User's profile portlet - security

Hi,
I’m working on a user’s profile portlet (JSR286) to show basic profile info. like name, phone and etc. The user will need to log in to WC Spaces.
1.     Has anyone have experiences in setting up security to pass the profile to the portlet?
2.     Can someone see others’ profile in Spaces?
Regards,
Will

Are you auditing ALTER USER statements? I don't believe 11.2 does that by default. If you're not auditing ALTER USER (and you haven't coded some alternate mechanism like a DDL trigger), Oracle generally won't record who changed a profile or when it was changed.
If you're really desperate, you could potentially use LogMiner to go through the archived logs generated over the time frame when the change might have been made to find the ALTER USER statement in the redo logs. But that's generally a pile of work particularly if the potential time frame is large enough that you have to try to restore the archived logs from tape in order to mine them.
Justin

Similar Messages

  • How to get user data in a user profile portlet

    You would think that this would be easy. Its not?
    This was posted in the wrong forum:
    Re: Interaction (ALUI/WCI) Cutom User Profile Portlet
    "I have a custom portlet that returns user specific information using a portal user profile property. It works great when using current user, which is the logged in user. How can I access the user properties for the profile page owner?
    I searched the dev docs without any success, only references to preferences.
    Thanks in advance for your assistance.."
    I want to know the answer as well. Seems that you shouldn't have to query the IDK for this...
    I see 6.5 has an adaptive tag for this.... sigh. time to upgrade.
    Edited by: Joel Collins on Feb 3, 2009 10:56 AM
    in case anyone tries this in 6.1, I ended up using this:
    string sProfileUserID = portletRequest.GetSettingValue(SettingType.UserInfo, "_ProfileUserID");
    int iProfileUserID = int.Parse(sProfileUserID);
    IObjectQueryRow user = userManager.QuerySingleObject(iProfileUserID);
    IExtendedData extendedData = user.GetExtendedData();
    make sure you check off the right check box on the user information page of the web service.
    Edited by: Joel Collins on Feb 3, 2009 2:12 PM

    Did you search in the forum before posting your question? Every week similar question like yours is being posted. Anyway find below the query.
    SELECT LTRIM(MAX(SYS_CONNECT_BY_PATH(EMPNO,';')),';')
    FROM
    SELECT EMPNO,ROW_NUMBER() OVER(PARTITION BY 1 ORDER BY 1) CURR,ROW_NUMBER() OVER(PARTITION BY 1 ORDER BY 1)+1 NEXXT
    FROM EMP
    START WITH CURR=1
    CONNECT BY CURR = PRIOR NEXXT
    Regards,
    Mohana

  • The User portlet and the Portal User Profile portlet

    Im trying to create a sub administrator home page on version
    309, however the 'create user' portlet has been split into
    a 'create user' and a 'update user profile' portlet (as seen on
    the new default portal30 homepage).
    However the only portlet that seems to be available in the
    portlet list is 'update user profile' portlet.
    So how do I add the create user portlet to my homepage?

    I found the wwsec_api and wwsso_api_user_admin packages. I now know I can build my own user profile screen and use these APIs to add, update, and remove users.
    However, do I need to use the wwsec_person$ table, or can I create my own? Or can I add additional fields to the wwsec_person$ table? I have 7 additional pieces of information that need to be captured. I could just use some of the database fields in the table that we don't currently have use for, but then the name of the field will not accurately represent the contents of the data (i.e. store our "Organization" data in the "Department" field, our "DSN Phone Number" in the "Work Phone Number" field, etc.) and it would make for difficult maintenance.
    Can anyone offer suggestions as to how they implemented a customized User Profile, easily?

  • I'm apple user. some one has hacked my user ID profile & has changed my security questions. Also hacker has give rescue email , which is absolutely unknown to me.Resultantly i can't make any purchase from apple. How apple can help me. Thank

    I'm apple user. some one has hacked my user ID profile & has changed my security questions. Also hacker has give rescue email , which is absolutely unknown to me.Resultantly i can't make any purchase from apple. How apple can help me.
    Thanks in anticipation.

