SSM 7.0 - SSM User Interface user access and utilization

Hi,
Does anybody know how to obtain the SMM User Interface access and utilization of the users?
I mean User Interface access statistics like:
- Number of loggins per day, week, month.
- Last loggin
- Tab used
- Minutes log inn
Thank you very much in advance.
Kind regards,
Santiago

Santiago,
Strategy Management does not track that kind of usage of the system. Any tracking like that might be something that NetWeaver CE could do, but that would be a question for the NetWeaver CE Forum as I couldn't provide guidance on how to set it up.
Regards,
Bob

Similar Messages

Audit log of the User access and permissions

Hi All,
We need to have the Audit trail of the user access and permission. Meaning Changes to user access rights will be logged.
This should include:
Current Access Rights (including Date the access was given),
Group membership (including Date the access was given),
Previous Access Rights (including Date the access was given and revoked).
Can we reuse any out of the box functionality of CQ. Does anybody having any pointer to this?
Thanks,
Debasis

Hi PChamoun,
At the outset thanks a lot for the clue. I am very new to CQ. Could you please guide me like, what are the API required to track the rep:policy node changes. Even if workflow will be started after any change to rep:policy but how I will be able to get the information of what change happened.
Thanks,
Debasis

Best Practice - Securing Schema from User Access

Scenario:
User A requires access to schema called BLAH.
User A is a developer that built an application using this schema in a separate development environment, although has the same privileges mirrored to production (same roles etc - required for operation of the application built).
This means that the User has roles that grant Select, Update etc rights for the schema / table in order to use (and maintain) the applications.
How can we restrict access to the BLAH schema in PRODUCTION, enforcing it to only be accessible via middle tier / application (proxy authentication?)?
We've looked at using proxy authentication, however, it's not possible to grant roles and rights to the proxy account and NOT have them granted to the user (so they can dive straight in using development tooling and hit prod etc)>
We've tried granting it on a session basis using proxy authentication (i.e. user a connects via proxy, an we ENABLE a disabled role on the user based on this connection), however, it causes performance issues.
Are we tackling this the wrong way? What's the best practice for securing oracle schemas (and objects in general) for user access where the users actually get oracle user account (or even use SSO) for day to day business as usual.
To me this feels like a common scenario, especially where SSO comes into play ...

What about situations where we have Legacy Oracle Forms stuff? In these cases the user must be granted select etc rights to particular objects, as this can't connect via a middle tier.
The problem we have is that our existing middle tier implementation is built expecting the user credentials to be passed to it during initial authentication and does not use a proxy, or super user style account. We have, historically, been 100% reliant on Oracle rights and controls to validate and restrict access to our underlying data. From what you are saying, we should start to look at using proxy or super user access and move this control process further up - i.e. into Code or Packages ? If so, does this mean that there is no specific way to restrict schema access to given proxy accounts and then grant normal user accounts to connect through these to get access (kind of a delegated access scenario), without using disabled roles?

Web - What is easiest way to implement User Security and User Profiles

Hi, I am new to these forums and kind of new to Java. Sorry if this is in the wrong forum!
Bit of background to my experience with java
I have been playing about with java for a number of years and have created a few basic programs such as a screen shot tool that allows you to capture to default locations and look at previews first etc. I am now venturing into web related stuff. I work in IT doing systems testing and have done bits of basic development on various things.
What I've done so far
I am using Netbeans IDE 6.7 and MySQL 5.0
I am trying to learn more complex java and have decided to try build a basic web / database system that basically implements adding / amending / deleting data from a MySQL database through web pages. I am now trying to implement basic user access and profiles. I have so far got the following:
- MySQL table with user info - username / password
- JSP page with usual login stuff
- Servlet that validates the username and password - if correct forwards to main menu page.
Its as simple as that - there is nothing stopping you just typing in the URL of the main menu page and going from there.
What I want
I am wanting to eventually get the following:
- User authentication so that you have to logon before you can access anything else
- User profiles that determine what each user can or can't do, restricting the pages / services / options available (i.e. normal user can't delete etc)
- Would it need some sort of session manager to allow multiple users etc?
I appreciate this is a fairly open question but what is the easiest way to start implementing this? Not after specific code as I would prefer to try figger things out myself, but a point in the right direction would be great. It doesn't have to be extremely secure as this is just for me at the minute.
I have spent all day looking at things like session data / url rewriting / security settings in web.xml / bespoke servlets and am now in java overload!

