Search Portal Roles problem

Hi,
I have a problem enabling the portal roles search. I have followed this guide:
http://help.sap.com/saphelp_nw04/helpdata/en/b2/d59a4271c80a31e10000000a1550b0/frameset.htm
The problem is that when i enable the portalRolesSearch in the index managemant service search does not work at all. I get the following error when trying to search:
Error during search occurred - com.sapportals.wcm.WcmException
Does anyone know what the problem might be?
Regards Thomas

Hello!
We get the same error. We are on Ep 6 SPS 15. Did you get any other information on this issue or have you opened an OSS call yet?
Regards, Christian

Similar Messages

Abap+java abap-user and portal-role PROBLEM?? help

We have the ABAP+java add-on install.
The UME is by default ABAP engine.
From Portal:
1 I create a portal user, it ALWAYS creates ABAP user in ABAP engine.
2. I create a portal role, it creates a role in the Portal.
3. When I assign the user this portal role,
having worksets and pages,
I get no pages or worksets shown in the portal page as soon
user logs in.
Can you help configure this so that I could see the pages and iviews inside this workset when user logs in.
Thanks a lot.

Hi Mike,
You did right,
Just check the Entry Point Property of your iView, page and workset to YES
there are two radio buttons yes and no select the yes one,
you can see your pages afte rlogin with the new user.
Regards
Abhimanyu L

No portal roles are assigned for this user.If this problem persists, contac

I am trying to access portal first time using j2ee_admin user. It is saying "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
iam using abap+java enginee how config in abap enginne ,iwant which role to assign j2ee_admin user
i already asiigned sap_j2ee_admin,SAP_BC_JSF_COMMUNICATION,SAP_BC_JSF_COMMUNICATION_RO but it show same problem
please help me..
Edited by: Mugala Balu on Aug 7, 2010 5:53 PM
Edited by: Mugala Balu on Aug 8, 2010 7:48 AM

Balu,
Well this issue has been discussed many a times in forums. You would have to point your data source to ABAP system.
Check this thread in [here|J2EE Failed to start , after changing UME datasource;.
Good Luck!
Sandeep Tudumu

Portal Roles Search & TREX Search

Hello,
We need to search some pages and documents. The search results should be based on the permissions set for that user on the pages and documents. We created Portal Roles Search. It works fine for pcd objects. But it doesn't work for documents.
When we create an index with TREX Search service, it works for documents. But it doesn't consider the permissions.
When there are 2 search indexes, one with TREX Search and the other with Portal Roles Search, the TREX Search throws WcmException.
Any ideas?
Regards,
Rukmani

Hi Sudha,
Portal Roles Search
The objects found using the portalRolesSearch index service in the PCD cache are converted to KM objects and can be displayed in the search results list.
http://help.sap.com/saphelp_nw2004s/helpdata/en/b2/d59a4271c80a31e10000000a1550b0/content.htm
TREX Search
Enables the retrieval of information
http://help.sap.com/saphelp_nw70/helpdata/EN/42/60adaa032c1422e10000000a114cbd/content.htm
TREX Classification
Helps in the classification of documents.Classification causes documents to be assigned to one or more categories of an existing taxonomy
http://help.sap.com/saphelp_nw04s/helpdata/en/bf/a17a05d15211d6b2c700508b6b8a93/content.htm
It depends on the kind of search you want to enable for your project.
Hope this helps.
Cheers,
Sandeep Tudumu

Assigning Portal Roles

Hi All,
We have installed EP 7.0. The problem we are facing is : The "Portal Content" folder is not displayed under the "Browse Category" of content administration & system administration.
Why is it so? Do we need to add some other portal Roles to the user? If so.., which role we should add?
Also we are trying to add the portal role ID
" com.sap.pct.pdk.JavaDeveloper". But when we search for this role , we could not found this role. Whether the role has been renamed?
Kindly provide your suggestion on the above queries.
Regards,
Eben.

Hi,
Re: How to create and assign role
Portal:How to assign a Folder to a Role in Protal
I hope the above links will help you,
Regards,
Harish

How do you test portal roles and/or ESS roles if testid is not in LDAP?

