Regarding Enterprise Portal Role issue

Hi,
The system administrator  has assgined a role called "k-role"  to a user. The K-role has some  3 pages inside it. When the user view the portal with his id, he can see the role called "K-role" and the pages. But when he clicks a page to access the documents with in it, it says "ACCESS DENIED". There is no restriction kept at the document level. Restriction is only at the role level.
What could the error be? How can i resolve this issue? How can the user access the document?
Regards,
Divya

Hi Divya,
the portal users assigned to super admin role (usually via group Administrators) do have full permissions on every document. You HAVE to add read permissions for group Everyone in order to make the documents accessible by every portal user.
1.      Open the Details dialog box for the item (for example, for the folder).
2.      Choose Settings ® Permissions.
3.      Enter one or more users, groups, or roles.
4.      Choose Add.
5.      Select one of the following permissions: Read, Write, Read/Write, Delete, Full Control
Best regards,
Martin

Similar Messages

  • RAR Enterprise Portal Connector issue

    Hello All,
    I'm trying to connect my RAR system to Enterprise Portal and getting "Connection Failed" message. Could anyone help me out or walkthrough the steps for creating EP connector in RAR system.
    Below is the error log:
    Apr 21, 2011 1:22:44 PM com.virsa.cc.dataextractor.bo.ConnectorUtil testConnection
    SEVERE: Cannot get data extractor for.  Reason:DEVPORTAL/DEVPORTAL
    com.virsa.cc.dataextractor.dao.DataExtractorException: Cannot get data extractor for.  Reason:DEVPORTAL/DEVPORTAL
    at com.virsa.cc.dataextractor.dao.DataExtractorFactory.getExtractor(DataExtractorFactory.java:158)
    at com.virsa.cc.dataextractor.bo.ConnectorUtil.testConnection(ConnectorUtil.java:55)
    at com.virsa.cc.comp.CreateSystem.onActionTestConnection(CreateSystem.java:1728)
    at com.virsa.cc.comp.wdp.InternalCreateSystem.wdInvokeEventHandler(InternalCreateSystem.java:281)
    at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
    at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
    at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
    at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
    at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
    at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
    at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)
    at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
    at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
    at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
    at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
    at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
    at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
    at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
    at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
    at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
    at java.security.AccessController.doPrivileged(Native Method)
    at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
    at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    Caused by: com.virsa.cc.dataextractor.dao.DataExtractorException: DEVPORTAL/DEVPORTAL
    at com.virsa.cc.dataextractor.bo.DataExtractorSAPPORTAL.init(DataExtractorSAPPORTAL.java:98)
    at com.virsa.cc.dataextractor.dao.DataExtractorFactory.getExtractor(DataExtractorFactory.java:152)
    I appreciate all your thoughts.
    Thanks,
    Mohan

    Hi
    Remember you have to use a rfc user on the ERP Back end, wich uses virsa roles. So you have to use user and password with JCO connection or SSO.
    Dont forget to check the SLD.  The logon groups should be configured in the right wat.
    regards,
    Alejandro

  • Registration of Supplier Enterprise Portale Role

    Hi experts
    we are working on SRM 7.0 based on Enterprise Portal.
    I founded SRM roles for ROS but i cannot find EP roles!
    Any suggestions?
    thanks
    regards
    andrea

    solved by me

  • Regarding Enterprise portal

    HI,
    i want some information about EP like what is in store in it? wht are the prerequisites for it . I am an ABAP developer and wht is the future of EP ?

    HI ,
    I found some more for you .
    <b>BLOGS</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2746
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/241
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3143
    <b>Help.sap.com</b>
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/387daf90-0201-0010-bb98-cb1a5545bf69
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/webcontent/uuid/4b0c105e-0501-0010-bcb0-92478a4b2a17
    http://help.sap.com/saphelp_nw04/helpdata/en/a4/76bd3b57743b09e10000000a11402f/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/1d/40e93bac3c5a6de10000000a114084/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/50/da644160087d47e10000000a1550b0/frameset.htm
    <b>Overview of the Content Development Process</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2845
    <b>
    Java development methodologies (Part I)</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3217
    <b>Java development methodologies (Part II)</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3283
    <b>Setting up the NetWeaver development environment (Part II)</b>https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3190
    <b>Installing and configuring the preview edition of EP</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2851
    <b>Enterprise Portal Implementation Forum</b>
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/308
    https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/2746
    And the Mega repository is https://www.sdn.sap.com/irj/sdn/forums .search over here before posting . you can get similar kind of thread.I hope next time before posting you will search and then Post.
    Thanx
    Pankaj

