Role and synonym issue

Hi friends
i create one role CREATE ROLE UPDATE_ROLE;
we have three schema(a,b,c) three schema depend to all three schema but unique objects .
i create public synonym
CREATE OR REPLACE PUBLIC SYNONYM CTL_RC_PROCESS FOR a.CTL_RC_PROCESS;
CREATE OR REPLACE PUBLIC SYNONYM MRK_MIGRATE_GICM FOR b.MRK_MIGRATE_GICM;
CREATE OR REPLACE PUBLIC SYNONYM RSW_PKG_REFERENCECODE FOR c.RSW_PKG_REFERENCECODE;
grant all on a.CTL_RC_PROCESS to UPDATE_ROLE;
grant all on b..MRK_MIGRATE_GICM to UPDATE_ROLE;
grant all on cRSW_PKG_REFERENCECODE to UPDATE_ROLE;
grant UPDATE_ROLE to a,b,c
but i can't insert c,b object in a, a,c object in b, a,b object in c, plz give the solution

gopi130 wrote:
this table reference some package to one schema to another i got declare the varaiable error i can't user the table in package and insert alsoRoles do not work when accessing packages. You have to grant object privileges directly

Similar Messages

  • How to use EXPORT  (user option)  ... IMPORT  for migrating ROLES and SYNONYMS

    Hi,
    I want to export a user from one machine to another one. And I have many roles and synonyms to migrate also. How to export / import them because when I import, I have only tables not roles and synonyms.
    Thanks.

    as far as I know, export doesnt export synonyms and roles.
    What I do is write sql scripts that create scripts to recreate all public synonyms, private synonyms, and roles.
    YOu want to roles created ahead of time anyway so that the import can do the grants.

  • Anyone knows how to export ROLES and SYNONYMS with exp command?

    Anyone knows how to export ROLES and SYNONYMS with exp/imp commands?
    Help is needed. Thanks.

    Hi,
    Pls. post this query in RDBMS forum since Portal export import forum does not handle this.
    Thanks,
    ~Kirit.

  • Sql server agent roles and job's owner issue

    Hi,
    We have a tricky question about agent role and job owner. If I granted sqlagentoperatorrole to a windows account in a sql instance, the account will have permission to create a sql job, the job's owner is the account and he can edit the job. But we want
    to keep all agent jobs' owner as SA. But after I (have sysadmin role) changed the job's owner to SA, the windows account won't be able to edit the job any more. but I don't want to give sysadmin role to the account, Does anybody have solution for my issue?
    so recap my question,
    1. all jobs owners should be SA
    2. Allow some accounts without sysadmin permission can edit these jobs
    3. Which kid of permission shall I grant to these accounts?
    Thanks
    David

    Its not secessary to have SA for all the jobs, normally we avoid using SA...
    Depends if you want to have some sort of security measures in place. If not, doesn't matter much. As for the 'sa' topic, I change the name of that account or disable immediately after install. It practically eliminates that vector of attack.
    If you SQLAgentOperatorRole permissions then you can do the below... this is just a agent role so this comes under MSDB....
    http://msdn.microsoft.com/en-us/library/ms188283.aspx
    Also if you have sql SA access with doamin account or sql account then you can play with sql server completely without any issues, no harm in this...
    Agenet principals are scoped to msdb; make sure you are running the statement from msdb DB. For example:
    use [msdb]
    go
    -- The code where @userName is declared & set
    EXEC sp_addrolemember 'SQLAgentOperatorRole', @userName
    go
    If you still have problems let us know, and please include the error number and message in order to help us understand the nature of the fauilure.
    Best practice...
    http://technet.microsoft.com/en-us/library/cc966485.aspx
    Raju Rasagounder Sr MSSQL DBA

  • Issues with test-all role and browser security

    WLS 10.3.5
    I have a deployed application on Linux using a SQLAuthentication and Authorization - all is well here.
    I have setup all the security (without the test-all role) and I cannot access any of the system.
    If I put the test-all role in - I can access the system.
    I have verified the user has all the roles (I used the example bean to display the user and roles on the menu page) and the test-all role is not in the list.
    I have the menu setup to not display items unless the user has the role (this is working fine - SecurityContext.inRole(rolelist).
    So the context is fine.
    I used jazn-data to set the same roles in the taskflows - this is not working at all unless the test-all role is set - I get authorization errors - not authorized).
    Have I missed something in this?
    I have also noticed that if I close the browser (X) without logging out and come back into the system the authentication is totally bypassed and I go back in as the same user as before.
    Is there some way to destroy the previous context every time the welcome screen is executed.

