Regarding Group Permission

Hi Experts,
I have a security requirement ie.
i have two group in rpd , admin and spoc and using session varibale i am finding the group of user login to dashboard.
i am taking group from access control table in database.
if a peson belongs to both group then i want to assign the permission of admin group to user.
presentaly it is assigning least group access to user and i want to assign max access.

Indeally, it shud be Admin only..
==========
If there are multiple groups acting on a user or group at the same level with conflicting security attributes, the user or group is granted the least restrictive security attribute. Any explicit permissions acting on a user take precedence over any privileges on the same objects granted to that user through groups
============
Hope you are not missing any points

Similar Messages

Reg:: People and Groups Permission reports in sharepoint 2013

Hi Techys,
We have one SharePoinr 2013 team site, The total number of users for the site is 3200 members. Now my customer requirement is, they requested a report for people and groups and its permissions along with member names by group wise.
Example: I'm having one SharePoint 2013 team site named as "My Auditions", it contains 28 groups with different permission levels. Each group having minimum 70 users. Now we need a report for each group permission along with group members.
Kindly help me to getdown from the customer concern.
Many Thanks,
Madhu

I would suggest a tool like Metalogix ControlPoint. It can quickly produce nice looking reports for this type of information.
Trevor Seward
Follow or contact me at...
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.
Hi Trevor,
I have decided to say very big thank for your great suggestion, I have installed the Control-point trial version in my personal Lab environment. It's working as i'm expected. But, I have to do the same task for my customer. How can i install the control-point
in prod server without customer permission. even i'm having all uid and password as administrator.
Could you please suggest me is there any scripting or ootb features.
Many Thnaks,
Madhu

Assign Group permission to list item using client object model

Hi,
I am trying to add the list item and assign the permission to the list item by using SP 2010 client object model. The problem which i am facing that when i assign the group as a permission to the item, by automatically the limited access permission
is added to the group. Please find the steps which i have followed,
Step-1: Break role inheritance.
foreach (var item in _listItemCollection)
if (item["FileLeafRef"].ToString().ToLower() == "xxx")
item.BreakRoleInheritance(true, false);
_clientContext.Load(item.RoleAssignments);
_folderItem = item;
_clientContext.ExecuteQuery();
Step 2: Remove all permissions of the list item.
foreach (var assignment in _folderItem.RoleAssignments)
assignment.RoleDefinitionBindings.RemoveAll();
assignment.Update();
_clientContext.ExecuteQuery();
Step 3:
Add Group as a permission to the list item.
var role = _web.RoleDefinitions.GetByType(RoleType.Contributor);
var collRdb = new RoleDefinitionBindingCollection(_clientContext) { role };
Principal principal = _grp;
_folderItem.RoleAssignments.Add(principal, collRdb);
_folderItem.Update();
_clientContext.ExecuteQuery();
After adding the group successfully to the list item, i checked the group permission and it contains the value as "Contribute,Limited Access" to the site level and "Contribute" to the list item. Please guide me how to avoid to create Contribute,Limited
Access role.
Balaji

Hi Dmitry,
When I create the group and assign contribute permission, the group has the permission at the site level(to see the permission, click group and click view Group Permission). I have added the list item and break the role inheritance permission
and given the unique permission by providing group as a permission to the list item. After providing the permission, the group permission at the site level changed to "Contribute, Limited Access". I dont know how contribute permission changed to contribute,
limited access.
I found the workaround to fix this issue. I created the group and create the folder in the shared document library by using client object model. Due to facing some issue by providing the permission using client object model, i have created the event receiver
to the document library and using server object model, i can able to assign the approprate group permission.
Balaji

Changing group permission using java in unix

Hi,
I have a java application which will create files in a particular
directory in the unix server.The application is started using
root.When the file is created the permission it has is -rw-r-r.I need
to change this and give group also rw.Anyone knows how to do this
after file is created.I dont wanna run "chmod" using
Process.getRuntime().Is there any other java api to do this.Please
help me
Thanks,
Sidhartha

luttapi wrote:
Hey thanks.Are you sure that "FilePermission" package cannot do this?I saw some api's in that which sets permission.But i couldn't find anything for group permission.No, those just handle whatever restrictions the Java platform imposes on top of the operating system restrictions. They come into play when you're running an Applet for example, which must not have all the rights that a normal user application has (i.e. it may not read or write any files at all, even if the user running the Applet was allowed to do so).

