SOA Composer and Dictionary Access Control

Hi,
I've a SOA composite application (11g) with multiple oracle rule dictionaries in it which is deployed on a weblogic domain. I can login to soa composer and then edit and deploy the rules runtime. I'm trying to find a way out where by I'll have multiple soa composer users, each having access to only a pre-configured dictionaries. Currently, the default behavior is that every login has access to each and every diuctionary deployed within the composite application.
Is it possible to control the dictionary access within a single composite?
Thanks
--manoj

The answer couldn't help us much. I will give you the steps we have followed in detail
We have created a sample customizable BPEL process by selecting a Customizable checkbox in Jdev.
Then,The sample BPEL process is deployed to SOA server from JDeveloper. We could see the deployed BPM process in EM console.
Also the MDS repositories required for customization too are present in EM.
Then We tried accessing the BPM Composer to do some customization on the sample BPEL process deployed. We are able to login to the BPM composer using "weblogic" user.
But the composer displays only the welcome page. There are no other links enabled.
Please let us know How to make a BPEL process customizable using BPM composer.
Also there is an another SOA Composer. When this composer is mainly used?
There is another BPM Workspace console. But we could not login to this using "Weblogic" user though we are able to login in EM, SOA and BPM composer.
Why the login failed uisng "weblogic" user here?What for this console is used?

Similar Messages

SOA Composer and editing Routing Rules

I have been trying to edit my human workflow routing rules decision table from the SOA Composer web interface. the routing rules appear in the list of ruiles available to open and edit but when I open the routing rules it defaults to the IF/THEN view and the decision table view isn't available from the dropdown. The SOA Composer does however work for more general decision tables that aren't routing rules, is there something special about routing rules that makes them no editable at runtime via the SOA Composer?

Hi Naresh!
The state of SOA composer in the Weblogic console is 'Installed' but not running! When I try to start the soa composer it shows:
Application composer does not have any targets.
All of the Deployments selected are currently in a state which is incompatible with this operation. No action will be performed.
And because of this the browser display nothing!
Thanks!
Ana

Designing a network with 6 base stations and an Access control lists

I have 6 airport extreme (802.11n) base stations setup in my studio.
I'm a little concerned about security as they're all setup individually (wireless mode: Create a wireless network) with the same Network names (mystudio) and WPA/WPA2 personal password so my roaming users don't have to keep entering passwords / experience dropouts etc
i have lots of freelancers who are in and out of the studio and there isn't anyway for me to monitor who is currently connected to my wifi network.
i'd like to setup a wireless network that only allows you to connect to the WIFI network only if your MAC address is on the access control list.
is this possible with Apple Airport extreme base stations or would it be a better idea for me to invest in a 3rd party product?
all the base station are connected to an Ethernet point and have static IP's assigned to them.
whats the best way to deploy such a solution;should i keep the setting as they are and manually enter the mac address for 30 portable machines on each base station or is there a more pragmatic solution...
any help / input would be much appreciated.
Thank You

When employing Access Control in a roaming network configuration, the MAC addresses would be required to be entered atr each of the base stations ... as there is no means (unfortunately) to have them "automatically" migrate amongst them.
However, one important thing to note. Only wireless security, using WPA or WPA2, will actually secure the wireless network. MAC addresses can easily be spoofed. Someone, determined to do so, can still access your network ... even if secured by Access Control.

MAC address and router access control

My iPhone 3GS can only access the network (through my Netgear KWGR614 wireless router) when the router's MAC address access control is off. When I turn it on the phone is blocked. The MAC address I use is taken from the iPhone settings. It begins with 64. All other MAC addresses I have ever seen begins with 00. Is this MAC address correct? If it is right, could it be that the router can't handle this address?

The first 3 bytes of the mac address identifies the manufacturer. For example, mine starts with 04:1e:64 which is Apple
04-1E-64 (hex) Apple, Inc
041E64 (base 16) Apple, Inc
1 Infinite Loop
Cupertino CA 95014
UNITED STATES
. if it starts with 64 then it belongs to
64-4F-74 (hex) LENUS Co., Ltd.
644F74 (base 16) LENUS Co., Ltd.
18-5 Gwacheon-Dong
Gwacheon Gyeonggi-Do 427-060
KOREA, REPUBLIC OF
check this list : http://standards.ieee.org/regauth/oui/index.shtml
enter your first 3 numbers (first 3 pairs) from your wifi (settings/general/about) (don't use colons in the search)
Not sure about the router as I never tried mac filtering. Each router will behave differently.
Hope this helps.

