User privilages or changing users with RMI

I'm exploring the use of RMI, and based on some tutorials I created a distributed application which uses RMI.
I launch the RMI server under my admistrator account. However, when a user launches the client portion of my application and executes code on the remote machine running the RMI server, the code on the server side is exectued as the admin instead of the user who is using the client.
What is generally done for this problem? Is there a way to switch users? Thank you for any ideas.

I'm not sure whether you want the server simply to run as some other user other than "administrator", or if you want it to execute as a different user account for each client connection.
If what you want is the server simply to run as another account, you need to start it differently. For example, on WinNT/WinXP, it is possible to run the server as a Windows service. A service can be configured to run under any user account you choose, which should solve your problem. As for how to run the server as a Windows service, I recommend using the freeware here:
http://www.kcmultimedia.com/javaserv/
I was able to use this successfully without a lot of trouble. If your environment is Linux etc. I am sure there is a way to change the account under which a process is run, but I don't know enough about it to tell you how.
However, if what you want is for the server to operate as a different user for each client conection, I think that would be much trickier. You would probably need to spawn a different process for each connection using JNI to write some platform-specific intefacing to accomplish the account switching.

Similar Messages

  • Change configuration of a user with another user

    Hi gurus,
    I would like to know if it is possible to change the configuration of users with an admin user.
    For example. I don't have the pass of user A. Meanwhile, I nedd to change the layout of an appraisal document, a specif portal configuration for that user. Is it possible to change that configuration with my user.
    I asking this becausa I'm doing maintenance of SAP portals and some users don't give access to their accounts for privacy reasons. Do you have any ideia if it is possible?
    My specific case is HCM. I need to change add an entry to a layout of an user but I can not access to his account. It may look nonsense, but sometimes it happens.
    Thanks and best regards.

    HI,
    It is possible to change the configuration of users with an admin user.,as such only if  you have administrator rights.If u wan tto change the appraisal document with the specified user if suppose you are saying that user a is not there ,admin user can be used for editing the particular document ,where in all the information can be there with administrator .
    Regards
    Ashwin Chandra GIrmaji

  • What is the best way to have Mac setup for sync-ing 2 calendars?  Any way to change? When we 1st got our Macbook we unknowingly set it up wrong--as 2 separate users, with separate everything. Good for contacts and email, bad for calendar, photos, music.

    What is the best way to have Mac setup for sync-ing 2 calendars?  Any way to change?  When we first got our Macbook we unknowingly set it up as 2 separate users, with separate everything.  Now I have an iphone and I want to sync calendars but not contacts or email.  Any direction you could give would help! thx

    Anyone...anyone? Bueller...Bueller?

  • How to get list of users with access of MM01 (create & change)

    Hi all,
    i have to take out list of user having access for MM01 (create material), when i use SUIM to get the list it shows all the list of users including the users with DISPLAY & CHANGE, but i want only those users who had the access of CREATE & CHANGE.
    please help out me, its very urgent.
    Thanks & Regards
    Syed..

    Hi Syed,
    You can try to get it from S_BCE_68001398. Key in the required transaction code.
    Thanks and Regards
    Points reward is much appreciated

  • Migrating users - with a twist (change AD accounts to local)

    This scenario occurs on 5 Mac Pros currently running 10.5 and that have a bunch of software already installed, which I am trying to avoid redoing (obnoxious email settings, etc).
    These machines currently authenticate against Active Directory directly, but only one person logs on per machine. So basically the users on the machine are local admin and AD authenticated user with all files stored locally. The AD thing is starting to break down left and right and I'm proposing it's time for it to go. So I would like to convert the AD authenticated user's files and account over to a locally authenticated account. If it's useful I'm gonna upgrade these machines to 10.6 (preferably in place upgrade due to all of the preconfigured apps) either during this process or more likely after.
    Thanks!!!

    Hi,
    According to the description, I know that users cannot see free/busy information via Outlook 2010 which user account and mailbox in separate domain.
    How about OWA? If users can see free/busy information in OWA, it seems an issue on the Outlook client or Autodiscover side.
    Please try to run Outlook under safe mode or re-create profile for testing.
    Also make sure the user has reviewer permission.
    If the 2 domains are located on multiple-forest, please export SCP from resource forest and import into user account forest. Command as below:
    Export-AutoDiscoverConfig -DomainController DomainControllerName -TargetForestDomainController TargetForestDomainControllerName -MultipleExchangeDeployments $true
    More details to see:
    http://johanveldhuis.nl/en/tutorials/exchange/autodiscover-in-een-multiforest-omgeving/
    Disclaimer:
    Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure
    that you completely understand the risk before retrieving any suggestions from the above link.
    Thanks
    Mavis Huang
    TechNet Community Support

  • How do you change an used ipad to a new user with a new itunes account?

