Users with read access to the site unable to view Managed Metadata Navigation

Hi everyone,
I created a Managed Metadata service and created group, term-set and terms
I gave read access to users
I set up navigation to use Managed Navigation
I am logged in as farm admin and able to view the navigation when i browse site. But user are not seeing navigation.
One thing i noticed is when i give users full access or designer access to site they will be able to see the navigation. but i don't want to give users full access or designer access to the site.
How can users with read only access to site can view Managed Metadata Navigation...Please help?

Hi Sunil,
Have you given your users permissions to actually read the MMS data from the service application?
http://technet.microsoft.com/en-us/library/ff625176.aspx covers permissions on the MMS.
Regards
Paul.
<<edit>> On reflection you might be hitting the issue in this Stackexchange post..
http://sharepoint.stackexchange.com/questions/75636/permissions-and-managed-metadata-in-navigation Is yours behaving the same way?
Please ensure that you mark a question as Answered once you receive a satisfactory response. This helps people in future when searching and helps prevent the same questions being asked multiple times.

Similar Messages

Giving List Permission to users with no access to the main site

On my sub site I have a list (where users from a specific store can report errors). This list I want to share with another group of users, those who will do something about the errors (entrepreneurs). I want them to be able to Edit in this list: they don't
need delete and create items, just being able to change an item is fine.
The problem is, I don't want them to have access to the sub site itself, because there is information on the sub site that they don't need to know about, they should only see this list. So they don't have any access at all to the sub site, but I'm giving
them permission to the list.
However, it seems like since they can't access the sub site, no matter what permission I give them to the list (Edit, Contribute, Full Control), in the end they only have Reading-access to the list and can't even update an item.
This error message turns up whenever they try:
"Unable to communicate with server".
The entrepreneur group is external users, but that shouldn't matter, should it? I've added them to SharePoint groups with the right permissions.
Is there any possible way to solve this problem?

Hi ,
Here is the steps you can refer to:
Go to your site ->Site Settings ->Site permissions ->Permission Levels ->Click “Add a Permission Level” and create a custom permission level with following permissions :
Edit Items, View Items, Open Items, View Pages , Open.
Go to your list ->Shared With -> INVITE PEOPLE :
input your group, click “SHOW OPTIONS”
and select the new custom permission level.
Best Regards,
Eric
Eric Tao
TechNet Community Support

Want to get the list users with select access to v$ synonyms and v$ views

I've to write a sql (DB 11.1) to get the list of users who has select access to v$ synonym and v$ views. I've written the following sqls to do this but they both return the same result and I don't know how to verify it. It will be a great help if you could validate the sqls and let me know if something is wrong. Thanks for the help.
-- v$ views
select 'vview',
substr(SYS_CONNECT_BY_PATH(c, '->'),3,512) path, c
from (select null p, view_name c
from dba_views
where view_name like ('V$%')
union all
select -- users/roles and roles granted
granted_role p,
grantee c
from dba_role_privs
where granted_role != 'DBA'
union all
select -- users/roles with select on DBA views
table_name p, grantee c
from dba_tab_privs
where privilege = 'SELECT'
and table_name like ('V$%'))
where (c = 'PUBLIC' OR c in (select username from dba_users))
AND c NOT IN('MDSYS','DMSYS','CTXSYS','WMSYS','ORDSYS','OLAPSYS','DBSNMP')
start with p is null connect by p = prior c
-- v$ synonyms
select 'vsynonyms',
substr(SYS_CONNECT_BY_PATH(c, '->'),3,512) path, c
from (select null p, SYNONYM_NAME c
from ALL_SYNONYMS
where table_name like ('V$%')
union all
select -- users/roles and roles granted
granted_role p,
grantee c
from dba_role_privs
where granted_role != 'DBA'
union all
select -- users/roles with select on DBA views
table_name p, grantee c
from dba_tab_privs
where privilege = 'SELECT'
and table_name like ('V$%'))
where (c = 'PUBLIC' OR c in (select username from dba_users))
AND c NOT IN('MDSYS','DMSYS','CTXSYS','WMSYS','ORDSYS','OLAPSYS','DBSNMP')
start with p is null connect by p = prior c

