Setting ACL based on ACL of parent directory.

I would like to override the users default document and folder
ACL definitions and instead assign anything placed into a
particular folder the ACL of that parent folder.
I would prefer this behavior to not be global, but conditional
upon a particular directory (folder).
Thoughts?

one way would be to subclass Folder (and S_Folder) and override
the appropriate methods (addItem for instance) to perform the
security operation that you desire, such as setting the item's
SecuringPublicObject to the parent folder. Then, you could
create this special Folder (subclasses) where you wanted this
behavior to occur.
another way would be to write an agent that responded to addItem
events on the Folder(s) where you want this behavior to occur,
and the agent would perform the securing operation. this would
not be synchronous with the addItem operation, however.

Similar Messages

  • Role based authorisations in the Integration Directory

    We have built a new PI landscape (Pi 7.11) and worked with our security teams to perfect the various roles. I am now attempting to implement role based authorisations in the ESR & ID so that objects in our QAS and PRD environments can be configured but not deleted or created.I have implemented role based authorsations as per the SAP standard process performing the following actions
    Exchange profile com.sap.aii.ib.util.server.auth.activation was set to true and the Java Stack Restarted.
    I created a role in the ID that allowed editing of any object.
    I assigned the role to my userid in NWA useradmin
    I am unable to edit ANY object in the ID
    When I set the Exchange profile parameter to false I found I was able to edit any object in the ID.
    So its obvious that the Exchange Profile Parameter does make a difference. However, it doesn't appear as if the role I created is being referenced, even though I assigned it to my account in NWA user admin. I looks like I may be missing some exchange profile parameters. I have the following exchange profiles set:
    IntegrationBuilder.IntegrationBuilder.Repository com.sap.aii.util.server.auth.activation (string) = true
    IntegrationBuilder.IntegrationBuilder.Repository com.sap.aii.ib.server.acl.enable (boolean) true
    IntegrationBuilder.IntegrationBuilder.Directory com.sap.aii.util.server.auth.activation (string) = true
    IntegrationBuilder.IntegrationBuilder.Directory com.sap.aii.ib.server.acl.enable (boolean) true
    Any advice you can offer would be appreciated

    Resolved this issue.
    The documentation is confusing but finally found the answer by referring to the SAP XI 3.0 documentation.

  • Save As in Parent Directory

    I am trying to create an process and action that does the following:
    Process outside of PS that stages files for edit
    PS Action to set selection(s) (each selection is on its own channel) on the original tif
    PS Action to open Background template file (.bmp file)
    PS Action to paste selection(s) in place (from channels) into .bmp file
    PS Action to flatten document
    PS Action to Save As a .bmp using the current file name one directory up
    Process outside of PS that cleans up and moves files
    I am good on steps 1 through 5 and 7, but cannot figure out step 6 in a Win7 environment.  Basically, I edit images in a staging folder before moving them to the parent.  Then the parent folder is cleaned up and pulled into a permanent storage location.  So the workspace looks like this:
    Starting file structure (three .bmp files and two subfolders in ...\parent)
    ...\parent\File1.bmp  {old}
    ...\parent\File2.bmp
    ...\parent\File3.bmp
    ...\parent\Delete\
    ...\parent\Working\
    Next step:  New File1.tif is sourced and placed in Working Folder, Current File1 is moved to Delete Folder
    ...\parent\File2.bmp
    ...\parent\File3.bmp
    ...\parent\Delete\File1.bmp  {old}
    ...\parent\Working\File1.tif
    Next step:  Edit File1.tif in Working Folder and run final action - Save As .bmp in one folder up (...\parent\)
    ...\parent\File1.bmp  {new}
    ...\parent\File2.bmp
    ...\parent\File3.bmp
    ...\parent\Delete\File1.bmp  {old}
    ...\parent\Working\File1.tif
    Last step, Cleanup:  Remove the Delete/Working subfolders, move files to new location
    ...\parent\File1.bmp  {new}
    ...\parent\File2.bmp
    ...\parent\File3.bmp
    How can I do the Save As step??