Problem - acs command authorization and web access control

Hi, I'm trying to add the control of some aironet 1310 bridges with a ACS 3.2 (tacacs+). I wanted to be able to do telnet command authorization restrictions trough shell command authorization sets and be able to give similar restrictive web access at the same time. I have it working if I permit some commands that are sent by the browser as "write memory quiet" and few other ones, but for it to work, I must give them limited users the privilege level 15 and by having the tacacs server authorizing the commands, it work for both, http and telnet. Where my problem begin is when I loose the connection with the ACS server, the user being already authenticated as level 15 user, the device become open to all commands; there is no more restriction applied by the ACS. Do anybody now a workaround.

It is already at local, that is just that the user already have a level 15 access and I used to control the commands through level settings before. So when I try it, my user that is localy level 5 is already recognized as a level 15 user from when it was authenticated through the ACS. If I could find a way to give web access to the 1310 at priv level 5 and still controlling the command set, it would be ok but as soon as I try to access a page that is not permitted other way than by the view level (i think it's level 1... or 0), I get a username password prompt with that line on the top of it:"level_15_or_view_access" and the only way I can access it is by entering a level 15 un/pass. I attached my 1310 aaa config
and here are the command set that work at level 15 to do a "shut" or "no shut" of the radio interface by the web interface:
configure
permit terminal
exit
permit Unmatched Args
interface
permit Dot11Radio0
no
permit shutdown
permit cca
ping
permit Unmatched Args
show
permit Unmatched Args
shutdown
permit Unmatched Args
telnet
permit Unmatched Args
write
permit memory quiet
Thanks for the help !

How can I have different access control for the guest network (different than the main network)?

I am trying to control my main wireless network with access control via mac id with no password. I wanted a separate guest network with password access and no access control. However, the only way that the guest network works is if I specify unlimited access as the default. Is what I am trying to do possible.

I am trying to control my main wireless network with access control via mac id with no password.
Definitely not a recommended method for security. MAC addresses are easily cloned by anyone who wants to do so with free tools available on the Internet. An unwanted guest will be on your network in less than a minute if they want to be.
Strongly recommend that you use WPA2 Personal security with a non-dictionary password to protect your network.
I wanted a separate guest network with password access and no access control. However, the only way that the guest network works is if I specify unlimited access as the default. Is what I am trying to do possible.
Unfortunately, Apple does not allow separate Access Control for the "main" and "guest" networks. It's all or nothing, I am afraid.
Likely, the "best" way to set up Access Control is change the default rule to No Access, Then you will need to enter in the details for every device that you want to allow to connect for both the "main" and "guest" networks with the time limits for each device.