I've modified the sql to include GV$ and all select [any] privs.
select 'vview',
substr(SYS_CONNECT_BY_PATH(c, '->'),3,512) path, c
from (select null p, view_name c
from dba_views
where view_name like ('V$%') OR view_name like ('GV$%')
union all
select -- users/roles and roles granted
granted_role p,
grantee c
from dba_role_privs
where granted_role != 'DBA'
union all
select -- users/roles with select on DBA views
table_name p, grantee c
from dba_tab_privs
where privilege like 'SELECT%'
and table_name like ('V$%') OR table_name like ('GV$%') )
where (c = 'PUBLIC' OR c in (select username from dba_users))
AND c NOT IN('MDSYS','DMSYS','CTXSYS','WMSYS','ORDSYS','OLAPSYS','DBSNMP')
start with p is null connect by p = prior c
union
select 'vsynonyms',
substr(SYS_CONNECT_BY_PATH(c, '->'),3,512) path, c
from (select null p, SYNONYM_NAME c
from ALL_SYNONYMS
where table_name like ('V$%') OR table_name like ('GV$%')
union all
select -- users/roles and roles granted
granted_role p,
grantee c
from dba_role_privs
where granted_role != 'DBA'
union all
select -- users/roles with select on DBA views
table_name p, grantee c
from dba_tab_privs
where privilege like 'SELECT%'
and table_name like ('V$%') OR table_name like ('GV$%') )
where (c = 'PUBLIC' OR c in (select username from dba_users))
AND c NOT IN('MDSYS','DMSYS','CTXSYS','WMSYS','ORDSYS','OLAPSYS','DBSNMP')
start with p is null connect by p = prior c

Create user with read access for all tables SAP SID .*

Hello all,
could you please help me ? I would like to grant select privilege on all tables SAP<SID>.* for newly created user.
I have created standard database user (not exclusive).
I`m able to grant select for individual tables, but I would like to grant select for this user on all SAP<SID>
schema in simplier way
But as far as I know, the schema`s owner name must be different then schema name.
Any idea please ?
Thank you.
Pavol

create user <user_name> identified by <password> <options>;
grant read on all tables:-
CREATE OR REPLACE PROCEDURE GRANT_SELECT AS
CURSOR ut_cur IS
SELECT table_name
FROM user_tables;
RetVal NUMBER;
sCursor INT;
sqlstr VARCHAR2(250);
BEGIN
FOR ut_rec IN user_tabs_cur;
LOOP
sqlstr := 'GRANT SELECT ON '|| ut_rec.table_name
|| ' TO <user_name>';
sCursor := dbms_sql.open_cursor;
dbms_sql.parse(sCursor,sqlstr, dbms_sql.native);
RetVal := dbms_sql.execute(sCursor);
dbms_sql.close_cursor(sCursor);
END LOOP;
END grant_select;
Edited by: varun4dba on Jan 18, 2011 4:13 PM

How to create a user with read only access for ESB / BPEL Console

I need to create a user with read only access to ESB Console & BPEL Console. I have created a user
(esbreadonly) and assigned ascontrol_monitor role but user is still able to
delete services from ESB systems (such as DefaultSystem). Is there any way to
create a user that has strickly read only access to ESB Console & BPEL
Console
Thanks
Dinesh Patel

Check out this post.. I'm in the process of testing.
http://chintanblog.blogspot.com/2007/12/i-saw-numerous-people-asking-about-bpel_290.html

How to find from the data dict if a user has read access on a directory

How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Not so difficult.
select 'YES'
   from all_tab_privs A, all_directories B
   where a.grantee = 'USERNAME'
       and a.table_name = b.directory_name
       and b.directory_path = 'PATH YOU ARE LOOKING FOR'
How to find "dynamically" if a user has READ access to a directory object.
I want to know if there is a data dictionary table that holds if a user/schema has read access to a directory object.
I know there is an dba_directories table and an all_directories table but they dont give information as to which user has read access granted to the directory.

