SAP Security User Accountable Web Form

We are in process of creating users into SAP System. We have created a form where power users can fill it out their information with thier access they need and superviser can approved it. After that they will send that form to the security person.
When that person leaves, supervisor has to send an another form again.
Is there anyway we can automate this process through SAP?
Thanks.

Hello Krishna,
have a look at this Weblog: <a href="/people/john.astill/blog/2005/07/21/php-user-management-part-1 User Management Part 1</a>. It lists all the required BAPI's. Could be a starting point.
Regards
Gregor

Similar Messages

PHP_MySQL version of a high security user authentication web app.

Since you folks deal with PHP Application Development, I am posting this here.
For a demo of the PHP_MySQL version of the UltraSuite High Security User Authentication Web Application, you can sign up at http://bit.ly/hgNjek.
It offers a multi-layered approach security approach towards protecting important information like user authentication credentials. Protection from dictionary attacks, rainbow table attacks, brute force attacks, SQL injection attacks and much more.
I hope your feedback will help make the application even more useful and secure.
Thank you!
J.S.

Hi,
could you or someone tell me if ADDT supports protection against these methods you mention:
Protection from dictionary attacks, rainbow table attacks, brute force attacks, SQL injection attacks and much more??
And can this system work alongside ADDT?
thanks again

HELP: New to Mavericks. Need advice on setting up secure user accounts

Hi,
I need advice on how to best set up user accounts on Mavericks.
I must set up an Administrative account...Any suggestion for best settings here to protect against targeted malicious exploits?
I would also like to set up two user accounts for everyday work with applications and Internet browsing done in such a way that the machine would be protected from malicious attacks but with a minimum of inconvience for the users ( myself and my wife ).
Thanks

Hi hassiman, any exploits will come in the form of users downloading suspect pieces of software like browser add-ons and extensions, device drivers and non-trusted apps.
Make sure that you do not use the admin account for any day to day use
Create two normal user accounts, one for each of you and use them day to day
When using the admin account to set up your system, pay very careful attention to the System Preferences > Privacy & Security area. There are various things to set up properly here:
There are three settings for how people can download software, 1) From Mac App Store only, 2) From App Store and registered developers and 3) from anyone. It defaults to 2) but check it and if you feel uncomfortable with that, set it to 1). This might prevent you from downloading and installing software you think you might need; but think carefully about wether you really need it and therefore wether you should temporarily allow it via a lower setting.
For the firewall, if you dont have a firewalled internet gateway device (a wireless router or similar), make sure the firewall is turned on. Most internet connection equipment does have such a firewall; make sure it is blocking any incoming connections by using its admin tool (usually a web browser interface). Consult its documentation for details.
Whenever OS X asks for a password to complete a task of any kind, look carefully at what is making it ask and if you aren't sure, don't go through with it; it is usually wanting the admin account name and ppassword to complete some kind of system modification (install, config etc.).
Make sure that you are both aware of the danger of installing any software that wants to add itself to your system or web browser. Things like custom search bars, extensions etc. If you are viewing a web page and it says you need "x" to see it or use it properly, make sure you really need to use that web site; otherwise don't do it.
It really all comes down to common sense; the worst security breaches and damage come from users who don't know what to do, but they still click "OK" when they should be clicking "cancel" or "close". Make sure you and your wife are fully aware that responsibility lies with yourselves. It is better to take a minute to decide wether to install something (even if it's 20 times a week) than spend days fixing a compromised system.

Help! When users save web forms and come back to submit they get an error message and form is lost

I have a feb form that has a 28 save limit. When users save the form and return to submitt them they get a error message that says the form has expired or has been submitted. The form is open and it was not submitted. Any thoughts.
Form deadline is tomorrow and people are getting angry when I tell them to recreate the form.

Hi;
Can you forward me any of the emails from your users with their saved link that is not working and we can look into it?
Send to [email protected]
Thanks,
Josh

Trouble Creating Users Via Web Form

I'm having trouble creating user in a 9i database via web front end.
I use the following sql to create the user
strSQL="CREATE USER"""+strUser+"""PROFILE ""DEFAULT"" IDENTIFIED BY ""HELLO"" DEFAULT TABLESPACE ""DATA"" TEMPORARY TABLESPACE ""TEMP"" ACCOUNT UNLOCK"
I then execute another two sql statments to grant "connect" thus
strSQL="GRANT ""CONNECT"" TO "+strUser+""""
strSQL="ALTER USER """ strUser"""DEFAULT ROLE ALL"
Whenever I try connecting using the new users details, but get an error message that the server had problems accessing the LDAP directory service(ORA-28030).
I'm happy that the SQL is correect as I created the account that I wanted using Enterprise Console and coppied the SQL it produced. I'm assuming that there's something in the background that is not being triggered when creating the user via the web front end.
Can anyone tell me where I'm going wrong?
Thanks
Jason

My apologies, I didn't realise HTML DB was a product. I thought it was a forum for questions regarding HTML and databases.
Doh!!!
Jason

Adobe Form that Creates Active Directory User Account

Hello all! Hopefully someone can help me with this. I am using Adobe LiveCycle Designer ES 8.2 to create a user account request form. I have the form created and now am working on a submit button that will email the form to the approving officials. Once its emailed to the approving officials I would like to have a button available in which the approval person can select resulting in the creation of an Active Directory user account. I need the fields in the form to populate cooresponding fields inside of Active Directory. Current AD structure is on Server 2003. Are there any ideas for how to accomplish this?

