RSC access rights are ignored in RoboHelp

In a test scenario we installed RSC 3 and use RoboHelp 7 to
work with projects under version control. All is fine so far except
that RoboHelp ignores the rights assigned to different user
accounts.
In RSC, I have created user accounts with logins to the
database. I have, for example, determined that the user John can
check out a certain file and not access another file, user Smith
has full read/write rights to the topics in a ceratin folder etc.
When working with the RSC GUI, all is fine. User John logs in with
his account and can only check out the file he has the access
rights to. But if the same user John logs in using RoboHelp, then
the rights are ignored and he can check out all files and has full
acces to the project.
The fact that the rights are handled correctly in the RSC GUI
indicated that this may be a problem of several users working on
the same PC and under the same windows account (even though we use
SQL login with user name and password, not Windows
authentification). Can anybody confirm this, is this a known
problem?

Hi, yes this is how we work except that we do not use windows
authentification at all (your last paragraph). This is a test and
if the problems are related to this specific environment only, then
all id fine. In a productive environment, of course, each user will
log in from a different working place and have a different windows
account.
I also had the effect that some actions (I think I had tried
to log in using a faulty SQL user name a few times) suddenly forced
RoboHelp to sort of update its user rights and then the logged in
user had the correct rights according to the RSC user
administration. In the next session, this was lost again and the
same user had all rights again.

Similar Messages

Repository Access Rights

There are several right you can grant on a workarea
-Administrate Grant, revoke or delete access rights on a repository
object
-Compile Refresh a workarea
-Delete Delete an object (or perform force delete or purge if they have
the necessary repository privileges)
-Insert Create an object
-Select Query an object
-Update Modify an object
-Update Spec Redefine a workarea
-Version Check out/check in an object
What Access Rights are usually applied to a developer in a shared
workarea?
null

Hi,
Typically, you would want to grant all of those except administrate and delete/purge. But it depends on your own team's security policies (for example, you might decide that developers are not allowed to alter the spec of a shared workarea so that other team members are not affected by changes).
Brian

Access rights on external usb drives gets reset.

Hi!
I use external usb-drivers for backup. I don´t wont other users on my iMac to access this drives, so I have set the access rights for "Everyone" to *"no access"*.
This works as intended, for a while... But for no reason what so ever, the access rights get´s reset to *"Read & Write"*. This might happen after a day or two..
Anyone experienced the same? Anyone know why this happens, and maybe have a solution to this problem?
Best regards
Geir.

Other users on your iMac can easily right-click on the external hard drive icon, get info and check the "Ignore ownership on this volume". Then everyone can read and write on the backup drive which probably isn't what you want. Theoretically, only users with admin rights can check that box, but there's plenty of ways to circumvent this.
If you want to restrict access more, lauch Disk Utility and create a new Read/Write disk image with encryption on the external drive. This will take some time to create and ask you for a password. I'd recommend a strong password (use the password generator that pops up) and let it be stored in your keychain. This way, Time Machine won't ask you to enter the password to back up or enter time machine. You should write down that password though in case the internal hard drive fails or your home folder (including the keychain) gets corrupted. You will be required to enter the password to do a full restore from Time Machine.
The downside of this is that the other users of your iMac can't use Time Machine at all.
Per default, the Time Machine rights are so that you can only access your own home folder plus the shared and public folder (and other non-standard folders within anyone's home folder as it has no specific access rights). Try logging in from another account or the guest account and see if you can access your user account's backup files in, say /Documents. It should deny access and not even reveal the folder's contents.

I need to know how to access the book pod in robohelp 8/

i need to know how to access the book pod in robohelp 8/

Hi there
Actually, by my count there are at least five ways to coax books into the TOC
From the menu, Click File > New > Book.
Type the keyboard shortcut of Ctrl+Shift+B.
Right-click the pod and choose New > Book.
Click the New Book icon in the pod toolbar.
If you have organized your project using folders, you may automatically create a TOC based on the file structure and each folder becomes a book. There are also multiple ways to automatically create the TOC. One is by right-clicking the TOC pod. Another is by clicking an icon in the pod toolbar and another is by clicking the Tools menu.
Cheers... Rick
Helpful and Handy Links
RoboHelp Wish Form/Bug Reporting Form
Begin learning RoboHelp HTML 7 or 8 within the day - $24.95!
Adobe Certified RoboHelp HTML Training
SorcerStone Blog
RoboHelp eBooks

Oracle access manager: "You do not have sufficient access rights."