    Add the following parameters to the Run options for the ViewController project:
    -Djps.auth.debug=true -Djps.auth.debug.verbose=true
    Then restart WebLogic, run the app and watch the console - you'll see all the security evaluations take place which should help you to identify the problem.

  • Error while running Re-create grants and synonyms for APPS schema

    Hi,
    I have upgraded customer's Oracle Apps 11i (11.5.10) database to Oracle 10g R2. While executing '+Re-create grants and synonyms+ ' as given in Note: 362203.1, I am gettng error:
    plus80 -s APPS/***** @E:\EBSTEST\ebstestappl\ad\11.5.0\admin\sql\adappsgs.pls &systempwd 1 INV APPLSYS APPS TRUE FALSE TRUE
    Error:
    Program exited with status 3
    Cause: The program terminated, returning status code 3.
    Action: Check your installation manual for the meaning of this code on this operating system.Connected.
    old 2: ad_apps_private.create_grants_and_synonyms(&2,'&3','&4','&5','FALSE');
    new 2: ad_apps_private.create_grants_and_synonyms(1,'INV','APPLSYS','APPS','FALSE');
    begin
    *+
    ERROR at line 1:
    ORA-20000: ORA-00955: name is already used by an existing
    object:create_grants_and_synonyms(1,INV,APPLSYS,APPS): create_base_gs(INV,APPS): In Synonyms
    Loop:create_synonym(INV,MTL_ONHAND_DISCREPANCY,APPS,MTL_ONHAND_DISCREPANCY):
    do_apps_ddl(APPS,CREATE SYNONYM "MTL_ONHAND_DISCREPANCY" FOR INV."MTL_ONHAND_DISCREPANCY"):
    ORA-06512: at line 5
    MTL_ONHAND_DISCREPANCIES
    I checked the database and there isn't MTL_ONHAND_DISCREPANCY synonym. But there is MTL_ONHAND_DISCREPANCIES synonym.
    This is an upgraded instance from 11.0.3 and first time I am running Re-create grants and synonyms for APPS schema.
    Plz let me know if anyone of you faced this issue.
    Rgds,
    Thiru

    Hi,
    there is no such table MTL_ONHAND_DISCREPANCY or synonym in Applications 11.5.10.2. Is that custom table created in your db?
    After dropping this table from APPS schema 'Re-create grants and synonyms for APPS schema' went thru fine.Its correct
    This table does not exist in INV schema in 11.5.10.2.
    Could be possible that the consultant could have created this table in INV and APPS schema by mistake or whatever.Yes, with the same name, there might be table in APPS SCHEMA. When you run recreate grants and synonyms, adadmin tries to create synonym for that table in APPS schema. since there is object available with the same name in apps chema, you got that error.

  • How to find out by MDX that the current users is member of a role - Default member issue

    Hi,
    just imagine you have a dimension with a few members (A, B, C...). I defined a role which gives some users only rights to "B". On the other hand the default member for the dimension is set to "A". Now users part of the role get an error
    that the member "A" is not found. So while
    https://msdn.microsoft.com/en-us/library/ms175626.aspx says the default member setting in the role "overrides" the overall default member this is not completely true because first the general default member is selected and after that the role
    specific one.
    So the solution might be that I explicitly define the default member in all roles. This might be possible but there is one issue: you can't define a role specific default member for users part of the adminstrator role. So all admins don't have a default
    member which is quite some restriction for some users...
    So the question is how to solve that problem. An idea would be that I use some MDX to determine the default member in the dimension based on the actual user's role membership. But how to do that? Or any better idea?
    Thanks,
    Thomas Pagel

    Hi Thomas,
    According to your description, you want to have a role-specific default member for different roles. Right?
    In Analysis Services, when granting access to dimension, a connection will fail if a role restricts access to a default measure. As you mentioned, the best solution is specify a default member for each role. But for administrator role(full control),
    it can't set the default member. All tabs except General and Membership are disabled. And the system can determines the default member of current user automatically. It's not supported to get the default member in MDX either.
    However, SSAS has additive design for role security. So in this scenario, we just need to create another role for those members of administrator role and specify a default member for this role. SSAS will take that role-specific default member
    for these users. And it will not effect the administration permission for them.
    Reference:
    Default members, MDX Scripts, Security, KPIs and Perspectives
    The Additive Design of SSAS Role Security
    If you have any question, please feel free to ask.
    Best Regards,
    Simon Hou
    TechNet Community Support

