Security 'path' for work repository permissions

I have a dozen work repositories.
I need to allow a developer to access one repository for metadata discovery - Read only, no updates.
Another Work repository, I need to allow a the developer to update the column and table descriptions in any model. I do not want this developer to add folders, models, sub-models, tables, or columns. I do not want the developer to update folders or models. I do not want the developer deleting anything. I do not want the developer accessing other work repositories.
What profiles do I need to give this person?
What modifications do I need to make to the permissions/profiles?

Hello,
ODI does not allow to define privileges on objects types depending on the work repository, but lets you define privileges on object instances depending on the work repository. In your case, you would need to define the privileges on the instances (using generic profiles). This is not exactly what you need, but this should do the trick.
See the "Defining the Security Policy" topic in the user documentation for more info.
Regards,
-FX

Similar Messages

How to change the path for dms repository in navigation iview

Hi all,
We integrate DMS in KM. With the documentexplorer iview we can navigate through the folders structure. So far so good.
But for the end-user it will be easer if they can startright from point X in the folder structure. Like dmsrm/aaa/bbb/..../X
It's not possible to change the iview path property to dmsrm/aaa/bbb/..../X, preview shows the message 'Item nof found
The item you are attempting to access is not available. Check that the name or link is correct. You might also check whether the associated repository is currently accessible'. For all the folders (except the root folder dmsrm) there is no acces link tab, so the ID, explorer URL and webdav URL are unknown. How to find out what the ID is?
Thanks in advance,
Vo

Try going to Options > Global Preferences > Paths tab, you will see the User Settings.
Nestor
National Instruments

Use AD Security Groups for SharePoint database permissions

In our SharePoint environment we have around 30 content databases. Each of these content databases need a few application pool accounts added to there permissions for various service applications etc. Currently all the accounts are added individually,
but this can be a little error prone. Is there a reason why we could just pop all the required accounts in an AD security group and add that database permissions in SQL?

You could do that, but your service accounts shouldn't be accessing the databases directly, instead routing through the SharePoint API, which then permissions would be taken care of by SharePoint accounts (or if you have custom Service Applications, the
service app pool account).
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Local path for p2 repository after product exprt

Hello,
When exporting my e4 product using the export wizard, with the "Generate p2 repository" checked, some link to local files are included (mainly in p2/org.eclipse.equinox.p2.engine/.settings/ *.prefs)
Is ther anything possible to avoid this ?
(as shown on Vogella's picture)

You have a version conflict with the mochaAE folder in there. Run the cleaner tool and start from scratch.
Use the CC Cleaner Tool to solve installation problems | CC, CS3-CS6
Mylenium

Error in Work Repository with Standalone Agent

Hi There!
Does anyone know how to identify and resolve the following error?
2013-08-06 09:04:03.897 NOTIFICATION ODI-1128 Agent agent001 is starting. Application Server: STANDALONE. Agent Version: 11.1.1.3.0 - 23/06/2010. Port: 1028. JMX Port: 2028
2013-08-06 09:04:37.052 NOTIFICATION ODI-1136 Starting Schedulers on Agent agent001
2013-08-06 09:04:37.325 NOTIFICATION ODI-1111 Agent agent001 started. Agent version: 11.1.1.3.0 - 23/06/2010. Port: 1028. JMX Port: 2028.
2013-08-06 09:04:38.963 NOTIFICATION ODI-1137 Scheduler started for work repository WORKREP on Agent agent001
2013-08-06 09:05:01.216 WARNING Agent HA proxy: Exception thrown on JDBC call, but connection is still OK. Exception will be rethrown.
2013-08-06 09:05:01.241 ERROR ODI-1219 Session preparation failure: database error while connecting to work repository WORKREP.
2013-08-06 09:05:09.594 WARNING Agent HA connection proxy: Retry method 'getConnection': Retry count = 3, retry delay = 15000
ERROR ODI-1219 Session preparation failure: database error while connecting to work repository WORKREP
2013-08-06 09:05:18.887 WARNING Agent HA proxy: Exception thrown on JDBC call, but connection is still OK. Exception will be rethrown.
2013-08-06 09:05:18.890 ERROR ODI-1219 Session preparation failure: database error while connecting to work repository WORKREP.
Any help is appreciated..