I don't know. However, you might get a better or faster answer in the LiveCycle forum that deals with Designer.

Old user account not accessible - Had to create new user account

Why was I forced to create a new user account in order to access Apple discussions? The last time I had posted to Apple discussions was 11/06. From the emails notifying me of replies to my post, I can still go to the link where my question and the replies are. Last week I wanted to post another question. Instead I encountered a circular problem. Every time I tried to log in to discussions with my Apple ID and password (the same as my .Mac name and password, which were working fine for accessing .Mac), I was told that there was an error in my password. When I tried again, I was repeatedly re-directed to a "create new user account" web page that listed my .Mac email address as my Apple ID, as it should have. I tried to re-create my old user account with my own [real] name (as before) and was told that name was in use! Of course, it was me! (I had always used by real first name and surname as my name on Apple discussions.) So finally, very frustrated, I created a new name, a nickname, for discussions, and it worked. Now, all my previous posts are gone. It's as if I didn't exist in the Apple world until today, 9/16/07, but I originally had established my user account in 2004. I tried asking about this in a phone call to Apple support, but I was re-directed to the .Mac web site. Then I posted a question at .Mac feedback to no avail. I had a feeling that as soon as I "obeyed" and created a new user account that wouldn't be recognized as myself, my past posts would be sent into oblivion. I don't like losing all my previous posts that were attached to my user account. I have found this problem very frustrating and would really like an explanation.

Hi decemberbaby,
Try this procedure.
Delete all the Apple Cookies in your browser, and empty the Cache.
Go here Discussions Sign In, and try logging in with your original Apple ID again.
If that still doesn't work, delete the Cookies again, and go to My Info, and log in with the original Apple ID.
If you get the error message "Your Apple ID or password was entered incorrectly.", click on "Did you forget your password? Click here for assistance".
On the page that opens, you can also click on "Forget your Apple ID
ali b

How to run custom Oracle report6i concurrent program in web forms

I developed a custom report using oracle6i and registered into AOL and assigned to a request group. I can run this concurrent program from form based application works fine. How to run this concurrent request from web forms?
What are the steps to follow to create a concurrent program link on web forms?
I want run this request and pass parameters and output also in web forms...
I'm a first time user of web forms, So kindly reply with detailed steps to define concurrent request in web forms for a custom report.
Thanks in Advance
Naveen
[email protected]

I hope ur requirement to do all the CP processing from Self-Service OAF pages. If so,
browse thru Re: Start Concurrent from OA Framework page , Re: RE: Submitting concurrent request and getting the results back.
and
'Concurrent Processing: Request Submission and Monitoring' section in dev guide.
Let us know if you face any issues in the implementation.
- Senthil

I am Learning SAP Security - Please Help

I am learning SAP Security and I would like to know a) good books for SAP Security, b) online web tutorials c) Video Tutorials. My email id is <removed_by_moderator>

The book Authorization made easy is the very good book.
I also advice you to take certification by SAP in security area [ not mandatory ]. The course material ADM940, 950,960 are the best information source.
documentation in sap.com,
And there are many good sites:
sappoint.com
searchsap.com
ittoolbox.com
sapfans.com
sapgenie.com
sap-img.com.....

Hiearchy in Planning Web Form Collapes after user Submits in SmartView

We currently have Hyperion Planning 11.1.1.3.0 & SmartView 11.1.1.3.00
I have a end user who opens a Planning Web Form via SmartView. When form is opened the Hiearchy in the rows are fully expanded.
When the user hits "Submit Data" the hiearchy collapes to the top Parent level.
I have confirmed that the Planning Webform does NOT have suppress hiearchy selected.
Is there some setting in SmartView or Planning that I am missing that would account for this?
I would appreciate it if anyone had any suggestions.

Hi,
I faced some issue similar to this in past with version 9.2, As iam updating security on planning and it works fine for data forms when i perform security refresh.
but when user access those from excel the filters doesn't get update on EAS filters. after two hours investigation even though i update some filters on planning
side after security refresh it doesn't get affected on essbase filters. the reason when security refresh is done the filters getting in to cache memory and doing nothing on essbase, so work around is to delete one particular filter on essbase and then perform security refresh so that it gets updated.
Let me know if this is helpful and works.
Thanks,
Red

Web Application Security - User authentication and registration

I am trying to develop a very simple web app with following feature
1. Users should be able to register (sign-up) with the application, i.e backed code will create new user account when new users sign up.
2. Once the user account is created, they should be able to log in.
I was reading Java Security section in Java EE tutorial. To use any of Java EE security, the recommended way is to have security-constraint in web.xml specifying roles that have access to application. The roles are then mapped to the users that are created in the application server. The problem here is that the users cannot be created at deployment time. Users are created at run-time as new people sign up using the registration form. So, how can user be created with the application server before deploying the application?
It seems very odd to be that application users are defined at the app-server level. Eg, Ebay/Amazon has millions of users. Are all those users defined at the application server where their app is deployed?
If JavaEE security cannot support this simple usecase, what is the point of having security-constraint and all the other security features?