    I am just using parent to illustrate.  It actually looks like this, where parent and file names are variable and each edit work driver may require editing a different {old} bmp:
    ...\04969\1234_1.bmp  {old}
    ...\04969\1234_2.bmp
    ...\04969\1234_3.bmp
    ...\04969\Delete\
    ...\04969\Working\
    How would the coding change for the following:
    1) Working multiple edits and editing different files each time
    2) Working multiple edits and and the names of the parent directory changed for each edit? 
    3) Working multiple edits and and the names of the files changed for each edit? 
    So Edit 1:
    ...\04969\1234_1.bmp 
    ...\04969\1234_2.bmp  {old}
    ...\04969\1234_3.bmp
    ...\04969\Delete\
    ...\04969\Working\
    Edit 2:
    ...\04969\1236_1.bmp 
    ...\04969\1236_2.bmp
    ...\04969\1236_3.bmp  {old}
    ...\04969\Delete\
    ...\04969\Working\
    Edit 3:
    ...\89001\2255_1.bmp  {old}
    ...\89001\2255_2.bmp
    ...\89001\2255_3.bmp
    ...\89001\Delete\
    ...\89001\Working\

  • Installing oracle 11.1.0.6.0 in the same parent directory on Linux server(OEL 5),

    Hi All, This was regarding installing Oracle 11gR1 on the same linux server machine, where oracle 10.2.0.1.0 resides, i tried to install 11g on the same parent directory /u01 where 10g directory present, i.e,
    for 10g - /u01/app/oracle/product/10.2.0/db_1/
    and
    for 11g - /u01/app/oracle/product/11.1.0/db_1/
    my doubt is whether /u01/app/oracle/oraInventory/  will be disturbed ? at the stage of executing configuration scripts, oracle prompted only for root.sh script and didn't ask for oraInstroot.sh?
    will the 10g features gets affected ?,
    I found 10g database opening successfully after running it's bash_profile, and also when 11g database needed, it also opened successfully (in another session) after its  seperate bash_profile being executed in another session,

    You may be confused between ORACLE_BASE, actually the common directory of both ORACLE_HOMEs (one for 10g, one for 11g).
    /u01/app/oracle is your ORACLE_BASE where sit the oraInventory and some other common folders.
    /u01/app/oracle/product/10.2.0/db_1 and /u01/app/oracle/product/11.1.0/db_1 are your two ORACLE_HOME to hosts dedicated binaries for each version.
    Set the ORACLE_HOME/PATH env. variables in the OS session level according to the version you want to work on in that said session.
    Nicolas.

  • After uploading, template is gone and only parent directory shows

    I'm using Dreamweaver CS4 and uploading to Yahoo for my website. When I try to use the preview in browser, the page shows as blank, and when I upload, only the parent directory shows. How can I fix this?
    The website is: http://www.optimumtx.com/
    Thank you for your time

    Uhmmm... It looks like you haven't named your default starting page correctly - Yahoo hosting is looking for "home.html" to start from and you currently don't have any document titled that. And seeing your list of files (based on your link you supplied) you also have index.dwt up on the server. The .dwt file extension means it's a template! That's only useful in Dreamweaver to create new pages from and has no business being up on your server. Fix that start page issue and you'll most likely resolve the majority of your issues.

