User should not have edit access in EAS

Hello Gurus,
My requirement is : I or my team mates are not supposed to have any access in EAS to make any changes to applications / databases on an Essbase server. i.e. I should only be able to view outline, see statistics, see if any sessions are running etc. I should not be able to copy application, create application, delete application, edit outlines etc.
Please let me know if there is a way to do it.
Thanks

Viewing Active User Sessions
"The Sessions window displays a list of active sessions. If you have Administrator permissions, the window lists active user sessions for all users on the Essbase Server. If you have Application Manager permissions, the window lists active sessions for all users, including yourself, who are connected to any application for which you have Application Manager permissions."
Cheers
John

Similar Messages

IDocumentQuery.Execute() method throws user does not have edit permissions exception

I'm trying to query a document folder for all of its containing documents. Its a basic query like this:
IPortletContext PortletContext = PortletContextFactory.CreatePortletContext(Request,Response);IRemoteSession PTSession;PTSession = PortletContext.GetRemotePortalSession();IDocumentManager documentManager = PTSession.GetDocumentManager();
IDocumentQuery documentQuery = documentManager.CreateQuery(FolderID); documentQuery.SetSortProperty(ObjectProperty.Name);IObjectQuery queryResults = documentQuery.Execute();
When I'm logged into the portal as an administrator, everything works fine. However if I'm logged in as a "regular" user, I get this exception when calling the Execute() method:
Plumtree.Remote.PRC.PortalException: Exception of type Plumtree.Remote.PRC.PortalException was thrown. ---> System.Web.Services.Protocols.SoapException: Server was unable to process request. --> Access denied: Current user does not have edit permission
I'm sending the Login Token to the portlet. Now I've tried giving the user Edit rights on the document folder as well as Edit the Knowledge Directory rights in the Activity Manager, but neither gets rid of the exception. I'm not sure what other "Edit" permissions to check. I don't even see why the user would need "Edit" permission to anything in the first place since the Execute() method simply returns an IObjectQuery that doesn't have any ability to make changes to any objects. I know that I could use the SearchFactory interface, but I wanted the results to be real time. Any help would be much appreciated. Thanks!
Jimmy

The problem here is that the query is created with default settings to show unapproved documents -- only users with edit access can see unapproved documents. Add the bold line to your code and it will work.
IDocumentManager docManager = prcSession.GetDocumentManager();IDocumentQuery docQuery = docManager.CreateQuery(iFolderID);docQuery.SetShowUnapproved(false);IObjectQuery queryResults = docQuery.Execute()

