Restricting users ability to modified Max Rows Retrieved

Hi
In Web Intelligence Rich Client how can I restrict a users ability to change the Max Rows Retrieved in a query.
Currently we use Desktop Intelligence and restrict max rows retrieved in the universe, but I note this can be overwritten when by the user in Webi Rich Client at the query creation stage.
SAP documentation indicates that a restriction can be applied in the security profile via the CMC but I'm unable to find this.
Any help would be appreciated.
Cheers
Sean

Any info would be helpful at this stage. Thanks

Similar Messages

How to set Max Rows Retrieved by user security profile in CMC?

Hi
As we know, it is possible to set Max Rows Retrieved with query property (in the area 'Limits').
However, it is mentioned in official documents that this setting can be overwritten by the BOE administrator in user security profile. Could any one tell me how this is done in CMC?
Thanks in advance!
Qing

Hi Rishit,
Thanks for your answer!
Had a long holiday, so didn't give a feedback in time. Sorry for that!
There is a tab 'Controls' in Universe Parameter, where there is a setting used to limit the size of result set.
Then what's the priority between this setting and the similar setting in WebI query properties?
However, acutally my question is how to set the limitation by user security profile in CMC.
Do you have any idea about it?
Qing
Edited by: Qing Zhou on Jun 21, 2010 11:12 AM

Restrict user not to modify the lead when status is CLOSED

Hi,
Is it possible to configure the system not to allow any modifications to the lead once the status is set to CLOSED (one of the user status)?
Any input is appreciated.
Regards,
Venu.

Hi,
This is little interesting!
Now Im not able to set the REASON though we havent saved the lead
Initially problem didn't get solved as suggested. i.e., Business Transaction Control -> No Change Allowed (Set Influence to Allowed)
I don't know why?
But i'm able to solve by setting LNCH (No Change Allowed) for status Closed in User Status Profile (last column in the table i.e., Trans).
But now because of these settings as soon as i change the lead status to CLOSED before setting a reason it self system is internally making the lead 'transferred' and hence not saving the REASON.
How to configure the lead in such a way that: When i set the lead status CLOSED, i should be able to set the REASON for the corresponding status and should be able to save now. From next time onwards system should not allow user to edit the lead as the status is CLOSED.
Please suggest whether its possible with configuration. If not then i want to know why SAP reverting back the changes we are doing for lead "after setting status to CLOSED and before clicking on SAVE".
Regards,
Venu.

Windows 2008 : How to Restrict Users to Copy file from Shared Folder

Hello All,
I need to Restrict Users to Copy file from Shared Folder. Please let me know is there any method to achieve this requirement.

If user have Read permission, they can copy it. So actually you cannot restrict user from copy your files if they could read/edit.
Some programs could help restrict users from edit/modify/copy the content of their files such as Office files, PDF files etc as Oscar said above.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Restricting User-Defined Layout in CV04N

Hi All
A user having cv04n authorization can change the layout and save as User-Specific Layout. We may be giving various information via CHARS / Values and users add those to layouts and see
Now a User who do not have Authorization to a Document type , say FIN (for Finance) , can get the details in the CHARS and Values of FIN Document Type using cv04n, by modifying the standard layout.
Any Authorization to control user not to change layouts in cv04n...?
I have found one Authorization S_ALV_LAYO which restricts to make Global layout, but it allows to make User Defined layouts..
Any solutions to restrict User not to modify default layout in cv04n?? Or in way can we restrict User not to add CHAR s into search layouts?
Regards
Aby

Hi Aby,
We can restrict the user from viewing the documents based on document type and authorization group. This can be achieved by implementing BADI "DOCUMENT_SEARCH01" and interface "CHANGE_SEARCH_ORDER". Inside this we can do an authority check on each document (DOKAR), using standard authorization object for document type C_DRAW_TCD. And similarly authorization group (BEGRU) can be checked using auth obj C_DRAW_BGR can be checked.
The authority check can be done in following way,
LOOP AT EACH DOC.
    AUTHORITY-CHECK OBJECT 'C_DRAW_TCD'
         ID 'DOKAR' FIELD LV_DOKAR                              " LV_DOKAR is doc no.
         ID 'ACTVT' FIELD '03'.                                           " 03 is display mode
Similarly check for auth grp.
Hope this will help you. If you need any more inputs let me know.

