Suggest me.. for User Access priveledges

I am developing this (desktop application) project management system. It is indended for different users ( novice,admin). I have no clues as to how to implement restrictions. Can somebody suggest me some reading material which can guide me in this direction. Rest if somebody can tell me some approach, that'll be great.
Thanks

In your case the roles will be
User,
AdminEarlier when you were telling me about roles, you mentioned them as the operations, a user can perform. Here you are referring roles as different user categories only. Pls clear me on this note.
>
If your role list grows it is better to store the
roles alloed for each user in aseperate table.
and the method to check the user is allowed to play a
perticuler role will be needed
Can you cite me a small example on this? I cant visualise it..
>
Aditionally you will need to develop a User interface
to set the administrative settings (Adding / Removing
users, Granting / Revoking Roles)A table that i will need to develop for users, what all should i include, for eg.::
User name, Category of user ( Novice/admin),... do i need to store anything else??
Are you using a database or are you using flat files
if you are using flat files this might be quite a bit
of work to doI am using a database for my backend operations.
Thanks

Similar Messages

Restrict the User name / Password Auto complete option for users accessing

Hi All,
Can any one know the Restrict the User name / Password Auto complete option for users accessing Portal from within and outside of Portal.
Regard's
Rama

Are your referring to the browser functionality of remembering the usernames and passwords?
Thanks,
GLM

Why does one tag out of four not appear for users accessing a single Thunderbird account via multiple computers?

Four users share a single Thunderbird email account (version 24.5.0) on their four respective computers. Each user is represented by a tag color to designate which emails they are responsible for. One user is having trouble seeing when their tag is used by the other three users, the email appears untagged. However, the other three users see it as tagged. Likewise, when that one person uses the tag, the other three cannot see the email as being tagged. This is not an issue when the other three tags are used between the four people.
We have checked that we are all using the exact same color to represent the tag, and that we are all using the same IMAP settings. Does anyone know why this might be happening?

Are you sure the odd one out is IMAP? sounds like it is pop to me.

Setting a password for user access on AIR-SAP1602I-A-K9 running 15.2(2)JB2

I am trying to assist a group with setting up their AIR-SAP1602I-A-K9 stand alone WAPs. I would like to know how to set a password for clients to access the wireless network through these units. I have been spoiled with our controller based WLAN.

If you are doing it from the CLI
dot11 ssid Test
authentication open
authentication wpa version 2
wpa-psk ascii 0 "your key here"
Interface Dot111Radio 0|1
encryption mode ciphers aes-ccm
ssid Test
If you call a VLAN under the SSID, then you need to call a VLAN with the encryption statement under the radio interfaces.
If you are doing this from the GUI:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-4_10b_JA/configuration/guide/scg12410b/scg12410b-chap11-authtypes.html
HTH,
Steve

Best Practice - Securing Schema from User Access

Scenario:
User A requires access to schema called BLAH.
User A is a developer that built an application using this schema in a separate development environment, although has the same privileges mirrored to production (same roles etc - required for operation of the application built).
This means that the User has roles that grant Select, Update etc rights for the schema / table in order to use (and maintain) the applications.
How can we restrict access to the BLAH schema in PRODUCTION, enforcing it to only be accessible via middle tier / application (proxy authentication?)?
We've looked at using proxy authentication, however, it's not possible to grant roles and rights to the proxy account and NOT have them granted to the user (so they can dive straight in using development tooling and hit prod etc)>
We've tried granting it on a session basis using proxy authentication (i.e. user a connects via proxy, an we ENABLE a disabled role on the user based on this connection), however, it causes performance issues.
Are we tackling this the wrong way? What's the best practice for securing oracle schemas (and objects in general) for user access where the users actually get oracle user account (or even use SSO) for day to day business as usual.
To me this feels like a common scenario, especially where SSO comes into play ...