User does not have sufficient access

Hello
I�ve got installed SUN ONE Portal Server. My problem is the following. When i have customized my portal and all this staff, sometimes when i tried to get to anonymous portal i�ve got the following error in the log file:
09/08/2004 05:27:28:646 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: productName
09/08/2004 05:27:28:654 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: fontFace1
09/08/2004 05:27:28:654 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: productName
09/08/2004 05:27:28:655 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: fontFace1
09/08/2004 05:27:28:658 PM MEST: Thread[service-j2ee-3,5,main]
AuthlessSessionContext.getCookieSupportMode() =>2
09/08/2004 05:27:28:666 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: lastChannelName
09/08/2004 05:27:28:667 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: fontFace1
09/08/2004 05:27:28:670 PM MEST: Thread[service-j2ee-3,5,main]
AuthlessSessionContext.getCookieSupportMode() =>2
09/08/2004 05:27:28:712 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: fontFace1
09/08/2004 05:27:28:713 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: productName
09/08/2004 05:27:28:713 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: fontFace1
09/08/2004 05:27:28:716 PM MEST: Thread[service-j2ee-3,5,main]
AuthlessSessionContext.getCookieSupportMode() =>2
09/08/2004 05:27:28:723 PM MEST: Thread[service-j2ee-3,5,main]
WARNING: TagSwapper.doSwapFromParsedTagArray(): tag value unavailable: lastChannelName
09/08/2004 05:27:28:733 PM MEST: Thread[service-j2ee-3,5,main]
ERROR: DesktopServlet.handleException()
com.sun.portal.desktop.context.ContextError: DSAMEConnection.setAttribute(): attributeName=sunPortalDesktopDpDocumentUser value=<?xm
l version="1.0" encoding="utf-8" standalone="no"?>
<!DOCTYPE DisplayProfile SYSTEM "jar://resources/psdp.dtd">
"Display Profile of he anonymous user"
Exception: com.iplanet.am.sdk.AMException: User does not have sufficient access.
at com.sun.portal.desktop.context.DSAMEConnection.setAttribute(DSAMEConnection.java:700)
at com.sun.portal.desktop.context.DSAMEDPUserContext.storeDPUserDocument(DSAMEDPUserContext.java:49)
at com.sun.portal.desktop.context.PSDesktopContext.store(PSDesktopContext.java:394)
at com.sun.portal.desktop.DesktopServlet.doGetPost(DesktopServlet.java:664)
at com.sun.portal.desktop.DesktopServlet.service(DesktopServlet.java:288)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:720)
at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:158)
at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
com.iplanet.am.sdk.AMException: User does not have sufficient access.
at com.iplanet.am.sdk.AMDirectoryManager.setAttributes(AMDirectoryManager.java:2226)
at com.iplanet.am.sdk.AMCacheManager.setAttributes(AMCacheManager.java:898)
at com.iplanet.am.sdk.AMObjectImpl.store(AMObjectImpl.java:1755)
at com.iplanet.am.sdk.AMObjectImpl.store(AMObjectImpl.java:1695)
at com.sun.portal.desktop.context.DSAMEConnection.setAttribute(DSAMEConnection.java:698)
at com.sun.portal.desktop.context.DSAMEDPUserContext.storeDPUserDocument(DSAMEDPUserContext.java:49)
at com.sun.portal.desktop.context.PSDesktopContext.store(PSDesktopContext.java:394)
at com.sun.portal.desktop.DesktopServlet.doGetPost(DesktopServlet.java:664)
at com.sun.portal.desktop.DesktopServlet.service(DesktopServlet.java:288)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at org.apache.catalina.core.StandardWrapperValve.invokeServletService(StandardWrapperValve.java:720)
at org.apache.catalina.core.StandardWrapperValve.access$000(StandardWrapperValve.java:118)
at org.apache.catalina.core.StandardWrapperValve$1.run(StandardWrapperValve.java:278)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:274)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:212)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:203)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:505)
at com.iplanet.ias.web.connector.nsapi.NSAPIProcessor.process(NSAPIProcessor.java:158)
at com.iplanet.ias.web.WebContainer.service(WebContainer.java:598)
If i refresh the browser once or twice i can see the anonyomous portal.What�s the problem?
Charly

TagSwapper ?
which Portal Desktop Type are you using ?
Which Portal version ?
/ulf

ERR_WIS_30253 and user should not have 'save' rights to public folder

Hello
Environment - BO XI 3.2 SP2, FP 3.6
Source is SAP - BI 7
I am trying to implement the security in the project for the very first time from scratch , and requirement is -
there should be 3 type of user Groups - Super, Power and End users
All the users have their own specifications, along with that, one common requirement is, in-spite of the group user belong to, should not have the rights to save the BO reports in the public folder but may save it to its Favorites.
I have created one super users group and also assigned some rights to Reporting folder.
But
1. I am not getting any option to achieve the above mentioned requirement.
2. I am getting Error ERR_WIS_30253 while trying to refresh the reports.
Looking forward to have a quick reply from experts.
Thanks in advance.
Zeenat
Edited by: Zeenat on Nov 14, 2011 7:20 PM

Hi Zeenat,
If you have observed in BO right collections are categorized as:
   General
   Content
   Application
   system
For Err_WIS_30253:
We generally follow the practice of creating custom access levels as per the business requirement and apply them on the folder level. If you're one of us, to resolve this issue for WEBI reports you would have to edit the custom access level applied on the folder by providing "Refresh report's data" privilege for 'Web Intelligence Report' in 'CONTENT' rights collection.
The key is 'CONTENT' right collection. Its similar in BIP 4.x Platform with 'owner' privilege.
Issue is resolved.:)
If above practice is not followed in your org you could also provide above stated privilege on the folder containing the WEBI report.
Hope this gives you some idea.
Kind regards,
Sandeep Rana