Regarding assigning permission to dashboard to a catalog group in obiee 11g

Hi All,
i have a dashboard : trainee .
i have created one catalog group that is: GroupA
now i have assign some user to it.
now i want to assign permission to the trainee dashboard to the groupA.
i tried to do that but when i am doing login obieee by using any user that has assigned to group A.
but i am not able to see trainee dashboard.
can anyone tell me the steps for doing it.

Hi,
http://www.varanasisaichand.com/2011/03/obiee-11g-security-creating-users-and.html
hope it helps
Thanks,
satya

OIM 9.1.0.2 - User group permission

Hi experts,
IHAC that need to configure some user groups in order to perform just specifics activities. We have configured the user groups but with no sucess.
1) Group that should see/track all the opened requests.
Given all request permission. (The requests don´t appear)
2) Group that should disable Resource from user thru User Detail -> Resource Profile.
Given all resource objects permission. (Error message: No permission)
3) Group that create/manage Attestation.
Given all attestation permission. (The attestation is created, but it doesn´t appear to delegated user)
Any tip on how to set the correct permission?
Brgs,

Hi,
I was looking for the same questions! One of them I could make it to work...
About quetion #3, some steps:
1. Create a group with name, lets say: AttestationManagers
2. Give the following permissions:
Attestation Requests
Attestation Process Tasks
Attestation Data
Attestation Process Definitions
Attestation Process Administrator
3. Make the users responsable of attestation process part of group: AttestationManagers
4. Create an attestation process and in the last field: Process Owner, put AttestationManagers
5. Click: "Run Now"
6. This attestation should appear to the user responsable of it.
You can find an explanation about the attestation process in the following link: http://download.oracle.com/docs/cd/E14049_01/doc.9101/e14057/attestation.htm#insertedID1 and about the Process Owner, the point 15.1.1 in the above link.
I hope it helps!
Regards.

Assign Group Permission to Distribution Group

I have a Distribution Group in AD and i want to assign permission to same in SharePoint. But i am not able to get that group in people picker. However, i am able to fetch the Security Group from AD to SharePoint.
Please advice.
If this helped you resolve your issue, please mark it Answered

Hi Avni,
Since you are posting the thread to SharePoint 2013 forum, so I assume you are using SharePoint 2013. Below is to help you understand Distribution group and Security group:
Security group A group that can be listed in DACLs. A security group can also be used as an e-mail entity.
Distribution group A group that is used only for e-mail distribution and that is not security-enabled. Distribution groups cannot be listed in discretionary access control lists (DACLs), which are used to define permissions
on resources and objects.
You can use security groups to control permissions for your site by adding security groups to SharePoint groups and granting permissions to the SharePoint groups.
You cannot add distribution groups to SharePoint groups, but you can expand a distribution group and add the individual members to a SharePoint group. If you use this method, you must manually keep the SharePoint group synchronized with the distribution
group.
If you use security groups, you do not need to manage the individual users in the SharePoint application. Because you included the security group instead of the individual members of the group, AD DS manages the users for you.
I'd recommend you using Security group for SharePoint related permission settings instead of Distribution group.
https://technet.microsoft.com/en-us/library/cc261972(v=office.15).aspx
Regards,
Rebecca Tu
TechNet Community Support

OIM 9.1.0.2 - User group permission conflict issue

Hi Gurus,
IHAC who have faced a strange behavior about permission conflict.
User has been assigned to a user group (ANALISTA DRSI) who have permission to disable resource of the users he administrates. The user group has been assigned to resource's administrator.
The same use has been assigned to other user group (ANALISTA ADM DRSI) who have other permission. The user group has been not assigned to resource's administrator.
If the user has been only assigned to ANALISTA DRSI user group the user is able to see records on Rogue Account report. If the customer has been assigned to both ANALISTA DRSI and ANALISTA ADM the user is not able to see the record on Rogue Account report. He got a display error message (You do not have permission). Both user groups have the Report menu item assigned.
My question: if the customer is assigned to a user group who have permission to see the reports, should not the user is able to see the report even though he is also into the other group who do not have permission?
Is there conflit in the OIM???
Any tip will be very appreciated.

Orgnaization > Manage > Select Org in which users are getting created > Administrative Group (Drop Down) > Select Group for which users are not coming.

OS X NFS not honoring group permission (again?)