Sharepoint Permissions Application user with read only permissions

Friends,
I am trying to create a separate permission Group for an Executive(Department) Team who can access all the documents and lists in the portal with only read permissions because they need to see all the documents and lists in the libraries.
I can add them in to SP_Application_User group but i don't want them to edit the documents.
If i create a new group and set a separate permission level with read only setting, they cannot access all the documents in the document libraries and lists because some of the document libraries and lists have separate permission which overrided parent permissions.
Hope i will get help from any of you.
Thanks in advance,
Regards,
Chakri

Hi,
For your issue, you could add the users to Central Administration > Application Management > Policy for Web Application and grant Full Read permissions.
With the configuration, these users have Read permission to the whole web application.
-lambert
Sincerely,
Lambert Qin
Posting is provided "AS IS" with no warranties, and confers no rights.

HT1491 I created my account im my iphone, and now I´m trying to buy with my ipad and the site make questions....so I want to know where do I can find this questions in the site...

I created my account im my iphone, and now I´m trying to buy with my ipad and the site make questions....so I want to know where do I can find this questions in the site...

I am very happy to report that my server connection tech, which I called via landline, informed me to : 1. Open Tools 2. Scan down to Clear Recent History 3. Delete All. That was it! Unbelievable! Six hours of searching through the Windows catagories. I checked the results on an internet site, and viola! It was gone! Mozilla Firefox seems to remember the usernames and passwords irregardless of the option window that asks if you if want it to remember the user and password. I finally got in touch with my friend and he said he did not answer yes to the window, even though he was aware of it. No damage. I surely do appreciate everyones' concern in this, now what seems to be, a very simple solution. Cudos to Firefox! Thank-you! P.S. I now have to enter my information at the beginning of any password protected sites...no harm done! My friend is now condemned to the 'user account' site! lol...

Users with direct access to tables

I need to find out which users have direct access to tables, not through the roles.
Is dba_tab_privs the right table to query or table_privileges is the correct one.
Please let me know the difference between these two.
I have gone through the documentation but I am still not clear about the difference between them.
Let me know whatever your thoughts are on this.
Thanks,
Rushi

Ah, an opportunity to illustrate the value of COMMENTs:
SQL> select * from dict where table_name = 'TABLE_PRIVILEGES';
TABLE_NAME
COMMENTS
TABLE_PRIVILEGES
Grants on objects for which the user is the grantor, grantee, owner,
or an enabled role or PUBLIC is the grantee
SQL> select * from dict where table_name = 'DBA_TAB_PRIVS';
TABLE_NAME
COMMENTS
DBA_TAB_PRIVS
All grants on objects in the database
SQL>So, TABLE_PRIVILEGES is a view relevant to the user who is currently connected and SELECTing from it.
DBA_TAB_PRIVS is what you want to use to find users with direct access granted to tables.

Javascript: Query all users with read permission to specific list

Is it possible to use javascript to retrieve all users with read permissions to specific list? This (http://www.c-sharpcorner.com/UploadFile/anavijai/how-to-get-all-the-users-from-site-group-in-sharepoint-2013/) shows how to get users from group but what
about list. All users in list may not exist in spgoups.

Hi,
If with Server Object Model which is executed in server side, in the
SPList object, there is a
RoleAssignments property can help to get what you want without looping through all the users in site:
public static void getPermissionsOfList()
using (SPSite site = new SPSite("http://sp"))
using (SPWeb web = site.RootWeb)
SPList list = web.GetList("/Lists/List1");
SPRoleAssignmentCollection roles = list.RoleAssignments;
foreach (SPRoleAssignment role in roles)
Console.WriteLine("~");
Console.WriteLine("Name: " + role.Member.Name);
SPRoleDefinitionBindingCollection bindings = role.RoleDefinitionBindings;
XmlDocument doc = new XmlDocument();
doc.LoadXml(bindings.Xml);
//Console.WriteLine(doc.InnerXml);
XmlNodeList itemList = doc.DocumentElement.SelectNodes("Role");
foreach (XmlNode currNode in itemList)
string s = currNode.Attributes["Name"].Value.ToString();
Console.WriteLine("Permission Level: " + s);
However, when comes to JavaScript Client Object Model, as there is no such property provided, I suggest you take the solution provided in my previous post for a try.
Thanks
Patrick Liang
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

