User - Role - view only

Dear all,
i have a question. I am developing a application to view some data from the database. This application will be on the laptops of all the people that are working all over the country. To prevent that a stolen laptop is used fore decompiling the software and getting the login procedure and some fool editting the data i would like to create a user with a view only mode on only one table.
What is the correct way to tho this, make a user,.... grant a role..... etc etc etc ?
What are the parts that this user must have in his role? And what are the parts he must not have in his role?
Thanks already,
Johan.

I figured out that none of the "Exchange 2013" cmdlet will not be present on our machine by default., We need to import the Powershell Session
before using the cmdlet and then to remove it when we're done using it. Below is the complete set of commands needed to perform this task:
Open Windows Powershell.
Get the credentials.
$Cred = Get-Credential
Create a remote PowerShell session
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $UserCredential -Authentication Basic –AllowRedirection
Plz make sure that the url given above is for Exchange Online only.
Import the cmdlets to the PowerShell
Import-PSSession $Session
Once the import is done, all the Exchange
2013 cmdlets become available.
We can then execute the cmdlet, "Add-RoleGroupMember"
Add-RoleGroupMember -identity "View-Only Organization Management" -member PKS
Finally, don't forget to remove the Session before exiting.
Remove-PSSession $Session
The only difference was that earlier I was not importing the PSSession before executing this cmdlet. Plz note that import is valid
for any Exchange 2013 cmdlet and not just for this only.
For further details, you can visit here

Similar Messages

Cisco Mediasense API user to view only selected recordings/extensions

Dear Experts,
Is it possible with Cisco MediaSense 10.5 to limit users to view only selected Phones/extensions recordings ?
For eg: A department manager must only view their department members. They must only be able to listen to the recordings from their department members. Is this possible ?
If yes, what is the configuration required ?
Regards
Bejoy Thomas

Hi Bejoy,
It is not possible in MediaSense natively to do this right now. You can get a Partner Add-on to enforce the demarkations. Both Calabrio and NICE offer a Search and Play add-on that can do this.
HTH
Manish

How to user can view only allow sessions in operator

dear all
how to user can view only allow sessions in operator, user has a right to execute only one package.
kindly help asap.

What Database privilege (not EM privilege) does the new user have?

SharePoint 2013 allows downloaded even for users with "view only" permissions

I have a new on premises SharePoint 2013 server and assigned a single user "view only" rights to a document library. In the "permission levels" window, this permission is described as "Can view pages, list items,
and documents. Document types with server-side file handlers can be viewed in the browser but not downloaded."
Once I gave the user that permission, I noticed he was able to view documents in the library but the "but not downloaded" part does not seem to be working. The user can still download documents to his local desktop and SharePoint does not prevent
it. The "download a copy" option appears and the user can use it.
My goal is to make all documents in this library such that users can only view them in the browser and not download a local copy. How I do that?
Thanks for your help.

Not entirely positive :-)
However, you have no server-side handlers in place today without WAC installed, so that portion of the View Only permission wouldn't be applicable.
Note that WAC must be installed on its own server and if your SharePoint server is extranet or public facing, it needs to have a valid, public SSL certificate. Also, WAC should always be run over SSL regardless if it is public facing or not as the token
sent between the SharePoint server and WAC is the same as having a username and password for the user making the request.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Users with View Only Privilege

Hi,
I currently have an application for a team of 20 people to create, update and delete records in multiple tabs, pages, etc. There is a request from the team to grant 5 outside users a "Read-only" version of the application in order for them to browse and research what type of data the team has gathered.
Is there an easy way to do this in the 'Manage Application Express Users"? I see there is a pre-existing Group called "Viewers". When I created a new user in the Viewers User Group and I log in, I can still create, edit and delete.
Thanks in advance,
Romi

As far as I know there are no pre-created user groups in Apex. That aside, there are no privileges assigned to an Apex group. The developer still has to make objects (buttons in your case) conditional on the user belonging to the group.
Sima

Viewing swf from HTML- user can view only once

Hi,
I have my swf files which are getting called in browser when user opens its corresponding page.
To ensure my swf is not used by user for his other purposes, i had to strict it to view from HTML page which has a variable. Same variable is passed from swf to this HTML.
if both variables does match then only swf starts preloading. this works fine for first time.
But when user open the same page second time, he is only able to view preloader which does not progress further.
When i delete my temp file then user is again able to view the swf only once.
Can anyone tell me;
1. what is reason the swf from temp file cannot access variable of its HTML
2. am I doing it wrongly?
3. do i need to clear cache everytime or their is another method to do it?
Thanks.