  • Renamed parent directory doesn't stick

    I have a parent directory located on a remote volume on my server. Lightroom chose to name my directory,
    2006 at /Volumes/Photos/JimsPhotos/15D RAW
    This is because there's also another directory on the server named,
    2006 at /Volumes/Photos/JimsPhotos/1D60 RAW
    But I'd rather see the names as, 2006 5D RAW and 2006 D60 RAW. However, when I change the directory names, they stick until I exit and relaunch LR when they get changed back to their originals -- and of course the name is so long I can't read it in the Library.
    Bug or ??
    [MacBook Pro, 2gb ram, 200gb hd, OS X 10.4.8]

    I just did some experimenting and I've come to these conclusions.
    Shared Volumes (or the top level shares on a computer) will go into devices, and you have to set them as login items also to get them to mount at startup. Making an alias to them will also work if you don't want to have them connect at login.
    Folders within shares will only go into Places. You don't have to make an alias of the folder, though.
    I think it has to do with the Mount Point. As the Volumes are Devices in the unix world, they can only show up if mounted. However, the folders are just aliases to network locations so they stay put.
    So, if you have multiple volumes that you don't want to automount at login, mount them, put them in the Devices section, and make aliases to them in a folder that you place in the Dock. Then, you can mount them from the dock and they should then appear in the sidebar.
    Place any folders in the Places section, or do the same as you do with the Volumes.

  • Newly Created Sub-Directories Don't Have Parent Directory Permissions

    Hoping someone may be able to shed some light on this.
    Background:
    Running 10.4.11 as a file server on a PPC G5 in a small creative office. We have a handful of users accessing via AFP. No other services are running.
    I'm using Workgroup Manager as admin tool.
    Top level directory has permissions set to Read & Write for Owner, Group & Everyone.
    Issue:
    When an authenticated user creates a new directory on the server, the new directory does not honor the parent directory permissions for all three user tiers.
    Rather, in getting info, the owner is momentarily set to the user who created the directory with read & write, then switches to (unknown) with r&w. The group is momentarily correct and then switches to (unknown) despite the creating user being part of a specific group, and has Read only permissions.
    Everyone has Read only permissions.
    If a user attempts to fix permissions on a directory they just created, they are unable to do so.
    So, throughout the course of the day, I am bombarded with "I don't have permissions...", wherein, i use remote access to hit Workgroup Manager and do a global propagation down of the parent directories permissions to allow access. Until someone else makes a directory
    This can't possibly be right. Newly created directories should be set to the parent directory permissions, if i'm not mistaken.
    Anyone? Any insight?
    Michael B.

    oh yes.. you are right... its accessible in
    http:://rishtey.local/default_1.html
    successfully... thanks for that... first of all
    now issue is: when i access http://rishtey.local/test.php which contains just a tag to display php info only...
    instead of rendering this php file, it just save the file in the download folder.
    what could be the issue with it?

  • How to get immediate parent directory name of a file

    Hi,
    I have file Object that points to a file. I want to know how I can get just the name of the parent immediate to the file For example, if the path of this file is, c:\\ProgramFiles\first\second\third\myFile.txt
    In the above, how can I obtain the last directory in which myFile.txt resides ?
    Thanks
    Sangeetha

    File myFile = new File("c:\\ProgramFiles\\first\\second\\third\\myFile.txt");
    File parentFile = myFile.getParentFile();
    String parentDirectory = parentFile.getName();
    System.out.println("Parent directory is "+parentDirectory);Here's the explanation...
    1) New File is created
    2) File.getParentFile returns the immediate parent of the current File, which happens to be a directory.
    3) File.getName() returns the name of the File, without the entire directory structure.
    Hope this helps :)
    Simon

  • How to get the list of Group set in each Users in MS Active Directory

    Hi. I would like to know if you know how to get the set group of each user in Active Directory?
    We have this sample code
    String INITCTX ="com.sun.jndi.ldap.LdapCtxFactory";
    //String MY_HOST = "ldap://myserver/ou=dev,dc=test,dc=com,dc=ph";
    String MY_HOST ="ldap://myserver.dev.test.com.ph:389/dc=dev,dc=test,dc=com,dc=ph";
    String strUsername,strPassword;
    try
         strUsername = Request.getParameter("username").toLowerCase().trim();
         strPassword = Request.getParameter("password").toLowerCase().trim();
         Hashtable env = new Hashtable();
         env.put(Context.INITIAL_CONTEXT_FACTORY, INITCTX);
         env.put(Context.PROVIDER_URL, MY_HOST);
         env.put(Context.SECURITY_AUTHENTICATION, "simple");
         env.put(Context.SECURITY_PRINCIPAL,strUsername+"@dev.lst.com.ph");
         env.put(Context.SECURITY_CREDENTIALS, strPassword);
    After validating the User Name and Password the next task is to Retrieve the group list of the User.