I have a NFS appliance exporting an NFS share. It has group X configured, and folders owned by that group, and se to read/write/execute by the group.
On my Mac, I have created the same group, with the same GID. I then my user to that group (secondary group).
The Mac seems to think that my user does not belong to that group, because I get "Permission Denied" if I try to go into one of the directories in the Terminal. The Finder also shows the folder as locked. (Yes, I did try logging out, rebooting, etc.)
Anybody have any news about this problem? Looking around the support forums, it does not appear to be new. There are posts going back to 2008.
https://discussions.apple.com/message/9066836#9066836

Safe boot your computer.
Turn off computer. Hold shift key. Turn on computer. Keep holding shift. Once progress bar starts moving let go. If you can then login and use your computer it is not the OS it is some other application installed on the computer that is causing the issue.

Udev rules and group / permission errors [solved] [outdated]

Latest udev is a miracle to me. It ignores every group ore permission settings. Anyone else having same experiences?
Last edited by Moo-Crumpus (2008-09-29 05:17:40)

Let's assume that you have two files with udev rules. The basic udev.rules and 00.udev.rules (with custom rules).
Udev first reads all rules from 00 file and then rules from the basic file.
This means that if you have a custom rule for a given device you should copy all rules that apply to it from the basic file to the 00 file (not only lines with GROUP). This is because with OPTIONS="last_rule" udev will stop processing rules for this device.
All rules are read and then applied in the order from the top to bottom except SUBSYTEM which is applied as the last rule (kind of held in a buffer). This is the reason why my cd burner /dev/hdc had permissions for disk group and not optical.
This is my 00.udev.rules (it still needs some cosmetic changes but it works and of course I don't have all the devices):
SUBSYSTEM="video4linux", GROUP="users"
SUBSYSTEM="sound", GROUP="users"
SUBSYSTEM="printer", GROUP="users"
SUBSYSTEM="block", GROUP="disk"
BUS="ide", KERNEL="hd[a-z]", PROGRAM="/etc/udev/cdsymlinks.sh %k", SYMLINK="%c{1} %c{2} %c{3} %c{4} %c{5} %c{6}"
BUS="ide", KERNEL="hd*", PROGRAM="/etc/udev/ide-devfs.sh %k %b %n", SYMLINK="%c{1} %c{2}"
BUS="ide", KERNEL="hdc", SYSFS{removable}="1", PROGRAM="/bin/cat /proc/ide/%k/media", RESULT="cdrom*", NAME="%k", GROUP="users", SYMLINK="nagrywarka dvd cdrw", OPTIONS="last_rule"
BUS="ide", KERNEL="hd[a-z]", SYSFS{removable}="1", PROGRAM="/bin/cat /proc/ide/%k/media", RESULT="cdrom*", NAME="%k", GROUP="users", OPTIONS="last_rule"
BUS="ide", KERNEL="hd*", PROGRAM="/etc/udev/ide-floppy.sh %k", RESULT="floppy", NAME{all_partitions}="%k", GROUP="users", OPTIONS="last_rule"
BUS="scsi", KERNEL="sr[0-9]*", PROGRAM="/etc/udev/cdsymlinks.sh %k", SYMLINK="%c{1} %c{2} %c{3} %c{4} %c{5} %c{6}"
BUS="scsi", KERNEL="scd[0-9]*", PROGRAM="/etc/udev/cdsymlinks.sh %k", SYMLINK="%c{1} %c{2} %c{3} %c{4} %c{5} %c{6}"
BUS="scsi", KERNEL="sr[0-9]*", SYSFS{type}="5", NAME="scd%n", GROUP="users", OPTIONS="last_rule"
BUS="scsi", KERNEL="sg[0-9]*", SYSFS{type}="5", NAME="%k", GROUP="users", OPTIONS="last_rule"
KERNEL="fd[0-9]*", NAME="fd%n", GROUP="users", SYMLINK="floppy/%n fd%nu1440 fd%nu720 fd%nh1200 fd%nu360", OPTIONS="last_rule"
BUS="usb", SYSFS{serial}="CN16J1Q3HWSX", KERNEL="lp[0-9]*", NAME="usb/%k", GROUP="users", SYMLINK="drukarka_hp_845c drukarka", OPTIONS="last_rule"
BUS="usb", KERNEL="sd*", PROGRAM="/etc/udev/usb-storage.sh %k", RESULT="1", NAME="%k", GROUP="users", OPTIONS="last_rule"
