see who created and modified an item, which we don't want exposed to the
    public (i.e. our employee names). Seems like opening a can of worms by disabling the lockdown mode... 
    Any ideas on how to tackle this would be greatly appreciated.

    So far, this is the most promising solution I've come across:
    http://soerennielsen.wordpress.com/2012/05/29/how-to-make-list-items-visible-to-anonymous-users-in-search

  • CE10 how to prevent user from view hostrical instance

    hi,
    We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came  back with all the crystal reports on the server that  started with employees, even the one the user doesn't have access to.  My greatest concern about this is that users can view historical instance and it is sensitive data.  Does anybody know whether or not this is a bug in CE10?  Is there a patch/fix for this?  Is there any configuration change that I can make to
    prevent users from being able search all the reports on the server rather just their own reports?  Any help is greatly appreciated.
    Regards,
    Susan

    hi,
    I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS.  If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder?  When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal.  What am I missing?
    Thanks for your help!
    Regards,
    Susan Johnson

  • Fetch Users and View to OVD

    HI All,
    I have user and views stored in Database table. each user is mapped to a view,
    for example: user1 mapped to view1
    user2 mapped to view2 etc..
    Now I need to get this users and view relation to OVD from database. I have created DB adapter which will fetch my DB users.
    But I have no clue how to read the users view, Can anyone suggest me how can I achieve this.
    Thanks in Advance

    Hi presto,
    I have followed the same steps fro Database adapter and could retrieve users successfully. But do I retrieve views.
    I have 5 different types of view where users are associated with it.
    How should I read views information and get the user relation to particular view...
    Any ideas would be helpful.

Maybe you are looking for