Restricting user search to the communities the user has access to

We want to be able to restrict our users to search within the community that user is in or to the communities that user has access to.
A global portal search is not acceptable. Could someone help me with this. We are running portal 6.0sp1 on solaris.
Thanks!
Jamal Najmi

Hi Jamal Najmi,
If you have KD hierarchy based on community, then you develop a small search portlet using adaptive tags that will search only those folders in the KD.
Hope this helps.
Bharat

Similar Messages

My iphone wifi data from the consolidated file shows more wifi networks than I have been exposed to. Does the iphone also collect location on wifi networks that are within reach of the wifi networks it has access to?

I took out the wifi location data from the consolidated file and plotted into google maps. Clearly, not all those wifi networks are in areas or really close to areas I've been to, yet somewhat close. Does it mean that if I am within a range of a wifi network my iphone will not only collect location data of that particular wifi network but also all others that are within reach of that wifi network and so forth?

Andy2005 wrote:
Does it mean that if I am within a range of a wifi network my iphone will not only collect location data of that particular wifi network but also all others that are within reach of that wifi network and so forth?
Yes:
http://www.apple.com/pr/library/2011/04/27location_qa.html

Getting list of tables the user has access to across different schemas.

Hi,
I have to get the list of tables that an User has access to. I tried the below code. It takes a very long time. Is there any way in which I can specify the user name and get all the tables that he has access to? I know that we can use dbMetadata.getTables api. But this returns the list of tables under the said schema. But I want the list of tables that the user has access including tables in other schema.
In the below code, I am trying to get the tables for which USER_MICHAEL has access to.
DatabaseMetaData dbMetadata = connection.getMetaData(); String userName = null; dbrs = dbMetadata.getTables(null,userName , "%", new String[] { "TABLE" }); dbrs=dbMetadata.getTablePrivileges("",userName,"%"); while (dbrs.next()) { String tableName = dbrs.getString("TABLE_NAME"); String schema = dbrs.getString("TABLE_SCHEM"); String privilege = dbrs.getString("PRIVILEGE"); String grantee = dbrs.getString("GRANTEE"); if(grantee!=null && grantee.equals("USER_MICHAEL")){ System.out.println("Schema---"+schema+" Table---"+tableName+" Privilege----"+privilege+" grantee---- "+grantee); } }

That would be database dependent.
Some engines have some system tables that together may be used to extract such information, others may not make it available at all outside closed APIs.

GRC AC - HCM as user search data source

Hello all,
I´ve configured GRC AC to user HCM as user search data source and also user details data source. During my user change tests through the "Access Request" function, I noticed that only existent users at SU01 and HCM (checked through PA30) appear in the access request User Selection. Existent users at HCM but not at SU01 doesn´t appear.
Someone can tell me why? I mean, if I configured the user search to use HCM as data source, shoudn´t it bring all HCM users regardless of his existence at SU01?
Thanks in advance,
Pedro

Hi Pedro,
You only have confirmed that 2 accounts are maintained in HCM and in SU01 as well, so you would be able to see these accounts' details both ways.
Yes, you are right about user account maintenance first in HCM at the time of new hire, then you can manually raise the access request to grant them access to various SAP systems. Or in order to automate this process as Prasahant suggested, you can take help from HR Triggers.
You can refer: GRC 10.0 - HR Trigger configuration - Governance, Risk and Compliance - SCN Wiki
But responding to your original discussion, whatever user accounts are maintained in HCM you would see those details provided you define HR for the "user search data source" AND from SU01 for "user detail data source"
In your case you have 2 accounts which have been maintained in HCM as well as SU01, so that is what creating confusion for you.
Let us know if you need any more clarifications.
Regards,
Ameet

User getting calendar invations for another users calendar

Hi,
When our Princpal went on LSL our AP was the acting Principal. He was given full access to the Principal's calendar. The Principal has returned to work and I have removed all permissions but the AP still gets a copy of all calendar invites. This is concerning
as he doesn't need to know who is meeting with the Principal. The invite says "Recieved for Principal" and "Your Calendar couldn't be checked..."
I have run the powershell command "Get-MailboxFolderPermission principal:\Calendar" but it does not list the AP as having any permisions. The Principal's Outlook does not list the AP as having permissions.
Does anyone know why the AP is getting the invites or how to stop them?
Thanks, Robert
PS Exchange 2013 CU7 Win Server 2012 Standard. We are running in Hybrid but both these accounts are local.