  • Enterprise Portal Configuration Issue - GRC 10.0

    Hi All,
    I am following AC10EP Configuration guide to integrate portal and GRC 10.0.
    According to the configuration guide i need add any entry for SPML under AUTH integration scenario as shown below.
    When I am trying to add the same in my system i am getting the issue as "Choose the key from allowed namespace" as shown below.
    Please suggest if there is any solution to get this fixed.
    Regards,
    Sai.

    Hi Prasant,
    Thanks for the details.
    I have made all my configuration correctly. Just now my issue got fixed. I got the same message as shown above and when i clicked on ENTER button it just accepted and went through.
    It is just a warning message and i stopped seeing it without clicking on ENTER button
    Though its not a issue, I made it an issue for myself
    Hopefully if anyone come across the same should correct it seeing this post
    Regards,
    Sai.

  • Regarding Enterprise Portal Page

    Hi All,
    In the portal, I have a role called "Repository", which has some 5 pages. For example if there is a page called "project". I want the "project" page to be displayed for only some users and not for some users. How can i customize the pages inside a roles? Is there any property to be set for that?
    Regards,
    Divya

    For this u need to merge ur worksets.
    create a workset for content1 and go to property editor of the workset and in MERGE ID filed give a name and save it and assign this to role 1.
    create a workset for content2 and go to property editor of the workset and in MERGE ID filed give a name(give the same name which u have given in for first workset) and save it and assign this to role2.
    Now assign roles to users as u like.
    if u assign Role1 to user1 he can see only content 1.
    if u assign both roles he can see both content1 and content2.
    Regards
    Krishna.

  • Portal Role Issue

    Hi,
        I am using two roles in my application viz Manager and Employee. When I am logged into application with Manager role the application is working properly ie All the data and the tabs are getting displayed, but when I logged in as an Employee only Employee tab is getting diaplayed and the TLN and the data is missing. Can anybody suggest me what might be the problem.
    Regards,
    D.NagaSurendra.

    Hi Sampath,
                I checked all the iviews and permissions. When I click on the Employee tab then only the data and TLN is getting displayed. But when login as Manager all the TLN and data is getting displayed when the page is loaded only. No need to click on Manager tab. I want the same for Employee aswell.
    Regards,
    D.NagaSurendra.

  • Role Mapping For Portal Role Assignment and ABAP Role Assignment

    Summary:
    - Under the GRC configuration of Roles> Role Mapping we are trying to utilize the  role mapping feature in GRC for associating a dependent role to a main role.
    - We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
    - We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
    Problem Description:
    Our Scenarios we tested:
    Scenario 1:
    Main Role:  Attached to Initiator A & workflow A (routes to single approver based on role)
    Dependent Role:  Attached to Initiator B & workflow B (routes to auto approval or no approval)
    *Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role. 
    Scenario 2:
    Main Role:  Attached to Initiator A & workflow A (routes to single approver based on role)
    Dependent Role:  Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
    *Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
    Questions:
    1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
    2.  If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
    Edited by: Rene Griffith on Feb 26, 2010 10:22 PM

    I tested this set up.
    1.  Defined ABAP role as Manin role
    2.  Defined Non-ABAP role as dependednt role
    3. ABAP role  is set up in initiator requiring business approval.
    4.  Non-ABAP role is set up in initiator with no approval required.
    Results Where Business Approver approves the ABAP Role
    1. Only the ABAP role is displayed in approver view which is desirable.
    2.  ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
    Results Where Business Approver rejects the ABAP Role
    1. Only the ABAP role is displayed in approver view which is desirable.
    2.  ABAP role is rejected but  Non-ABAP role is provisioned which is not what we want.  We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
    Thanks again for your help.