We have a process but it is hard to maintain and not very secure. I was wondering how other Security Admins solve this problem.
For examplle, we have users who use ESS, MSS, Adobe Forms and a few other portal roles. And, all of them are using the LDAP to authenticate users.
Our Basis guys have created test ids in the Portal but they need to be asisgned directly to a pernr (on Infotype 0105) in order to obtain the right information in the portal.
I'm curious as to how others maintain this process.
All suggestions and recommendations are welcome.
Thanks,
Penny

If the Basis team has created the test-id on the portal, assign the MSS/ESS role as per the business process
make sure to create the same userid on the backend system and assign the userid to a pernr
Assigning userid to PERNR lot of postings are available to do this please search.
Also I remember at one of my customers project the portal was configured to have "parameter setting" on the portal rather than the backend system.
summary: Userid - UME/LDAP ( Basis already created it in your case )
                              Portal roles ESS/MSS   - assigned to userid
                              ECC/HCM system roles -assigned to userid ( after PERNR is tied to userid)
                              Paremeter setting to be done on portal
Regards

Re: Portal roles are Inconsistent

Recently my systems are upgraded from SP 13 to SP 16. Up to now EPA is working fine with SP13. But now I imported same EPA file in SP 16 system. In some machines some roles are working but same roles are not working in another SP 16 level systems. My Portal is not a FPN.
Regards
Narayana
Edited by: narayana on Dec 9, 2008 5:36 AM
Edited by: narayana on Dec 9, 2008 5:36 AM

Hi Michael,
My problem is solved by SAP support team. Below is the reasons and solution
When assigning a portal role to a user, permissions to the user on the
role are automatically created. These automatic permissions are called
Inner ACLs.
Sometimes, when transporting content between portals, the Inner ACLs arenu2019t created. This is why you could not see the role for the user.
After you logon to the portal with a super administrator user, change
the relative URL to : http://<server>:<port>/irj/servlet/prt
/portal/prtroot/com.sap.portal.admin.acleditor.listPermissions (you can
also do this through the URL http://<server>:<(>
<<)>port>/irj/servlet/prt/portal/prtroot/PortalAnywhere.Go and search
for "listpermissions"). After few minutes you should see a page that has the permission information of the portal. Scroll down all the way, if
you see a button on the bottom, click on it.
Thank you Michael and Others
Regards
Narayana

Page w/3 Iviews will not display all iviews thru Portal Role?

Hello All,
I am having a problem with getting 2 of 3 iviews to display through my portal role(s). 1 of the iviews is a copy (generated thru the wizard with same properties) of the SAP Bank information iview and the other 2 I created in the KM content (1 is an image and the other is html). If I preview the page, I see all 3 of my iviews with no problem.
Just a little history, I created a new area page called payments which I tied Bank Information and w-4 to via config in the back end. I z copied all my resources and tied the correct PCD to them.
It almost seems that it is still calling the SAP delivered Bank information? But, I checked all my config and nothing that is configured is pointing to there iview/page?
Any suggestions would be greatly appreciated.
ESS 1.0 - EP7.0
Thanks,
Mike

Hello Priya,
Thank you for getting back to me so quickly on this. I did create a z copy of the bank information service and called it z_employee_bank_us_serv05. I created the iview with application name 'per_bank_us' and as for the 'Application Parameters', I did not fill anything in which leads me to my next question.
I know when I create a new area, that I need to fill in the application parameters of the path to the 'Area group pages'
(Example: sap.xss.menuarea=Z_EMPLOYEE_BENEFITPAY_ERP2005&sap.xss.menuargrp=Z_SAPDEFAULTESS_ERP2005&sap.xss.menuhdr=SAPDEFAULT),
What would the verbage that would need to be added to the application parameters for this just to point to the service?
THX