Failed to create a user with Mac Mini Server, the message "Failed to process the command writesettings" in the module "servermgr_sharing"

I have a Mac Mini with OS X Server 10.8.5 and Server 2.2.1 and have a problem to share the public folder.
When I enter the Server application to indicate that I want to share the public folder on the network and assign user I get the following message appears
And I can not share the folder.
If I go from my i-mac get mac mini server view and access the public folder, but I can not open any of the files there.
That I can do to fix this?
thank you very much

I'm modifying someone else's website for the first time (noob = yes). I only have ftp access to the site server. Before uploading changes, is there a easy/quick/recommended/etc way to make a copy of the files I'm about to replace?

Great, first post, sorry for the title. But to repeat it:
I'm modifying someone else's website for the first time (noob = yes). I only have ftp access to the site server. Before uploading changes, is there a easy/quick/recommended/etc way to make a copy of the files I'm about to replace?

You can use the Dreamweaver FTP (or a different FTP client) to completely copy the original website to your development computer, then, before making changes, you can copy the whole thing to a directory called something like "website original"
If you want to run both the old and new sites on the remote server, this is often possible. Add a folder/directory to the server and call it something like "new" and upload the new files there until you are ready to replace the old site
All of this you can do with FTP

Security batch job to evaluate users with SAP_ALL access:

Hello,
I need to run some kind of batch report or program that runs for users that have SAP_ALL access.
Basically we need to run a report or program that shows what these users that currently have SAP_ALL are executing on a daily basis.
Do you have or know of a report/program that we can schedule nightly to find this information out ?
Thanks,
Steve

Hi Steve,
I don't think any SAP standard report or query is available for this. You probably have to design your own Z report/query to achive this.
However since SAP_ALL is a restricted access and you will have very few users with this access, if you want to find it out programs/transation being executed by these users, it can be done manually from ST03, through "Memory Use Statistics", probably this may help to identify the tables using which you can design your own report.
Regards,
Sanujit
Edited by: Sanujit Purohit on Jul 20, 2010 2:25 AM

Set Single user with reviewer access to multiple conference room calendars

Want to add a single user with reviewer access to multiple conference room calendars, used the below but it given a below error , Single user i am able to add but single user for multiple confernce room calendars hot happening.
Import-csv C:\smtp1.csv | foreach-object {Add-MailboxFolderPermission -identity $_mail":\Calendar" -User "Mike" -AccessRights "Reviewer"}
Smtp1.csv
mail
[email protected]
[email protected]
Error:--
[PS] C:\>Import-csv "C:\smtp1.csv" | foreach-object {Add-MailboxFolderPermission -identity "$_mail:\Calendar" -User "Mike" -AccessRights "Reviewer"}
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission

i tried with that as well but getting the below
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
Cannot process argument transformation on parameter 'Identity'. Cannot convert value "" to type "Microsoft.Exchange.Configuration.Tasks.MailboxFolderIdParameter". Error: "Valu
e cannot be null.
Parameter name: mailboxFolderId"
    + CategoryInfo          : InvalidData: (:) [Add-MailboxFolderPermission], ParameterBindin...mationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Add-MailboxFolderPermission

Unknown user with read write permission

Who is wheel in user permissions

I had tried to ask the same question earlier. I decided that what she probably did was click on the minus sign in the HD Get Info window:
I tried this on an external Lion clone volume, and the result looked like this in Get Info:
However, the only thing that actually changed was the permissions - wheel itself was still the group owner, but was now "no access".
before:
drwxr-xr-x 43 root wheel 1530 Feb 23 13:33 /Volumes/Lac5 Lion 1
after:
drwx---r-x 43 root wheel 1530 Feb 23 13:33 /Volumes/Lac5 Lion 1
This should not cause a user to lose access to the HD, though, so I wondered if she had also set "everyone" to "No Access" in Get Info. This would lock you out.

Users with read access to the site unable to view Managed Metadata Navigation

Similar Messages

Maybe you are looking for