  • Error Provisioning the Federated roles from CUP to enterprise portal

    Hi Gurus,
    Need help. I am trying to provision the roles to enterprise portal using GRC CUP. I have created the connectors and field mapping and the connection is successful. We have a enterprise portal with producer consumer relation ship. The Enterprise portal acts as consumer for the BI portal. The BI portal Roles are federated to Enterprise portal and i get an error "noSuchIdentifier" when I try to provision the federated BI Portal role on the Enterprise portal. I can successfully provision the local portal roles and UME roles on the enterprise portal. I get the error only when trying to provision the roles which are from BI portal.
    Appreciate any help, in this regards.
    Thanks,
    Pavan

    Hi Alma,
    This is one of the security issue.We had faced it sometime back.We searched some CSN's and found a solution.
    Go to Service Market palce and download the latest Cryptographic Tool kit (Service Market place---->software downloads)
    You will get a sca/sda something like tc/iaik./security(something like this)
    Deploy this on to your instance using your SDM.
    After that,Restart the Portal patching.It will go fine.
    reward points if helpful................

  • Performance issue of BI Reports in SAP Enterprise portal -in SAPNW2004s

    Dear friends,
    We are integrating BI Reports in SAP Enterprise Portal 7.0 ( SAP NW- 2004s).The reports are running properly .But the issue here is reports are taking long time to open and leading it to performance effect.
    Reports in BEX( Bi side) working lilttle better than EP platform.
    And Even BI team is looking for ways to improve the performance.
    Could you please share your ideas to implement in portal side to increase the performance.
    Thanks and Regards
    Ratnakar Reddy

    Hello Mr. Reddy,
    There are two possibilities for slow performance in BW reports, so we need to look into wether its slow in the BW system or at the frontend.
    If the problem resides in the BW system then we should be able to trace the reports
    and you can go for a SAP EW or GV sessin and SAP will provide recommendations.
    If the problem resides at the frontend
    Update the frontend servers to the latest frontend release.
    Recommended Frontend Release 700
    Recommended Frontend Patch      18
    Update the frontend servers to the lates SAP GUI release as soon as possible.
    Minimum Recommended SAP GUI Release 6.40
    Your frontend PCs should fulfill the following requirements:
    Each frontend PC should have 500 MHz and 128 MB main memory.
    Because of a limit in the addressable memory, Windows 95 is not supported as Frontend OS for 3.X BW Systems. Please refer to SAP Notes 161993, 321973 and 366626 for details.
    Please also check SAP Note 147519 "Maintenance strategy/ deadlines 'SAPGUI'".
    If you still require any assistance from SAP support then raise a message under component ( probably BW-BEX-ET-WEB).
    Provide your input, if you have any.
    Thank you,
    Tilak

  • Performance issue of BI reports in SAP Enterprise portal

    Dear Friends,
    We have  integrated BI reports with SAP Enterprise portal 7.0.Reports are running properly But the issue is reports are taking more time to dispsaly its content and leading it to  performance effect.
    In Bex ( BI side) reports  performance is little better than  SAP EP platform. BI Team also looking for ways to improve performance  at BI side.
    Could you please share your valuable ideas to improve  the performance at SAP EP side also ..
    Thanks and Regards
    Ratnakar Reddy

    Hi ratnakar,
    The first step is to identify which component is causing the performance problem. Run your report in the portal but try appending the string &PROFILING=X in the end of the URL. This will generate BI statistics which you can use to see which component (Java stack, ABAP stack, Database) is causing the performance issue.
    Hope this helps.

  • No Portal Roles assigned issue

    Hi Experts ,
    We had recently integrated CRM with portal , but some users inspite of having the portal roles assigned to their id were getting an Access Denied page (we had customized the "no portal roles assigned " error page ) . Knowing the dependency of portal on IE and browser settings , this issue is sometimes resolved by clearing cache , cookies , and changing a few browser settings etc on IE 6.0 . If this doesn't work then upgrading to IE 7.0 definetly helps . Since this is just a workaround , I would like to know if anyone has experienced such a thing before and has a solution for this . Your inputs will be highly appreciated .
    Regards
    Mayank