hello following is the code used;
import flash.text.TextField;
import flash.events.ProgressEvent;
import flash.events.Event;
import flash.display.MovieClip;
//////////STAGE PROPERTIES//////////
stage.showDefaultContextMenu = false;
this.tabChildren = false;
Mouse.cursor = "arrow";
//////////CALL & SET VARIABLES//////////
var Progress_txt:TextField = new TextField();
var theFlashVar:String;
var ver:String;
var paramObj:Object = LoaderInfo(this.root.loaderInfo).parameters;
for (ver in paramObj)
                theFlashVar = String(paramObj[ver]);
//////////START USER VERIFICATION//////////
checkFlashvar();
//////////HTML VERIFICATION//////////
function checkFlashvar():void
                //trace("CHECKING Flash VAR");
                if (theFlashVar=="mystring01")
                                InternalPreloader();
                                //trace("pass var found");
                                //InternalPreloader();
                else
                                //trace("VAR NOT FOUND");
                                gotoLocalVar();
//////////LOCAL VERIFICATION//////////
function gotoLocalVar():void
//////////LOAD LOCAL DATA//////////
                var keyLoader:URLLoader = new URLLoader();
                keyLoader.dataFormat = URLLoaderDataFormat.VARIABLES;
                keyLoader.addEventListener(Event.COMPLETE, chkLocalVar);
//////////CHECK ERRORS//////////
                keyLoader.addEventListener(IOErrorEvent.IO_ERROR, onLoadError);
                keyLoader.load(new URLRequest("C:/code.txt"));
//////////CHECK LOCALLY LOADED DATA//////////
                function chkLocalVar(event:Event):void
                                if (keyLoader.data.passKey == "mycode")
                                                //trace("pass key found");
                                                play();
                                else
                                                //trace("Local VAR NOT FOUND");
                                                stop();
                                                parent.removeChild(root);
//////////LOCAL FILE ERROR HANDELLING//////////
function onLoadError(evt:IOErrorEvent):void
                //trace("TXT FILE NOT FOUND");
                stop();
                parent.removeChild(root);
//////////INITIATE PRELOADER STATUS//////////
stop();
function InternalPreloader():void
                stop();
                Progress_txt.x = 400;
                Progress_txt.y = 300;
                addChild(Progress_txt);
                //trace("load progress event");
//////////CHECK PRELOADER STATUS//////////
                if (this.loaderInfo.bytesLoaded == this.loaderInfo.bytesTotal)
                                //trace("checking if condition");
                                finishedLoading();
                else
                                progressLoading();
//////////PRELOADER PROGRESS EVENT LISTENERS//////////
function progressLoading():void
                //trace("progrss loading is running");
                this.loaderInfo.addEventListener(ProgressEvent.PROGRESS,onProgress);
                this.loaderInfo.addEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER PROGRESS STATUS UPDATE//////////
function onProgress(p:ProgressEvent):void
                Progress_txt.text = String(Math.floor((p.bytesLoaded/p.bytesTotal)*100))+ "%";
                preloader_mc.bar_mc.scaleX = (p.bytesLoaded/p.bytesTotal);
                //trace("checking progress");
//////////PRELOADER STATUS COMPLETE-REMOVE LISTENERS//////////
function onComplete(d:Event):void
                //trace("Fully loaded, starting the movie.");
                play();
                //removing unnecessary listeners
                removeChild(Progress_txt);
                loaderInfo.removeEventListener(ProgressEvent.PROGRESS, onProgress);
                loaderInfo.removeEventListener(Event.COMPLETE, onComplete);
//////////PRELOADER STATUS 100% (LOCAL CONDITION)//////////
function finishedLoading():void
                //trace("loading completed");
                removeChild(Progress_txt);
                play();

User Roles not limiting views

I am working on User Roles and Views in SCSM. I have created a User Role for our Development Support Staff. I have assigned only the Service Request views for that Support Group.
When I view the console with one of those users credentials, I see all Incidents, Change Management, and Problems that are in SCSM.
I have checked the User Role and they only have access to the View - Assigned to Me.
I would like to understand why this user can still see everything in SCSM and how I can go about blocking these views for all User Roles unless they need them.