Error GRC Access Control 10.0

We have a problem when execute the next steps in GRC Access Control 10.0
SPRO-->Governance, Risk and Compliance>Access Control--> Access Risk Analysis--> Batch RisK Analysis
We applied the next note, but problem is the same.
1563583 - SYSTEM_NO_TASK_STORAGE dump on AIX
Category
ABAP Programming Error
Runtime Errors
ASSERTION_FAILED
ABAP Program
CL_GRRM_DASHBOARD_MENU_AUTH===CP
Application Component GRC-RM
Date and Time
13.03.2013 11:50:04
|Short text
|
|
The ASSERT condition was violated.
|
|What happened?
|
|
In the running application program, the ASSERT statement recognized a
|
|
situation that should not have occurred.
|
|
The runtime error was triggered for one of these reasons:
|
|
- For the checkpoint group specified with the ASSERT statement, the
|
|
activation mode is set to "abort".
|
|
- Via a system variant, the activation mode is globally set to "abort"
|
|
for checkpoint groups in this system.
|
|
- The activation mode is set to "abort" on program level.
|
|
- The ASSERT statement is not assigned to any checkpoint group.
|
|What can you do?
|
|
Note down which actions and inputs caused the error.
|
|
|
|
|
|
To process the problem further, contact you SAP system
|
|
administrator.
|
|
|
|
Using Transaction ST22 for ABAP Dump Analysis, you can look
|
|
at and manage termination messages, and you can also
|
|
keep them for a long time.
|
|Error analysis
|
|
The following checkpoint group was used: "No checkpoint group specified"
|
|
|
|
If in the ASSERT statement the addition FIELDS was used, you can find
|
|
the content of the first 8 specified fields in the following overview:
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|
" (not used) "
|
|How to correct the error
|
|
Probably the only way to eliminate the error is to correct the program.
|
|
|
|
|
|
If the error occures in a non-modified SAP program, you may be able to
|
|
find an interim solution in an SAP Note.
|
|
If you have access to SAP Notes, carry out a search with the following
|
|
keywords:
|
|
|
|
"ASSERTION_FAILED" " "
|
|
"CL_GRRM_DASHBOARD_MENU_AUTH===CP" or "CL_GRRM_DASHBOARD_MENU_AUTH===CM001"
|
|
"IF_GRFN_MENU_ITEM_AUTH~IS_AUTHORIZED"
|
|
|
|
If you cannot solve the problem yourself and want to send an error
|
|
notification to SAP, include the following information:
|
|
|
|
1. The description of the current problem (short dump)
|
|
|
|
To save the description, choose "System->List->Save->Local File
|
|
(Unconverted)".
|
|
|
|
2. Corresponding system log
|
|
|
|
Display the system log by calling transaction SM21.
|
|
Restrict the time interval to 10 minutes before and five minutes
|
|
after the short dump. Then choose "System->List->Save->Local File
|
|
(Unconverted)".
|
|
|
|
3. If the problem occurs in a problem of your own or a modified SAP
|
|
program: The source code of the program
|
|
In the editor, choose "Utilities->More
|
|
Utilities->Upload/Download->Download".
|
|
|
|
4. Details about the conditions under which the error occurred or which
|
|
actions and input led to the error.
|
|
|
|
|
|System environment
|
|
SAP Release..... 702
|
|
SAP Basis Level. 0012
|
|
|
|
Application server... "KIO13701"
|
|
Network address...... "172.20.1.137"
|
|
Operating system..... "AIX"
|
|
Release.............. "7.1"
|
|
Hardware type........ "00F6C78E4C00"
|
|
Character length.... 16 Bits
|
|
Pointer length....... 64 Bits
|
|
Work process number.. 10
|
|
Shortdump setting.... "full"