    How do you cange a used ipad to a new user with a new itunes account?

    plug your ipad to your computer, open your itunes, click on the ipad icon, at the first page there is an option to "restore" ipad to its factory settings, click it. Don't remove USB connection, wait until it finishes wiping the data and it should place a new window that asks you to register the ipad.
    There you go, your iPad is sync with your itunes account under your name, its best to also use "Find my iPad" just in case it gets lost, you can track it from your computer. Very handy tool and its free!
    But if you want the data that is in the iPad, back up it first and sync the content to your library before restoring it to its factory settings
    Have a great day and enjoy your iPad

  • There are multiple users with the same display name

    Hi,
    We have a user and when she get an item assigned to her she sees the following alert:
    "There are multiple users with the same display name USERNAME and at least one of them does not have read permissions to some of the files"
    Now I looked in the database and when I run the following query with the username:
     SELECT     
         [ProviderDisplayName]  
        ,[DisplayName]  
        ,[HasDisplayName]  
        ,[Domain]  
        ,[AccountName]  
        ,[UniqueUserId]  
        ,[LastSync]  
      FROM [Tfs_Configuration].[dbo].[tbl_Identity] where displayname like '%USERNAME%'  
    Then I get 2 same usernames back, How can I get rid of one of them ? When I access TFS trough the portal I only find 1 occurence of this user.
    We use VS2013 and TFS2013 update 4
    Best regards

    Hi DSW,  
    Thanks for your post.
    In your query result, please check if these two users have the same Account Name. if they are two different Account Name in result, it indicate there’s two users have the same display name in your AD, please check that two users’ information in
    your AD. We suggest change one user’s display name in AD.  
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How to provide the user with a list of files to pick from...for downloading

    hai..
    I have uploaded the file succesfully.. now we need to download the file...... which has been uploaded..... for that we have implemnted the Query as..
    select max(id) from APEX_APPLICATION_FILES ,here the latest uploaded record will be retrieved and shown.
    Now We want to provide the user with a list of files to pick from for downloading..,Dat is he should be shown the list of files which is available from dat he has to select one file to downlaod ???
    can u plz tell me how to do it....
    anoo

    Hi Anoo,
    Create a report using the following SQL statement:
    SELECT ID,
    FILENAME,
    CREATED_ON
    FROM APEX_APPLICATION_FILES
    ORDER BY CREATED_ON DESCThere are other fields available from the table, but the above gives you a start.
    Then edit the report's Report Attributes.
    Edit the CREATED_ON column and pick a Number/Date Format to use for the display and Apply Changes
    Edit the ID column. In the Column Link section, enter:
    Link Text: <img src="#IMAGE_PREFIX#download.gif" alt="Download">
    Target: URL
    URL: p?n=#ID#
    Apply Changes and run your report
    Andy

  • Site Login Behavior For SharePoint Foundation 2013 Users With Expired Passwords?

    What are the most user-friendly ways of getting external users with expired AD passwords back into the SharePoint site with a new working password?
    We already send automated email notifications to users reminding them to change their soon-to-expire passwords.  However, sometimes they miss seeing the email notifications before the password expires (such as after returning from vacation or just carelessness
    and lack of attention to email messages) or they see the warning messages and forget to act on it.
    When this happens and they try to log into the SharePoint site from the Internet, their login fails without telling the user the reason they can't log in is because their password expired.  So, they end up confused and call the help desk to get their
    password reset.
    Is there a way to set up SharePoint Foundation 2013 login in a similar way to the OWA login so that, when a user with a correct but expired password tries to log in, it gives them a prompt to set a new password right there rather than just an error indicating
    their login failed for unknown reasons or password is "incorrect?"

    It could be done. You get a different event log entry for an expired login attempt than for a wrong password, 4625 events denote a login failure and an error ID of 23 denotes a logon failure.
    A naff, but simple, approach would be to create a tool that checks your server logon event log for 4625 entries and then emails that user, or the help desk, or security, that they're trying to get onto your system with expired credentials.
    For a more polished experience you've got a lot more work and bluntly it's going to be impractical for you. You'd have to re-write sections of the SharePoint authentication process or intercept the process, both are risky and not a good idea to try.
    There's a really interesting paper here that might be of interest, it won't help you in your current situation but it might shed more light on the overall authentication/authorisation process.
    http://www.sans.org/reading-room/whitepapers/forensics/windows-logon-forensics-34132

  • Two computers and two users with the same name. Can't copy files anymore...