Hi John,
No, he does not have delegate access. He used to but I have removed it. It is like the UI says he has no access but somewhere in the system he still has access.
I have just added him back with the "availability only" permission and the notifications appear to have stopped. So with no delegate there was notifications but with the delegate permission of availability only there are no notifications.
Robert

Can we limit the search count in Webcenter Imaging on the basis of user/grp

Hi All
I have a scenario wherein i want to limit the search count in Webcenter Imaging 11g on the basis of user and group.
For e.g if administrator searches for documents it should return all the search result, whereas when a noraml business user searches for the document only 1000 documents should be returned as search results(if exact search criteria is not met).
I am aware of the General setting in Enterprise Manager, but i want to restrict it on the basis of user.
Can somebody help me, it's really very urgent.
Thanks
ACM

Hi
This is very important and i am not able to figure a way out of this.
Is this a Product Feature and can not be altered?
Please help
Regards
ACM

Search for records in the event viewer after the last run (not the entire event log), remove duplicate - Output Logon type for a specific OU users

Hi,
The following code works perfectly for me and give me a list of users for a specific OU and their respective logon types :-
$logFile = 'c:\test\test.txt'
$_myOU = "OU=ABC,dc=contosso,DC=com"
# LogonType as per technet
$_logontype = @{
2 = "Interactive"
3 = "Network"
4 = "Batch"
5 = "Service"
7 = "Unlock"
8 = "NetworkCleartext"
9 = "NewCredentials"
10 = "RemoteInteractive"
11 = "CachedInteractive"
Get-WinEvent -FilterXml "<QueryList><Query Id=""0"" Path=""Security""><Select Path=""Security"">*[System[(EventID=4624)]]</Select><Suppress Path=""Security"">*[EventData[Data[@Name=""SubjectLogonId""]=""0x0""
or Data[@Name=""TargetDomainName""]=""NT AUTHORITY"" or Data[@Name=""TargetDomainName""]=""Window Manager""]]</Suppress></Query></QueryList>" -ComputerName
"XYZ" | ForEach-Object {
#TargetUserSid
$_cur_OU = ([ADSI]"LDAP://<SID=$(($_.Properties[4]).Value.Value)>").distinguishedName
If ( $_cur_OU -like "*$_myOU" ) {
$_cur_OU
#LogonType
$_logontype[ [int] $_.Properties[8].Value ]
#Time-created
$_.TimeCreated
$_.Properties[18].Value
} >> $logFile
I am able to pipe the results to a file however, I would like to convert it to CSV/HTML When i try "convertto-HTML"
function it converts certain values . Also,
a) I would like to remove duplicate entries when the script runs only for that execution.
b) When the script is run, we may be able to search for records after the last run and not search in the same
records that we have looked into before.
PLEASE HELP !