KERNEL="rtc", NAME="misc/%k", SYMLINK="%k", GROUP="users", MODE="0664", OPTIONS="last_rule"
KERNEL="agpgart", NAME="misc/%k", SYMLINK="%k" GROUP="users", OPTIONS="last_rule"
KERNEL="nvidia*", GROUP="users", OPTIONS="last_rule"
KERNEL="fb[0-9]*", NAME="fb/%n", GROUP="users", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="card[0-9]*", NAME="dri/%k", GROUP="users", OPTIONS="last_rule"
KERNEL="3dfx*", NAME="%k", GROUP="users", OPTIONS="last_rule"
KERNEL="dvb*", PROGRAM="/etc/udev/dvb.sh %k", NAME="%c", GROUP="users", OPTIONS="last_rule"
KERNEL="video[0-9]*", NAME="v4l/video%n", GROUP="users", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="radio[0-9]*", NAME="v4l/radio%n", GROUP="users", SYMLINK="radio%e", OPTIONS="last_rule"
KERNEL="vbi[0-9]*", NAME="v4l/vbi%n", GROUP="users", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="vtx[0-9]*", NAME="v4l/vtx%n", GROUP="users", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="controlC[0-9]*", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="hw[CD0-9]*", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="pcm[CD0-9cp]*", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="midi[CD0-9]*", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="timer", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="seq", NAME="snd/%k", OPTIONS="last_rule"
KERNEL="audio*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="dmmidi*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="admmidi*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="dsp*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="adsp*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="midi*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="amidi*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="mixer*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="sequencer*", NAME="sound/%k", SYMLINK="%k", OPTIONS="last_rule"
KERNEL="pktcdvd", NAME="pktcdvd/control", GROUP="users", MODE="0660", OPTIONS="last_rule"
KERNEL="pktcdvd[0-9]*", NAME="pktcdvd/pktcdvd%n", GROUP="users", MODE="0660", OPTIONS="last_rule"
The problem with /dev/hdc was that first udev (version 057) was reading a rule from my 00 file (BUS="ide", KERNEL="hdc"...) with GROUP=users. Then it was reading SUBSYSTEM="block", GROUP="disk" rule from the basic file (but it wasn't executed at that time). And then it was reading BUS="ide", KERNEL="hd[a-z]", SYSFS{removable}="1"... with GROUP=optical. Then it was executing SUBSYTEM rule (hdc is a block device). That's why only disk group had an access to /dev/hdc (with OPTIONS="last_rule" in the basic file in the GROUP="optical" line it would ignore SUBSYSTEM rule).
There are also other rules that you should add (IMO) to your custom rules if you are changing something. In my case it's for example BUS="ide", KERNEL="hd[a-z]", PROGRAM="/etc/udev/cdsymlinks.sh %k"... which creates symlinks for cd drives. This rule must be above other rules (the number of the symlinks is now unlimited - previously it was 5 IIRC).
So now the rules are mixed together in the lexical order (except SUBSYTEM rules which are executed at the end) unless OPTIONS="last_rule" is used or second (and other) rule has a NAME filed (only one rule for a given device can have NAME filed. Every other rule for the same device with NAME field is ignored IIRC). It also means you can now split rules for a device into several rules - only one of them can have NAME filed and the last should have OPTIONS="last_rule".
Since in your case you have custom rules only for a well defined usb devices (not /dev/sd*) IMO it should work as you think (only add OPTIONS="last_rule").
I hope it's now perfectly clear 8)