Is it possible to make sure the app runs all the time either in the foreground or background, User should not have the flexibility to stop it from running

Hello all:
I have an enterprise app and i need to make sure it runs all the time.
If the app is not running i should silently make sure it restarts again.
Any ideas on how it can be done. It is an enterprise app
Thanks

Hmmm....
How about wrapping all of your dll calls in a single VI (or an Action Engine ) and make sure the VI's thread is NOT set for "Same as caller".
"Threadconfig.vi" (sp?) will also let you dictate the number of threads associated with an execution system. Set your target thread for "1".
Not sure on the above.
Please correct me if this is wrong!
Ben
Message Edited by Ben on 07-19-2007 08:26 AM
Ben Rayner
I am currently active on.. MainStream Preppers
Rayner's Ridge is under construction

I have a Power Book OS 10.4.11 and cant access my radio library. I believe I deleted something I should not have. How do I reload Itunes and will I loose my music I loaded?

I have a Power Book OS 10.4.11 and cant access my radio library. I believe I deleted something I should not have. How do I reload Itunes and will I loose my music I loaded? I do not have the original software. I was trying to free up some memory and removed the wrong thing.

If you mean the listing of internet streams that seems to have disappeared for many users of older iTunes versions over week ago. Probably some update at Apple broke older versions. No idea if it will ever come back but you can open stream URLs you find on the web and save them in playlists.

How do I disable editing of pages in author mode? User should not be able to edit content . Can this

How do I disable editing of pages in author mode? User should not be able to edit content . Can this be customized on component basis?

You have to remove modify rights for those users on that page. Component basis is possible but will create ACL complications. Please check http://dev.day.com/docs/en/cq/current/developing/components/boilerplates.html for that.
Yogesh
www.wemblog.com

While deploying to another server from RM client using build definition i got below error "Package location does not exist or deployer user does not have access"

We have installed RM client in the POC server .
Installed Deployment Agent in Dev server .
We created Configuration stages for POC->Dev.
We created a template with x copy deployer and selected source as build definition.
While releasing we faced following issue ,
The release was success in POC (Where RM client is installed), but in DEV environment (Which is different server)it got rejected because of the error
"Package location(Path) does not exist or deployer user does not have access"

Hi Dhamayandhi
There is quite a bit to do to get RM working successfully. I have a soup-to-nuts guide on implementing continuous delivery with TFS and RM
here.
Cheers - Graham
Blog:
http://pleasereleaseme.net LinkedIn:

My ipod touch cannot be synced because i do not have enough access privileges for this operation..what should i do?

When ever i try to sync my ipod touch, my itunes wont let me on my mac becasue it says i do not have enough access privileges for this operation. What should i do?

Try here:
iPhone - not enough access privileges: Apple Support Communities

ITunes music files cannot be edited, and new music files imported. The messages says I do not have enough access privileges even though I am the administrator of the system.

Since installing the latest version of iTunes all my music files cannot be edited, and I cannot import new music files into iTunes. The messages says I do not have enough access privileges even though I am the administrator of the system. If anyone can help me sort this out I would be really grateful. I have checked the read and write privileges for all the iTunes folders and it all seems in order so I can't understand it.
In general, I am getting really frustrated with Apple. They seem to be getting ever more controlling in their approach to their consumers. I need to edit music file information as I am a dj. And why can't I import music, unless I buy it from iTunes? Most of all, why can't I use the devices I paid a lot of money for in the way I want to use them, and not be forced to coerced to use apple's fee paying services (iCloud, iTunes).
I have used apple computers since the early 1990's, but in the last year I have gotten rid of my iPhone and my iPad and replaced them with Android devices. Much better and much less control. Perhaps it is time to switch from Apple altogether.

Hi
Read this About Disk Utility's Repair Disk Permissions feature
and OS X Mavericks: If you don’t have the correct permissions to open a file or folder
Does this help?
Jim

I have installed ACDSee Pro3 and have problem to transfer photofiles from device: I got the message; The item could not be edited because you do not have sufficent access privileges or destination volume is no longer available." What can I do?