User roles are cumulative. If you have user A who is in User role X that has access to all views and same user A who is in a user role that only has access to View 1, 2, and 3 then user A still has access to all views through the user role X.
In short. The users have access to all those views through another user role.
Cheers,
Anders Spælling
Senior Consultant
Blog:
Twitter: LinkedIn:
Please remember to 'Propose as answer' if you find a reply helpful

How can I add a user Role member that is from a different domain

We are currently building out SCOM 2012 R2 to provide monitoring as a service to some of our customers. As of now we have the RMS on our own department's domain (Domain A) which we have full control of and we have a gateway server that is on the company
wide domain (Domain B) so that we can monitor other departments devices as the leverage this system.
Monitoring is working just fine on both domains and we are just working on fine tuning SCOM so that we can roll it out as a service we offer to our customers. One of the next steps we are working on before rolling it out is giving specific users access
to view only their own devices, dashboards, and groups. So I created a Read-Only profile and went to add a user to test it out, but that user is on Domain B and SCOM is unable to resolve this account. I'm seeing Event ID 26319 with Error Code 1332.
How can I get SCOM to discover devices on a different domain so that I can give them different permissions for accessing the Operations Console and/or Web Console? Is this possible?
Here is the Error I'm seeing.
Log Name: Operations Manager
Source: OpsMgr SDK Service
Date: 2/4/2015 1:11:59 PM
Event ID: 26319
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: xxxxx.xxxx.xxxxxxxx.xxx
Description:
An exception was thrown while processing UpsertUserRolesV2 for session ID uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40.
Exception message: The creator of this fault did not specify a Reason.
Full Exception: System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected] associated with the user role. Error code 1332. Check your active directory configuration.).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="OpsMgr SDK Service" />
<EventID Qualifiers="49152">26319</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2015-02-04T21:11:59.000000000Z" />
<EventRecordID>172748</EventRecordID>
<Channel>Operations Manager</Channel>
<Computer>xxxxx.xxxx.xxxxxxxx.xxx</Computer>
<Security />
</System>
<EventData>
<Data>UpsertUserRolesV2</Data>
<Data>uuid:f3b4015e-9583-4237-b7a6-406826434553;id=40</Data>
<Data>The creator of this fault did not specify a Reason.</Data>
<Data>System.ServiceModel.FaultException`1[Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException]: The creator of this fault did not specify a Reason. (Fault Detail is equal to Microsoft.EnterpriseManagement.Common.UserRoleUserUnresolvedException:
Unable to resolve the user [email protected] associated with the user role. Error code 1332. Check your active directory configuration.).</Data>
</EventData>
</Event>
Thanks for any help I can get in resolving this issue.
Jake

The SCOM Management Server is in Domain A. I've tried it already and it has failed.
So just to clarify the method I used was to go to Administration>Security>User Roles. Then New User Role>Read-Only Operator. In the Create User Role Wizard I then gave the User Role a name, Clicked "Add" under User Role Members.
Then the Select Users or Groups window pops up and I changed the Locations from Domain A to Domain B and searched for the user, which it's able to find, then clicked "OK" to add it to the User Role members which it does just fine. On
the next page which is Group Scope I checked the one group I want this account to have access to and then click next. This brings me to Dashboards and Views where I click the radio button for "Only the dashboards and views selected in each tab are
approved" and chose the folder of dashboards I want this account to access and then click next. This brings me to the Summary and I click "Create". At this point it thinks for a moment then closes out the wizard but the new Read-Only
Operator does not appear. I then look in Event Viewer and see the Event I pasted above.
Am I doing something wrong here? Any guidance on how to get around this issue would be much appreciated.
Thanks,
Jake

Restricting values of a dropdown based on user roles

Hi,
Is it possible to restrict the values of a custom metadata dropdown based on the user roles (assuming only 1 role is assigned to each user)? Say, based on the role assigned to a user, he/she should see only 3-4 values out of 10 values in a dropdown on the checkin page. Please suggest.
Thanks.

You can get pretty close out of the box using some configuration manager applet voodoo
1)First off create a Table that will contain the options for your list. Create the columns e.g. label and id and then also create a column called dSecurityGroup
2)Add a view based on the table you just created, choose the Security tab and select "Use standard document security"
3)Add some values to your view - make sure that you populate the dSecurityGroup column with real values of security groups
4)Once it is all published, have a look at the checkin and search screens. You should find that UCM will evaluate the options in the same way it would documents - based on the dSecurityGroup value you applied to the row - e.g. you will see an option on the search screen if you have at least R permissions, you will see an option on a checkin screen if you have at least RW permission
Try it out :-)

Tcode only view only display of the Stock

Dear All,
can anybudy tell me which tcode i asaign to sap user to view only display to View the Stock
is it mmbe or mb5L coorect or any other tcode i asgine
warm Regards
Pritpal Mehru

Dear
check out the MC tcode like
MCSK, MC.2, MC.9, etc.
full marks to me if solved.
regds
dev...!