|
|
|
|
Database server... "KIO13701"
|
|
Database type..... "DB6"
|
|
Database name..... "DGR"
|
|
Database user ID.. "SAPDGR"
|
|
|
|
Terminal.......... "192.168.0.5"
|
|
|
|
Char.set.... "C"
|
|
|
|
SAP kernel....... 720
|
|
created (date)... "Jul 8 2012 19:43:01"
|
|
create on........ "AIX 2 5 00092901D600"
|
|
Database version. "DB6_81 "
|
|
|
|
Patch level. 300
|
|
Patch text.. " "
|
|
|
|
Database............. "DB6 08.02.*, DB6 09.*, DB6 10.*"
|
|
SAP database version. 720
|
|
Operating system..... "AIX 2 5, AIX 3 5, AIX 1 6, AIX 1 7"
|
|
|
|
Memory consumption
|
|
Roll.... 0
|
|
EM...... 8379584
|
|
Heap.... 0
|
|
Page.... 16384
|
|
MM Used. 6205712
|
|
MM Free. 2170976
|
|User and Transaction
|
|
Client.............. 100
|
|
User................ "LVELASCO"
|
|
Language key........ "E"
|
|
Transaction......... " "
|
|
Transaction ID...... "51400164B1F00C40E1008000AC140189"
|
|
|
|
EPP Whole Context ID.... "5140015EB1F00C40E1008000AC140189"
|
|
EPP Connection ID....... "5140F9B0B19C1150E1008000AC140189"
|
|
EPP Caller Counter...... 1
|
|
|
|
Program............. "CL_GRRM_DASHBOARD_MENU_AUTH===CP"
|
|
Screen.............. "SAPMHTTP 0010"
|
|
Screen Line......... 2
|
|
Debugger Active..... "none"
|
|Server-Side Connection Information
|
|
Information on Caller of "HTTPS" Connection:
|
|
Plug-in Type.......... "HTTPS"
|
|
Caller IP............. "192.168.0.5"
|
|
Caller Port........... 44300
|
|
Universal Resource ID. "/sap/bc/webdynpro/sap/grfn_service_map"
|
|
|
|
Program............. "CL_GRRM_DASHBOARD_MENU_AUTH===CP"
|
|
Screen.............. "SAPMHTTP 0010"
|
|
Screen Line......... 2
|
|
|
|
Information on Caller ofr "HTTPS" Connection:
|
|
Plug-in Type.......... "HTTPS"
|
|
Caller IP............. "192.168.0.5"
|
|
Caller Port........... 44300
|
|
Universal Resource Id. "/sap/bc/webdynpro/sap/grfn_service_map"
|
|Information on where terminated
|
|
Termination occurred in the ABAP program "CL_GRRM_DASHBOARD_MENU_AUTH===CP" -
|
|
in "IF_GRFN_MENU_ITEM_AUTH~IS_AUTHORIZED".
|
|
The main program was "SAPMHTTP ".
|
|
|
|
In the source code you have the termination point in line 59
|
|
of the (Include) program "CL_GRRM_DASHBOARD_MENU_AUTH===CM001".
|
|Source Code Extract (Source code has changed)
|
|Line |SourceCde
|
|   29|
lv_dashboard = lv_value.
|
|   30|
|
|   31|
TRANSLATE lv_dashboard TO UPPER CASE.
|
|   32|
|
|   33|
CASE lv_dashboard.
|
|   34|
WHEN 'HEATMAP'.
|
|   35|
lv_report = 'GRRM_HEATMAP'.
|
|   36|
|
|   37|
WHEN 'LOSS_OVERVIEW' OR 'LOSS_STRUCTURE' OR 'OB_LOSS_OVERVIEW' OR 'OB_LOSS_STRUCTU|
|   38|
lv_report = 'GRRM_LOSS_ANALYSIS'.
|
|   39|
|
|   40|
WHEN 'OVERVIEW'.
|
|   41|
lv_report = 'GRRM_OVERVIEW'.
|
|   42|
|
|   43|
WHEN OTHERS.
|
|   44|
ASSERT 1 = 2.
|
|   45|
|
|   46|
ENDCASE.
|
|   47|
|
|   48|
EXIT.
|
|   49|
|
|   50|
ENDLOOP.
|
|   51|
|
|   52|
WHEN 'GRRM_LOSS_MATRIX' OR 'GRRM_LOSS_MATRIX_NEW'.
|
|   53|
lv_report = 'GRRM_LOSS_ANALYSIS'.
|
|   54|
|
|   55|
WHEN 'GRRM_HEATMAP_REPORT'.
|
|   56|
lv_report = 'GRRM_HEATMAP'.
|
|   57|
|
|   58|
WHEN OTHERS.
|
|>>>>>|
ASSERT 1 = 2.
|
|   60|
|
|   61| ENDCASE.
|
|   62|
|
|   63| TRY.
|
|   64|
lv_regulation_id = cl_grfn_api_regulation=>if_grfn_api_regulation~get_regulation_id( i|
|   65|
|
|   66|
ev_authorized = cl_grfn_util_rep_auth=>has_rep_auth(
|
|   67|
io_session
= io_session
|
|   68|
iv_regulation_id = lv_regulation_id
|
|   69|
iv_report
= lv_report
|
|   70|
iv_activity
= grfn0_c_activity-print