What about situations where we have Legacy Oracle Forms stuff? In these cases the user must be granted select etc rights to particular objects, as this can't connect via a middle tier.
The problem we have is that our existing middle tier implementation is built expecting the user credentials to be passed to it during initial authentication and does not use a proxy, or super user style account. We have, historically, been 100% reliant on Oracle rights and controls to validate and restrict access to our underlying data. From what you are saying, we should start to look at using proxy or super user access and move this control process further up - i.e. into Code or Packages ? If so, does this mean that there is no specific way to restrict schema access to given proxy accounts and then grant normal user accounts to connect through these to get access (kind of a delegated access scenario), without using disabled roles?

Looking for Suggestions on granting all users access to an application *except a subset of users*

This might not be the right forum for this question, but since it is related to an App-V application I figured I would try since this may have come up for some of you. I am looking for the best way to grant all Domain Users access to an application
except for Domain Admins. Using the Full App-V infrastructure, I want to grant access to the App-V UI via User Targeting, but I don't want to allow Domain Admins access. The reason for this is because when we make updates to provisioned
server cores (stateless), we login with our Admin accounts to make modifications to the cores, and I would like to reduce the steps that need to be taken at the end to ensure that all AppV applications are removed before sealing up the core.
Currently, Domain Admins do not have access to any App-V applications, so this process is fairly clean. All applications are User Targeted.
Packages are cached on a persistent D drive on each server, so the issue is that the registry, programdata, and packageinstallationroot become out of sync if packages are pulled down during core modifications after the core is attached to other servers (hence
other D drives). Because of this, Machine Targeting is not an option for this either.

This would be so much easier with a "Configuration Manager" like feature where you could create a collection query to accomplish the same thing. Are there other tools out there that will do the same thing?

Cross Domain User Access for Sharepoint 2013 site collection

Hi All,
We have three Domains , one is for client machines and AD user access purpose and second one is production environment (only some of developers has access to this domain) and third one is SharePoint environment (Because External users needs to
access my SharePoint sites) .
now we need to access SharePoint site collections from my another two domain user accounts with out creating user account from SharePoint domain , how to enable this access?
please advise.
Thanks in Advance,
Mani L

Hi Mani,
You're asking this question in the wrong forum, this forum is meant for suggestions and feedback on the forums themselves, not product support.
I recommend reposting your question in the SharePoint forums here (or you can request that a moderator move this thread for you):
http://social.technet.microsoft.com/Forums/en-us/home?category=sharepoint&filter=alltypes&sort=lastpostdesc
Good luck.
Don't retire TechNet! -
(Don't give up yet - 12,950+ strong and growing)

Permissions for Linux user accessing Leopard share

We have a very simple networking setup at our video post production facility. Basically, files are shared everywhere and to everyone. No open directory or DNS serving. Just AFP and SMB.
Our Linux based Smoke/Flame/Lustre system needs access to the files severed/shared by an Xserve with a big attached RAID. It has no problem connecting or seeing the files. However, it typically is denied write permissions. When the Smoke operator creates a folder on the share he can't access the folder until I grant the Others/Everyone group read and write perms. The Linux user logs in with the same user account that everyone else uses.
Some time ago, the always smashing Gerrit DeWitt gave me some terminal commands to set ACLs for users/groups of this shared RAID. They work beautifully and I have had no permissions issues since applying them. Except for this Linux system.
Would it be good practice to use this command to set the Everyone group permissions for this share?
sudo chmod -R +ai "group:everyone allow readattr,readextattr,readsecurity,\
list,search,read,execute,writeattr,writeextattr,delete,\
append,write,deletechild,add_file,addsubdirectory,\
fileinherit,directoryinherit" "/Volumes/RAIDH/Smoke_InfernoStorage"
Also, is there some configuration change I could make to the Linux system to make it a little more Mac compatible in this area?
Thanks

It's worth checking into - let us know what you find. What you describe certainly sounds like a problem with permission propagation settings for SMB / Samba since the AFP side works fine.
I've seen other posts about problems that crop up because of differences in the versions of Samba employed between systems, so that's a possibility as well. And I'd have no suggestions for you in that regard other than some searching of the web for clues as to how to work with that issue.
-Doug