Alert about the loading time & Restrict the number of the rows retrieved

Hi everybody, maybe the question is stupid, but I didn't find yet an answer...
I'm using BIP 10.1.3.4.1
Because I have many reports with a huge amount of data to display (in HTML format) and customers once clicked on "View" have to wait a lot of time, they asked me if there is the possibility to do the following things:
1. restrict the number of the rows retrieved (this for each report); this request has to be dynamic (different rows' number for each report and for each user); so, I can't modify the query into the data template in order to retrieve a fixed number of rows;
2. show an alert who says for example " The data loading will take 5 minutes. Do you want to proceed ? YES - NO" This to inform the users how much time they have to wait if they click on Yes.
I checked under the Administrator TAB...but I didn't find nothing "native" about the two questions above.....
So, I ask you if there is a way to activate these features (if they exist "native") or a workaround to implement what I described above.
Any help will be appreciated.
Thanks in advance
Alex

Hi Vetsrini, thanks for your answer.....but what does it mean ? There are no solutions for my requests ? I remember that Discoverer had the possibility to have an alert as I would like to have with BI Publisher and there was the possibility to choose how many rows it was required from the customer....Is it possible that with BIP is not applicable ?
Have a good day
Alex

Retrieving ALL values from a single restricted user property

How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");

Well, the code you've got will retrieve the single value of the property
for the current user. You're getting the default value because the
current user doesn't have Locations property set, so the ProfileWrapper
returns the default value from the property set.
I assume you want to get the list of available values that you entered
into the .usr file in Workshop. If so, I've attached a
SetColorController.jpf, index.jsp, and GeneralInfo.usr (put in
META-INF/data/userprofiles) I wrote for an example that does just this.
It uses the PropertySetManagerControl to retrieve the restricted values
for a property, and the jsp uses data-binding to create a list from that
pageflow method.
For a just-jsps solution, you can also use the
<ps:getRestrictedPropertyValues/> tag. I've attached a setcolor-tags.jsp
that does the same thing.
Greg
Dirk wrote:
How can I retrieve ALL values of a single restricted user property from within
a .jpf file?
I want to display a dropdown list within a form in a JSP which should contain
all the locations listed in the property 'locations'. I ever get just the default
value when I access the property via
ProfileWrapper pw = userprofile.getProfileForUser(user);
Object prop = pw.getProperty("ClockSetup", "Locations");
[att1.html]
package users.setcolor;
import com.bea.p13n.controls.exceptions.P13nControlException;
import com.bea.p13n.property.PropertyDefinition;
import com.bea.p13n.property.PropertySet;
import com.bea.p13n.usermgmt.profile.ProfileWrapper;
import com.bea.wlw.netui.pageflow.FormData;
import com.bea.wlw.netui.pageflow.Forward;
import com.bea.wlw.netui.pageflow.PageFlowController;
import java.util.Collection;
import java.util.Iterator;
* @jpf:controller
* @jpf:view-properties view-properties::
* 
* <view-properties>
* <pageflow-object id="pageflow:/users/setcolor/SetColorController.jpf"/>
* <pageflow-object id="action:begin.do">
* <property value="80" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="action:setColor.do#users.setcolor.SetColorController.ColorFormBean">
* <property value="240" name="x"/>
* <property value="220" name="y"/>
* </pageflow-object>
* <pageflow-object id="action-call:@page:index.jsp@#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="240,240,240,240" name="elbowsX"/>
* <property value="144,160,160,176" name="elbowsY"/>
* <property value="South_1" name="fromPort"/>
* <property value="North_1" name="toPort"/>
* </pageflow-object>
* <pageflow-object id="page:index.jsp">
* <property value="240" name="x"/>
* <property value="100" name="y"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#index.jsp#@action:begin.do@">
* <property value="116,160,160,204" name="elbowsX"/>
* <property value="92,92,92,92" name="elbowsY"/>
* <property value="East_1" name="fromPort"/>