If you just want to look for the new events since the last run, I suggest to record the EventRecordID of the last event you parsed and use it as a reference in your filter. For example:
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">*[System[(EventID=4624 and
EventRecordID>46452302)]]</Select>
<Suppress Path="Security">*[EventData[Data[@Name="SubjectLogonId"]="0x0" or Data[@Name="TargetDomainName"]="NT AUTHORITY" or Data[@Name="TargetDomainName"]="Window Manager"]]</Suppress>
</Query>
</QueryList>
That's this logic that the Server Manager of Windows Serve 2012 is using to save time, CPU and bandwidth. The problem is how to get that number and provide it to your next run. You can store in a file and read it at the beginning. If not found, you
can go through the all event list.
Let's say you store it in a simple text file, ref.txt
1234
At the beginning just read it.
Try {
$_intMyRef = [int] (Get-Content .\ref.txt)
Catch {
Write-Host "The reference EventRecordID cannot be found." -ForegroundColor Red
$_intMyRef = 0
This is very lazy check. You can do a proper parsing etc... That's a quick dirty way. If I can read
it and parse it as an integer, I use it. Else, I just set it to 0 meaning I'll collect all info.
Then include it in your filter. You Get-WinEvent becomes:
Get-WinEvent -FilterXml "<QueryList><Query Id=""0"" Path=""Security""><Select Path=""Security"">*[System[(EventID=4624 and EventRecordID>$_intMyRef)]]</Select><Suppress Path=""Security"">*[EventData[Data[@Name=""SubjectLogonId""]=""0x0"" or Data[@Name=""TargetDomainName""]=""NT AUTHORITY"" or Data[@Name=""TargetDomainName""]=""Window Manager""]]</Suppress></Query></QueryList>"
At the end of your script, store the last value you got into your ref.txt file. So you can for example get that info in the loop. Like:
$Result += $LogonRecord
$_intLastId = $Event.RecordId
And at the end:
Write-Output $_intLastId | Out-File .\ref.txt
Then next time you run it, it is just scanning the delta. Note that I prefer this versus the date filter in case of the machine wasn't active for long or in case of time sync issue which can sometimes mess up with the date based filters.
If you want to go for a date filtering, do it at the Get-WinEvent level, not in the Where-Object. If the query is local, it doesn't change much. But in remote system, it does the filter on the remote side therefore you're saving time and resources on your
side. So for example for the last 30 days, and if you want to use the XMLFilter parameter, you can use:
<QueryList>
<Query Id="0" Path="Security">
<Select Path="Security">*[System[TimeCreated[timediff(@SystemTime) <= 2592000000]]]</Select>
</Query>
</QueryList>
Then you can combine it, etc...
PS, I used the confusing underscores because I like it ;)
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

How can you permanently add a new field to the Advanced User Search?

We have a number of USR UDF attributes that need to be used in the Advanced Search: Users window. These will be used very often so we would rather not require our Admins to have to select the Add Fields button, scroll down to the attribute they want, then enter the value to search on. We would much rather modify that Advanced Search screen such that the custom attributes we want to search on are listed permanently on that screen. I think there is a way to configure this but I just can't seem to find it.
Any help would be much appreciated.
Thank you.
-Dave Herrmann

The first suggestion here, http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/conf_mangmnt.htm#CHDIEFGD, only allows me to add the UDF attribute to the Add Fields drop down list. It doesn't put the attribute on the screen by default. I was trying to avoid having our Admins select that attriubute from the Add Fields drop down list since they will be searching on this attribute pretty much all the time.
The second suggestion was to open up one of the OIM jar files and modify an xml file and then zip it back up. This will be overwritten on each OIM Bundle Patch so I really don't tlhink we can use that approach.
So, this is it? What I'm trying to do can't be done through a standard lookup change or something?
-Dave
Edited by: user552098 on May 2, 2012 8:39 AM
Edited by: user552098 on May 2, 2012 8:40 AM

CopyProfile causes search shortcuts on all users search screen to point to the default user profile

So, I'm sysprepping Windows 8.1 with an answer file set to CopyProfile=True. I log in to my customized account and sysprep /generalize /oobe /shutdown /unattend:unattend.xml. Everything copies over just fine. I get my layout in the Metro
start menu, etc, etc...
However, when I log in to the default profile I originally customized after sysprep, everything works great. But when I log into any other account created during sysprep or thereafter and I hit the windows key and do a search for "Update" -
and select "Windows Update" I get an error:
Title: C:\Users\ORIGINALDEFAULTACCOUNT\AppData\Local\Packages\windows.immersivecontrol.....
Message: "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."
It's not every single shortcut... Only a certain fiew.
I get a nearly identical message when trying to launch "Programs and Features" from start. If I manually navigate to these controls, they load up just fine. Just the search items seem to be pointing to the wrong point. Is there like
a cache that copyprofile seems to be copying over for some reason?
I've tried modifying the built in administrator account thinking Microsoft has gotten a bit stricter on which account I can use, but I get the same error.
Can anybody help?