Hi!
I already verified this and the get successful connection.
The "ping" process between the two points is ok too.
there are any other idea?

Automatically set "volumes for work"

For every project I want to keep all relevant files together. Thus for each project I want to set the path for "working volumes" ( Final Cut Pro --> system settings --> volumes for work) and waveform cache, pictogramm cache and auto save automatically, project-dependant.
Is this possible, or will I have to change these settings manually every time I switch to another project? How do expert users handle this?
Best, Dietmar

It's not necessary to keep waveform or thumbnail cache with the rest of your project. As for everything else, FCP automatically creates a folder for each project and deposits the media you digitize into that folder.
It's a bad idea to keep your autosaves in the same folder as your media. The autosave vault should be in another place from the rest of your video and projects in case you have problems with corrupted projects, or if you lose a drive.
Now, I create sub-folders inside my media folder for additional elements that I don't digitize, but want to keep organized like music and pictures, graphics and outputted quicktimes.
Andy

Error while creating work repository

Hi all,
I am facing problem while creating work repository in ODI.
I have successfuly created master repository and also test connection comes out to be succesull for work repository.
But while i click on OK it gives CREATION error stating
No data found : \snps_login_security.xml(Access is Denied)
Thanks and Regards,
Priyanka

Hi ,
u r having Oracle DB......?
You have the databases and ODI installed in the same machine.....?
Have u chkd ur databse/schema rigts .....
can u plz chk on this front .....as well as the user/pw ur using for ur connections.....
Thanks
Ananda

Master & work repository Export/Import

Hi all,
I have installed ODI on the production server.
I have to import the repositories on this prod server from the development server.
1.I am not having seperate schema for the master repository for the prod & I have to use the same master repository that was created for the development server SOothere is no import & export ??
Question is
Can I refer the same master repository schema in the production server that means all the connection details i.e it will be the linking of same repository that was there for DEV?? Can I do that??
2. I have separate schema for work repository in prod but have to use the work repository of the DEV server.
here I have to do import & export???
Please guide
Thanks
Sourabh

How are you trying to do the import/export?
If you are importing the obejcts in designer - it will use the credentials you specified when you connected.
Craig

Work Repository Password

I am creating one more work repository. But at the time of work repository creation, It is asking about my exisitng work repository password. But i never set any password for existing password.
Is there any default password for work repository?

At which exact stage are you being prompted for this?
Have you tried leaving it blank?

After updating latest security update for my OSX 10.7.5 one of my usb port is not working now.how do i know what is cause that usb port is not working after security update

one of usb port in my macbook pro havent work after i ve updated latest security update for osx 10.7.5, how do i know what is cause that usb port is good or bad

On a Mac running v10.7.2, the only way to reinstall Safari is to reinstall OS X using OS X Recovery.
Safari 5.1.1 is for Snow Leopard. It will not run on a Mac with v10.7 installed.