* <property value="West_1" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="forward:path#success#begin.do#@action:setColor.do#users.setcolor.SetColorController.ColorFormBean@">
* <property value="204,160,160,116" name="elbowsX"/>
* <property value="201,201,103,103" name="elbowsY"/>
* <property value="West_0" name="fromPort"/>
* <property value="East_2" name="toPort"/>
* <property value="success" name="label"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.ejb.property.PropertySetManager#propSetMgr">
* <property value="31" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="control:com.bea.p13n.controls.profile.UserProfileControl#profileControl">
* <property value="37" name="x"/>
* <property value="34" name="y"/>
* </pageflow-object>
* <pageflow-object id="formbeanprop:users.setcolor.SetColorController.ColorFormBean#color#java.lang.String"/>
* <pageflow-object id="formbean:users.setcolor.SetColorController.ColorFormBean"/>
* </view-properties>
public class SetColorController extends PageFlowController
* @common:control
private com.bea.p13n.controls.ejb.property.PropertySetManager propSetMgr;
* @common:control
private com.bea.p13n.controls.profile.UserProfileControl profileControl;
/** Cached possible colors from the User Profile Property Set definition.
private String[] possibleColors = null;
/** Get the possible colors, based upon the User Profile Property Set.
public String[] getPossibleColors()
if (possibleColors != null)
return possibleColors;
try
PropertySet ps = propSetMgr.getPropertySet("USER", "GeneralInfo");
PropertyDefinition pd = ps.getPropertyDefinition("FavoriteColor");
Collection l = pd.getRestrictedValues();
String[] s = new String[l.size()];
Iterator it = l.iterator();
for (int i = 0; it.hasNext(); i++)
s[i] = it.next().toString();
possibleColors = s;
catch (P13nControlException ex)
ex.printStackTrace();
possibleColors = new String[0];
return possibleColors;
/** Get the user's favorite color from their profile.
public String getUsersColor()
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
return profileControl.getProperty(profile, "GeneralInfo", "FavoriteColor").toString();
catch (P13nControlException ex)
ex.printStackTrace();
return null;
// Uncomment this declaration to access Global.app.
// protected global.Global globalApp;
// For an example of page flow exception handling see the example "catch" and "exception-handler"
// annotations in {project}/WEB-INF/src/global/Global.app
* This method represents the point of entry into the pageflow
* @jpf:action
* @jpf:forward name="success" path="index.jsp"
protected Forward begin()
return new Forward("success");
* @jpf:action
* @jpf:forward name="success" path="begin.do"
protected Forward setColor(ColorFormBean form)
// set the color in the user's profile
try
ProfileWrapper profile = profileControl.getProfileFromRequest(getRequest());
profileControl.setProperty(profile, "GeneralInfo", "FavoriteColor", form.getColor());
catch (P13nControlException ex)
ex.printStackTrace();
return new Forward("success");
* FormData get and set methods may be overwritten by the Form Bean editor.
public static class ColorFormBean extends FormData
private String color;
public void setColor(String color)
this.color = color;
public String getColor()
return this.color;
[GeneralInfo.usr]
[att1.html]

Need to restrict users from adding or modifying folders or reports

Requirement: Need to restrict users from adding or modifying folders or reports through Info view and to reflect the modifications only thriough LCM.
Issue: Customer wants to restrict users from adding or modifying existing reports from Infoview and need to force users to do make the changes through Life cycle manager tool.
As per my understanding LCM can only be used to to promote folders and objects from one environment to another and to schedule the promotion of these jobs on a daily basis.My query is:
Can we add or modify existing reports or folders using the LCM tool?
Could you please help me out in this issue and provide me your suggestions.
Thanks in advance.
Prashanthi Rayaprolu.

You can not restrict that using LCM. Need to modify the rights at the folder level.
Explicitly remove the following rights for the user group,
Add objects to the folder
Edit objects
Delete objects
Copy objects to another folder (check this if required)
Once the above four are denied then users wont be able to Edit/Add/Delete reports in that folder.

Changed Ulimits values for the Oracle user and getting error -bash: ulimit: max user processes: cannot modify limit: Operation not permitted when logging in.