Hi gurus,
I'm doing self training on OAM, following an exercise I installed OAM and
created a couple of Master Admins.
Everything seams to work except the fact that this admins are not allowed
to create users/orgs/groups and get the message "You do not have sufficient access rights".
I may have missed something during the setup, however the question is: how can I recover this situation? How I can give more privileges to those admins?
I tried to create a policy in directory server, without success.
Please, help.
Thank you very much.

You will need to create a create user Workflow.
Out of the box OAM does not know which attibutes to create for your user.
Use the quickstart tool as follows
http://download-west.oracle.com/docs/cd/B28196_01/idmanage.1014/b25343/workflow.htm#sthref961

OAM- "You do not have sufficient access rights" message with Master Admin

Customer has configured the OAM system to have both the primary and the secondary side for failover purposes. The back end directory server on both systems are in sync. The primary side of the systems works well as far as this issue is concerned.
On the secondary side, if you login with the MASTER administrator of the system and click 'Identity System Console' or click any of the configurations under the Configurations in the User Manager, you get the error message saying "You do not have sufficient access rights". However, if they navigate to the Access system on the same browser and access the "Access System Console", and then navigate back to the Identity system, the Master Administrative rights are granted and now have a full access to the system.
We tried following things to resolve the issue, but could not resolve it:
1) Tried deleting 'cookieencryptionkey' which is found under "obcontainerid=encryptionkey,o=oblix" and restarted both the Identity Servers.
2) Confirmed that the OAM administrator is present in cn=Web Masters,o=Oblix,<> and cn=Directory Administrators,o=Oblix,<> from the LDAP.
3) Under the apps=PSC node, checked the Advance Properties for the 'obuniquememberStr' attribute:
- Master Web Resource Admins (cn=master web resource admins, obapp=PSC, o=oblix, ...)
Made sure that the values for the 'obuniquememberStr' attribute has the correct value there.
4) Reconfigured the Secondary Identity Server.
None of the above really helped to resolve the issue.
Could anybody please help here to get rid of this issue.
-Amol