  • MDT 2013 Roles and features failing to install for server 2012 r2

    I am having issues trying to apply Server 2012r2 Roles and features via MDT 2013.
    Below I have attached the log.
    <![LOG[Microsoft Deployment Toolkit version: 6.2.5019.0]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[The task sequencer log is located at C:\Users\ADMINI~1\AppData\Local\Temp\SMSTSLog\SMSTS.LOG.  For task sequence failures, please consult this log.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole"
    context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles will be installed.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles specified in Role:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  FileAndStorage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[RoleServices specified in RoleService:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  File-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Storage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Features specified in Feature:]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-Framework-Features]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-Framework-Core]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  NET-WCF-TCP-PortSharing45]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  InkAndHandwritingServices]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Media-Foundation]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  RDC]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  SNMP-Service]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  SNMP-WMI-Provider]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Telnet-Client]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  User-Interfaces-Infra]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Gui-Mgmt-Infra]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Desktop-Experience]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Server-Gui-Shell]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShellRoot]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShell]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  PowerShell-V2]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoles.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoleServices.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSFeatures.]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Property Parameters is now = -FeatureName FileAndStorage-Services]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Validating connection to \\WIN-7VSNJRF3PNO\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64]LOG]!><time="10:45:23.000+000" date="08-25-2014" component="ZTIOSRole" context=""
    type="1" thread="" file="ZTIOSRole">
    <![LOG[Mapping server share: \\WIN-7VSNJRF3PNO\DeploymentShare$]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Already connected to server WIN-7VSNJRF3PNO as that is where this script is running from.]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="1" thread=""
    file="ZTIOSRole">
    <![LOG[Copying source files locally from \\WIN-7VSNJRF3PNO\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="10:45:24.000+000" date="08-25-2014" component="ZTIOSRole"
    context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="10:45:27.000+000" date="08-25-2014" component="ZTIOSRole" context="" type="3" thread="" file="ZTIOSRole">

    I have narrowed this issue down to .net 3.5 install.
    I have boot, efi, sources, support, autorun, bootmgr, bootmgr.edi, and setup.
    I have confirmed that the sxs folder is there. 
    I also just added WindowsSource=%DeployRoot%\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs to my customsettings and updated the boot iso.  I am still receiving the errors.  
    One last bit of information I am able to get to the deployment share with the sxs folder in it from the reference machine I am creating but when I manually try to install .net 3.5 from roles and features to the share it fails. But if I copy the files local
    they work fine.
    I seem to have permission issues with other subfolders also.
    Thanks,
    Anthony

  • Roles and Object queries tab not visible in MBO attribute properties

    Hi,
    We have installed the SUP Personal developer edition 2.0 on a windows 2008 server. I am trying to create a sample application for getting the list of sales orders by using the SAP BAPI. Once I have the MBO in place, I see that I cannot view the 'Roles' and 'Object Queries' tabs in the 'Attributes' section of the MBO properties.
    Does anyone know why this happens? Is it due to configuration issues? Do help me out as we're trying to get a demo working.
    Thanks & Regards,
    Vaishnavi

    Hi Vaishnavi,
    Check whether you have selected "Advanced" mode . You should be able to see it.
    Regards,
    Viju

  • Where are role and administrator settings saved?

    We have had issues in the past that have caused us to have to
    re-setup our site, including all administrative settings and all
    roles and users. Surely all of this is saved somewhere. If we just
    knew where, we could backup the info for an easier restore if
    further problems ensue.
    Anyone know how to backup site settings?

    I got the following reply on a separate forum:
    quote:
    For a website that has been administered by Contribute
    (Publishing server is not enabled), you would find an _mm folder in
    the website root on the remove server. This is a contribute
    specific folder and it contains the administrative settings, role
    information and users.
    For CPS managed sites, the _mm folder still holds the
    information about the administrative settings and role information.
    The user information of the sites are stored in the Database folder
    of CPS. The Database folder can be found in the following location,
    <CPS Install Path>\Database.

  • What are Roles and Role entry points in the context of windows azure?