As per your comment you want to use J2EE/JAAS security for existing user and want sign in feature. You can do it by providing link on log in screen. Please create sign up page and unprotected resource in web.xml. Once user fill sign in details you can store his detail in your authorization repository ( LDAP / Database ) and then either redirect request to login page or submit to your authorization scheme directly.

How to use single web form for multiple secure zone signup?

I have multiple secure zones in my website. I want to sell membership of secure zones to users of my website. I want, users signup for multiple secure zone of their choice and submit payment. Is it possible if can you please explain a bit or refer me to an doc about it.
Thanks a lot for your time,

I realize this isn't likely, but do you know of a way to allow the user to select the secure zone to be registered (e.g. from a list of multiple secure zones or entering ID of one sz into a text input) from within a single web form? I wonder if this can be passed in through a parameter in the action URL or through a special system field.
Thanks

Some users not seeing all of a web form in Smart View Excel 11.1.2?

I am on Planning 11.1.2 and I have an end user who, when he opens a web form in Excel using Smart View, he only sees about 1/3 of the entire form. If in the Oracle/Planning web, the form is fine. When he uses my machine, he sees the entire web form in Smart View Excel. Is there a setting on his Excel I need to change?
Thanks.

It's a limitation, if you will, of the way JDeveloper works. It essentially runs your JSF page in order to get the rendering. At design time, the phase listener is obviously messing things up since you're not in a proper secured environment - hence the workaround to bypass your phase listener at design time.

HFM - log that shows if a user has loaded data via web form or excel load.

I can see any data loads that are coming from FDM, but is there a log that shows any data entered into HFM via web forms or submitted through an excel file? Any input is appreciated.
Thanks

You could enable Data Audit to capture data changes made by users, though this will not capture which method users chose to change the data. That is, HFM can show that data changed, and who changed it, but cannot tell whether the data was changed through a form, grid, smart view, or FDM. If you want to prevent users from changing data through forms, grids, or smart view, you can secure those input methods, but you cannot capture which one is used.
--Chris

Web Form in Task List and Security

Hi,
I have a couple of specific questions regarding Task List; below is a simplified example of my questions
1. Say, I have a 2 web forms (X,Y) that are part of a Task List 1. Group A has been given access to both web forms X and Y. Group A also has access to Task List 1. Group B has been given access to only web form X. Group B also has access to Task List 1. Now, everything is good for users belonging to Group A. However, users belonging Group B has a specific issue. They still see the "Web form Y" in the Task List Selection on the left. However they cant open the web form Y on the right side which is good.
My question is, is there a way to prevent users from even seeing this "Web Form Y" in the selection list? The problem is they shouldnt even see that particular web form as a choice and moreover this web form that they havent been given access to becomes part of the Task List completion status, forcing them to click on "Complete" for an empty web form.
Is there some setting that could prevent unassigned web forms based on security from showing up in the Task List for various groups (similar to security restricted members not showing up in web forms)? Or is creating several different Task List the only work around?
2. I have started a WorkFlow via FILE->WORKFLOW->MANAGE PROCESS and defined required Scenario and Version members. This seems to work just fine for my created Task Lists with Web Forms. Is there another intermitent process to connect the WORKFLOW with the created Task Lists? Or does Hyperion Planning automatically assume the Task List belong to available WorkFlow?
Another question I have is in the Task List creation menu, when creating an individual Task, there are several options for "Task Type", one of which is WorkFlow. What is the difference between this WorkFlow option and the WorkFlow under the File menu? Is is that the WorkFlow created as Task becomes part of a Task List? Is that the only difference, ie make WorkFlow creation part of Task List versus not part of a Task List?
Appreciate all your inputs
Thanks

Hi,
1. Probably you may try "Manage Security filters", but im not sure. If it doesnt work then no way other than creating two tasklists.
2. FYI, workflow will not promote either tasklist nor the webform. it only promotes the "DATA". u shud be careful creating forms for different level users ex: A basic user entry form cant be created for Next level user say manager. he l want to see only his entity level data not the level 0 in our terms.
3. File->Workflow : will be used to start the workflow by the administerator.
Tasklist Type-> workflow : Will be used by the "users" to promote their subsequent data entered or loaded at their level
Regards

SAP Security User Accountable Web Form

Similar Messages

Maybe you are looking for