|
|   71|
|
|   72|
|
|   73|
CATCH cx_grfn_exception.
|
|   74|
ev_authorized = abap_false.
|
|   75|
|
|   76| ENDTRY.
|
|   77|
|
|   78|ENDMETHOD.
|
|Contents of system fields
|
|Name
|Val.
|
|SY-SUBRC|4
|
|SY-INDEX|2
|
|SY-TABIX|1
|
|SY-DBCNT|1
|
|SY-FDPOS|0
|
|SY-LSIND|0
|
|SY-PAGNO|0
|
|SY-LINNO|1
|
|SY-COLNO|1
|
|SY-PFKEY|
|
|SY-UCOMM|
|
|SY-TITLE|HTTP Control
|
|SY-MSGTY|
|
|SY-MSGID|
|
|SY-MSGNO|000
|
|SY-MSGV1|
|
|SY-MSGV2|
|
|SY-MSGV3|
|
|SY-MSGV4|
|
|SY-MODNO|0
|
|SY-DATUM|20130313
|
|SY-UZEIT|115004
|
|SY-XPROG|SAPCNVE
|
|SY-XFORM|CONVERSION_EXIT
|
|Active Calls/Events
|
|No.   Ty.
Program
Include
Line   |
|
Name
|
|   34 METHOD
CL_GRRM_DASHBOARD_MENU_AUTH===CP
CL_GRRM_DASHBOARD_MENU_AUTH===CM001
59 |
|
CL_GRRM_DASHBOARD_MENU_AUTH=>IF_GRFN_MENU_ITEM_AUTH~IS_AUTHORIZED
|
|   33 METHOD
CL_GRFN_API_MENU_ITEM_ELA=====CP
CL_GRFN_API_MENU_ITEM_ELA=====CM001   126 |
|
CL_GRFN_API_MENU_ITEM_ELA=>IF_GRFN_MENU_AUTH~ITEM_AUTH
|
|   32 METHOD
CL_GRFN_API_MENU==============CP
CL_GRFN_API_MENU==============CM003
34 |
|
CL_GRFN_API_MENU=>IF_GRFN_MENU_AUTH~ITEM_AUTH
|
|   31 METHOD
CL_GRFN_LAUNCHPAD_UIBB========CP
CL_GRFN_LAUNCHPAD_UIBB========CM006
60 |
|
CL_GRFN_LAUNCHPAD_UIBB=>IF_FPM_GUIBB_LAUNCHPAD~MODIFY
|
|   30 METHOD
CL_FPM_LAUNCHPAD_UIBB_ASSIST==CP
CL_FPM_LAUNCHPAD_UIBB_ASSIST==CM001
76 |
|
CL_FPM_LAUNCHPAD_UIBB_ASSIST=>INIT_FEEDER
|
|   29 METHOD
/1BCWDY/T2POSMRSKMLY9L6LJP5Z==CP
/1BCWDY/B_T2POSBAR6C8HPR0XTR4P
410 |
|
CL_COMPONENTCONTROLLER_CTR=>WDDOINIT
|
|
Web Dynpro Component
FPM_LAUNCHPAD_UIBB
|
|
Controller
COMPONENTCONTROLLER
|
|   28 METHOD
/1BCWDY/T2POSMRSKMLY9L6LJP5Z==CP
/1BCWDY/B_T2POSBAR6C8HPR0XTR4P
181 |
|
CLF_COMPONENTCONTROLLER_CTR=>IF_WDR_COMPONENT_DELEGATE~WD_DO_INIT
|
|
Web Dynpro Component
FPM_LAUNCHPAD_UIBB
|
|
Controller
COMPONENTCONTROLLER
|
|   27 METHOD
CL_WDR_DELEGATING_COMPONENT===CP
CL_WDR_DELEGATING_COMPONENT===CM004
9 |
|
CL_WDR_DELEGATING_COMPONENT=>DO_INIT
|
|   26 METHOD
CL_WDR_CONTROLLER=============CP
CL_WDR_CONTROLLER=============CM00V
3 |
|
CL_WDR_CONTROLLER=>INIT_CONTROLLER
|
|   25 METHOD
CL_WDR_COMPONENT==============CP
CL_WDR_COMPONENT==============CM019
24 |
|
CL_WDR_COMPONENT=>INIT_CONTROLLER
|
|   24 METHOD
CL_WDR_CONTROLLER=============CP
CL_WDR_CONTROLLER=============CM002
7 |
|
CL_WDR_CONTROLLER=>INIT
|
|   23 METHOD
CL_WDR_CLIENT_COMPONENT=======CP
CL_WDR_CLIENT_COMPONENT=======CM00E
24 |
|
CL_WDR_CLIENT_COMPONENT=>INIT
|
|   22 METHOD
CL_WDR_CLIENT_COMPONENT=======CP
CL_WDR_CLIENT_COMPONENT=======CM00A
42 |
|
CL_WDR_CLIENT_COMPONENT=>IF_WDR_COMPONENT_FACTORY~CREATE_COMPONENT
|
|   21 METHOD
CL_WDR_COMPONENT_USAGE========CP
CL_WDR_COMPONENT_USAGE========CM009
67 |
|
CL_WDR_COMPONENT_USAGE=>IF_WD_COMPONENT_USAGE~CREATE_COMPONENT
|
|   20 METHOD
CL_FPM_COMPONENT_MANAGER======CP
CL_FPM_COMPONENT_MANAGER======CM003
81 |
|
CL_FPM_COMPONENT_MANAGER=>ADD_COMPONENT
|
|   19 METHOD
CL_FPM_COMPONENT_MANAGER======CP
CL_FPM_COMPONENT_MANAGER======CM004
19 |
|
CL_FPM_COMPONENT_MANAGER=>ATTACH_COMPONENT_TO_USAGE
|
|   18 METHOD
CL_FPM========================CP
CL_FPM========================CM005
89 |
|
CL_FPM=>PROCESS_EVENT
|
|   17 METHOD
CL_FPM========================CP
CL_FPM========================CM00C
34 |
|
CL_FPM=>RUN_EVENT_LOOP
|
|   16 METHOD
CL_FPM========================CP
CL_FPM========================CM002
5 |
|
CL_FPM=>IF_FPM~RAISE_EVENT
|
|   15 METHOD
CL_FPM========================CP
CL_FPM========================CM003
11 |
|