    Hi Mayank,
    This is an error which happens when there is No roles assigned to the user. I am not sure how your systems are designed for User Management. Say for example in some cases LDAP is used to maintain Group to User Relationships and Portal Roles are connected to Groups therfore all users in the group is assigned to the Role. In some cases UME is used.
    Having said that you can disable the cache for the browser. You have to compromise with the performance however, this will ensure that everytime the user logs in, the request will always go to the server.
    Regards
    Avik

  • VERY URGENT: Issue with Reconciliation against SAP Enterprise Portal

    Hi,
    We are using IDM7.0 and we have SAP Enterprise Portal as a resource. The users in portal are from Active Directory.
    When I am doing full reconciliation against portal, it is processing only certain accounts. The reconcilaition policy is to link accounts. It is not linking teh accounts. Moreover, these accounts are not found in UNMATCHED accounts also. I don't have any account exclusion rules or something.
    I wrote a small code snippet, which does just a single account reconciliation of a particular user id. In this case the portal account is being reconciled and linked properly.
    Any ideas what the issue might be?
    And I have another question too.. in the schema attributes of the out-of-box SAP Portal resource adapter, I don't see any ammping entry for "accountId". Usually for other resource adapters there would be entry for accountId (e.g in AD, mapping is: accountId <---> sAMAccountName). In case of portal, do we need to explicitly set this mapping? If so what would be the right hand side name in the schema? Does the right hand side name changes from one deployment to the other? If so how to determine what attribute maps to accountId in our portal? Might this lack of accountId is causing the issue with the reconciliation?
    Any leads would be highly appreciated.
    Thanks,
    kIDMan.

    Thanks for the reply. I have already set up correlation rule, account linking options for different situations like FOUND, UNASSIGNED, UNMATACHED etc. If my linking configurtaion is not correct then the fetched accounts should be atleast in the account index with situation as UNMATCHED. But that is not the case.
    I am not sure if I made my problem difinition clear earlier. The problem I mentioned is not with "linking" of the accounts. The problem is IDM is detecting only some accounts. Among those set of accounts which IDM was able to fetch from portal during reconcilaition, it was able to successfully link the matching accounts to identities in IDM.
    My question is, why IDM is fetching only certain accounts and not all accounts from portal resource.
    As I mentioned earlier, when I run my code snippet to reconcile a single account, it reconciles successfully and links to user identity in IDM (if a matching idenity exists based on my correlation rule). But why the reconcilaition at the resource level is not able to fetch and reconcile teh same account.
    Regarding the accountId attribute in the attribute schema, neither the SUN documentation nor the resource adapter configuration tells about the name of the attribute on the portal side that it should match to.
    Thanks,
    kIDMan.

  • Federated Portal - Issue running WebI and Crystal in Enterprise portal.

    Hi All,
    We have connected our BI portal to Enterprise Portal . The federation works fine for Bex 7.0 queries. But when we run WebI and Crystal Reports ...We get the following error
    Portal Runtime Error
    An exception occurred while processing your request
    Exception id: 05:20_30/03/10_0027_1281950
    See the details for the exception ID in the log file.
    We looked in the log file and this is what we see.
    "PortalRuntimeException: Exception in SAP Application Integrator occured: Missing Property &#39;ClassName&#39; in property file for layer&#39;BusinessObjects/SSOLayer&#39;."
    Others have posted the same question in forum but there is no answer. Could any of you resolve this issue??
    Thank you in advance,
    Aparna

    Hi Hanif,
    I'm working on federation between EP 7.4 and EP 7.0.
    Do you have any links on FPN in EP7.4.
    Thanks and Regards,
    Pradeep

  • Abap role in the enterprise portal?

    Can anyone give me a clear picture abt the enterprise protal and abap role in that?

    Hi when there is an integration between EP and R/3 and you click on the User Adinistration of the Portal you will find two types od users available there.
    1. UME Database - this is nothing but the Portal Roles here you will find all the roles related to portal administration, such as eu_role, eu_corerole etc etc .
    We assign portal developer roles to the user form here like Content Admin, System Admin, etc etc.
    2. ABAP Role : whatever role are defined for the user in the backened will appear here ...
    for instance if you implement ESS, hence the user must be able to apply for Travel so a backend r/3 travel role will be attached in SU01 for that user. This is visible on portal.
    Hope this clarifies!
    Cheers!
    SJ.

Maybe you are looking for