Hi everyone,
I've now actually gone back to the tutorial that I linked to above and implemented that using form login and j_security_check.
Agree with Saish, and although I don't know enough about the other options to give a good reason, using realms and j_security_check just seems to be a bit cluncky and messy. I would also prefer something a bit more generic, that doesn't rely on setting users in glassfish, hence why I started with my own user table.
Anyway, I will leave it as is for now and maybe come back and try one of the other options.
The only problem I can see now is that to add users i will need to go through all the steps of adding users in glassfish and web.xml... Is there a way to do this through a servlet or something so I can have a jsp page to add users that also creats all the other bits for it to work?
Thanks everyone for your help

SAP SSM Administrator Interface - Synchronize User Tables - Update Failed

Hello,
I have this error when i try synchronize user tables:
[img]http://img156.imageshack.us/img156/5777/updatefailed.jpg[/img]
Apparently all is ok. Because even showing the error, users are updated.
Best Regards

Nosscire,
I'm sorry, I should have been more specific. The most confusing area with SSM is the web services user/password. If you have installed on a Windows server. The web services connection will be with the created Windows user and the password for that user. This Windows user is not a user of the system, it is your connection user.
The recommendation is to create a Windows user that can be recognized like pasuser or passervice - some other name than pipadmin or SSM user, since it is too common for each to have a different password.
That is the first thing to check.
Regards,
Bob

User interfaces to access Content services...

I am using the following user interfaces to access content services:
1) Web UI
2) Oracle drive
3) WebDAV with Windows XP
But in the oracle content sevices data sheet which I downloaded from the Oracle site, its given there is a rich WebUI with dynamic tree structure with drag & drop features. I want to know if this exits? If yes, I want to know how to access that and work with it. Does it need any downloads or configurations to be done.

Hi
I have selected "Accessiblity mode" button to launch the web interface. Now for this user even if i select the "Lauch" button. it still shows up the interface of accessibility mode. Is there any way I forced the user to switch back to the Lauch button interface mode.
Regards,
Navin

I transferred files from a NAS server to the Mac Mini Snow Leopard Server and now some of the files have Custom Access and can't be opened by some users. How do I fix this?

We're setting up our Mac Mini Snow Leopard Server, and in the process transferred files that had been stored and accessed from our Blackarmor NAS server over to the Mac. These files were all created on PC's and are Office Excel files, WordPerfect files or PDF's. When you look at the files on the Mac from the Mac and bring up Get Info for the affected file, it says that the file has Custom Access. The files that work properly don't have that configuration. I can access and open the files on some computers, but some users can't open the files from their computer even though they can see it. We're all using PC's and they get the Error: Access Denied-Contact your administrator--or something similar. I've seen on the web similar issues and it may have something to do with ACL permissions. I don't know enough about Mac OS to understand this, but what is baffling is that they can be opened from some PC's but not others, and all of the Users have the same accessibility to the files. Thanks for a solution!!

Oh, on the losing Internet, try this...
Make a New Location, Using network locations in Mac OS X ...
http://support.apple.com/kb/HT2712
10.7 & 10.8…
System Preferences>Network, top of window>Locations>Edit Locations, little plus icon, give it a name.
10.5.x/10.6.x/10.7.x instructions...
System Preferences>Network, click on the little gear at the bottom next to the + & - icons, (unlock lock first if locked), choose Set Service Order.
The interface that connects to the Internet should be dragged to the top of the list.
Instead of joining your Network from the list, click the WiFi icon at the top, and click join other network. Fill in everything as needed.
For 10.5/10.6, System Preferences>Network, unlock the lock if need be, highlight the Interface you use to connect to Internet, click on the advanced button, click on the DNS tab, click on the little plus icon, then add these numbers...
208.67.222.222
208.67.220.220
Click OK.
PS. Your English is quite good & completely understandable.