Hi Vinod,
Here is the customer's response to your above 2 questions:
1. We have 4 Directory server profiles for Identity servers; one for user data and one for configuration data for each server.
I have at least reduced them to two and used only the ones initially used by the primary identity server as our user and configuration data do not reside together. User data is consumed via OVD.
However, this does not seem to have any effect on the current behavior.
2. All components except for the access server are on 10.1.4.2 and the access server is on 10.1.4.1
Also below are the errors from the oblogs:
dentity Server log
=============
2008/03/19@10:04:16.508530 4332 262160 PPP INFO 0x000008C7 obeventcatalog.cpp:183 "Cannot find the action" function^ObEventCatalog::GetActionEntry2Modify() actionName^ENCRYPTION_cookieEncryptionKey
Access Server Log
=============
2008/03/19@10:03:56.329959 13608 1687633 CONNECTIVITY DEBUG3 0x00000201 /usr/abuild/Oblix/1014lwhf/palantir/netlib/src/obmessagechannel.cpp:601 "Received " ipaddr^10.217.209.81 ipport^1853 seqno^12 opcode^1 opcodeStr^IsResrcOpProtected Message^ro=t%253d0%2520o%253d%2520no%253d%2520r%253d%2520nr%253d%2520wu%253d/identity/oblix/apps/admin/bin/frontpage_admin.cgi%2520wh%253d10.217.209.81%2520wo%253d1%2520wa%253d0%2520ws%253d st=ma%253d2%2520mi%253d2%2520sg%253d0%2520sm%253d version=3 pd=
2008/03/19@10:03:56.340433 3099 802864 AUTHENTICATION DEBUG2 0x00000201 /usr/abuild/Oblix/1014lwhf/palantir/aaa_server/src/aaa_service_server.cpp:2779 "Authorization successful"
Webgate Log
==========
2008/03/19@10:04:05.661000 5796 4516 HTTP_REQ DEBUG3 0x00000201 \Oblix\coreid1014\palantir\webgate2\src\isprotected.cpp:185 "Resource is protected" ResourceOperation^GET ResourceType^http Resource^//10.217.209.81/identity/oblix/apps/admin/bin/front_page_admin.cgi authnSchemeName^Oracle Access and Identity Basic Over LDAP
2008/03/19@10:04:14.661000 5796 4516 LDAP DEBUG3 0x00000201 \Oblix\coreid1014\np_common\db\ldap\util\ldap_util2.cpp:537 "MLK-Memory leak for LDAP error information. This will show up as memory leak in LDAP SDK calls." key^25
2008/03/19@10:04:14.661000 5796 4516 LDAP DEBUG3 0x00000201 \Oblix\coreid1014\np_common\db\ldap\util\ldap_util2.cpp:537 "MLK-Memory leak for LDAP error information. This will show up as memory leak in LDAP SDK calls." key^25
2008/03/19@10:05:54.552000 5796 5256 CONFIG DEBUG2 0x00000201 \Oblix\coreid1014\palantir\access_api\src\obconfig.cpp:865 "Client configuration not updated"
2008/03/19@10:05:54.552000 5796 5256 CONFIG INFO 0x0000182D \Oblix\coreid1014\palantir\access_api\src\obconfig.cpp:866 "The Access Server has returned a fatal error with no detailed information." raw_code^302
I checked the OVD logs but did not find any error in it. Customer also tried to unprotect the /identity and /access URLs but the issue persist.
Also I do not feel this as a bug, because this environment was working quite for few months without any such issues, also there were no changes made on the OVD/AD configurations. However, the server that hosts the OVD/AD was shut down and when it was restarted, we started experiencing this issue.

Access rights in case of a tree-like structure, with inheritance

Hello,
the project I've just started to work on should include an easy way (from the user's point of view) to grant/revoke access rights on a tree-like structure with inheritance.
Basically we are working for several international companies who want to use our application to watch/manage some of their web projects - each project belongs to one company and consisting of several 'campaigns' in several countries (there can be several campaigns per country, but each campaign belongs to exactly one country).
From our point of view this is a tree-like structure, with a 'root' node at the top level, 'companies' at the first level, 'countries' at the second level, 'campaigns' at the third level, and modules of our application (for example a module to display overall stats of the campaing, and so on) at the fourth level. There could be (and probably will be) some more levels, but that's not important at this point - it will always be a tree-like structure.
The customer's reqirements are natural - the administrators should be able to grant/revoke access to 'subtrees' of this structure. For example the top managers should be able to see all the data related to their company, the local managers should be able to see all the data related to their company in the country they work in, etc. On the other hand the relular employees should not see some of the modules (with details about clients of the company).
I wonder whether this can be solved using JAAS in an elegant and flexible manner - from the documents / whitepapers / tutorials I've seen till now it seems to me it seems to me not too suitable.
All the data will be stored in relational database (Oracle, and in some cases PostgreSQL), and it would be nice to have the access rights stored in the same way (but it's not required). We have some ideas how to solve that using a single table containing paths in the tree, but at this point it's only an idea (not a single line of code written).
We are sure somebody has already to solve such a problem - maybe using JAAS, maybe some other technology - and we don't want to reinvent a wheel. Do you have an idea how to solve this (using JAAS or something else)?

Well, I forgot to explain what the 'inheritance' means ...
We do not want to set the access right on each node of the tree - we prefer (as well as the users) to set/store only as much information as needed. We'd like the nodes to inherit the access rights from their parent nodes. For example we'd like granting access to particular project to mean granting access to all campaigns in all countries (related to the project), without the need to set and store these rights for each of the campaigns/countries.

My external LaCie drive gets an error message "the disc you inserted was not readable by this computer." The only options offered are "ignore" or "eject" Disk Utility sees the disc but does not give a repair option. What can I do?

When I plug in my external LaCie drive I get an error message "the disc you inserted was not readable by this computer."
The only options offered are "ignore" or "eject"
Disk Utility sees the disc but does not give a repair option.
What can I do?