    Hi all, after a user migration to my new iMac I had to make a change of the shortname. I knew it was not a good idea but had no choice otherwise I had to wait other 3 hours to migrate data again...
    Anyway, I managed to change my shortname with success, but one strange thing happened afterwards... I have two macs networked, both have an admin user with the same shortname/real name, 'gillo' (I followed the procedure in one of these two, the Intel iMac. The other, a Powerbook, was not modified).
    While previously I had no problems in copying files from the user 'gillo' on the Powerbook TO the user 'gillo' on the iMac, after the shortname change I'm not anymore able to do it. The error I get is:
    "The operation cannot be completed because you do not have sufficient privileges for some of the items"
    Doesn't matter where I put the files, Desktop, Documents, even the Drop Box, I always get the same error.
    I went through some checks and this is the 'log':
    - The files/folders in the iMac 'gillo' directory are not locked.
    - The files can be copied without troubles to the dirs of another admin user
    - Permissions are the same as the other admin user and owner/group are the correct ones.
    - Both Macs have 10.4.6
    - The 'gillo' user on the iMac can copy files FROM the user 'gillo' on the Powerbook.
    - I repaired permissions and the hard disk booting from the install DVD.
    - I tried to change permissions of the directories (such as Desktop) on the iMac 'gillo' user allowing everybody to read/write. Also a no go.
    Anybody went through this already? Or maybe something similar not directly related to the short name change?

    Actually, everyone missed one point, when a device is priced, the cost of icloud storage space for that device is also included in it that is why they are able to give you 5gb each for each user ID, in nutshell there is nothing free coming with apple device purchase, it is paid for.  What they are trying by giving only 5gb per user ID irrespective of the number of devices used is pure broadlight looting, they take money from you when you buy each device and give you nothing, This is a case of goods and services bought but not fully deliverd ie apple can be suied for discreminatory treatment towards it's users. I wonder why no one tried this yet in America where everyone sue everyone for petty things..... there is no one to take up this issue? . if tim got any love for the guys who shell out money for the devices his company makes, he should be implimenting this as priority before someone wake up from sleep and sue him.

  • What's the problem with having multiple users with the same UID?

    I've got three edit systems connected to the SAN using open directory off our server.
    I want all edit systems to have read/write access to everything created. I don't need to protect anything from any of the systems. With all three systems logged on using the same user, I never have to change permissions.
    The other cool thing about this is that Final Cut Pro will let me know if someone else is modifying a project that I have open with the warning:
    “The project "projectName" has been modified externally. If another user is working on it, saving will overwrite their changes. Do you still want to save?”
    This sounds great, right?
    RED FLAG!!!! Apple gives the warning in this article:
    http://docs.info.apple.com/article.html?artnum=302450
    "You should not allow two users with the same UID to access an Xsan volume at the same time."
    So why is it bad to have two (or more) users with the same UID?
    I can see that in some situations it means that you can't prevent people from read/write privileges. But I don't want to restrict privileges.
    What am I missing? With all of these warnings, it seems like if I do this my edit systems could all explode or something. Please help me understand the potential ramifications of having three users have the same UID.

    Hi Russell,
    1) If you have OD set up and "editor" has UID 1111, then when they log in to any machine that's bound to OD as editor, they will get UID 1111. Therefore, there won't be any of these permission errors. This is typically the recommended approach.
    2) I assume you mean "You'd prefer to not using open directory?" Whatever the case, OD isn't mandatory with Xsan -- it's just that with multiple user accounts, managing them centrally tends to be easier. For 3 or 4 accounts and 3 or 4 machines maybe it's no big deal. If you go larger, it could get a lot more complicated. That said, if you set it up such that each machine has the exact same set of users (as you said, Mary = UID 502, Fred = UID 503, William = UID 504), then you can do what you want. Mary can log in from multiple machines at the same time, and in general you won't have permissions problems. Of course, if you try and read and write the same file from multiple workstations at the same time, you will get file locking issues, which will prohibit somebody from successfully writing the file.
    File locking issues are different from general permissions errors. The former basically says "hey, someone else is editing this file. Therefore I won't let you edit it right now... you can read it if you want though." Permissions means somebody saves it, and Xsan thinks you saved it and own the file, when you really don't.
    Quad-Core PMG5, 4 GB RAM, 7800 GT, 1 TB disk.   Mac OS X (10.4.4)  