Error when trying to access the RBAC User editor and Message tracking

Hi,
I am getting an error when trying to access the RBAC User editor and Message tracking on the Web Mgmt interface. I verified that the admin account trying to access is in the Organization Management group and has the correct Role Assignment Policy applied.
I searched through this thread below and saw that matching the msExchRoleLink and msExchUserLink attributes fixed the issue.
https://social.technet.microsoft.com/Forums/exchange/en-US/fc568cc6-8691-4127-b70b-bcc82f9b1f7f/first-2010-cas-server-no-administrator-rights-emc-permissions-gone?forum=exchange2010
However I have another environment where this is not the case and works just fine; the msExchUserLink attribute has a value of CN=Organization Management,OU=Microsoft Exchange Security Groups,DC=Domain,DC=Local which is different as per the issue outlined in
the above thread so I am not convinced that this will work and also don’t want to blindly edit something in adsiedit without being sure.
I then checked the event logs on the server and saw the below error logged;
Current user: 'Domain/Server Services Accounts/administrator'
Request for URL 'https://server.domain.com/ecp/default.aspx?p=AdminDeliveryReports&exsvurl=1' failed with the following error:
System.Web.HttpUnhandledException: Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Exchange.Management.ControlPanel.UrlNotFoundOrNoAccessException: The page may not be available or you might not have permission to open the
page. Please contact your administrator for the required credentials. For new credentials to take effect, you have to close this window and log on again.
at Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
at Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
--- End of inner exception stack trace ---
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.default_aspx.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
Microsoft.Exchange.Management.ControlPanel.UrlNotFoundOrNoAccessException: The page may not be available or you might not have permission to open the page. Please contact your administrator for the required credentials. For new credentials to take effect, you
have to close this window and log on again.
at Microsoft.Exchange.Management.ControlPanel._Default.CreateNavTree()
at Microsoft.Exchange.Management.ControlPanel._Default.OnLoad(EventArgs e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
I then had a look at the IIS permissions for ecp and owa. The account did not have permissions so I added them there but still got the same error. I’ve also tried all of the above with a newly-created account but still got the same issue.
Any ideas as to what the above event log is specifically referring to?

Hi,
From your description, I would like to clarify the following thing:
If you want to search message tracking logs, the account you use should be a member of the role groups below:
Organization Management role group, Records Management role group, Recipient Management role group.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Assign User Profiles and Web Interface Transactions to Users

Hi EM Gurus,
Has anyone worked with not standard scenarios in SCEM?
They are working well but I can't access them on interface web.
In selection page (search page after logon), where choose tracking scenarios, only standard scenarios appear although I have assigned both scenarios to the user and made same configuration; Assigned and Defined Web Interface Transactions, Configured Fields for User Profiles, Defined User Profiles, Assigned User Profiles and Web Interface Transactions to Users.
But only Standard Scenarios appear as choice of tracking scenarios that are displayed to the user as a dropdown box on the selection screen after logging on to the Web interface.
Has anyone accessed not standard scenarios on interface web??
Help, please!
Thanks a lot.
Rodrigo Freitas

Hello Rodrigo,
if you have assigned the scenarios to your user in transaction /SAPTRX/UCUSER you must go to the admin page and reload the profile manager.
/admin in the URL of the WCL instead /ehsearch.
Afterwards you should see them also in the drop-down box.
Best regards,
Steffen

ARCA Xtra - multiple user access to SQLite DB

Hi Guys,
I have having trouble with multiple users accessing a SQLite DB file from a projector. They can all open and browse the data through the projector fine, but if USER1 makes a change and clicks save, and then USER2 tries access the DB it causes USER2 to get a script error.
Is it possible to write a script which tells the user that the DB is being modified so please wait, rather than throwing them out of the projector with a script error
Thankyou