Error...java.sql.SQLException:Access denied for user

Hi,
I am getting the following error message while connecting with the MySQL .(O/S :Sun OS 5.6)
Error.....java.sql.SQLException: Invalid authorization specification: Access denied for user: 'some_user&password@localhost' (Using password: NO)
Note that i have given all permission to the user using,
GRANT ALL PRIVILEGES .......................
The code i have used to connect with the database is,
import java.io.*;
import java.sql.*;
class test
public static void main(String a[])
try
Connection con;
Statement stmt;
ResultSet rs;
Class.forName("org.gjt.mm.mysql.Driver");
con=DriverManager.getConnection(jdbc:mysql://localhost/db_name?user=some_user&password=some_pass");
stmt=con.createStatement();
//do something with resultset
catch(Exception e)
System.out.println("Exception in second try.."+e);
plese guide me on this problem to solve.
Thankz,
Bala.

Hi friends...
I've read the last post...
The problem that I have is as follow....
1. I have installed on my machine MySQL 5.0 Server running
1.1 I have a database called "base1"
1.2 User "root", password "works"
1.3 I have the following sentence to connect it using JDBC
Connection con = DriverManager.getConnection("jdbc:mysql://localhost/base1", "root", "works");
More notes:
- I use the JDBC 5.0
- My Machine is a Windows XP SP2 Pentium 3.0 512Mb
and it connects��
but I have this environment to develop applications, now that I want to connect to Production Environment happens the following:
2 The Production database is mounted on a Linux Server with MySQL 3.2.
2.1 I change the sentences as follow:
Connection con = DriverManager.getConnection("jdbc:mysql://192.168.0.7/base1", "user", "password");
2.3 But a message appears when I run the Java Program:
java.sql.SQLException:Access denied for user: '[email protected]' (Using password: YES)
2.4 As you can see it changes the IP Address...
More notes:- I have the MySQL Query Browser and I got connection.
- The IP that display the Error Message is my Second IP configurated on my Network Properties.
- Server is a Pentium 4 3.0 GHz 2Gb Linux Red Hat 3.0
I leave this case for the spider... I hope that somebady has the solution.
What is the problem? Why the JDBC doesn't respect the IP that I wrote.

I used a partitioned HDD for time machine, using a partition already containing other data files. I am now no longer able to view that partition in Finder. Disk Utility shows it in grey and "not mounted". Any suggestions of how to access the files?

I used a partitioned HDD for time machine, using a partition already containing other data files. I am now no longer able to view that partition in Finder. Disk Utility shows it in grey and "not mounted". Any suggestions of how to access the files? Does using time machine mean that that partition is no longer able to be used as it used to be?
HDD is a Toshiba 1TB, partitioned into two 500GB partitions.
OS X version 10.9.2

Yes, sharing a TM disk is a bad idea, and disks are cheap enough so that you don't need to.
Now
Have you tried to repair the disk yet

RECEIVER: ERROR: Access to requested resource is not authorized for user

Hi,
I installed two instances of COREid Federation in my machine. Also installed SiteMinder and LDAP. Source Domain of COREid (8101) uses LDAP as IdMBridge and Destination Domain (9101) uses SiteMinder as IdMBridge. I am trying to access the resource protected by the SiteMinder from the source domain using the URL which is constructed using the pattern given in the PDF:
http://mymachine.domain.com:8101/shareid/saml/ObSAMLTransferService?DOMAIN=DestinationDomain&method=POST&TARGET=http://mymachine.domain.com:8887/Source/Source.html
Assertions are generated and I can see the assertion in the Source domain and transferred to the Destination Domain.
when i try to access the Source.html protected with siteminder, I get the following error in the Destination Domain Shareid Log file:
ERROR - [http10113-Processor3] - RECEIVER: ERROR: Access to the requested resource is not authorized for user uid=username, ou=People, dc=xyz,dc=com
Please help me to solve this issue?
Note: When the resource is accessed directly, siteminder authorizes the same user.