Thanks for the response!
I ran SFC and all files come up good.
I know I can take permissions/ownership to access the file, but I'm not sure I would want to do this.
I may not have been clear and perhaps I need to clarify.
Here is my process:
I create account1 prior to sysprepping. I customize this profile to my liking and copy it over with copyprofile during the sysprep phase.
account1 is now my default profile.
During the sysprep phase I also create account2. After sysprep completes, when I login to account2 and attempt to access "Programs and Features" or "Windows Update" from metro search, I get the error with the following title:
C:\Users\account1\AppData\Local\Packages\windows.immersivecontrol
So even though I'm logged into account2, if I do a search and try to run these two shortcuts, they point to a file in account1's profile.
If I create a new profile at this point, the same problem occurs, as account1 is the default profile and it appears that the shortcuts are being carried over as part of the default profile.
Taking ownership/changing permissions of the file/folder does not fix the fact that the shortcuts pointing to the account were copied over the in the first place.
I could change it so that Everyone has read permissions to this part of the default profiles folder, but I've been lead to believe that this is not best practice.
I've reimaged the computer and started over from scratch, but it appears that the default profile still includes these broken shortcuts.
Perhaps there is a cached search history I need to delete somewhere before sysprepping?
I also noticed that these "shortcuts" are in a 'packages' folder - are these 'shortcuts' actually windows 8 apps? If so, maybe there's something that's being missed in the provisioning process?

Restricting the IT0002 for user

Hello,
I am trying to restrict the infotype 0002 for certain group of users
with same role.
I took out Infotype 0002 from PORIGINCON Auth obj for Infotype field.
When I login with test user and went back to PA20.
I still can see the personal data information including Dob and SSCno.
I also see message "Data hidden by screen modifications
Message no. RP014"
Diagnosis
This infotype contains data which is not displayed.
In table T588M (Infotype Screen Control), you can enter screen fields which are to be suppressed. If one of these fields contains an entry, the system issues a warning.This has no effect on evaluations.
How can restrict the Infotypes 0002 and 0000 ?
Please advise.
From,
PT.

in order to restrict access to IT0000 & IT0002 you have a look at the P_ORGINCON objects as Auke has mentioned above.
the message you see has to do with usergroup specific settings. for example the information you see in IT0002 may differ per country and therefore you can set the different fields to be seen in the infotype in T588M per usergroup (UGR parameter).

Tip: searching the forum with user name

Hello,
The forum software was recently upgraded. Unfortunately, very important and useful feature – searching the forum according to user name or user ID – was actually downgraded. It was simply removed from the user interface, and by that can seriously impair the daily “work” of all the users.
The odd angle of this issue is that it seems that the searching capability was not removed from the search engine itself, just from the user interface. The searching URL recognize a parameter called ‘&userID=…’, and that one will filter the search result by the user ID (unfortunately, I couldn’t find a similar parameter for the user handle name). For example, the following URL will give you Joel’s posts with the key word ‘translatable’, in the last 90 days –
http://forums.oracle.com/forums/search.jspa?threadID=&q=translatable&objID=f137&dateRange=last90days&numResults=30&userID=148363The following will give you all Scott’s posts with the key words ‘page’ and ‘cache’ (without date limit) –
http://forums.oracle.com/forums/search.jspa?threadID=&q=page+%26%26+cache&objID=f137&dateRange=all&numResults=30&userID=57434As can be seen, this URL is long, complicated, and includes escape codes. In order to make it a bit simpler, I’m using the regular user interface to define all the search criteria available there, make the search and them manually adding, to the end of the search engine created URL, the ‘&userID=…’ parameter.
As this parameter is using the users ID numbers, I’ve compiled the following liste, which include my “top forum users”. Everyone welcome to add their owns.
User Name - User ID
Scott Spadafore - 57434
Joel Kallman - 148363
Carl Backstrom - 354238
John Scott (Jes) - 422290
Denes Kubicek - 15826
Andy (ATD) - 503936
Patrick Wolf - 132282
Dimitri Gielis - 570759
Tyler Muth - 283901
Arie Geller - 229120I would like to thank Scott for giving me the initial tip. I hope this will help us make better use of this great knowledge pool.
Regards,
Arie.