If you want multiple users to access a database then you would probably be better off using one designed for that purpose like MySQL.
But, if you are set on SQLite and if you can have multiple simultaneous connections which you seem to imply you can, then the best solution I can think of is to create a Class/Script that handles all the details of polling the database for availability and handles other issues like a progress dialogue box.
You have to treat the database as an asynchronous action - meaning you send it a query and at some latter time it sends a result back via a callback. Doing it this way greatly simplifies any database queries you want to make. As long as your queries are fairly simple like SELECT, INSERT, DELETE, etc. then the code is fairly straight forward.
Off the top of my head I wrote something to get you started. I have not tested this code but it does compile. The following is a Parent script that you would use to interface to your database in an asynchronous manner.
-- Asynchronus SQLite
property pDB -- instance of Arca xtra
property pTimeoutTime -- how long in milliseconds to ping database
property pPingTime -- time between database pings.
property RunningQuery -- Boolean. is a query running? true/false
property pTimeOb -- timout object for polling the database
property pCurOperation -- set of data for current query
property pPingCount -- how many times the current query has pinged the database
property pAlertBox -- a MIAW, LDM, or a Sprite that informs the user as to the progress of the query.
on new me
arcaregister([0000,000,0000])
pDB = xtra("arca").new()
Result = pDB.openDB(the moviepath & "ST_data")
if Result.errorMsg then
    alert("Error Opening Database" & return & pDB.explainError(Result.errorMsg))
    return void
end if
pTimeoutTime = 10000
pPingTime = 250
RunningQuery = false
pAlertBox = Sprite(1000) -- for example
return me
end new
on cleanup me
pDB.closeDB()
end cleanup
on executeSQL me, Query, CallbackOb, CallbackMethod, OptionalParameters
if RunningQuery then exit -- only allow one query at a time
RunningQuery = True
pCurOperation = [#Query:Query, #OptionalParameters:OptionalParameters, #CallbackOb:CallbackOb, #CallbackMethod:CallbackMethod]
pPingCount = 0
pTimeOb = timeout().new("QueryProcessor_"&me, 1, me, #processQuery) -- creating the timeout object here breaks the call stack, which is good.
end executeSQL
on processQuery me, TimeOb
Result = pDB.executeSQL(pCurOperation.Query, pCurOperation.OptionalParameters)
if Result.errorMsg then
    if Result.errorMsg = 5 then -- database is currently locked
      pPingCount = pPingCount + 1
      if pPingCount = 1 then -- then inform user there will be a delay.
        pAlertBox.setMessage("Waiting for database response.")
        pAlertBox.setProgress(0)
        pAlertBox.show()
        pTimeOb.period = pPingTime
        exit
      end if
      pAlertBox.setProgress((pPingCount * pPingTime / pTimeoutTime) * 100 )
      if pPingCount * pPingTime = pTimeoutTime then -- timed out
        alert("Query Timed out.")
      else
        exit -- try again in pPingTime time.
      end if
    else -- there is some sort of database error
      alert("Database Error: " & return & pDB.explainError(Result.errorMsg))
    end if
else -- no query errors
    call(pCurOperation.CallbackMethod, pCurOperation.CallbackOb, Result)
end if
-- if the code makes it this far then we are done and need to clean things up
if pTimeOb. objectP then
    pTimeOb.forget()
    pTimeOb = void
end if
pAlertBox.hide()
RunningQuery = false
end processQuery
on setTimeOutTime me, MilliSecs
pTimeoutTime = MilliSecs
end setTimeOutTime
on setPingTime me, MilliSecs
pPingTime = MilliSecs
end setPingTime
You then create an instance of this script on preparemovie.
-- Movie script
global gDB
on prepareMovie
gDB = script("Asynchronus SQLite").new()
if gDB.voidP then halt -- can not connect to the database
end
on stopMovie
gDB.cleanup()
end
Then it is simply a matter of sending your queries to the gDB object and it will send the results back to the callback handler and object that you specify. Here's a behavior that shows how simple this should be:
-- Sample DB Behavior
global gDB
on mouseUp me
Query = "select * from users"
gDB.executeSQL(Query, me, #setQueryResult) -- string, callback object, callback handler name
end
on setQueryResult me, Result -- this is the callback handler/method
put Result
end
I also suggest using a MIAW or a LDM or a set of sprites as a way to inform the user of any delays in processing a query. Check the code for pAlertBox to see how I use this idea to update a progress bar. Of course you will have to create the implementation.