    You will need to contact Support in your country to get the security questions reset (these are user-to-user forums) : Apple ID: Contacting Apple for help with Apple ID account security (if your account's password has been changed then they should also be able to reset that for you)
    When they've been reset you can then use the steps on this page to change the rescue email address to an account that you have access to, for potential future use : Manage your Apple ID primary, rescue, alternate, and notification email addresses

  • Windows cannot load the user's profile but has logged you on with the default profile for the system.

    My Windows 7  crashed a couple days ago after a windows update, I got this message.
    Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
    I restarted the machine and got this message
    Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights.
    DETAIL - The process cannot access the file because it is being used by another process. for C:\Users\TEMP\ntuser.dat
    I checked the event Log I found these .
    Windows cannot load the user's profile but has logged you on with the default profile for the system.
    DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
    Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on.
    Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile.
     DETAIL - The process cannot access the file because it is being used by another process.
    This is the first error in the event viewer after a successful logon
    The description for Event ID 34 from source ccSvcHst cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
     If the event originated on another computer, the display information had to be saved with the event.
    ccSetMgr
    Windows cannot load the user's profile but has logged you on with the default profile for the system.
    DETAIL - Access is denied.
    Looking at the Logs all I can tell is that after the Desktop Window Manager started if caused this error.
    The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
    then this one
    The Desktop Window Manager has exited with code (0x40010004)
    Then this before it shutdown.
    The User Profile Service has stopped.
    I started up the PC and the first message I got was
    How can I get access to my user profile? do I need to createa new Administrator account? Please help
    The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.

    hi do the following
    1. In Search programs and files (Windows 7) area, type in regedit, and press Enter.
    2. If prompted click yes,
    3.  expand the following HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    4. click the sid that related to your admin profile (if you not sure, click each sid and in turn look to the right hand side of registry editor it will show who that sid is related to one of the registry files should hae in description localhost\admin or
    something similair)
    5. right click the sid and press delete.
    6. restart your machine and log back on with the admin account, this will then rebuild the admin profile... dont worry when it loads and none of your personal settings are saved or files or folders... go to c:\users
    in here you will see two folders for the admin account, one will be just admin and the other most likely admin.localhost
    i cant remember which one is which but just check both, one will still have all your files and folders in it.
    i suggest making a backup of your data before doing this incase something does go wrong, but ive had this happen many times in a domain enviorment and has worked for me everytime.

  • Can't change Window User's Profile Location

    I would like to change the Window User's Profile Location. I've followed the instructions on page 85 of User Management Apple's document unsuccussefully.
    In the Windows tab of Group Management, I have enter my new SMB sharepoint :
    User Profile Path : \\servername\sharename\folder\usershortname
    The Window Client's computer is recocgnized by the OD / PDC Leopard server, I can login without any problem, but at the end of the Window XP session's, the profile is still saved at //ODMasterServer/Users/Profiles/.
    The strangest is that in XP I perfectly reach \\servername\sharename\folder\ and can write what I want within.
    I think that the Leopard PDC doesn't send the correct information to the client for the profile folder path's.
    Where can I verify or change it ?
    A solution would be to write a login script for the client, any idea of a short script ?

    I solve partialy my problem.
    I use a Windows Server 2003 with file sharing.
    1) Add the server the same way you add an XP client computer in the OD domain.
    2) Create a file sharing using the server admin console (DO NOT USE the file sharing on the properties of the file) choosing full access for admin and read/write access for users
    3) In the security of the shared directory add the OD admistrator's (be careful domainnamedomainadmin not only domain_admin) and give him full access.
    So apparently the PDC and the SMB doesn't work correctly in Leopard Server apart for the file /Users/Profiles.
    It works more or less fine.
    Now, I want to hide the home's and profil's file to the other users (mac or windows).

  • ERROR:Failed to validate GUEST user in Profiles.

    I have r12.
    I try to do the Application Object Library AOL/J Setup Test http://download.oracle.com/docs/cd/B40089_10/current/acrobat/120sacg.pdf
    There is the error under "Verify Guest User" of Coonection Test.
    ERROR:Failed to validate GUEST user in Profiles.
    I can login to the applications and just want to try the test. This is a new setup r12 instance.
    Thank You.
    Edited by: user11080703 on Jun 6, 2009 2:53 PM