Regarding : group currency maintenance

Dear Experts
i have created one company local currency of that company is inr but when i am going
to define group currency in ob22 for that company code, i want to define group currency as usd
but i am not able to define that.
when i am selecting 30 as group currency it is selecting inr please suggest how can i define as USD
& where i can define.
I already checked settings in OY01 that belongs to index based & hard currency
please help
regards
nitin shukla

Hi Nitin,
Group currency is maintained at client level. Use transaction SCC4 and update th group currency as USD for you client. If you don't have authorization for this transaction then you can ask your basis consultant to get it done.
Regards,
Chintan Joshi.

Regarding group TITLE and groupheader

Hi All,
Please check the below code;
<htmlb:group id      = "userdtls"
                       title   = "Employe Details"
                       tooltip = "This is a tooltip for new group"
                       width   = "950"
                       design = "PRIMARYCOLOR" >
<htmlb:groupBody>
SOME ELEMENTS
</htmlb:groupBody>
          </htmlb:group>
The above code works fine , but if i add the groupheader element as below:
<htmlb:group id      = "userdtls"
                       title   = "Employe Details"
                       tooltip = "This is a tooltip for new group"
                       width   = "950"
                       design = "PRIMARYCOLOR" >
<htmlb:groupHeader>
              <htmlb:link id        = "link1"
                          reference = "http://www.google.co.in"
                          target    = "_BLANK" >
                <htmlb:image src     = "S_M_INFO.gif"
                             alt     = "No Image"
                             tooltip = "Some tip" />
              </htmlb:link>
            </htmlb:groupHeader>
<htmlb:groupBody>
SOME ELEMENTS
</htmlb:groupBody>
          </htmlb:group>
The TITLE in the group element ie EMPLOYE DETAILS is replaced by the image i am using in groupheader.
I need to show both of these in the group header..may be we can show the TITLE at left corner and IMAGE at right corner of the header..
How To do this?
Thanks,
Anubhav.

Please look at the following code which I have...
<%@page language="abap" %>
<%@extension name="htmlb" prefix="htmlb" %>
<htmlb:content design="design2003" >
<htmlb:page title=" " >
    <htmlb:form>
      <htmlb:group id      = "userdtls"
                   title   = "<center>Employe Details</center>"
                   tooltip = "This is a tooltip for new group"
                   width   = "950"
                   design = "PRIMARYCOLOR" >
        <htmlb:groupHeader>
          <htmlb:link id        = "link1"
                      reference = "http://www.google.co.in"
                      target    = "_BLANK" >
            <htmlb:image src     = "snow3.gif"
                         alt     = "No Image"
                         tooltip = "Some tip" />
          </htmlb:link>
        </htmlb:groupHeader>
        <htmlb:groupBody>
          SOME ELEMENTS
        </htmlb:groupBody>
      </htmlb:group>
    </htmlb:form>
</htmlb:page>
</htmlb:content>
~Salil

Query regarding grouping of 11i baseline patches

Hello,
Application : 11.5.10.2
DB : 10.2.0.4
OS : AIX 6.1
We are thinking of applying the 11i baseline patches in two groups/phases as mentioned below. We have in total 33 baseline patches (plus pre and post reqs too) to apply.
Keeping in mind the functional testing that will be required all the bug fixes brought over by the new baseline patches, we believe that by applying the patches in two phases will be easy for us .
Group 1
· Logistics
· Manufacturing
· Order Management
· Supply Chain Planning
Group 2
· Finance
· Projects
· Procurement
· Human Resources
Do you see any issue with applying the 11i baseline patches in two phases?
Thanks,
Brij

I will be doing the dependency check among the modules. Anyhow If pre-req patch of one module (say M1) is actually a main Bpatch for other module (say M2), we have to apply the M2 module first.Correct.
True, that doing such patching in one phase is good to reduce number of outage to single.
But as per our last estimation while applying baseline patching on test instance, it took approx 40-45 Hrs to apply all patches (150 patches approx base+pre-req combined ). So asking for such big outage time on Prod instance will also not be possible.I understand as this depends on the number of patches/modules/languages and the hardware resources.
Good Luck!
Hussein

Regarding group condition

hi friends
1.wht is header condition and group condition?
2. what r the condution types for header and group conditions?
3. give me some examples for useful of header condition and group conditon?
plz reply me
thanks in advance

Dear Venkata Ramana
1) Header Conditions
Header conditions are entered manually in order processing. Automatic pricing does not take header conditions into account; you can not create condition records for them in the standard system. R/3 includes the following header conditions:
- Percent discount (HA00)
- Absolute discount (HB00)
- Freight (HD00)
2) Group Conditions
Please check this help link
[Group Conditions |http://help.sap.com/saphelp_47x200/helpdata/en/1c/8c8b518d8c11d199a30000e8a5bd28/frameset.htm]
thanks
G. Lakshmipathi

Setting file permisions ,group permission on Windows and unix from java

Hi
i am trying to set up file permissions through java on unix and windows operation sysyem
.I don't want to use shell scripts .
thank you for your help.

HI BIJ001,
Thanks for reply.I am paling to use
1)First i am detecting operating system
2)if it is UNIX->calling unix scripts from JAVA
2)if it is WINDOWS ->calling Bat scripts.
But attrib command in windows does not support FIle Gropu permssion like unix(chmod 777 filename).
Do yoou have any experience in .bat sctipts on file permission.
Let me know .Again thank you for reply.

Regarding Group Permission

Similar Messages

Maybe you are looking for