VI Search Path not working in LV2011 for VI Server Plug-ins with exe

I have found what seems to be a problem with the search path when a LabVIEW 2011 built executable calls a Plug-in VI.
When the plug-in VI has subVI’s from vi.lib on its diagram the executable has to know where to find them. Not all VI’s in vi.lib are part of the run time engine or the dll’s that may get generated as part of the build. The things you have to do to make plug-ins work for an executable are explained in several Developer Zone articles. The article titled “How Can I Change or Set the VI Search Path for LabVIEW Executables” describes the ini file setting viSearchPath. When this is set to the vi.lib directory I have not encountered problems with previous versions up to and including LabVIEW 2010.
I have come across an example in LabVIEW 2011 where it doesn’t work. I have attached an example (I am using LV2011 SP1). It demonstrates the basic plug-in architecture. Everything works in the development environment. But it doesn’t work from a built exe. I haven’t included the actual built exe in the zip file in case that causes a problem downloading it. If you run the build spec from the src directory project file the exe should get generated in the bld directory. The problem appears to occur when certain VIs from the analysis library are in the Plug-in. In the example attached, the Plug-in VI is very simple but I have placed the troublesome SubVI on the diagram. The VI in this example where there is a problem finding it is the Butterworth Filter VI. I have placed it on the diagram in a conditional disable structure so it is easy to enable and disable. When enabled and you run the test Plug-in VI the error 1003 is raised, meaning a subVI cannot be found in the dynamically called VI (for example see this post). Note that a way round this may be to incorporate the Plug-in VI into the built exe but this shouldn't be necessary. It’s not a problem with this specific filter VI, as it occurs for other VIs I try on the diagram. However if you place an FFT VI on the diagram there is no problem. I suspect that one is built into the Run-Time Engine.
I also note I am running Win7 64 bit and 32 bit LabVIEW (note the relevant viSearchPath in the ini file – you may need to change if you are on different version of Windows). If the example is converted to LabVIEW 2010 everything works as expected for the built exe. I tried that on a colleague’s computer running XP and 2010 but I am pretty sure in still also works on Win 7.
Things I am suspicious of are that the analysis VI’s are part of a LabVIEW library (lvlib) and perhaps something has changed there? I understand there is a problem with OOP in LabVIEW 2011. Perhaps it is related to that as that seems to be an issue in 2011 (see this Discussion Forum post). Perhaps it is related to OS version?
I also tried generating a Source Distribution to extract out all the vi.lib VI’s and place them directly in the Plug-in directory. That didn’t help.
Interested in whether anyone else reproduces this behaviour. In any case something is different in 2011.
Attachments:
LV 2011 test Plug-in.zip ‏42 KB

I found some more out about this issue working with my local NI rep here in Australia. Apparently something has changed in the compiler between LabVIEW 2010 and 2011. Using the viSearchPath token in the ini file, as described in various Developer Zone articles, now guarantees that the Plug-in will not work. The only way to make it work appears to be to create a Source Distribution. I noted in my original post that I had already tried this and it would not work. It turns out that having the viSearchPath token in the ini file when using a Source Distribution causes the error 1003 to occur. When the token is taken out of the ini file the Plug-in (containing an analysis VI) with a Source Distribution works - in the simple example I posted.
Well I then found its a bit more complicated than this. It all worked for the simple example I posted. Recall we found the error when there was an analysis VI in the Plug-in VI. In our actual application (which is a large one) that calls Plug-ins - we still got the error 1003. By trial and error I found a workaround. There are certain Build Spec settings for the calling exe that I set and found worked. On the Additional Exclusions page I found that I had to make sure that I left unchecked "Modify Project Library File after removing unused members". I've always had trouble understanding the need for this setting. In the Build Spec Help on that page it notes that the build will take longer. In most builds you remove polymorphic VI instances, remove unused members of Project libraries and also Modify the project library file after removing the instances (this is a sub setting of the previous). This makes the exe smaller in size and a quicker build time. Obviously modifying the project library caused a problem. In the big application exe calling Plug-in, I probably have the same analysis VI on the diagram (I haven't actually checked and also whether it is the same polymorphic instance) and in the simple example I posted I definitely did not have VI in the calling exe example - so there may be some clue there. I should try putting the same analysis VI on the calling exe diagram in the simple example to see what happens but I'm running out of energy on this one :-(
So none of this gives me much confidence and I wish I could get a better explanation from NI regarding this behaviour to be sure I am not going to encounter a different problem for different calling exe and Plug-ins. I was advised that a CAR would be issued. Perhaps this is now expected behaviour for 2011 but it would helpful if some definitive explanation could be given about what has changed from LV2010. And an update of Developer Zone articles on the subject would be helpful.

If an internal ID is changed for the Work Repository how does it affect objects that are already in it? Will they continue to run or do you need to cycle the ODI agent?

I was having trouble migrating the Master and Work repositories from my QA to my Prod environment. I was getting an error message that the internal id's were alike so I changed the internal id in my Prod Master repository. Then I tried to migrate the Work repository and was getting a similar error. I did a search on the internet for the error message and it recommended that I renumber the Work repository so I did. My concern now is how these changes affect the objects that are already in the repositories? Will those objects continue to run? Also do these changes take affect immediately or do you need to cycle the ODI agent?