    I am just starting out with my journey towards understanding azure. I have a vague idea about the Web and Worker roles.
    So when I am publish-deploying a website on azure from visual studio, am I doing something with respect to roles? Am I starting up a Web role?!
    RoleEntryPoint: But this is actually related with the web/worker roles and services. My understanding is that the RoleEntryPoint is some code which is executed when you deploy "services" on the azure cloud. These services either have a web role or
    a worker role.
    What is "services" in this context? So what traditional (on-premise) app would be analogous to a service that has a web worker role? A WCF service or WebApi? Or can it be a website? So would a service having a worker role be something analogous to
    a "windows service"?
    And finally RoleEntryPoint. I don't get the use case. From what I've seen,
    say you want to initialize some related services that support your main service, for e.g. a cache server, or a sql database, you have have the initialization logic written in these classes and make the code perform them.
    There are definitely other ways to do this right? You don't need to necessarily tie the deployment of that main service with the initialization of the other services. They could be separate deployments, right?!
    I am a bundle of mistakes intertwined together with good intentions

    Hi deostroll,
    From you post I understand you've read quite a lot about Azure, but I'm affraid there's still some misunderstanding on what all these terms mean.
    Azure is a cloud computing suite of services tiered into three categories: IaaS, PaaS and SaaS. IaaS stands for Infrastructure-as-a-service and is an offering where Microsoft allows you to run your own virtual machines. You will handle everything from software
    patching, network connectivity (from the application level: virtual networks etc.), software installition and configuration etc. Basically everything you would do today on your own premise except for whatever concerns hardware (bare-metal). PaaS stands for
    Platform-as-a-service, and is a middle offerint, where Microsoft selects some VMs and is responsible for periodically patching this machines. You don't have to care about IIS or whatever existing applications there are on the VM either, because it's Microsoft's
    job to do this. Last but not least, SaaS stands for Software-as-a-service, and is the offering where you use a piece of software without even knowing what infrastructure exists behind it: I guess you've used some sort of webmail client before, right? That's
    a SaaS.
    When it comes to Windows Azure, IaaS is offered as Azure VM, PaaS is offered as Azure Cloud Services (formely known as Azure Hosted Services, should you get across documentation that uses that term instead) and SaaS is offered in the form of: Azure WebSites,
    Azure Mobile Services, Azure Media Services and many more.
    When you talk about either web roles or worker roles, you actually talk about two forms of roles that exist in the context of an Azure Cloud Service. Basically, when you create a cloud project from Visual Studio, you end up in adding either Web projects
    which might (but not necessarily) be linked as a Web Role to your Azure Cloud Service. You may also add, to the same solution, Worker Role projects. As you've probably already guessed, whenever you add a Web role, the web project it references is a web project
    in the literal term: ASP.NET Web Project, whether that is WebForms, MVC, MVC WebAPI that's all completely up to you. However, what is a worker role project, you might ask? A worker role project might be though of just as a console application. You basically
    get absolutely no UI, but your code runs as long as it runs inside an infinite loop at some point. If the loop stops, just like a console application, your worker role will stop which will force the Azure FabricController to refresh your role. Consider the
    FabricController has the guardian of all roles, which will auto-magically 'respawn' your roles whenever something goes wrong, whether that's a software issue in your app, in the OS or a hardware failure.
    Moreover, keep in mind that every role in your cloud service project ends up in being created as a separate VM. What this means is that you will have separate VMs for each roles in your cloud service, so even if you create several web projects, you still
    get one machine, with one IIS instances with a single web application (yours) for each of your cloud's roles. Same goes for worker roles.
    I hope this information clears up some of the questions you might have.
    Alex

  • Windows Roles & Features "error" issue.

    Hi,
    I have a virtual server windows 2008 R2 Standard ed. it was working fine earlier. Now I had a task to install .net framework 4.5 and MSMQ on this server. When I tried to install, I found Roles & Feature option in Server manager displays "error"
    and do not open. It displays error message as : Unexpected error refreshing Server Manager: No signature was present in the subject. (exception from HResult: 0x800B0100).
    I am not able to enable roles and Features. I have installed .net framework 4.5 but not able to install SP1 on this sever.
    SP1 installation displays error and suggests to go through the Url for kb/947821.
    I tried to fix the issue by using command sfc/scannow and run the tool as per link http://support.microsoft.com/kb/947821.
    CheckSUR. log displays some mum and cat file missing as below
    Unavailable repair files:
    servicing\packages\update-bf.mum
    servicing\packages\Package_1_for_KB973525~31bf3856ad364e35~amd64~~6.1.1.3.mum
    servicing\packages\Package_1_for_KB975364~31bf3856ad364e35~amd64~~6.1.1.0.mum
    servicing\packages\Package_1_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.mum
    servicing\packages\Package_2_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.mum
    servicing\packages\Package_4_for_KB979916~31bf3856ad364e35~amd64~~6.1.1.0.mum
    servicing\packages\Package_for_KB958488~31bf3856ad364e35~amd64~~6.2.7600.16513.mum
    I tried to download these files manually and installed/extracted as suggested in the URL http://support.microsoft.com/kb/2461206
    But these files are not correcting and Still Roles and Feature "error " and SP1 installation issue. 
    Windows updates are installed successfully.
    I tried to fix the issue using command prompt using DISM but still displays the above error message, Even powershell could not enable to features.
    Kindly help me to fix the issue.
    System Engineer