    Nope I want the log-in user to retrieve its Group where he is belong. I have this following code
    strUsername = Request.getParameter("username").toLowerCase().trim()+"@dev.test.com.ph";
    strPassword = Request.getParameter("password").toLowerCase().trim();
    Hashtable env = new Hashtable();
    env.put(Context.INITIAL_CONTEXT_FACTORY, INITCTX);
    env.put(Context.PROVIDER_URL, MY_HOST);
    env.put(Context.SECURITY_AUTHENTICATION, "simple");
    env.put(Context.SECURITY_PRINCIPAL,strUsername);
    env.put(Context.SECURITY_CREDENTIALS, strPassword);
    // enable tracing
    env.put("com.sun.naming.ldap.trace.ber", System.err);
    // Create the initial context
    DirContext initCtx = new InitialDirContext(env);
    // Get the target context
    DirContext targetCtx = (DirContext)initCtx.lookup("");
    SearchControls constraints = new SearchControls();
    constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
    // Perform the search on the target context
    NamingEnumeration enum = targetCtx.search("","(userPrincipalName="+strUsername+")",constraints);
    javax.naming.directory.Attributes attrs;
    NameClassPair item;
    String[] attrIds = new String[]{"MemberOf"};
    // For each answer found, get its "Groups" attribute
    // If relative, resolve it relative to the target context
    // If not relative, resolve it relative to the initial context
    while (enum.hasMore()) {
    item = (NameClassPair)enum.next();
    Out.println(item);
    attrs = targetCtx.getAttributes(item.getName(), attrIds);
    Out.println(attrs + "<br>");
         initCtx.close();
    It returns all this string :
    {memberof=memberOf: CN=CMCanadaRD,OU=Groups / Teams,DC=dev,DC=test,DC=com,DC=ph, CN=iMngrCanadaRW,OU=Groups / Teams,DC=dev,DC=test,DC=com,DC=ph, CN=Domain Users,CN=Users,DC=dev,DC=test,DC=com,DC=ph, CN=Backup Operators,CN=Builtin,DC=dev,DC=test,DC=com,DC=ph, CN=Administrators,CN=Builtin,DC=dev,DC=test,DC=com,DC=ph}
    How can i retrieve the Group named CMCanadaRW and CMCanadaRD on the Attribute?
    Thanks

  • Reading files from the parent directory

    Hi all, I'm just wondering if files can be read from the parent directory.
    I've created a package and realise that for one function it needs to read from a file which was created in the parent directory. I've tried:
    BufferedReader inPut =
    new BufferedReader(new FileReader("../file.txt"))
    but it's still saying that it can't find the file.
    Any ideas if I can read that file?
    Thanks

    How about using the getParent() or getParentFile from the File class?

  • Obtain parent directory of WEB-INF from within a servlet

    hi to everyone!
    i have got a directory containing a WEB-INF directory (with web.xml and all the other stuff necessary). Hoy is it possible to obtain the parent directory of WEB-INF directory FROM WITHIN A SERVLET, put in lib directory?
    let's say:
    A----WEB-INF---classes
    ---lib----MyServlet.jar
    ---tlds
    ---dtds
    How can I get A from within MyServlet.jar? Please help. Thank's a lot...
    Wendigo

    getServletContext().getRealPath("WEB-INF")

  • Parent directory ./Users/Shared/SC Info does not exist

    When I repair my Permissions, I always get this message: parent directory ./Users/Shared/SC Info does not exist
    I think it had something to do with Safe Eyes, which I uninstalled.