Role problems

Our organization is beginning to implement roles and I was doing some testing. I added a role with following attributes in our SunONE 5.2 patch 2 directory:
dn: cn=role1,ou=roles,o=calgary regional health authority
objectclass: top
objectclass: LDAPSubEntry
objectclass: nsRoleDefinition
objectclass: nsSimpleRoleDefinition
objectclass: nsManagedRoleDefinition
cn: Role1
description: Test Role 1
The problem is, I can't see or search this role at all, even using the directory manager account!! The following command doesn't find anything:
ldapsearch -h XXXX -D"cn=directory manager" -wXXXXX -b "ou=roles,o=calgary regional health authority" "(objectclass=nsManagedRoleDefinition)"
Even if I change the filter to objectclass=*, it still doesn't return the entry? What gives? I know the schema is correct and schema checking is enabled and objectclass attribute is also indexed.

An example of the search that shows using (&(objectclass=nsManagedRoleDefinition)(objectclass=ldapSubEntry)) is in the Getting Started Guide for 5.2, http://docs.sun.com/source/816-6696-10/cmdline.html#14974
I admit DS has so many features that the volume of doc can be overwhelming at times.
Mark Craig
DS doc lead

Accessing portal roles in webdynpro for java

Hi,
Please let me know how to access portal roles in webdynpro for java.
Rgds,
Patana

Hi ,
Please use this API to access the portal roles:
IRoleFactory fact=UMFactory.getRoleFactory();
Also see this code to get more information of role using code:
IRoleFactory rolef=UMFactory.getRoleFactory();
IRoleSearchFilter searchfilterrole= rolef.getRoleSearchFilter();
ISearchResult searchResult = rolef.searchRoles(searchfilterrole);
while(searchResult.hasNext())
String unq=(String) searchResult.next();
IRole role1=rolef.getRole(unq);
String roleName = role1.getDisplayName();
String roleID = role1.getUniqueID();
// Once you get the informationof role you can use it in your application as per your requirement.
Also please note that:
You should add "com.sap.security.api.jar" to your project`s java build path for getting the Portal Security API's.
I hope this solves the problem. Please revert back incase you need any further informationon this.
Thanks and Regards,
Pravesh

Role Mapping For Portal Role Assignment and ABAP Role Assignment

Summary:
- Under the GRC configuration of Roles> Role Mapping we are trying to utilize the role mapping feature in GRC for associating a dependent role to a main role.
- We want to use this role mapping feature for the purposes of adding an Enterprise Portal role for every ABAP role that gets approved for the user in an ABAP component system (i.e. ECC, BW, CRM etc). We will have a 1:1 mapping of Enterprise Portal role to ABAP role defined in the role mapping section in GRC.
- We want to set up the workflow in such a way that the main role (ABAP role) is the only role that needs to be approved. The dependent role (Enterprise Portal role) should be added or not added based on the approval or denial of the main role (ABAP role). In other words if the role owner for the abap role approves the abap role, then both the abap and EP role will be provisioned by GRC and if the role owner rejects/denies the role, then neither the abap or EP role will be provisioned by GRC.
Problem Description:
Our Scenarios we tested:
Scenario 1:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator B & workflow B (routes to auto approval or no approval)
*Problem with the Scenario 1setup above, the dependent role will always get approved & provisioned regardless of the approval or denial of the main role.
Scenario 2:
Main Role: Attached to Initiator A & workflow A (routes to single approver based on role)
Dependent Role: Attached to Initiator A & workflow A(routes to single approver (same as main approver) based on role)
*Problem with the Scenario 2 setup above, the dependent role will always also need to get approved by the same approver as main role and it opens the possibility that the approver may accidently approve the main role and deny the dependent role, which is not the ideal setup as we inherit the risk of human error.
Questions:
1. Does the dependent role need to be defined in an initiator at all since it will never directly be requested directly?
2. If the dependent role does need to be in the initiator file, please describe how to properly setup the initiator and workflow stage & path so that we can maintain the desired relationship with the main role approval dependency? (if the role owner for the main role approves the main role, then both the main role and dependent role will be provisioned by GRC and if the role owner rejects/denies the main role, then neither the main role or depedent role will be provisioned by GRC
Edited by: Rene Griffith on Feb 26, 2010 10:22 PM

I tested this set up.
1. Defined ABAP role as Manin role
2. Defined Non-ABAP role as dependednt role
3. ABAP role is set up in initiator requiring business approval.
4. Non-ABAP role is set up in initiator with no approval required.
Results Where Business Approver approves the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is approved and Non-ABAP role and ABAP role is provisioned.
Results Where Business Approver rejects the ABAP Role
1. Only the ABAP role is displayed in approver view which is desirable.
2. ABAP role is rejected but Non-ABAP role is provisioned which is not what we want. We want the Non-ABAP role not to provision if the ABAP role is rejected by the business approval.
Thanks again for your help.

