Read Only Account ACS 5
I can create a read-only account on the ACS 5 server? I have the ACSAdmin account.
Thanks
Yes
Go to:
System Administration >
Administrators > Accounts >
Create
Create a new admin with the "ReadOnlyAdmin" role
Now login as that new admin
Similar Messages
-
DBMS - Data not visible to read only account users.
I have created below view to know the status of my batch jobs which run on server every sunday.
CREATE OR REPLACE VIEW CAFDB_REFRESH AS
SELECT
log_id,
owner,
to_char(log_date, 'DD-MON-YY HH24:MI:SS') TIMESTAMP,
job_name,
status,
ERROR#,
run_duration,
instance_id,
additional_info
FROM user_scheduler_job_run_details;
it is working fine and i am able to get the information.
now to make it visible to read only account users - using "grant select " i have given access and also created public synonym.
but it is showing only column names in read only account not the data.
how to make this visible to read only account?
please guide.USER_ views will only have the objects owned by the user running the query..In your case it will have only the schedules done by the user.
You will have to ue ALL_ or DBA view (all_scheduler_job_run_details) -
Using iTunes Library with a read-only account...
Hi! I use my HD connected to my AEBS and to create some accounts in which people can use information on the shared folder that is created when the account preference is chosen. I later copied my iTunes library in the same folder so that everybody had access to it. Most of the users I created have restricted access (meaning read-only access). The ones that have full acces had no problem but the ones that have read-only access, when they try to choose the iTunes library, recieve a message saying "The folder "iTunes" is in a locked disk or you do not have write permissions for this folder.". I clearly understand what the problem is and why it is not letting those users acces it but does anybody has an idea on how I can make the iTunes library accessible to the "read-only users"? Thanks!
Hi! I use my HD connected to my AEBS and to create
some accounts in which people can use information on
the shared folder that is created when the account
preference is chosen. I later copied my iTunes
library in the same folder so that everybody had
access to it. Most of the users I created have
restricted access (meaning read-only access). The
ones that have full acces had no problem but the ones
that have read-only access, when they try to choose
the iTunes library, recieve a message saying "The
folder "iTunes" is in a locked disk or you do not
have write permissions for this folder.". I clearly
understand what the problem is and why it is not
letting those users acces it but does anybody has an
idea on how I can make the iTunes library accessible
to the "read-only users"? Thanks!
iTunes was NOT built for multi-user "write" access. Allowing write access to more than one user of iTunes "concurrently" is a recipe for disaster: sooner or later your iTunes database will get corrupted. You have been warned. -
Read only account line item appears writable in the webform
Hi All,
We are using Hyperion Planning 11.1.1.2.We have a line item called "Salary" under account which is set to read only.Its parent "Compensation" has the security set as IDesc(writable).
The line item Salary is used in 2 forms.In one form it appears as readonly and in the other it appears as writable.Both the forms are identical except for the change in member in custom dimension for which security is not applied.
Ideally this line item has to appear as readonly.
Can anybody throw some light on this issue?
Thanks in advance,
MaliniHi,
Can you just try this,edit the first form that works, do a save as and give it a name, change the custom dimension member. save. run. Is it the same?
Cheers
John
http://john-goodwin.blogspot.com/ -
Developer read only account ?
Is possible to have a "developer" account that only could see the pages' code and unable to modify it ?
We have some scenarios where we would appreciate this functionality:
1. One stage of our development process is "Peer Review", where an external developer see our code checking, for example, if we have followed the code standards we have and if the code could be improved.
2. Usually we share our code to other groups of developers and in order to do that we create a developer account for the persons of these groups.
In the other hand, is possible to lock an entire application for modifications ? This could be used in our productions environment in order to prevent modifications "by mistake".
Regards
HarveyHarvey,
No, to the read-only mode.
Yes, to the other question, you just set the build status to Run Application Only, so the Builder can't get to it at all.
Scott -
Hi All,
Although the systems in question run Solaris 8, I am asking in this Solaris 10 forum because the way to implement what I am trying to do will most likely be the same on Solaris 8 as Solaris 10 (basic user, group, and permissions related functions have not changed much). There are also alot more posts and answers in this forum so I'm likely to receive a response more quickly.