Arie,
Great! I was really missing this feature...I'd give you 10 points for that if I could ;)
John.
http://jes.blogs.shellprompt.net
http://www.apex-evangelists.com

Search in the last excelsheettable which has be upload by user

Hi All,
I have a CSV file with 4 columns(fromdate, todate, name, hours) and in the same way i do have 4 columns table named as excelsheettable, into this excelsheettable user will upload every month one CSV file and with the help of below all the information/data of the CSV file is loaded into excelsheettable
[http://advait.wordpress.com/2008/05/21/uploading-excel-sheet-using-oracle-application-express-apex/]
upto here everything is working very much fine as per my req.
Here excelsheettable will be having some previous records something like this :- (assume that still CVS is NOT yet uplaod by the user for the current month)
5/16/2009,6/15/2009,xyz,152
5/16/2009,6/15/2009,pqr,153
5/16/2009,5/29/2009,abc,100
6/02/2009,6/15/2009,abc,50
Now user uploads CVS file for the current month hence records into the excelsheettable will be something like this:-
5/16/2009,6/15/2009,xyz,152
5/16/2009,6/15/2009,pqr,153
5/16/2009,5/29/2009,abc,100
6/02/2009,6/15/2009,abc,50
(plus)
6/16/2009,7/15/2009,xyz,152
6/16/2009,7/15/2009,pqr,153
6/16/2009,6/28/2009,abc,90
7/02/2009,7/15/2009,abc,55
upto here also my req. is fullfilled (I mean excelsheettable is getting appended perfectly), but now I need to manipulated and calculated things for employee "xyz", "pqr" & "abc" only for existing CSV file which has been uploaded by the user, as this excelsheettable will be having 1000 of records for same employees which I dont want to get search into it.
Hence how can I do that, does anybody has idea.??, plz do lemme know if you need any more req.
Do anybody want to me set an example on apex workspaces.
Thanks
regards,
Deep
Edited by: user11086173 on Jul 22, 2009 12:43 PM

Deep,
If you can mark the already loaded rows in such a way after you process them, then when you do your calculations through a sql statement, you can use a where clause to look for ONLY those rows that haven't been marked as processed..
Thank you,
Tony Miller
Webster, TX

How to restrict the EBS end users to run only two same reports at a time?

Hi,
We are using EBS 12.0.6 and database 10.2.0.3.
Is it possible to restrict the end business users to run only two reports at a time?
OR
Is it possible to restrict the end business users to run only two same reports at a time?
Thanks.

Is it possible to restrict the end business users to run only two same reports at a time?It is not possible.
You can either make the report "incompatible" to itself (this means only one user in your company can run it at a time)
Or not make it incompatible. (That means any user can run it any number of times)
Incompatibility is a way of specifying which requests cannot be run under which circumstances.
See http://download.oracle.com/docs/cd/A60725_05/html/comnls/us/fnd/incomp.htm
You can use Hussain's suggestion to use Concurrent: Active Request Limit profile. You can set this profile value at each user level. But if you decide to set it at global level, remember to keep it a higher value for sysadmin kind of users that run scheduled jobs.
Hope this helps,
Sandeep Gandhi

Is it possible to restrict user to send mail outside the company?

Hi,
When deploy beehive locally for my company, I would like to know is it able to restrict user from sending mail outside the company?
Please give some infomation about that
Thanks

hlthanh,
would you like to restrict particular users or all users as a whole?
["Managing Oracle Beehive E-mail Components"|http://download.oracle.com/docs/cd/E16671_01/bh.200/e16648/email.htm#BABBIFII] has details on configuration options.
Most installations will consider fronting a postfix or sendmail MTA, adding further control options.
HTH, Tom

How to know the number of times end users search on iStore

How can we know the number of times end users search on iStore

I am not sure how can you do that with Oracle but I am doing that with Google Analytics (Site Search Settings).
Thanks
Shazi
Edited by: 903823 on Nov 30, 2012 7:59 AM
Edited by: 903823 on Nov 30, 2012 7:59 AM

Restricting user search to the communities the user has access to

Similar Messages

Maybe you are looking for