Well I cannot completely assure you but so far I have not faced any issues after a renumber. It will affect the exist object only when you have imported the object in synonym_update mode. I believe you have the daily backup of your production repository.
Bhabani
http://dwteam.in

Upgrade path for Cisco Secure ACS 4.X Solution Engine 1113 Appliance.

Hello,
I am having Cisco Secure ACS 4.X Solution Engine 1113 Appliance, and is running on version Cisco Secure ACS Release 4.1(1) Build 23 and now want to upgarde it to the latest version. Need to know the upgrade path for the same. As per my information ACS 4.1(1) runs on windows server and releases post to 5.X uses Linux. Please guide how can i upgrade Appliance 1113 from 4.1 to 5.x

Hi,
Cisco ACS 1113 appliance doesn't support ACS 5.x version. 1113 appliance supports till ACS 4.2.1 version.
Cisco ACS SE 1120/1121 appliance models are required for ACS 5.x
The upgrade path for ACS 4.1 to 4.2.1 version can be found in the following link :
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2.1/Installation_Guide/solution_engine/upgap.html#wp1237189
Regards,
Karthik Chandran
*kindly rate helpful post*

GRC CUP 5.3 SP16, detour path not working for SOD violations

Hi,
Something bazaar is going on in our requests processing and not sure if that's the way SAP has set it up.
We configured a detour path for requests with SOD violations to go to the additional stage of 'SOX Approver' but the first stage (manager) does the risk analysis and Mitigation assignment and then it goes to Role owner approver that approves the roles access. Once the role owner approves the roles , if the request had SOD violations, even if the mitigation was selected and approved by the manager stage, it needs to go to the SOX approver stage to approve the mitigation assignment before the request can be auto provisioned for any requests that had sod violations.
But it seems to skip the sox approver detour path stage after the role owner approval and go directly to auto provisioing. I thought that any requests that had sod violations inspite of having mitigation assignment in a previous stage can be detoured to the next path for SOX approval and then auto provisioned. Since SAP doesn't give different approval option to approve mitigation vs. approve roles, wherever you make the risk analysis mandatory, that's where the mitigation controls have to be assigned. But we want the option to detour the path to SOX approver to approve those mitigation controls b4 auto provisioning the request.
Any idea of how to fix this?
Is the detour only going to work if the mitigation wasn't assigned? But then how can you get approval for the mitigation on a different stage if the same person has to assign and approve that?
Will appreciate any feedback in this.
Thanks,
Alley

I was actually able to resolve the issue by adding the role approver stage first to the sox approver detour path.. this way..if the manager has roles with sod violations and updates mitigations for it, it goes to the role approver via detour path as well first and then to the sox approver stage b4 auto provisioining. So, that solved our problem. And if the request doesn't have SOD violations then it just goes to the next stage without detour which also has the role approver as the last stage.
Since I couldn't get the sox approver stage to show up after the role approver as originally anticipated since the request already had mitigation assigned at the manager level, we did the above scenario to fix the issue.
Requestor>Manager->Role Approver-->auto provisioning (without SOD violations)
Requestor>Manager> Detour (Role Approver>SOX Approver)->Auto Provisioning (with SOD violations)

How to set security type for lenovo working with hotspot?

How to set wireless security type for lenovo laptop working with hotspot?
Since I can connect with the other laptops except this brand.

//add related mutip-part to combine parts
MimeMultipart multipart = new MimeMultipart("related");
//attach a pdf
messageBodyPart = new MimeBodyPart();
fds = new FileDataSource("h:/something.pdf");
messageBodyPart.setDataHandler(new DataHandler(fds));
messageBodyPart.setFileName(fds.getName());
multipart.addBodyPart(messageBodyPart);
//add multipart to the message
message.setContent(multipart);
//send message
Transport.send(message);

Security 'path' for work repository permissions

Similar Messages

Maybe you are looking for