My question is: I have been asked to create a "read-only" account for IBM to support some of the applications on a couple of our systems (app support has recently been outsourced to them). I don't really understand why they would be needing a "read-only" account as they wouldn't be able to do anything to resolve problems or install new versions etc., but anyway the question is there and they seem to be insisting on creating such an account. So what is involved with creating a so called "read-only" account? I have never been asked to create one of these before and I've been working with UNIX for quite some time.
I know one could do something like create a very basic user who is only a member of a new group I would create called e.g. "readonly" and then use things like "chmod" to set permissions so that all files on the system have no write or execute permissions for "other" users (e.g. -rwxrwxr--), or I can use restricted shell (e.g. rksh, rbash) etc. However, setting all files globally to no write and execute permissions for "other" can and probably would cause all sorts of problems, and I already gave them a restricted shell but this was not suitable for them as they are unable to change directory or browse other parts of the filesystem they need to check.
Please let me know how I can create one of these so-called "read-only" accounts.
Thanks in advance.
Regards,
David.
Commonwealth Bank
David Stofberg
UNIX Systems Administrator
Enterprise IT Operations
Level 9, 363 George Street
Sydney NSW 2000
P: +61 (2) 9303-2898
M: +61 (434) 220-893
E: [email protected]
Our vision is to be Australia's finest financial services organisation through excelling in customer service.most normal users dont have the ability to write to most critical areas of the system by default. if you need more restrictions, deploy RBAC. you can create custom rights profile to limit what a certain role can do.
[http://docs.sun.com/app/docs/doc/816-4557/prbactm-1?a=view] solaris 10
[http://docs.sun.com/app/docs/doc/805-7229/6j6q8svdf?l=en&a=view] solaris 8 (update 10/01) -
Address Book server -- any way to make an account "read-only"?
So, they'd like to incorporate Address Book Server here to work as a "group" address book.
But they only want to give certain people read-write access to the group book and read-only address to others.
As far as I know, there's no way to do this (like you could with an iCal "delegate" for comparison.)
But I was thinking -- is there some way to just set an AB Server account read-only in general?
If so, I was thinking I could set up two AB Server accounts -- the "read-write" account for some users and then script/sync the values in that account nightly to a "read-only" account.
But I can't figure out if there's a way to marke an AB server account read-only to begin with.
Any suggestions along these lines?
Thanks!I'd imagine this is a question that only Apple can answer, as it would require some "behind the scenes" tinkering with Terminal etc., if it were at all possible.
Its definitely something they should think about including in a future release, as there seem to be quite a few people here who want a shared calendar, plus therefore the ability to pick who can EDIT vs. just read the info on it.
Cheers!
Steve -
How to unlock account on read only replica (DS 5.2 p4)
We are planning to turn on password policy to lock account after user failed to provide correct password after n times and the account will be lock forever unless administrator is to reset the password retry count.
We implemented password policy with role and cos so that the policy only imposed on end users but not administrators. The password policy works fine.
We understand that for DS 5.2 p.4, the password retry count is per instance, so the account lock is per instance. The problem we now encountered is at account unlock. We developed a function to reset the password retry count in order to unlock the account. It works fine in our test env. However, in production, we have 2 masters and 4 replicas and our replicas are all read only, all update is referred to the 2 masters. Now, when we update the master setting 0 to the password retry count, the reset is not populated to the replicas and when we try update the replica directly, the update get referred to the master and hence the attribute on the replica remains the same.
Is there a way to unlock the account that got locked at the read only replica?As I recalled the way to unlock an account is to reset password using admin account. I think Ludovic once mentioned that in one of his post.
If I were right here in this point, you should reset password which will be replicated to your read-only account and reset the counter to be 0.
BTW, just found Ludovic's original post link:
http://forum.java.sun.com/thread.jspa?forumID=761&threadID=5159009
Message was edited by sun_iplanet
sun_iplanet
Message was edited by sun_iplanet
sun_iplanet -
Customer requires read only login access. This read only account should be able to run all 'show' commands on a catalyst 3560 switch
The only two levels defined by default are:
Level 0: User exec mode
Level 15: Privileged Exec (enable) mode
Levels 1-14 are UNDEFINED, by default. You have to manually define commands for each of these levels.