    Hi,
    What R12 release you are running? What is the OS?
    I am unable to reproduce the issue on my R12 (12.0.4) instance as the AOL/J test shows the following:
    Under "Verify DBC Settings" page:
    Checking guest user/password... ...verified:GUEST/ORACLE
    Continue to next step only if you see no errors in this page.
    Under "Making AOL/J Connection":
    =>Testing validateLogin...
    validateLogin(GUEST,ORACLE) returned: true
    Successfully created WebAppsContext, login validated.Get the value of the GUEST password from the application context file (search for "s_guest_pass"), and use this password in the following command:
    SQL> select fnd_web_sec.validate_login('GUEST','Guest Password')
    from dual;This should return something like the following:
    FND_WEB_SEC.VALIDATE_LOGIN('GUEST','ORACLE')
    YPlease verify that the GUEST password is set properly in the following:
    1) DBC files (under $FND_TOP/secure)
    2) "Guest User Password" profile option
    3) The above SELECT statement
    Regards,
    Hussein

  • Region Level Portlet Security

    I would like to have seurity at a region level for adding and removing portlets to a portal page. Here is our sinario; We have a page with tabs and one of the tabs has the requirement for region level security. There are three regions; In the first region the user can not do anything with the Portlets, in the second region users can add portlets only, in the third region users have full control. (See picture below) - Is this possible and if so what would be the steps.
    {Tab1}|{Tab2}|{Tab3}|[TAB4 ACTIVE TAB]
    | No Access to Portlets |
    | Add only Access to Portlets |
    | Full Access to Portlets |
    -------------------------------------

    Frank,
    You can set security at the tab level, but not at the region level. We'll consider this for a future release, but all the additional security checking doesn't help performance.
    Regards,
    Jerry

  • Different user status profile for network header and activities

    Hi everyone!
    Is there any way to define different user status profile at network header level and at network activity level? As far as I know, it is only possible to enter a user profile at network type level, and both netwok headers and activities use the same statuses. Does it work this way?
    Thanks!
    Regards.
    Edited by: Thalos on Jul 2, 2011 12:27 AM

    Hi Punith, Hi abdul!
    Thanks for the reply!
    I've gone through the OPSC, but the thing is that here you define a user status profile at network plant level. But I need to define it at network activity level.
    The reason why I need this is because we have types of activities. We use network activities for client activities, for internal activities, to identify and follow-up risk management, etc. Each group of activities -since they have different usages- has different user status associated. But as I don't have any way to assign different user status profiles, all the activities have the same statuses, although  they will only use some of them.
    Thanks!
    Regards,
    Thalos.

  • How to find out users who have answered security questions

    Is there any report where we can find out users who have answered security questions.
    Please reply back to this.

    This might help you:
    Define a task template, reference the UserQuestionReport task definition:
      <TaskDefinitionRef>
        <ObjectRef type='TaskDefinition' id='#ID#TaskDefinition:UserQuestionReport' name='User Question Report' displayName='UI_REPTS_XML_USER_QUESTION_TITLE'/>
      </TaskDefinitionRef>Define desired variables
          <Attribute name='attrListField'>
            <List>
              <String>accountId</String>
              <String>policy</String>
              <String>loginInterface</String>
              <String>questions</String>
            </List>
          </Attribute>
          <Attribute name='attrMapField'>
            <Map>
              <MapEntry key='accountId' value='UI_REPTS_XML_REPORT_ATTR_ACCOUNTID'/>
              <MapEntry key='loginInterface' value='UI_ATTR_LOGIN_INTERFACE'/>
              <MapEntry key='policy' value='UI_SERVICEMODIFY_JSP_ACCOUNTPOLICY'/>
              <MapEntry key='questions' value='UI_ATTR_MIN_QUESTION_UNANSWERED'/>
            </Map>
          </Attribute>and the rest of the task template for a report definition.
    Hth
    Edited by: nickoarg on Feb 5, 2009 1:57 PM

  • IChat fails to connect in a user's profile

    Someone in my office uses iChat to connect with AIM. We have verified the password and server settings as correct, but the program stalls with the message connecting.
    I am able to connect to her AIM account using iChat under a different user's login for the the same machine. Any advice on how to get iChat working again withing this user's profile?