Hi Alberto,
The below Notes should resolve!
1428775
1744179
Hope this helps,
Luciana

ADF UIX Role Based Access Control Implementation

Hi,
Can anybody suggest a detailed example or tutorials of how to implement a role based access control for my ADF UIX application.
The application users can be dymanically added to specific roles (admin, Secretary, Guest). Based on the roles, they should be allowed to access only certain links or ADF entity/view operations. Can this be implemented in a centralized way.
Can this be done using JAZN or JAAS. If so, Please provide me references to simple tutorial on how to do this.
Thanks a lot.
Sathya

Brenden,
I think you are following a valid approach. The default security in J2EE and JAAS (JAZN) is to configure roles and users in either static files (jazn-data.xml) or the Oracle Internet Directory and then use either jazn admin APIs or the OID APIs to programmatically access users, groups and Permissions (your role_functions are Permissions in a JAAS context).
If you modelled your security infrastructure in OID than the database, an administrator would be able to use the Delegated Administration Service (DAS), as web based console in Oracle Application Server. To configure security this way, you would have two options:
1. Use J2EE declarative security and configure all you .do access points in web.xml and constrain it by a role name (which is a user group name in OID). The benefit of this approach is that you can get Struts actions working dirctly with it because Struts actions have a roles attribute.
The disadvantage is that you can't dynamically create new roles because they have to be mapped in web.xml
2. Use JAAS and check Permissions on individual URLs. This allows you to perform finer grained and flexible access control, but also requires changes to Struts. Unlike the approach of subclassing the DataActionForward class, I would subclass the Struts RequestProcessor and change the processRoles method to evaluate JAAS permissions.
The disadvantage of this approach is that it requires coding that should be done carefully not to lock you in to your own implementation of Struts so that you couldn't easily upgrade to newer versions.
1 - 2 have the benefit of that the policies can be used by all applications in an enterprise that use Oracle Application Server and e.g. SSO.
Your approach - as said - is valid and I think many customers will look for the database first when looking at implementing security (so would I).
Two links that you might be interested in to read are:
http://sourceforge.net/projects/jguard/ --> an open source JAAS based security framework that stores the user, roles and permissions in database tables similar to your approach
http://www.oracle.com/technology/products/jdev/collateral/papers/10g/adfstrutsj2eesec.pdf --> a whitepaper I've written about J2EE security for Web applications written with Struts and JavaServer pages. You may not be able to use all of it, but its a good source of information.
Frank

GRC AC 5.3 and GRC Process Control on the same server

Hello,
Can we install SAP GRC AC 5.3 and GRC Process Control 3.0 and GRC Risk Management 3.0 on the same box/ same server.
Is there a OSS Note, which talks about having the above 3 components on one box?
Thanks,
Imran

Hello Imran,
1- My 3 question ARE do I need a separate JAVA Stack for GRC Process Control and seperate JAVA Stack for GRC Access Control
-> No, you can have them installed on save Java stack.
OR
Can I use the same JAVA Stack for GRC Process Control & GRC Access Control?
-> Yes, you can. You have to make sure that you are on SP10 or above for Access Control as only then it will support NW Java 7.01.
2- Can I use EP 7.0.1 installed on same server for both GRC PC 3.0 and GRC AC 5.3?
-> Yes, you can.
3- Can 1 single AS JAVA Database contain both GRC Access Control VIRSA Tables and GRC Process control tables at the same time?
-> For process Control the tables reside on the backend SAP as it is webdynpro ABAP application and for access control the tables reside on the Java database as it is java and webdynpro JAVA application.
Regards, Varun

Looking for documentation of Access Control Batch Jobs-all four components

Hi,
We are implementing all (4) components of Access Control. We are at a point in our project, where we are documenting, inventorying and testing all of or Batch Jobs. I'm trying to find One Single, or Four individual documents that provide direction, sequencing, etc..... I've found vague bits and pieces, but am hoping the is some detailed documents out there, that someone can direct me to.
Any assistance would be greatly appreciated.

Hi Smith,
Check "Operations Guide - SAP GRC Access Control 5.3" at Service Marketplace-->Installations and upgrade->Access Control 5.3 It contains the list of jobs.
For firfighter, there are background jobs in Config Guide.
Regards,
Sabita

How to configure bpm composer and access the projects present in bpm mds re

To access the bpm composer I performed the below mentioned steps: - Installed the standalone weblogic server with soa server configured
- Invoked the bpm composer using the url : http://machine:soa_port/bpm/composer
- Used weblogic and weblogic1 as username and password.
Please let me know whether I am following the correct approach as I am not able to see any options in bpm composer like open project etc, the project menu appears but there are no projects visible.