Please note you will have issues with commands like show running-config, because the commands shown in the config might be blocked by priviledged level.
If you had an ACS server, you could give that user level 15 access then RESTRICT the commands they are able to use to the subset you require.
Here are some helpful links:
http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfpass.html
http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftprienh.html -
Problem connecting (read only) to Sybase Server using Crystal XI
Hi,
I'm having a very similar problem to Renuha in the thread 'Problem connecting to Sybase Server using Crystal XI-Version-11.0.0.1994'
The thread is marked as assumed answered but I suspect not!
I am experiencing this issue in Crystal XI R1 11.0.0.2495, post SP4 install.
Though the issue was exactly the same pre SP4 install, when it was a vanilla install @ version 11.0.0.1282.
I am trying to connect to a Sybase database via Crystal > Start Page > Standard Report Wizard > Standard Report Creation Wizard > Sybase Server > Make New Connection
I enter the details, of my read only user account, and select my desired database, from the (successfully) populated 'Database' drop down.
After some time, in the 'Standard Report Creation Wizard' window I get the server listed under the Sybase Server branch, but, on expanding the server I only get '...no items found...'. However ,if I use the sa account, after selecting a particular database, I can see all the available database objects under the Sybase Server > [server] node.
I am on Windows XP Pro SP3, with Sybase Open Client v12.5.2
I assume my Sybase Open client is correctly installed as I am able to successfully connect using the sa account.
I am trying to connect to a Solaris 10 (5.10) system running Sybase @@version= Adaptive Server Enterprise/15.0.3/EBF 16548 ESD#1/P/Sun_svr4/OS 5.8/ase1503/268
Our database vendor/supplier has said:
"...Crystal reports is not handling the granularity of the Sybase revoke permissions and assuming we've revoked all access to any table where we have revoked only write access.
Is anyone able to assist?
Thanks,
MattDon,
Thanks again for the response and my apologies for the delay in reply - they keep giving me other work to do!!
Anyway.
CR XI R2 SP6 successfully installed.
Same outcome on Sybase connect, with a full read/write sa account
i.e. successfull connect and sight of all database objects within my chosen database.
Same outcome on my restricted read only account
i.e. I am able to successfully authenticate and choose which database I wish to select but subsequently, still, 'no items found' is displayed when I expand my database node.
I believe it is a problem with the read only account as both accounts are able to connect, as shown by the availablilty of the dropdown, listing the available databases within the specified Sybase instance.
The reasons for going down this path are as you suspect - I've been asked to provide access which is not full!
As far as the testing via test tbl creation.
I know very little of Sybase (?!) and all our Sybase DBA activities are carried out by our system/dB vendor/supplier.
To do further testing I would have to go back to our dB vendor/supplier but, as mentioned, (I get the impression) they already beleive they have carried out all required of them by providing locked down read only access.
I ought to mention that the database trying to be accessed is a restored copy of "the previous days" live data, on an MIS server. The read-only account comes over as with full privileges, and it is a script, subsequent to database restore, which knocks down the accounts privs, to read-only. Given this scenario what would I have to ask of them re further testing/troubleshooting?
Thanks,
Matt -
Toad read only sessions open a transaction in DB?
Hi,
When I check v$transaction, I see all TOAD and sqldeveloper sessions which are read only accounts. If I use the same user in sqlplus it won't appear in v$transaction. I am puzzled why these tools create a transaction for even select queries. How can i avoid these tools creating transaction(may be they are running begin trasaction for each session causing a transaction).
Thanks
AnandSAP IMG -> Cross Application Components -> Master Data Synchronization  Synchronization Control -> Synchronization Control -> Activate Synchronization options
This setting allows you to activate synchronization of BP with R/3. Not maintaining the values may result in certain fields being read-only in BP.
Suggested Values:
Source Object: BP | Target Object: CUSTOMER | Active Indicator : X
Source Object: BP | Target Object: VENDOR | Active Indicator : X
Source Object: CUSTOMER | Target Object: BP | Active Indicator : X
Source Object: VENDOR | Target Object: BP | Active Indicator : X
Have you set all of the above settings??
