Role with dynamic iview assignment depending on users

Hi All,
We have a situation here for BI reports. Let me explain in detail.
We have Home role common for every user in portal having home page. Home page contains VC BI iviews.
Now our requirement is that the role should remain the same but the VC iview should change depending on the user.
For example.
User A has home role should see VC BI iview1
User B has home role should see VC BI iview2
Please guide us how to achieve this.
Regards,
Bharat Mistry.
Edited by: Bharat Mistry on Dec 24, 2007 10:53 AM

Hi Bharat,
You can refer to this [link|http://help.sap.com/saphelp_nw70/helpdata/en/53/89503ede925441e10000000a114084/frameset.htm] for detail.
Also this [thread|Re: Controlling visibility of Second Level navigation tabs in portal;.
Regards,
Ami

Similar Messages

To get the Roles, Worksets, iviews assigned to portal user using webdynpro

Hi..
I need to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
I tried to search in SDN and found a few blogs on this... but all are for DynPages. I could not find any inputs on how to achieve this in Webdynpro.
I am listing down the blogs for your reference :
1) /people/prakash.singh4/blog/2005/07/28/browse-roles-folders-pages-iviews-assigned-to-a-user-ep6-sp9-and-higher
2) /people/prakash.singh4/blog/2005/09/06/create-a-sitemap-for-your-portal
Please provide me your suggestions on how to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
Thanks and Regards,
Sayan Ghosh

Please use following code to get all roles assigned to user:
     IWDClientUser wdUser = WDClientUser.forceLoggedInClientUser();
     IUser user = wdUser.getSAPUser();
     String strRoleID = "", strRoleDesc = "";
     IRoleFactory iRoleFactory;
     iRoleFactory = UMFactory.getRoleFactory();
     // Get All the Roles of the User
     Iterator iteratorRoles = user.getRoles(true);//prtRequest.getUser().getRoles(true);
     // Loop through all the Roles
     while(iteratorRoles.hasNext())
          strRoleID = iteratorRoles.next().toString();
          try
               strRoleDesc = iRoleFactory.getRole(strRoleID).getDescription();
               wdComponentAPI.getMessageManager().reportSuccess("Role: "+strRoleDesc);
          catch(Exception e)
               wdComponentAPI.getMessageManager().reportException("Exception e: "+e, false);

802.1x authetication with dynamic Vlan assignment by a radius server

Hi
At school I want to start using 802.1x authentication with dynamic Vlan assignment by a Windows Server 2012R2 Radius server.
When a student logs in, I want it to be placed in the "Students" Vlan, when a Administrative employee logs in, I want it to be placed in the "Administative" vlan and when the client is unknown I want to place it in the "Guest" Vlan.
I have several SG200 switches and I configured everything as mentioned in the administrative guide but I cannot get it to work as desired.
What does work:
- If the client is permitted, the switch changes to "authorized" state. (before anyone logs on to the domain with that client)
- When a User logs on that is part of the Administrative employees, the switch changes to "authorized" and when a student logs on, it changes to "unauthorized".
So far so good.
But what doesn't work:
- it does not put the administrative employee in the Vlan "Administrative", it just enables the port on the switch but leaves it in the default vlan 1.
- I can not find the Guest VLAN.
Any help would be appriciated.

Hi Wouter,
Can you see in the packet capture Radius accept message VLAN attribute? Also please ensure you have the latest firmware and boot code:
http://www.cisco.com/c/en/us/support/switches/sg200-26-26-port-gigabit-smart-switch/model.html#~rdtab1
I would recommend you to open ticket with Small Business team so they can go with you through packet capture and configuration steps:
http://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html
Regards,
Aleksandra

What role needs to be assigned to the user to access existing custom OData services?

Hi all,
What role needs to be assigned to the user to access existing custom OData services?
With SAP ALL its working. But cannot assign that to all users. Whats the specific role for this?
I tried with /IWFND/RT_GW_USER. But it says the role does not exist.
Thank you,
Achu

Hi,
As usual you need to build a role by yourself based on your requirements. In case of Odata services there are two different TADIR services that needs to be added. One corresponds to authorization to execute logic on backend server and the other one to access service on front end server. You can get specific services by tracing one call using ST01. For Fiori apps from SAP you get role templates. You can use them for inspiration.
Cheers

I'd like to select print paper size with using AxAcroPDFLib method depend on user

I'd like to select print paper size with using AxAcroPDFLib method depend on user
request. Is it possible? in AxAcroPDFLib?
Is there any method to select print paper size in the C# programming.
Or if you know another method, please introduce how to use.
Thank you for your cooperation always.

I am pretty sure that you can only do this from JavaScript or from C/C++ APIs.

Maximum Number of Roles that can be assigned to a user

Hi Experts,
Can anyone please clarify me , what is the limit for the maximum number of roles
that can be assigned to a user
Thanks and Regards,
Sanjeev Anand.