View only responsibiliteis in 11.5.8

Can someone please help me ? I am new at this. I want to set up the resposibilities in "view only" mode so that user cann't update the data. Does anyone knoe how to do this?
Please let me know. Any help would be appreciated.
Nikunj

From Release 11 there are seeded Inquiry Only responsibilities available for few modules.. For e.g. Payables Inquiry, Receivables Inquiry. These responsibilities can be assigned to the users as View Only access modules.
To check the seeded responsibilities: System Administrator responsibility
Navigate: Security>Responsibility>Define
Find: %Inquiry
For the modules where such feature is not available, you may have to determine the Form Functions for which you need query only feature.
Login as System Administrator: Application-->Function-->
In form function window query the function that you want to run in QUERY ONLY mode, create a new Function (record) using this function name, and enter QUERY_ONLY=YES in the parameters field. Create or modify the menu and menu structure that needs to be attached to this function. Create or modify the responsibility to associate with the above menu/menu structure. Finally assign this responsibility to the user.
Best Regards,
Sanjeev

Design option for view only AM

We are creating an ItemAM that will be opened, updated, and then closed. There will be two types of users that use this AM, those with edit capabilities and those with view only capabilities. Once the item is closed no updates are allowed, so the item will remain in a view only state. We are looking for some ways to model this. We want to maintain state when the ItemAM is opened by users with update responsibility. However, we do not want to maintain state if the item is opened by a user with view only. Once the item is closed we do not want to maintain state, since you cannot change the item. What's the best way to model this? Can a personalization be used to check the responsibility or item status and not save state when the item is brought up in view only mode? We anticipate that about half the time the item will be brought up in edit mode and the other half in view mode. I am looking for recommendations on the best way to implement this.

It is not correct to think of AM being update allowed or not, VO is the one that captures the updates and applied it to the DB via EO.
As far as your problem is understood, based on the responsibility, you either want the page/field to be update allowed or update not allowed.
For this , you can make the beans render as read only when the page loads based on the responsibility
or
you can always have the page/bean as update allowed and in the submit action discard the changes based on the selected responsibility.
Thanks
Tapash

Query Result Filtered using User Roles SCSM 2012 R2 RU2

Hi,
I have a Query Result setup in a Request Offering that shows the list of Printers using the Printer CI. We have different sites with printers that start with the site location like MTL. There are no filters in the Query Result. What i did is create a Group
for each site that has the rule "start with" MTL (other groups have other 3 letter prefix). Then i created a user role for each group and only selected the Printer group for the site and i associated the User Role with our AD Site group called MTL-User.
i did this for each site. Now when i checked the Request Offering at first, with a user that is part of MTL-User group, it showed only the list of printers that started with MTL. Now today i came to check again and the same user is seeing all the printers
and not just the ones that start with MTL.
The User Role i made was based on the Read-Only Operator. I just dont know what the problem is

Thanks for that link. I had thought of something like that but i found it came to the same thing as just using the filter field that is already available when using a Query Result. I retried using User Roles and figured out that the problem is that my test
user is only part of the MTL-USER group so when i logged in with him into the portal (cireson Portal btw) i would see the proper result. If i logged in with a actual user that is also part of other groups besides MTL-Users, they see all the printers no matter
which AD group i define in the User Role.
So what i figured was that my group is not getting applied as the filter to the query Result and that the Member section in the User role is only to say who can see the Query result list. But then i have my test user for which this setup works...so im confused
on what exactly is overriding the results.

User Role to view all tables?

Is there a 'role' in oracle which enables a user to read (only) all the tables (exluding sys views/tables) ?

There is no such role. You would have to create one and grant SELECT on all desired objects to it. The closest thing to what you are asking is the SELECT_ANY_TABLE privilege, but it allows a user to select any table and view in the database including those in the SYS schema. This is probably not what you want.
Kind regards,
Russ Cannon

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.h

I have 100 groups in planning for those 100 groups i want to build roles like interactive,view user,planner etc.for those how to change in export -import folder .xml file in that edit how to change user roles in that xml it will generate automatic id.how to do that in xml file ?

Thanks john for you are reply.
I had tried what you sad.I open shared service in that foundation project i had export shared service.after that in import-export file.In that role.csv,user.csv,group.csv.Like this file have.When i open user file added some users after i trying save in excel it shown messgse
I click yes and save the .csv file and import from share servie. i got error like this
am i doing right way john.or explain clearly

User - Role - view only

Similar Messages

Maybe you are looking for