Access ejb-jar.xml progrmmatically for viewing the user roles and methods

We are using Weblogic 8.1 sp 4 (jdk 1.4.2). Is there any way within our application where we can display all the methods a user can access and all the roles available within ejb-jar.xml ?
Thanks in Advance
DRG

Local interfaces are for communication between ejbs and their clients when both are in the same JVM. The clients can be normal clients, jsps, servlets, and other ejbs. If the client is not in the same JVM you cannot use local interfaces even though your client is another ejb.
Advantage of using local interface is it reduces the network overhead.
For more information you can download Mastering Enterprise Java Beans Third Edition by Ed Roman. You can go through 45
You can download pdf version from.
http://www.theserverside.com/books/wiley/masteringEJB/index.tss.
Let me know the URL of the ejb doc that you referred.
Thanks..

Can multiple XP users access the same iTunes library?

Because I'm having a REALLY hard time getting that to work at all. I've moved my entire iTunes folder into 'Shared Documents' so that all users should be able to access it and changed the option in iTunes Preferences to the correct 'all users' path, but iTunes still tries to find the info in 'my' (sal's) documents instead of 'all.'
Anyone figure this out, or does it somehow break the EULA and isn't supported? The wife and I just want to use the same library since we're on one computer. Seems silly to not allow a user with admin rights to allow other users access.
Thanks,
Sal
Windows XP

Sal,
As this article in the Apple Knowledge Base explains the trick is to move the iTunes Music folder, not the entire iTunes folder, to "a publicly accessible location" and I believe they mean to suggest C:\Documents and Settings\All Users\Documents\My Music as a good place.
It is important that the iTunes Library files remain in Sal's Documents and Sal's Wife's Documents.

How can multiple users edit and access same ACCESS file

Hello,
We have 2 access files and multiple users needs to edit and access those files.
How can I enable mulitple access but only one user can edit rest of users are in read-only mode for one file and multiple access and edit on the another file.

Hi,
You should split your database in a front and backend. Then create two seperate front ends which you can distribute. If you need readonly you can opt for two options, setting the attributes of the file to read only or create a front end with read only forms.
The last one takes a little more work but is safer than setting the attributes to read only because people can change that back themselfs.
Maurice

Multiple simutaneously logged in users accessing AFP home directories?

Hi,
Many of our problems are described in this guy's blog:
http://alblue.blogspot.com/2006/08/rantmac-migrating-from-afp-to-nfs.html
The basic capability we want is to have multiple simultaneously logged in users to have access to their AFP mounted home directory, which is configured in a sane, out-of-the box setup using WGM and Server Admin.
Multiple user access could take the form of FUS (fast user switching), or simply allowing a user to SSH into a machine that another user is already logged into and expect to be able to manipulate the contents of her home directory.
From my extensive searches, I have no reason to believe this is currently possible with 10.4 Server and AFP.
(here's the official word from apple: http://docs.info.apple.com/article.html?artnum=25581)
I've read that using NFS home directories will work, though.
I want to believe that Apple has a solution for this by now (it's been almost a year since we first had difficulty), or at least a sanctioned workaround. If Apple doesn't have one, maybe someone else has come up with something clever. I find it hard to believe that more people haven't wanted this capability! (not being able to easily search the discussion boards doesn't help, though...)
Thanks for your help!
Adam

Parallels Issue. Track at http://forum.parallels.com/showthread.php?p=135585

Service Desk User access

Hi Experts,
I want my service desk users login on Solman and they can update Msg status and ther remarks.
so what are auth. object needs on there profile, please suggest.
Can we block users access in such a way , they are not able to do add change on other users issue msg.
bcoz , if i give access on crm_dno_monitor to any user, he may access and process all issue tickets.
Thanks
Andrew

Andree,
Actually we provide variants for crm_dno_monitor.
so they have option of seeing only tickets belonging to themselves only
For e.g create a variant of crm_dno_monitor by choosing mine and then save it and create a ztcode in se93 for the same.
assign this tcode for the user menu to the respective role of the user.
So whn this user logs in and click on the link he sees only mine tickets or tickets belonging to him..he doesnt hav access to crm_dno_monitor.
Pls assign pts.

SSM 7.0 - SSM User Interface user access and utilization

Similar Messages

Maybe you are looking for