The answer couldn't help us much. I will give you the steps we have followed in detail
We have created a sample customizable BPEL process by selecting a Customizable checkbox in Jdev.
Then,The sample BPEL process is deployed to SOA server from JDeveloper. We could see the deployed BPM process in EM console.
Also the MDS repositories required for customization too are present in EM.
Then We tried accessing the BPM Composer to do some customization on the sample BPEL process deployed. We are able to login to the BPM composer using "weblogic" user.
But the composer displays only the welcome page. There are no other links enabled.
Please let us know How to make a BPEL process customizable using BPM composer.
Also there is an another SOA Composer. When this composer is mainly used?
There is another BPM Workspace console. But we could not login to this using "Weblogic" user though we are able to login in EM, SOA and BPM composer.
Why the login failed uisng "weblogic" user here?What for this console is used?

Error accessing the page of the SOA Composer

Hello friends,
I have a problem when I try to load the page of the SOA Composer
- I tried to change the Target of the application (Admin Server), when performing this change if you load the page the soa composer when entering credentials and gives lick the login button reappears on the message page:
Error 500 - Internal Server Error
From RFC 2068 Hypertext Transfer Protocol - HTTP/1.1:
10.5.1 500 Internal Server Error
The server encountered an unexpected condition Which it prevented us from fulfilling the request.
- When the deployed application in the cluster and you try to access the soa composer page shown on the page:
Error 500 - Internal Server Error
From RFC 2068 Hypertext Transfer Protocol - HTTP/1.1:
10.5.1 500 Internal Server Error
The server encountered an unexpected condition Which it prevented us from fulfilling the request.
Log:
<May 22, 2013 9:38:41 AM CDT> <Error> <Cluster> <BEA-003111> <No channel exists for replication calls for cluster soa_Cluster>
<May 22, 2013 9:38:41 AM CDT> <Warning> <RMI> <BEA-080003> <RuntimeException thrown by rmi server: weblogic.cluster.replication.ReplicationManagerServerRef@
10, implementation: 'weblogic.cluster.replication.ReplicationManager@32101bc1', oid: '16', implementationClassName: 'weblogic.cluster.replication.Replicatio
nManager'
java.lang.SecurityException: Incorrect channel used for replication.
java.lang.SecurityException: Incorrect channel used for replication
at weblogic.cluster.replication.ReplicationManagerServerRef.checkChannelPrivileges(ReplicationManagerServerRef.java:108)
at weblogic.cluster.replication.ReplicationManagerServerRef.checkPriviledges(ReplicationManagerServerRef.java:83)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:314)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:944)
at weblogic.rjvm.RJVMImpl.dispatch(RJVMImpl.java:1021)
Truncated. see log file for complete stacktrace
>
<May 22, 2013 9:38:41 AM CDT> <Error> <Cluster> <BEA-003111> <No channel exists for replication calls for cluster soa_Cluster>
<May 22, 2013 9:38:41 AM CDT> <Warning> <RMI> <BEA-080003> <RuntimeException thrown by rmi server: weblogic.cluster.replication.ReplicationManagerServerRef@
10, implementation: 'weblogic.cluster.replication.ReplicationManager@32101bc1', oid: '16', implementationClassName: 'weblogic.cluster.replication.Replicatio
nManager'
java.lang.SecurityException: Incorrect channel used for replication.
java.lang.SecurityException: Incorrect channel used for replication
at weblogic.cluster.replication.ReplicationManagerServerRef.checkChannelPrivileges(ReplicationManagerServerRef.java:108)
at weblogic.cluster.replication.ReplicationManagerServerRef.checkPriviledges(ReplicationManagerServerRef.java:83)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:314)
at weblogic.rmi.internal.BasicServerRef.dispatch(BasicServerRef.java:944)
at weblogic.rjvm.RJVMImpl.dispatch(RJVMImpl.java:1021)
Truncated. see log file for complete stacktrace
Any recommendation to fix this problem and I try to create and retrieve the DVM that I have in my environment SOA 11g (11.1.1.3)
thanks