The good thing about mac-centric resellers such as OWC, is they have people on staff that can answer questions without you buying things first. They also have how-to information, and instructions are included in many of their products. I saw a link to watch a DIY video in one of their pages; an example of a RAID (with its own power supply) is shown on their drives page. Also a few in there, with no power supplies, for less money.
If I were looking to backup and perhaps also have a partition for a system clone, I'd consider something like one of these: http://eshop.macsales.com/shop/firewire/1394/USB/EliteAL/eSATA_FW800_FW400_USB
Some ideas on the RAID backup methods appear in google search, some of the pages are ideas and concepts; and the better ones also warn about using RAID for the only backup plan.
Oh, OWC has live chat. Haven't tried it, nor have I bought anything from them. I have what appears to be two products from them, but have not used either. One is in a box as-new, but has only USB2.0 ports & my Macs needed FW400/800. It has been said their RAM is a good way to upgrade, too. But I can't confirm!
A 'RAID-ready' unit for backup may be more versatile for just that, but I have not checked into these details. I use single HDDs in powered enclosures, and usually manually make backup clones to FW drives, of bootable OS X systems. Some of the OWC raid-ready use eSATA ports so that may not be viable for a computer without them.
The unused in-box external drive I have is like the base model in the link above. However mine is USB2.0 (maybe) and won't boot my older Macs due to hardware variance; and my preference would be for FireWire options, these models do offer that. But the one I have does not. Dual 500GB HDDs, and they could be used in tandem as a RAID. That would be a choice set up in software. I'm not sure and not interested enough to read up just now.
My backup method is not automatic, or a moving backup plan, if I don't get a move-on and make full system clones. I do make copies of photos and documents the manual way, to USB external drives; and occasionally backup to DVD or CD media. And USB flash, that helps to move files between computers without need to use file sharing via wi-fi. {Like Why fly? Walking is better exercise unless one is a bird. Squawk!}
https://www.google.com/#q=raid+backup+mac
Depending on the ports in your Mac, you may be able to use other cables to attach between a backup or externally enclosed hard disk drive with multiple partition and bootable clone in one of them. Not sure about the Thunderbolt, and where that is the main port, adapters are required to access other devices, as allowed.
Anyway, I am going on and on, yet not really saying anything.
My ideas would not be all that interesting to follow as a backup
plan when matching available newer hardware to task, but you
can get some into better ideas if you are not in a rush. Get a
good setup and then look into more an betterer stuff.
Good luck & happy computing!

Random songs in my music library will not play with an error message "computer does not have access rights" but this is not true. I do, and when I re-type the password, it tells me I already have access rights. How do I fix this?

When I try to play songs from itunes, I get an error message that my computer is not authorized. My songs have all played in the past. This is something new. I verified my computer is authorized, and when I try to re-enter the password, it tells me that I am already authorized. Makes no sense at all. It's an endless circle. Also, my shuffle will not sync due to access rights denied. I did nothing new, I always take the updates. My shuffle and compter are the same, no changes. Everything is verified in my itunes account. For some reason, it is blocking me from half of my music. Help!

It's an endless circle.
See if these instructions help: iTunes repeatedly prompts to authorize computer to play iTunes Store purchases

How do i change the access rights for every file in every sub-folder?

I have an external drive that was shared between my PC and my iMac (running Snow Leopard 10.6.5).
Some of the files created by my PC have the following access rights (privileges):
Me: Custom
staff: Custom
everyone: Custom
I want every file to have the following access rights (privileges):
Me: Read & Write
staff: Read & Write
everyone: Read & Write
I presume that I need to go into the terminal and run some command line program, but I have no idea what program or what options (or even where to look for such a program). Can someone tell me how to do this, so that every file in every sub-folder has the same access rights?