I have installed ACDSee Pro3 and have problem to transfer photofiles from device: I got the message; The item could not be edited because you do not have sufficent access privileges or destination volume is no longer available." What can I do?

Ask the ACDSee Pro support personnel.
With iPhoto that message means the library is a referenced library (photo not copied when imported into iPhoto's structure) and the source file is not where it was when first added to the library. I don't know how ACDSee works. Does it have a referenced mode as opposed to copying photos into its structure?
OT

Unable to receive internet connection over wifi connection. Shows that I am connected to the network, but do not have internet access. Checked my firewall and turned it off. What else am I missing or should be doing differently?

Unable to receive internet connection over wifi connection. Shows that I am connected to the network, but do not have internet access. Checked my firewall and turned it off. What else am I missing or should be doing differently?

You might want to try resetting your router and your modem - just unplug the cords, leave them unplugged for about 3-5 minutes and then replug the modem and then the router in that order.
This may or may not correct your problem - call back if it doesn't.
Clinton

List the items the user does not have access to.

I have a requirement to show the user a list of all the libraries of a site with the number of items in each even if the user does not have rights to the library. (the link or button will be grayed out if the user has no access)
I am looking for opinions on how to do it with the best performance possible.
The first candidate is to first enumerate all the items in all the libraries with elevated then do the same as the logon user and compare the collections.
The drawback is performance so maybe rely on the assumption that the overall content of the site does not change often so keep the collection from the elevated run in cache (with configurable lifetime) and only run as user on page load and compare with the
cache.
I am sure there is probably a better way so let's here it. can we take advantage of search?
This is on SP2013 but we are not using apps for unrelated reasons. We can use server object model.
Thank you all.
Ofer Gal

Hi,
I believe Search cant be used since Search is Security Trimmed. Search will not return the result if user dosent have the permission.
Thanks! Best Regards, Prasham Sabadra http://prashamsabadra.blogspot.in

Cannot delegate Reporting Services Web access to domain user / group, User does not have required permissions

Hi
I have an SCCM 2012 SP1 CU3 installation on a Server 2008 R2 + SQL 2008 R2.
I'm having trouble delegating Reporting Services Web Access to a standard domain user.
I have followed the instructions from these blogs:
http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/
http://www.wolffhaven45.com/blog/sccm/assigning-users-to-configmgr-reportusers-group-in-sccm-2012/
No matter how I try, I cannot get the reports to show for a standard domain user. In the console no reports are showing and in the web access I get
"User domain\user does not have required permissions........"
The only thing that is consistenly working when I test is to put the AD Group on the Security Role "Full Administrator".
Then everything will show up.
Any ideas on how to troubleshoot this?

Thanks everyone for helping me with tips. I have now solved the problem. It was the permissions from SCCM that did not replicate to the Reporting Server.
In srsrp.log I got these error messages:
Could not retrieve the reporting service name for instance 'MSSQLSERVER'
Invalid class
Could not stop the reporting serviceAfter googling a litte I found these 2 sites with similiar problems:http://social.technet.microsoft.com/Forums/en-US/d4a7f93a-506f-4e3f-b5fc-bd2b087277da/ssrs-permissions-do-not-add?forum=configmanagergeneral
http://www.microtom.net/microsoft-system-center/software-distribution/sccm-2012-reporting-services-do-not-install
So I ran the command for SQL 2008 R2: mofcomp.exe C:\Program Files (x86)\Microsoft SQL Server\100\Shared\sqlmgmproviderxpsp2up.mof
and BAAM, everything started to work =)
/ALX

I have edit access to someone else's calendar. In iCloud i can add an event to this calender. In My calendar on my Mac I can see the calendar in the list, but when I try to add an event to this calendar, it is not avail from the list in event to select

I have edit access to someone else's calendar. In iCloud i can add an event to this calender. In My calendar on my Mac I can see the calendar in the list, but when I try to add an event to this calendar, it is not avail from the list in event to select. Any help appreciated. Thanks

Hi Chris,
You can't get rid of an alert. The least you can have is one that says "none".
Nevermind, I see you learned how to edit the event.

User should not have edit access in EAS

Similar Messages

Maybe you are looking for