I'm trying to increate the ulimits for max user processes and open files for the oracle user. I've set the values in limits.conf, /etc/profile and in oracle's environment scripts. Now when I log in as oracle I get the below errors. If I change the ulimits back to the original values errors go away but ulimits aren't changed.
login as: oracle
[email protected]'s password:
Last login: Fri Mar 6 09:56:02 2015 from mtkadmin12
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
-bash: ulimit: max user processes: cannot modify limit: Operation not permitted
[oracle@servername ~]$

Thanks for the update.
I modified the /etc/security/limits.d/90-nproc.conf and added a line for oracle and also modifed the oracle.sh file. The ulimits are setting correctly when I su - oracle but they are still wrong when sshing in as oracle.
[root@mtkdevorap11d-1 ~]# su - oracle
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size          (blocks, -c) unlimited
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 1030982
max locked memory       (kbytes, -l) 94371840
max memory size         (kbytes, -m) unlimited
open files                      (-n) 65536
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) unlimited
cpu time               (seconds, -t) unlimited
max user processes              (-u) 16384
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$
[oracle@mtkdevorap11d-2 ~]$ ssh mtkdevorap11d-1
Last login: Mon Mar 16 13:04:16 2015 from mtkdevorap11d-2.conveydev.com
You are logging onto an Oracle system.
Kickstarted on: 2014-06-05
[oracle@mtkdevorap11d-1 ~]$ ulimit -Ha
core file size          (blocks, -c) unlimited
data seg size           (kbytes, -d) unlimited
scheduling priority             (-e) 0
file size               (blocks, -f) unlimited
pending signals                 (-i) 1030982
max locked memory       (kbytes, -l) 64
max memory size         (kbytes, -m) unlimited
open files                      (-n) 4096
pipe size            (512 bytes, -p) 8
POSIX message queues     (bytes, -q) 819200
real-time priority              (-r) 0
stack size              (kbytes, -s) unlimited
cpu time               (seconds, -t) unlimited
max user processes              (-u) 16384
virtual memory          (kbytes, -v) unlimited
file locks                      (-x) unlimited
[oracle@mtkdevorap11d-1 ~]$

-bash: ulimit: max user processes: cannot modify limit: Operation not permi

Hi,
Installed 10g Forms&Reports only on RHEL 3ES.
Modified /etc/profile according to Oracle's documentation:
if [ $USER = "oracle" ]; then
if [ $SHELL = "/bin/ksh" ]; then
ulimit -n 16384
ulimit -p 16384
else
ulimit -u 16384 -n 16384
fi
fi
But when I logon to the server, the following message shows:
"-bash: ulimit: max user processes: cannot modify limit: Operation not permitted"
What is the problem here?
Thanks
Stephan

Hi,
Installed 10g Forms&Reports only on RHEL 3ES.
Modified /etc/profile according to Oracle's documentation:
if [ $USER = "oracle" ]; then
if [ $SHELL = "/bin/ksh" ]; then
ulimit -n 16384
ulimit -p 16384
else
ulimit -u 16384 -n 16384
fi
fi
But when I logon to the server, the following message shows:
"-bash: ulimit: max user processes: cannot modify limit: Operation not permitted"
What is the problem here?
Thanks
Stephan

Restrict the users to view the column, row details

Experts
For example restrict the sales users to view the purchase price, and restrict the purchase users to view the selling price.
Any inputs highly appreciated

Hi,
Restrict the users to view the column can be done through form settings.
I don't think it is possible to restrict the users to view the particular row details. If user can open the form, no option to hide any rows through authorization.
Thanks,
Gordon

How to restrict delegated administrators to modify their own OIM accounts

Hello - I have a requirement where we need to create delegated administrators for each department. The Delegated Admins are allowed to create and manage user accounts in OIM and OID resource. They can modify user accounts that are part of the organization that they have admin permission on however they should not be able to modify their own accounts. For example, if Org1-Admin is a part of Org1 and have admin priviledges on the Org1 he can create and modify user accounts in Org1 and provision user accounts to OID resource. He can update user profile data and process form data etc. But he should not be able to change his own user profile data and should not be able to get provisioned to OID resource. I am able to set up OIM for the delegated administration part but I am not sure how to restrict the delegated admin for modifying his own profile and restrict OID resource from him. The reason to have this requirement is these delegated admin accounts will act as non-user accounts i.e. they are not tied to any person they are more or less service accounts where if Person1 is assigned as a delegated admin of organization 1 in week 1 he should be able to do the tasks as discussed before using org1-admin account. The next week we may have person 2 doing this job and he should use the same account to login and to do these tasks, these delegated admins will have their own end user accounts that will be tied to their personal ID's and they can modify that account if they are delegated admin :) but not the delegated admin account.
Thanks,

If your self-service application binds to the directory using some special account, like 'superuser_directory' (just an example), then you could allow superuser_directory to modify entries but deny aministrators the ability to modify entries. This means that they connect with their own login to the directory when they modify entries. If you want them to stop modifying their own entries in the application, that's a matter of making the application be aware of that..