    Have a client with about 120 users and have 4 machines in the last 2 weeks start getting this message and then they go into a constant reboot??
    This message does this quickly like it counting really fast.
    Any ideas help on how to fix what is going on greatly appreciated
    This topic first appeared in the Spiceworks Community

  • How to set role which can issue only one command

    I am thinking about setting role, which will be allowed to issue olny one command. I have created role test. Which has the following entries in the following files:
    /etc/user_attr
    test::::profiles=OneCommand;type=role
    /etc/security/exec_attr
    OneCommand:solaris:cmd:::/tmp/data.sh:euid=0
    After this I sill could issue all comands, not only test command /tmp/data.sh.
    When I issued comand profiles on test role I received the following:
    bash-3.00$ profiles test
    OneCommand
    Basic Solaris User
    All
    So I commented line in the /etc/policy.conf to read:
    #PROFS_GRANTED=Basic Solaris User
    After that, when I try to issue /tmp/data.sh command as a test role I receive the following error:
    $ /tmp/data.sh
    pfexec: Exec format error
    Does anybody know how to set up the role which can issue only one command ? Maybe there is a way to do this in the way which wil not affect another roles (ie, not to touch /etc/policy.conf).
    Best regards

    RadekW wrote:
    I am thinking about setting role, which will be allowed to issue olny one command. I have created role test. Which has the following entries in the following files:They will need the ability to run at least a profile shell otherwise all bets are off. So now you're down to two commands. :-)
    bash-3.00$ profiles test
    OneCommand
    Basic Solaris User
    AllFirst you need to define what already exists by default. (policy.conf)
    Then you get to change those defaults or create a new default list just for test.
    Then you get to add a role or profile for test that allows the execution of a profile shell and one command.
    Then you should test all of the user accounts to ensure that something didn't break. This step might be a little overkill.
    alan

  • Dimension with 2 roles and 2 hierarchies used in 2 cubes

    Hi,
    I have a dimension in which there are two dimension roles (roleA, roleB) defined as well as two hierarchies (hierarchyA, hierarchyB). Currently hierarchyA is set as default. (Not because that is in fact the default one, only because OWB forces one to choose a default)
    I need to define two cubes (cubeA, cubeB). CubeA will use the dimension with roleA and cubeB will use the dimension with roleB.
    Is it possible to tell cubeA to use/see/make available only hierarchyA and cubeB only hierarchyB? HierarchyA makes no sense in cubeB so I want to "specify" hierarchyB for cubeB.
    Thanks,
    Juanita

    A different issue but possibly related:
    I have a ROLAP cube with one of the dimensions containing multiple hierarchies. If I deploy this with deployment option set to "Deploy data only", it works 100%. As soon as I change the deployment option to "Deploy All", I get a VLD-0398 error.
    I need to choose "Deploy all" since the cube metadata must be deployed to the OLAP catalog in order for Disco OLAP and BI Spreadsheet Add-In to see the cube.
    First question:
    Is it possible to deploy to the OLAP catalog if the cube has a dimension with multiple hierarchies?
    Second question:
    If it is not possible, what is the workaround?
    Thanks,
    Juanita

  • Portal Design - Best Practices for Role and Workset Tab Menu

    We are looking to identify and promote best practices in SAP Portal Design. 
    First, is there a maximum number of tabs which should exist on the highest level tab menu, commonly called the role menu?  Do a large number of tabs on this menu cause performance issues?  Are there any other issues associated with a large number of tabs on this menu?
    Second, can the workset tab menu be customized to be 2 lines of tabs?  Our goal is to prevent tab scrolling.
    Thanks

    Debra,
    Not aware of any performance issues with the number of tabs in the Level 1 or 2 menus, particularly if you have portal navigation caching enabled.
    From an end user perspective I guess "best practice" would be to avoid scrolling in the top level navigation areas completely if possible.
    You can do a number of things to avoid this, including:
    - Keep the role/folder/workset names as short as possible.
    - If necessary break the role down into multiple level 1 entry points to reduce the number of tabs in level 2.
    An example of the second point would be MSS.  Instead of creating a role with a single workset (i.e. level 1 tab), we usually split it into two folders called something like "My Staff" and My Finance" and define these folders as entry points.  We therefore end up with two tabs in level 1 for the MSS role, and consequently a smaller number of tabs in level 2.
    Hope that helps......
    Regards,
    John

Maybe you are looking for