Hi Sanjeev,
You can assign a particular user to any number of Roles as long as they are not conflicting.
But you can assign 150 Profiles to a Role.
null

List of all iviews assigned to a user

Hi all,
i need to display list of all iviews of a particular user in a dynpage.
as we cant follow the typical role based approach, i need to list the links of all iviews which is user is allowed to access..
help me with api's to do this.

Hi,
Check this link.
Retreive a list of workets, iViews, pages from Roles
Using this, you can get the assigned roles to that user. Do some more coding like this from the role list to get the iViews. For getting whole list of iViews, check this link.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6112ecb7-0a01-0010-ef90-941c70c9e401
May be you can try to compare from the whole list of iViews with the list which you get from the first link and then add those alone.
Hope that will help you start the process.
Regards,
Harini S

Tranporting Roles with attached IViews

Hi, In order to transport my Portal Roles from Dev to Prod, do I have to wait until all of my IViews are assigned to the roles? Or can I send over the roles ahead and then the IViews later once they are assigned to their proper roles? What transports the link between the role and the IVews?
Thanks!

Sorry for the confusion mate,
Basically, in EP you can transport the different objects idependently of each other.
So you can set up a transport package just for iViews, one for pages, worksets, roles, etc...
If ALL your content is assigned correctly in dev and you transport ALL objects, then all assignments should still be active in your production environment.
However, if you first transport some pages, then roles, then iViews, you will have to re-assign each object to whatever object it needs to be linked to.
So to answer your question, you can transport your roles to production, assign your iViews in dev, transport your iViews to production, but I think you would need to re-assign your iViews to the required roles in production as they came in a different transport.
Hope it makes more sense.
Cheers

802.1x RADIUS with EAP-TLS/EAP-TTLS & Dynamic VLAN Assignment

Hello, My team is looking for switches supporting 802.1x authentication on either EAP-TTLS or EAP-TLS protocols with dynamic vlan assignment enabled for these. Looking at the data sheets of the Linksys desktop switches, I found only SLM224G4PS and SLM224G4S models to support EAP-TLS or EAP-TTLS. Am I right? Do they support Dynamic VLAN Assigment for either of those protocols? This is not explicitly mentioned in the data sheets, and I happen to find switches from other manufacturers that announce to support EAP-TLS/EAP-TTLS but no dynamic vlan assignment. Thank you for any help.

SLM switches do support 802.1x RADIUS with EAP-TLS/EAP-TTLS unlike the SRW switches which support MD5. But I don't think that they support Dynamic VLAN.

Flexconnect dynamic VLAN assignment doubt

Hi, all,
I am trying to understand how FlexConnect with dynamic VLAN assignment works. We have the need to dynamically put people in different VLANs based on their AD groups (all employees use the same SSID), I can understand that in traditional CAPWAP mode, AP just tunnels all traffic to WLC, WLC is the authenticator and it knows what users' identities are and can encapsulate user traffic to different VLANs before send the traffic to the switch it connects. Here is the part I don't understand:
1) If APs are operating in Flexconnect mode (APs are trunking to switches), how does each AP know what VLAN tag to put a specific user traffic on? AP is not authenticator, it knows nothing about associated client's AD identify. How does WLC convey the dynamical VLAN information to APs?
2) I want to eliminate WLCs in remote offices by letting all remote office APs join HQ WLC with FlexConnect mode, I can keep the same VLAN mapping scheme in remote office switching environment, in some offices I want to do local authentication (Domain controller + Radius Server), looks like I can specify Radius server in FlexConnect group, in this case will APs become authenticator? Since Radius clients have to be explicitly configured on NPS/Radius server side, does this means I have to statically configure each AP's IP?
3) I have over a dozen APs in HQ which are operating at FlexConnect mode, but the SSID's "local central authentication" checkbox is not checked, if I want to have local authentication in remote office, seems that I have to turn on "local authentication" on this SSID, does that mean I have to add each and everyone of those HQ APs to Radius/NPS server client list?
Thanks,

Hi ,
1) Aps knows about Vlans as we can define them inside the Flex connect groups. This is the same way we define flex connect ACLs which are pushed to the Flex APs and are returned by the Radius server later on.
2) If you are going for Central authentication + local switching ....WLCs will always act like central authenticator and would talk to the radius server. If you have some radius servers at the local site and you want them to use without going through the central authentication..you can do that using (local authentication + local switching). Yes, In this case AP will be authenticator and would be AAA client to be added in the Radius server.
3)yes ,,you are correct. If you want that your AP should do authentication and talk to the local radius server at the site , it has to be added in the Radius server.
Regards
Dhiresh
**Please rate helpful posts**

Mapping SRM Portal roles with SRM backend roles

Using ABAP as UME when we create a user in SRM backend and assign backend roles, then corresponding portal roles should also get assigned to the
user so that portal roles are not to be assigned separately by portal admin.
Currently for the requirement I followed the following steps:
1. To SAPJSF user in SRM backend assigned roles SAP_BC_JSF_COMMUNICATIONand SAP_BC_JSF_COMMUNICATION_RO.
2. Created a RFC SPML of type 'G'.
3. Activated UME-SPML connection in SPRO.
4. Then in PFCG for the role personalization assigned PCD path of portalrole.
But I am not able to achieve the requirement through the aforesaid steps.
Please Guide.
Regards,
Gagandeep.