Can't View All Records if Max Row Count is null

Hi,
There are over 2500 records in a table and if Max Row Count is set to nothing in report attributes, the user is restricted to view only 500 records. And If Max Row Count is set more than 2500 then user is able to view all records but taking more time to display report.
What to do to minimise process time and allow user to view all the records. ?
Pagination Scheme : Row Ranges X to Y of Z (with pagination)
Number of Rows : 100
Number of Rows (Item) : <empty>
Max Row Count : <empty>
Thanks,
Ven.

Hi Ven,
Apex restricts the number of rows returned by a report to 500 by default. You can change this by setting the Max Row Count. Apex does this so that the amount of data returned over the network to the browser is kept to a reasonable amount. The reason it is done this way is because a user in apex does not maintain a stateful connection to the database and as a result, rows returned from a query can not be cached in the database and fetched as required.
From a usability point of view, I'm not sure why a user would want 2500+ rows returned to a screen. They would have to scroll and paginate to find anything of use and network bandwidth would get chewed up in the process. Why not provide the users with query options so that the number rows returned to the browser is restricted to a more manageable amount? If the users require a full hardcopy of the data then you can handle this with csv and pdf options.
Regards
Andre

Hyp FR Error: 5200 : Error executing query. Exceed max row number 100000

Hi,
I am getting the error
5200 : Error executing query. Exceed max row number 100000
when I run the report on Financial Reporting. It gives the same error when run on Workspace.
Have you guys encountered this error before? What are the best ways to tackle it? Help is much appreciated guys.
-- Adi
Edit 1 - I tried to simplify the parameters but I still get the same error making me suspect that the issue is not the 100000 row issue.
Edited by: Aditya26 on Apr 11, 2012 9:02 AM

Hi Adi,
This is from My Oracle Support:
How to Increase Row Limit to Avoid Error "Exceed Max Row Number 100000" [ID 866832.1]
Modified 23-FEB-2012 Type HOWTO Status PUBLISHED
In this Document
Goal
Solution
Applies to:
Hyperion BI+ - Version: 9.3.1.0.00 to 11.1.1.3.00 - Release: 9.3 to 11.1
Information in this document applies to any platform.
Goal
How do you increase the maximum row limit to avoid the error "5200: Error executing query: Exceed max row number 100000"?
Solution
1.Edit \Hyperion\common\ADM\<version>\lib\ADM.properties as follows:
From MAX_ROW_NUMBERS=100000 to MAX_ROW_NUMBERS=500000
If you are running extremely large reports, you can increase the limit.
2.Restart Reporting and Analysis services.
For version 11.1.2.x
The path of ADM.properties file in these versions should be located under:
%Oracle_Home%\Middleware\EPMSystem11R1\commo\ADM\11.1.2.0\lib
Cheers,
Mehmet

How to restrict the ability to save a PDF file in Acrobat.

Hello ! This is my first topic, evaluating to acquire Acrobat Professional 8, and I am asked if possible to restrict the ability to save a pdf file, when users are reading the file with Acrobat Reader. We are into creating a in-house document accessible to all users internally, using Acrobat Reader. I was able to restrict the printing, but I am unable to restict the saving of the file.
Any one knows if this possible ? or not?
Users are using Windows XP/2k
Thanks

Once they open it on their machine, they have a copy on that machine. They can simply move that copy to where ever they desire, making copies as they go. You can restrict copying content (though not full proof), printing, and changing the document, but not the physical file itself. Be careful with security and the assumption it fixes all your issues. PDF security is not all that secure. If you need higher levels of security, they you have to use the DRM (I think that is it) at a pretty cost.

Restricting users ability to modified Max Rows Retrieved

Similar Messages

Maybe you are looking for