  • How to use CMS Users with SAP BOPC NW 7.5

    Hello,
    I have problems importing and using CMS Users with BO PC 7.5 NW.
    I am trying two types of CMS-users
    1. CMS Enterprise Users created in CMS and using "Enterprise" authentication
    2. SAP BW Users imported into CMS using their SAP authentication "secSAPR3")
    but both don't work:
    In the BOPC Admin Client, I can succesfully select Security->Users->"Add new Users". Both CMS "Enterprise Users" and CMS Users that use SAP authentication are displayed in the "Everyone" Group.
    The CMS Enterprise Users are displayed as <username>, e.g. "Miller".
    The CMS users with sap authentication are displayed as <SAPSystem><Client>/<SAPusername>, e.g. "KBE100/Smith".
    Now If I try to import a user...
    1. CMS Enterprise Users
    If can successfully import CMS Enterprise Users and add them to the ADMIN Team, e.g. "Miller".
    The problem is they can't be used to log in to the Admin Client and Excel Client:
    E.g. I enterUser-ID "Miller" and his CMS-Enterprise-password under password after starting Excel Client, an error message shows up: "The UserID, Password or Domain cannot be authenticated. Go back and make sure you entered valid credentials" ... (same error message as if the user wouldn't exist/wrong pw.).
    Seems the user wasn't added as BO PC user. Or do I need to use any prefix before the "user ID" for CMS Enterprise users in the User_ID field instead of just "Miller"?! 
    2. CMS Users which use SAP-authentication (users imported into CMS from BW and use SAP-authentication)
    In the BO PC Admin Client, I can't import them: I go through "1. User Setup" select "KBE~100/Smith", "2. User Detail", "3. Assignments", but if I am in "4. Finish" and click on "Apply", the following error shows up:
    "Failed to create directory \root\Webfolders\<AppSetName>\<Appname>" for "KBE~100/Smith".
    My guess is that the operating system doesn't like the "/" in the Username - but I guess this can't be changed  bc. these Users from CMS and are already displayed with the "/" between SAPSystemID~ClientNummer and username in the User-list in BOPC Admin Client!
    side remark: if I create a SAP CMS Enterprise user which contains a "/" in the username (on pupose ), I am getting the same error message.
    Any help, explanations and workarounds are greatly appreciated - Any solution will be awarded with maximum points!
    Best Regards and thanks a lot for your help!

    Hi Florian,
    The problem seems indeed the file system on the bw not being able to handle "/". The automatic user import from the bw role into the CMC does not give you an option to replace the "/" character with anything else.
    This should solve it:
    - Go to the CMC double click the user. Delete the server part "KBE100/" and click save. Make sure the default system is set to "KBE100". The user should now be able to login from BPC with the user Smith.
    Good luck,
    Martin

  • How to Control authorization for users with certain status for level 2 WBS Element

    Dear All,
    Is there any standard way or enhancement available to control authorization for users with certain status for WBS Element i.e. for example
    Pre-requisite:
    There is only 2 level of project i.e.
    Lev_ WBSE_______Description
    1___ 7-14.E_______summay outage controller
    2___ 7-14.E.2310__ Plant/unit # 2310
    2___ 7-14.E.2310__ Plant/unit # 2220
    Project Controller  (authorization role assigned "Z_PS_OP7_OTGCON_C") have all project level authorization
    Plant/Unit Controller (authorization role assigned "Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement that we did in system by Z table.
    User ID_ Plant #
    123345_ 2310
    122455_ 2220
    Issue:
    After System Status released and User Status approved the WBS basic date for Plant/Units should be restricted from updating/changing by Plant/Unit Controller level and only project controller should have this authority.
    Solution required: 
    Can any one tell how to control this scenario either by standard or enhancement available to control authorization
    BR
    Saqib Usman   

    Hi,
    Did you explore SAP Enhancement CNEX0002 Using Transaction CMOD?
    Thank you and regards,
    Varshal Kachole
    The SCN Rules of Engagement

  • Windows 8.1 update 1 - users with domain mandatory profiles cannot open windows 8.1 Store

    Hi,
    After the update 1 on windows 8.1.  All of our domain users get "you cannot access the windows store because you're signed in to this pc using a temporary or guest account......" while opening windows 8.1 store.  All my users use mandatory
    profiles.  Could some one guide me onto:
     -how and what changes should I make on my base image of 8.1?
    -how/where what changes should I make on the domain in Group policy to make my profiles work?
    -I also run sccm 2012 R2 if that makes the things easier I can use it for deploying store apps, but I prefer to make a base windows 8.1 image throw all required apps on it.  I would like to make sure that my domain user can open up windows store after
    that I can capture this image and deploy.
                                  Need help thanks
                                  Note: Before this update 1 of windows 8.1 things worked great.