If you are using ABAP persistency for UME your ABAP roles should appear in the UME as groups. Just assign the portal roles you need to your ABAP roles/groups. Thats it,
cheers

5508 and dynamic vlan assignement

Hello,
I'm trying to setup a 5508 to work with dynamic vlan assignement using the same SSID.
I've followed everyting in this document http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml
but it doesn't work, every client independent of the RADIUS group is assigned to the same VLAN.
The only difference I have with that document is the [081] Tunnel-Private-Group-ID for which I use a string (nessesary for the LAN switches which use the same RADIUS) instead of a number.
What I see when sniffing the RADIUS traffic, every option is sent correctly to the WLC, from the WLC side and using the debug aaa events enable option I see nothing interesting.
Any ideas?
Thanks
George

A bit more debugging gave me this:
*Oct 15 09:31:28.491: xx:xx:xx:xx:xx:xx Received Tunnel-Group-ID Attribute -- ignoring AES Interface-Name '200' for STA xx:xx:xx:xx:xx:xx.
*Oct 15 09:31:28.491: xx:xx:xx:xx:xx:xx Tunnel-Type 16777229 should be 13 for STA xx:xx:xx:xx:xx:xx
(xx:xx:xx:xx:xx:xx is the client mac address)
It seems that:
1. WLC ignores the [14179\005] Aire-Interface-Name parameter regardless of what the value is (I have tried the vlan number, the interface name etc)
2. the second error is that the tunnel-type 16777229 should be 13. The tunnel-type has the value VLAN as required according to the Cisco document and in general for this to work. Funny thing is that RFC2868 doesn't define a value of 13 but RFC3580 define VLAN as value 13 so again I've set the correct value.
So I don't really know what to do now. I guess I have to open a TAC ticket.

Transport roles (with assigned group) containing folders and iviews

Hi,
This message was in the BI forum before and I think that it suits here better.
I created a portal role which is contained in a folder X under Portal Content. This portal role is associated with a particular ABAP menu-role by means of Assigned Groups. When I transported the folder X with all dependent objects from Dev to QA, the portal role appeared but the Assigned Groups is empty. Another words, the association between portal role and the ABAP menu-role could not be transported. How can Associated Groups in a Portal Role be transported?
Then I also tried to do the following steps:
1. Export and import portal contents which include the whole structure with folders, roles and iviews under each role.
2. Export and import the same roles as user management data
The result from 1 was that the whole structure including the roles is imported; however none of the portal role contains the associated assigned group.
The result from 2 was that the UME roles with assigned group are imported as separat objects.
Now, the same role appears both as portal role without assigned group and the UME object with assigned group. But, there is no connection between 1 and 2. That means that I cannot use 2 anyway.
Therefore, I still have to manuelly modify 1 with assigned role once again after importing step 1. Is there a way to import 1 with the associated assigned group without any manuel modification?
Thank you in advance for any helpful advice.
Best regards,
Zabrina

hi,
check the following threads
http://help.sap.com/saphelp_nw04/helpdata/en/6d/7c8cfd410ea040aadf92e1f78107a4/frameset.htm
http://help.sap.com/saphelp_nw04/helpdata/en/6d/7c8cfd410ea040aadf92e1f78107a4/frameset.htm
Re: Transport management in BW 2004s
let me know uneed any further info
bvr

Role / workset assigning depending on group / users

Hi All,
I have a role in top level navigation and two worksetsm (say workset 1 and workset 2 or say role 2 and role 3) in second level navigation.
I want to give Role A to every one, but workset 1 should be visible to some people and workset 2 should be visible to some other people.
How can I do this?
I have 2 ideas....
1) through code I can control roles / worksets and assign to groups
2) creating two roles with same name but with different ID's and assigning workset 1 to role with id 1 and workset 2 to role with ID 2. It will look like same role to end user but worksets are differnet.
Other than these 2 option, is there any more options i have????
Thanks,
PradeeP

I have 2 options is mind..
1. You create two roles with same name , different id, but you can utilize the merge property( open the role and check its properties), so that if a user has both the roles, he can see only one top level navigation role.
So even in futrer if you have requirement to show other worksets you can maintain them by this.
2. You can create two groups and assign the user to the groups depending upon the permission you have set for the roles.
Based on your requirements you can choose, I used 1st option in my project.
Regards,
Namrta Mahajan

Report to see list of roles with no user assignment

Hi Gurus,
I need to know the transaction/Report where i can see list of roles which doesnt have any user assignment.
Pls help me

HII,
To search for roles with no users assignment u can run a report RSUSR070 AFTER EXECUTING TCODE SA38 in the progran field enter the name of the report and click execute button u get roles by complex selection criteria then scroll down and in the selection according to user assignments select without user assignment then cli ck execute button u will get the roles with no user assigments............
Thanks and regards

Role with dynamic iview assignment depending on users

Similar Messages

Maybe you are looking for