    Hi,
    I can do very little as to why MSN or Yahoo can not write an App for a Mac especially as the Processors are Intel based now.
    I can point you to this User'S Tip http://discussions.apple.com/thread.jspa?threadID=1968438 about iChat to AIM.
    It is in fact in the list of Recent User's Tips at the head of the forum.
    I can assure you the .plists are in Hard Drive/Users/(your Account)/Library/Preferences (as in ~/Library/Preferences or Home Folder/Library/Preferences or Little House Icon/Library/Preferences)
    8:12 PM Tuesday; August 18, 2009
    Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

  • Solution Manager 4.0 Solution Monitoring User -Roles-Profiles for Satellite

    Hi All,
    I have installed Solution Manager 4.0 (OS -Linux ,Database - DB2) .
    Now i need to connect solution manager to the R/3 4.6C
    Satellite Systems (DEV, QAS ,PRD) for Solution Monitoring
    and Service level Reporting .
    I have read the configuration guide , but unable to get clear idea .
    1) what users (alos type of user -Dialog , Service, Communication etc) do i need create in DEV , and Test in QAS  for solution Monitoring  .
    2) what exact roles /profiles need to be assigned to these users in satellite systems .
    3) what users/roles /profiles needs to be done in SOLMAN system
    i have applied all the required plug ins and support packs
    in satellite systems and solman 40 ..
    Please advice  . Your response will be a great help for me .
    Satish

    Hello Satish,
    Just clarify, if u have meant connecting the satellite systems for EWA reports to be precise. Early watch Reports. If its is the case, then repond so that i can putin my inputs which may be helpful for you in this config.
    Rgds,
    Sri

  • How "not to set locale " in user's profile?

    In the "Oracle Universal Content Management 11gR1 Differences between 11gR1 and 10gR3" document
    http://www.oracle.com/technology/products/content-management/ucm/diffsbetween10gand11g.pdf
    says:
    "If locale is not set in a user’s profile, Content Server can pick that up from a HTTP header variable."
    However, how do I "not to set locale " in user's profile? it appears as a dropdown list and there is no option to enter null.
    Thanks

    Hi there,
    What you're changing is per-user but those options are set in the Utilities->System Properties applet
    Here's how you change it:
    Go to the System Properties applet:
    UNIX: Start the System Properties utility by running the System_Properties script, which is located in the bin subdirectory of the Stellent Content Server installation directory.
    Windows: From the Windows Start menu, select Programs -> Content Server Content Server -> [Instance Name] -> Utilities -> System Properties.
    Then once the System Properties applet is started:
    # Open the Localization tab.
    # In the list of locales, you can Disable the locales you have here or maybe a new option with 11g will show up.
    # When you are done, click OK to apply the setting and exit System Properties.
    # Restart each instance of the content server.
    Cheers,
    malky

  • Hide password and user name fields in secure form on landing page

    On a landing page I don't want the password or user name displayed in the "secure" form because I think it will keep people from downloading our e-book. It will cause what some refer to as too much friction—visitors will feel that we are asking too much of them just to download an e-book so won't do it.
    I found somewhere where the user name can be populated with the e-mail address, although I couldn't figure out where to put the code to make it work.
    Can the password fields also be auto-populated and hidden so the user can access the secure zone to download the e-book never even knowing that they had a user name and password assigned to them?
    I'd really appreciate some help here and please keep in mind that html and css is where my expertise stops so if there is a java solution I will need the code and how and where to add it.
    Many thanks for your help.
    John

    This article just might point you in the right direction: http://kb.worldsecuresystems.com/853/cpsid_85381.html

  • How to view/edit/delete the user created profile in oracle 9i? Very Urgent

    Friends,
    I logged in as system in oracle 9i.
    SQL> create profile testpro limit
    2 idle_time 1;
    Profile created.
    SQL> alter user scott profile testpro;
    User altered.
    Then i logged in to sqlplusw as a scott user.
    and i waited for 10 mins after that.
    sql> select * from cat;
    its working......
    how come? i have already set a idle time to 1 minute.
    Please correct me if im wrong.
    Also, how can i view/edit/delete the user created profile.
    Thanks & Regards
    Sathyguy
    Message was edited by:
    sathyguy

    The resource limits set for a profile are enforced only when you enable resource limitation for the database.
    Enabling and Disabling Resource Limits While the Database is Open
    ALTER SYSTEM SET RESOURCE_LIMIT = TRUE;
    http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96521/users.htm#15451
    Manu

Maybe you are looking for