ABAP roles v/s Portal Roles

Hi All,
Currently I was going through EP security docs where I came across this
"An important difference between ABAP roles and Portal roles is that in the portal,no authorizations are defined for the backend application itself. This must still be
done within the backend applications (for example, mySAP ERP)."
Can somebody plz explain me this..
Would also like to know more difference between ECC and EP security,
Thanks,
Ajit

Hi Ajit,
I have been looking into this for some time as well, but am still not sure of some things myself nor which scenarios fit best to which security aspects.
My understanding is that it depends on how the portal is connecting to the backend.
If the portal user is the backend user, then the portal role is just a permission to click on things in the portal. The portal roles are mapped to the backend roles in the ABAP system (so you can, and need to, define what that portal role can infact do when the portal user "clicks" in the backend, using the backend roles of the same backend user context).
If the portal user is not the backend user (i.e. it is a system service for generic access to the backend), then you should restrict the backend access to the bare minimum of that service and control the security in the portal application (the calling application) as the backend user context is not the same.
So it is a "design" answer as well...
There are a few good posts about this if you use the search. If you find a good one, then please link it here so that others who use the search and follow up on their questions can use it as well.
At the top of the forum, there is a sticky thread on FAQs and other usefull discussions. Sadly, portal security does not have any links yet, so if you find a good one then let me know.
Cheers,
Julius

Portal Role(s) to be granted for Content Management

I am looking for the names of the Portal Roles that needed, in order the users to have access to "Content Management / Administration' area.
So far, I have the roles for "Business Intelligence" and "Business Explorer".
Best regards,
Tom

Hi Sandeep, thank you for your reply!
Do you happen to know the exact name of the roles ??
While in 'User Administration' editing the 'Assigned Roles' of a user, I cannot find any roles when searching for 'Conent' !!!
Best regards,
Tom

Modify the default "No portal roles are assigned..." message iView

Hi,
When a user with no roles assigned is trying to access the EP6 SP9 portal, he/she is facing a warning message:
"No portal roles are assigned for this user.If this problem persists, contact your system administrator."
accompanied by a 'log off' link.
Is it somehow possible to change the look and feel and/or behaviour of this message?
For instance, we would like the message appearance to be more 'friendly' and with a link where they can find further assistance, etc.
With best regards,
Robin

The window for logoff is part of the masterhead. So i think you can modify the masterhead pasr file for that.
Its location is at...
usr/sap/<instance>/JC00/J2EE/cluster/server0/apps/sap.com/irj/servlet_jsp/root/web-inf/deployment/pcd.
In this folder you can find the com.sap.portal.masterhead.par.bak
this file can be imported to your developer studio and can be editted and uploaded.
hope this helps
Cheers
gEorgE

How to fetch Portal Roles ??

Hi,
I am using UME Api for handling users. But i am uable to fetch the Portal roles. Using ume apis we can fetch ume roles but not portal roles.
I am able to manage the users using the same ume apis.
The current version EP 6.0 SPS02 is the what i am using at my end.
The program which i am running outside the EP, I am trying to fetch the portal roles on standalone java program (not a servlet but a simple java program using ume apis) and i am unable to fetch any roles.
if someone have faced the similar program then pls let me know how i can fix it this issue since it is little urgent and i have been stuck with this problem for quite sometime. If you can give a sample code that would be great.

HI,
Refer to this Threads
Re: Extracting information from PCD through java program
Re: How to retrieve role Info

Search Portal Roles problem

Similar Messages

Maybe you are looking for