Actually, that's exactly what we're doing.
Later parts of the code have to look at the fill color of each item, check its type (gradient -vs- spot) and compare it to other colors. In order to avoid a series of 'if' statements every time, we have made a function that takes each page item and returns a path item from it so we can work with that within the rest of the code (it's easier to write all of these comparisons if your'e always expecting to get a path item, and the first path item of every compound path has properties that apply to the entire compound path..) SO... that function looks like this:
function getLeadItem(glPage) {   //glPage is the Page Item
    if (glPage.typename == 'CompoundPathItem'){
        return glPage.pathItems[0]    //returns the first path item of the compound path (...but does not work)
    } else {
        return glPage (if it is a normal page item, it just returns itself)
    glPage = null
for all of the page items that are regular path items, the code later on that looks like this:
if(item.fillColor == '[GradientColor]'){
            selectedColor = doc.activeLayer.pageItems[y].fillColor.gradient
But any of the compound path ones break, which is why we made the function earlier, so that 'item' would ALWAYS be a path item, and not compound.

Time Capsule Access Control and Extended Network Question

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Thanks for any help…this doesn't seem clear from what I've read/seen.
James

I have a Time Capsule where I have set up a wireless network access list…and extended the network using an Airport Express unit. The Airport Express unit also has settings for an Access Control list. Do these need to be the same as the those for the network from TC that it is extending…or does that happen automatically…and if not what on earth are they for?
Unfortunately, they are not automatically applied to each base station in an extended network. You would have to manually enter the exact same list in each base station.

Simultaneously Connecting Multiple Tables of the same Database to Textboxes of the same Form using a single ADO Control Code using VB6 Enterprise Edition and MS Access 2007

Iv 10 Tables consisting of atleast 10 fields each in a single Database. Bt, Im only able to connect 1 table at a time to a form using an ADO Control. Im able to add data from table 'student' to text-boxes in my form. Bt, hw can I add data from field(0) of
Table 'Student' to Textbox1 and data from field(0) of Table 'Marks' to Textbox2 using VB6??
This is the current sample coding iv got to connect a single table to a form:
Global con As New ADODB.Connection
Global rs As New ADODB.Recordset
Public Function Connect()
If con.State = 1 Then con.Close
con.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" + App.Path + "\bca.mdb;Persist Security Info=False"
End Function
Private Sub Add_Click()
If rs.State = 1 Then rs.Close
rs.Open "select * from student", con, adOpenDynamic, adLockOptimistic
rs.AddNew
rs.Fields(0) = (Text1.Text)
rs.Fields(1) = (Text2.Text)
rs.Fields(2) = (Text13.Text)
rs.Fields(3) = (Text4.Text)
rs.Fields(4) = (Text5.Text)
rs.Fields(5) = (Text6.Text)
rs.Fields(6) = (Text7.Text)
rs.Fields(7) = (Text8.Text)
rs.Fields(8) = (Text9.Text)
rs.Fields(9) = (Text10.Text)
rs.Fields(10) = (Text11.Text)
rs.Update
MsgBox " Record Added"
End Sub
What can I do to add fields from 2 different tables to different text boxes within the same form using a single ado control using vb6 and MS Access 2007??

Hi,
Since VB6 product is not supported in this forum, you may go to these forums for support:
#Where to post your VB 6 questions
http://social.msdn.microsoft.com/Forums/en-US/6a0719fe-14af-47f7-9f51-a8ea2b9c8d6b/where-to-post-your-vb-6-questions
Thank you for your understanding.
Best regards,
Franklin
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.

As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.
Do you think this product is possible?

In general theory, one now has the Edit button for their posts, until someone/anyone Replies to it. I've had Edit available for weeks, as opposed to the old forum's ~ 30 mins.
That, however, is in theory. I've posted, and immediately seen something that needed editing, only to find NO Replies, yet the Edit button is no longer available, only seconds later. Still, in that same thread, I'd have the Edit button from older posts, to which there had also been no Replies even after several days/weeks. Found one that had to be over a month old, and Edit was still there.
Do not know the why/how of this behavior. At first, I thought that maybe there WAS a Reply, that "ate" my Edit button, but had not Refreshed on my screen. Refresh still showed no Replies, just no Edit either. In those cases, I just Reply and mention the [Edit].
Also, it seems that the buttons get very scrambled at times, and Refresh does not always clear that up. I end up clicking where I "think" the right button should be and hope for the best. Seems that when the buttons do bunch up they can appear at random around the page, often three atop one another, and maybe one way the heck out in left-field.
While I'm on a role, it would be nice to be able to switch between Flattened and Threaded Views on the fly. Each has a use, and having to go to Options and then come back down to the thread is a very slow process. Jive is probably incapable of this, but I can dream.
Hunt

SOA Composer and Dictionary Access Control

Similar Messages

Maybe you are looking for