    Actually, I'm not sure, but I think that message may be normal if you have deleted the folder. The terms "SC Info" folder and "SC Info.sidb" both appear in the '/usr/bin/strings' output for 'DiskManagementTool', which is involved (somehow) with permissions verification and repair. I get the impression from the web that the items have something to do with iTunes DRM...

  • Parent directory paths missing after PDFMaker conversion

    I have hyperlinks in a Word document. Relative path links to documents in subfolders (e.g. "subfolder/subdoc.pdf") work fine after conversion to PDF using PDFMaker However, links to a parent directory (e.g. "../parent.pdf") are incorrect after conversion to PDF: the PDF file link is just "parent.pdf".
    This is in Acrobat 8 -- has this been fixed in a later version of Acrobat?
    Or, am I missing something? Wiring in absolute paths isn't acceptable.
    Thanks
    Brian

    Thanks for the reply! You're correct; this should be under 10.5 mail services. I'm not sure how the post ended up here, though I'm sure it's my fault.
    Thanks for the information on what this file does. Permissions are a possibility, but the underlying problem is that the system is looking for the file in the wrong location. The mail isn't at /var/imap/ anymore, and I've renamed /var/imap/ to /var/old_imap/ to spot just this sort of thing. What I'm trying to find is what in the system is still pointing to /var/imap/ and trying to find a file there. If I could find that, then I could repoint it to the correct path and resolve the issue. It looks like the call is coming from postfix (with the master process), but I see nothing in the postfix config files that would make it still look at /var/imap/. That's what puzzles/concerns me.
    Did I explain that well? Thanks again.

  • Parent Directory

    i need Help!
    My parent directory displays in the web browser. How do i
    get rid of this. i am pretty new to websites so any suggestions
    would be greatly appreciated..
    THANKS

    PCL_Jennifer wrote:
    > i need Help!
    > My parent directory displays in the web browser. How do
    i get rid of this. i am pretty new to websites so any suggestions
    would be greatly appreciated..
    > THANKS
    Talk to your host, or place an "index.htm(l)" in your parent
    folder,
    or if you're hosted on UNIX, google ".htaccess"
    Mick

  • How do you set location based reminders with location restrictions turned on?

    I can set location based reminders with location restrictions turned off, but I want them on. Otherwise if I lost or if somebody stole my iPhone they could just turn off the find my iPhone function. Yet if I have location services restricted to prevent this then location based reminders are unavailable. Any help would be appreciated

    I can set location based reminders with location restrictions turned off, but I want them on. Otherwise if I lost or if somebody stole my iPhone they could just turn off the find my iPhone function. Yet if I have location services restricted to prevent this then location based reminders are unavailable. Any help would be appreciated

Maybe you are looking for

  • How can I combine originals, modified, and data files?

    I just ran into a huge problem. I have about 33,500 pictures, and my startup disk is beyond full. I all of a sudden realized that I have three copies of every single picture I have. One in the modified folder, one in the originals folder, and another

  • Width of Component - Regardless of Internal 'includeInLayout'

    Hey there, I'm curious to know if there is a way to obtain the width of a component in Flex, that will disregard the 'includeInLayout' property. Example: If I have two rectangles in a component, side by side. One rectangle has a width of 10, the othe

  • Is there a way to access purchase history of my itunes account  on I phone

    there a way to access purchase history of my itunes account  on I phone I need to pay outstanding  monies and have no money in my bank account till after the weekend. I purchased a itunes card. But I need to access purchase history from my itunes acc

  • Trying to install OS on mcs-7825-h2 for unity

    Hi, I'm trying to install w2k os on an mcs-7825-h2 but the smartstart cd (7.40) doesn't have the sata raid drivers. As these servers don't have floppy disks has any one got any info on how to do this? Rgds Andy

  • MBO update query issue

    Dear All when i create MBO and try to execute the update query it give me a success but it is not reflect the Database. update Timesheet set StatusName='from SAP1231231' where TimesheetId=118729. Regard Ali