We also occationaly have this error. See my log for an example :
Transaction completed successfuly for DocEntry = 54358 : In company FIXTHISPLEASE on 3/2/2010 9:48:49 AM
Transaction completed successfuly for DocEntry = 54365 : In company FIXTHISPLEASE on 3/2/2010 10:24:55 AM
Transaction completed successfuly for DocEntry = 54403 : In company FIXTHISPLEASE on 3/2/2010 12:14:53 PM
-5006 - The requested action is not supported for this object. for DocEntry = 0 : In company FIXTHISPLEASE on 3/2/2010 1:38:45 PM
Transaction completed successfuly for DocEntry = 54424 : In company FIXTHISPLEASE on 3/2/2010 2:40:44 PM
Transaction completed successfuly for DocEntry = 54425 : In company FIXTHISPLEASE on 3/2/2010 3:01:51 PM
Transaction completed successfuly for DocEntry = 54426 : In company FIXTHISPLEASE on 3/2/2010 3:03:41 PM
Transaction completed successfuly for DocEntry = 54427 : In company FIXTHISPLEASE on 3/2/2010 3:05:12 PM
As you can see from 9:48am to 3:05pm, one occurance of this error occured. And they say that the transaction was
tried a few seconds later and it worked.
the STARTTRANSACTION() and ENDTRANSACTION() are used by the DI API so I'm really in the blank about this error and it starts to anoy the customer. Their SAP is 2007 SP01 PL08
Any concrete ideas about this ?

Unable to provision Business Rules access for users

Hi all,
Our analytic server is properly configured in Shared Services : we can correctly create users, provision Essbase access for those users, change password, etc...
An application business rules is visible in the left pane of shared services, but we are not able to provision Business rules access for users.
When we try to provision access for a user, we have only access to the Analytic properties.
What's going wrong ?

It sounds like the user you login to HSS with hasn't been assigned with "Provisioning Mgr" rights to business rules.
Get the HSS admin user to grant you these rights and you should then be able to provision users to use Business RUles.
Gee

How to setup the access duration for user

Dear experts,
As requrement of users, we need to setup the access duration for all users of our company . It's mean users only access into SAP on defined duration
Ex : Working time is 8h00 am to 17h00 pm, after 17h00 pm, users cannot access into system
Please help.
Thanks,
Neo

Hi all,
Thanks for your solution
We want to set the access duration for end-user but sometimes, we need to flexible to allow user access to system in some special case.
Let me detail users's requirements
- Users can access to SAP fom 8h00 to 16h00
- At 16h00, system will send the warning message to user to inform that system will aunomatic turn offf after 15 minutes, it's mean system will automatic kick out users after 15 minutes
- From 16h00 to 8h00, users can not access to SAP
- However, in some special case, we can grant the acess to system to specific user.
Can we setup these steps on SAP ?
Thanks,
Neo

After recording text using the dragon dictation app, it is converted, it can be copied to the iOS system clipboard for use in any app, how does the user access the clipboard to retrive this information if it is no longer on the screen?

after recording text using the Dragon dictation app, it can be copied to the iOS systme clipboard for use in any app, how does the user access the clipboard to retrive this information if it is no longer on the screen?

You need to do a long-press in any data entry field, then select Paste.

Problems Managing User Access Rights for Web Gallery

Has anyone else had issues changing the user access rights for a web gallery? It seems like the access is everyone or no one. Are the user rights handled per event in the gallery? I had issues adding events to the user's view/download rights in the publish settings.
Also, can these settings only be set when an event is first published? Attempting to change the user access rights after the event is published seems to require a re-upload of the images.
Any thoughts?

Problem solved.
I had to put the following lines in the specified "0000_any_80.my.website.conf" file:
        <Directory "/Library/WebServer/subdomain.domain">
                Options All +MultiViews -ExecCGI -Indexes -Includes
                AllowOverride None
                # For Password protection
                AuthType Digest
                AuthName "Password Protection"
                require valid-user
                <IfModule mod_dav.c>
                        DAV Off
                </IfModule>
        </Directory>

Suggest me.. for User Access priveledges

Similar Messages

Maybe you are looking for