    Thanks Kate Li,
    Domain profile is not corrupt.  I have checked the registry settings.  In my question I am mentioning that I am using mandatory profiles for domain users.  Need help.
    I am on update 2 now and the same error for domain users with mandatory profiles.
    Also error 1001 is generated every time the user tries to open the store(the user with mandatory profile)
    Log Name:      Application
    Source:        Windows Error Reporting
    Date:          9/30/2014 8:52:17 AM
    Event ID:      1001
    Task Category: None
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:      TCO-TTTEST.mydomain.com
    Description:
    Fault bucket , type 0
    Event Name: WWAJSE
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy
    P2: Windows.Store
    P3: 3e43
    P4: FFFFFFFE
    P5: (null)
    P6: 0_0
    P7:
    P8:
    P9:
    P10:
    Attached files:
    ErrorInfo.5160.3992.txt
    C:\Windows\WinStore\AppXManifest.xml
    These files may be available here:
    Analysis symbol:
    Rechecking for solution: 0
    Report Id: 9b46f622-48a0-11e4-bec5-6036dd67e10b
    Report Status: 262144
    Hashed bucket:
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Windows Error Reporting" />
        <EventID Qualifiers="0">1001</EventID>
        <Level>4</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-09-30T12:52:17.000000000Z" />
        <EventRecordID>366588</EventRecordID>
        <Channel>Application</Channel>
        <Computer>TCO-TTTEST.mydomain.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>WWAJSE</Data>
        <Data>Not available</Data>
        <Data>0</Data>
        <Data>winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy</Data>
        <Data>Windows.Store</Data>
        <Data>3e43</Data>
        <Data>FFFFFFFE</Data>
        <Data>(null)</Data>
        <Data>0_0</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
    ErrorInfo.5160.3992.txt
    C:\Windows\WinStore\AppXManifest.xml</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>0</Data>
        <Data>9b46f622-48a0-11e4-bec5-6036dd67e10b</Data>
        <Data>262144</Data>
        <Data>
        </Data>
      </EventData>
    </Event>
    Thanks
    Followed :
    http://support2.microsoft.com/kb/2890783  Made a brand new profile.  No luck same error.

  • A lot of users with white screen after lcd replacement!

    Hello!
    So i have a macbook air with a broken hinge.. replaced the screen assembly as in the guide on ifixit. All ok, but after replacement the screen is white with light vertical stripes. Now i have done some research and found out there are a lot of users with the exact same problem but none with a solution.
    I think the reason why the screen turns white (most of the times) is because of the lcd modelnr en most importantly versionNr! The lcd model of the macbook air original is: B133EW03 but there are 4 versions of this screen: 0,1,2 and 3 respectively. In this link (page 3)http://www.ttsystem.ru/data/B133EW03_V1_Others_0204.pdf you see V1 is an upgrade of V0, in the way that the EDID codes have changes and so the OS has to send different codes to the lcd for it to 'understand'. I couldn't find the exact changes in V2 and V3 but i'm guessing it could be similar.
    So my question is could this be possible?? is it possible or does anyone know you need the exact same lcd screen (model en version) when you replace your lcd screen?
    Another very strange thing is that my macbook air shows some discrepancies:
    The bottom case of my macbook air says A1304 and the serialNr off course. But the motherboard shows the A1237 model..Step 14! (In this ifixit guide http://www.ifixit.com/Guide/Installing-MacBook-Air-Models-A1237-and-A1304-Displa y-Assembly/855/1
    Also OSX gives me the data:
    MacbookAir 1,1
    1,8ghz core 2 duo 64gb ssd (which isn't a a1304 model..)
    but the same SerialNr!
    When i check the specs online using the serialNr i can see it's made in week 50 of 2008.. in my opinion it's impossible it's a a1237, because apple introduced the a1304 in october 2008..

    I had the same problem with the LCD after replacing hinges and could not figure this out. 
    To solve the issue, I bought another A1237 of eBay that apparently had no HD/SSD, but it arrived with a swollen battery.  I removed the bad battery and replaced and moved SSD over and "Voila"...it amazingly light up...........

Maybe you are looking for