BHARATH -
Wiki "Read Only" users can read & write
I am looking to use the built in Wiki software on our Snow Leopard mac mini server. The wiki is meant to be private with one user able to read and write and another account that can read only. After selecting "read only" the user can still read & write. The read only account is not an administrator so I am not sure why they are not read only, could someone point me in the right direction?
Thanks for your help!Hi,
According to your post, my understanding is that users with read only permissions can't see custom Master Page and Managed Metadata Navigation SharePoint 2013.
I suggest to customize the ClientObject model code to retrieve info with elevated privileges and then re-deployed the master page.
Here is a similar thread for you to take a look at:
http://social.technet.microsoft.com/Forums/en-US/bd7aa817-114a-46ae-a08a-71d903227ce0/sharepoint-2010-custom-master-page-and-read-only-permission-issue?forum=sharepointadminprevious
If it doesn’t work, please check more information about the custom Master Page, such as whether it contain content like web parts that with permission limited, or whether you have any changes
to the read permission group.
In addition, please check the SharePoint ULS log to find more information, , the ULS log file is in the location: C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\15\LOGS
You can check the ULS log by the methods here:
http://blog.credera.com/technology-insights/microsoft-solutions/troubleshooting-sharepoint-errors/
Best Regards,
Linda Li -
How enable read only access for ACS server itself
Hi,
We would like to know whether its possible to create a read only access to the ACS server. Currenlty ACS server has a generic login with full admin rights.
We need to create a login to couple of users to log into ACS to check the "Report and Activity" tab. Access to all other tabs should be disabled.
We are using ACS4.0 verison. Please let me know whether its possible.
Thanks
NachiHi,alexchy8
We can make use of 2 PowerShell commands to achieve this goal.
Add-MailboxPermission and Add-MailboxFolderPermission.
Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
You can read the following article as reference:
http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards. -
ME21N, Account Assignment, to set G/L Accout field 'read only
Hi,
I am creating PO with reference to Purchase Requisition (using T-Code ME21N). The fields 'Cost Centre' and 'G/L Account' under Account Assignment Tab are needed to be rendered 'Read only'.
The 'Cost Centre' Field has been made Read Only using User Exit. I am not able to do the same for 'G/L Account' field. Please suggest a possible way to do the same. Field Exit is not working and i have experimented with lots of BADIs, but to no avail.
Thanks,
RanjanHi Venu,
I have done as you have told. This is working fine while creating
PO with reference to Purchase Requisition, but the problem arises when we try to create PO by simply putting Account Assignment Category 'K' along with other relevant data.
The G/L Account field is in display mode, obviouly due to configuration i have done, and thus we are not able to put value in it. It is interesting to note that SAP is itself determining and displaying G/L account in this case.We are checking if this is the case with all test cases. If so then our problem can be considered solved.
Thanks,
Ranjan -
Creating a read-only user account
I am trying to create a read-only user account. Reason being,
when our users may be able to use MS Access to pull information
and modify changes (if possible). I was told there is a way to
do this. Help?I'm connecting using ODBC with a user account that I created.
This dummy account will be available to approx 15 users so they
can generate reports using Crystal. But, if there is someone
that wants to generate queries using MS Access, they can still
modify the data. So, how do I create only select statements to
disallow users from using MS Access to link to the oracle
database and change data?
Maybe you are looking for
-
Assigning a Numeric Value in a Cell Based on Text in Another Cell
In advance, thanks for your assistance. I'm trying, in vain, to assign a numeric value in a cell based on text (from a dropdown menu) in another cell. For example, in cell A5 I have a dropdown list that includes the options "blue", "red", "white", an
-
When i quit safari in full screen a blue screen appears in background
When i close safari in full screen a blue screen appears in mission. What can i do to fix?
-
I am getting an error message -41 when I try to send my project to IDVD
I am getting and error message - 41 when i try to send my video project to IDVD. Does anyone know what i have to fix?
-
Hi to all experts, I have requirement of defaulting long text in transaction FMBBC . when the user clicks on long text button some text should be defaulted is it possible. Im thinking of using enhancement points to achieve this .
-
When put() does not return
We're using Coherence 3.0/315. We've experienced a couple of failures in our system and tracked it down to sort of deadlock in our code. I say "sort of" because really the threads don't seem to be interlocked in a traditional deadlock, but rather it'