Well, that's different. Most people do not install anything on their PC to read an HFS+ disk, so I assumed it was formatted for the PC. [See my above post|http://discussions.apple.com/thread.jspa?messageID=12843313#12843313].
Note that it is the same as what you asked about, except with numbers instead of the letter equivalents.
Posix permissions are for User;Group;Other (ugo) and each one can have read/write/execute permissions. Read = 4, Write = 2, and Execute = 1. So, for rwx you set 421=7.
I try to make it safe by not typing in the file path. If you do what you posted, you will change the startup volume's permissions. The path to your external is /Volumes/ext hd mount point. If you start typing the path and accidentally hit return before finishing the full path, you could fubar something you didn't want to. So, I type the command, leave a space, and then drag the target to the Terminal window.
You might also consider the GUI based permission changing program, [BatChmod|http://www.macchampion.com/arbysoft/BatchMod/Welcome.html].
Message was edited by: Barney-15E

Problems Managing User Access Rights for Web Gallery

Has anyone else had issues changing the user access rights for a web gallery? It seems like the access is everyone or no one. Are the user rights handled per event in the gallery? I had issues adding events to the user's view/download rights in the publish settings.
Also, can these settings only be set when an event is first published? Attempting to change the user access rights after the event is published seems to require a re-upload of the images.
Any thoughts?

Problem solved.
I had to put the following lines in the specified "0000_any_80.my.website.conf" file:
 <Directory "/Library/WebServer/subdomain.domain">
 Options All +MultiViews -ExecCGI -Indexes -Includes
 AllowOverride None
 # For Password protection
 AuthType Digest
 AuthName "Password Protection"
 require valid-user
 <IfModule mod_dav.c>
 DAV Off
 </IfModule>
 </Directory>

Message Monitor - Access rights

Hello,
we want to give some user access rights to look into Message Monitor to track the transfer of IDOCs.
Basically we have the role Role_SAPMEINT which lets us take look into the queue monitor but not the message monitor.
By which UME roles or UME actions is this part is accssible for the user.
I don't want to give the user SAP_XMII_Admin role.
Regards,
Kai

It looks like there are some Actions for the Message Listener Monitor listed in the MII help.
Actions for Permissions - SAP Manufacturing Integration and Intelligence - SAP Library

Files in Archive folder having limited access rights

hi forum,
i am using a File->XI scenario, where file is picked from a folder say XP1, and archived (as per configuration in the sender channel) to another folder say Archive, and subsequently sent to Integration server,
the case is, the files in the Archive folder has the owner XP1ADM with access rights rw_ _ _ _ _ _ _,
as a result, i cannot view the files in the Archive folder, as i m using a a user-id which is different from XP1ADM, -
(i am required to view these files - mandatory requirement)
for information, the UMASK of XP1ADM is 022 (found by typing the command UMASK in it shell),
hence, according to me, the files should have access rights 644 (since UMASK is 022), but the files are having access rights 600,
can you please tell me why it is so,
please help

Gaurav, thanks fro the reply,
i guess even if i keep the user in XPIADM's group, it wont do any good.....as access rights for group in 600 is 0,
correct me if i m worng....
anyways i didnt understand your reply---->
<<Your administrator has to set the permissions group for the ID you use for this folder similar to XP1ADM.>>
thanks

How can I make a file not read only? Using LV6.0, I have tried the Access Rights VI w/o luck.

I am talking about any file in windows 98 that has the read only box checked when I look at the properties of the file from Windows Explorer. I can can get rid of the check from the properties box, but I want to do it programmaticaly in LabView.

Hi,
Wire in '448' to the 'New Permissions' of the Access Rights VI. This will set the file as readable, writable and executable. I just tried this (on WinNT, though).
The 'permissions' parameter is a 16-bit integer where the least 9 bits are used. Of these, for Windows, bits 8, 9, and 10 (0-indexed) are important (i.e. if these are set = integer 448). See online Help for full details.
Hope this helps,
Khalid

Problem with access rights in web forms

Hii am facing the problem in giving access rights to users inplanning application.i gave write access to all my forms and all my users were giveninteractives user access.but when users tried to open to the forms. they are getting thefollowing error Security and/or filtering has resulted in a requireddimension not being represented on this form i don't where i am missing. please help. thanksBalu

Balu, 1)Check if the security filter have been refreshed. 2)Check if all the members from all dimensions are defined on the webform Thanks..

RSC access rights are ignored in RoboHelp

Similar Messages

Maybe you are looking for