Using Data Security under Functional Developer / User Manager

Has anyone succesfully carried out any Data Security policies in Oracle Apps. I would like to get details on this.
Thanks in advance.

Actually the other scripts on the http://www.petefinnigan.com/tools.htm site seem to do the trick where you can check for who has DBA and who has SELECT ANY TABLE.
The next questions is .... what other privs should I be concerned with? Just want to make sure I am checking for all possibilities of access to a particular object.

Similar Messages

Error using Data Miner on SQL Developer

Dear all.
I'm trying to use Data Miner on SQL Developer (3.1.06) with Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 -
64bit Production, with the Partitioning, OLAP, Data Mining and Real Application Testing options.
I created a project, a workflow, a data source, a classification model and connected them.
I tried to show the Decision Tree generated as described in the tutorial "Using Oracle Data Miner 11g Release 2".
But, I receive the message "It's not possible to load the data mining model because it does not exist" in a dialog box entitled "Model not found".
It seems that something was missing either during installation or granting my user.
Does anybody have seen this message and know what causes it?
Any other suggestion is welcome.
Regards,
Duncan
PUCRS-Brazil

Hi Mark.
Thank you on replying my post.
I'm not the DBA of Oracle repository here. So, if possible, I'd like to address my issue without having to do anything in it.
I'll try to state better what we have here.
When I try to use latest SQL Developer version, 11.2.1.1.7.42, it got me a message stating current repository isn't compatible with this SQLDev version
Repository version is: 11.2.1.1.3
I don't know what type of upgrade SQL Developer wants to do...
About your other questions.
"Is the model not found error occurring for all models or just the DT model?" -- The error occurs for all 4 standard models: SVM, GLM, NB and DT. But, I'm able to see all other options: "show tests results", "Compare tests results".
You did not report that the workflow failed, so you must be seeing a successful completion status for each of the nodes. -- Yes, all steps are executed and finished OK.
Are you using a proxy user or some other connection definition other than a standard connection. -- No.
There is currently some problems supporting proxy based connections that will be fixed in a upcoming SQL Developer release.
So, if you can provide me some details on how your connection is defined, that will be helpful.
How was the product installed and the user granted rights? -- I need to ask PUCRS DBA team to answer these questions.
Was it done through the UI or by running the scripts in the dataminer/scripts directory?
Lastly, what is your client operating system and are you using the SQL Dev 64 bit or 32 bit release? -- I tested in 2 different computers, both with Windows 7 Professional. In my notebook, it's 64 bits OS version.
Thank you for your attention and kind reply.
Regards,
Duncan

Moving sum using date intervals - analytic functions help

let's say you have the following set of data:
DATE SALES
 09/02/2012 100
 09/02/2012 50
 09/02/2012 10
 09/02/2012 1000
 09/02/2012 20
 12/02/2012 1000
 12/02/2012 1100
 14/02/2012 1000
 14/02/2012 100
 15/02/2012 112500
 15/02/2012 13500
 15/02/2012 45000
 15/02/2012 1500
 19/02/2012 1500
 20/02/2012 400
 23/02/2012 2000
 27/02/2012 4320
 27/02/2012 300000
 01/03/2012 100
 04/03/2012 17280
 06/03/2012 100
 06/03/2012 100
 06/03/2012 4320
 08/03/2012 100
 13/03/2012 1000
for each day i need to know the sum of the sales in the present and preceding 5 days (calendar) [not five rows].
What qurey could i use???
Please help!

Hi.
Here's one way.
WITH data AS
 SELECT TO_DATE('09/02/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('09/02/2012','DD/MM/YYYY') d, 50 n FROM DUAL UNION ALL
 SELECT TO_DATE('09/02/2012','DD/MM/YYYY') d, 10 n FROM DUAL UNION ALL
 SELECT TO_DATE('09/02/2012','DD/MM/YYYY') d, 1000 n FROM DUAL UNION ALL
 SELECT TO_DATE('09/02/2012','DD/MM/YYYY') d, 20 n FROM DUAL UNION ALL
 SELECT TO_DATE('12/02/2012','DD/MM/YYYY') d, 1000 n FROM DUAL UNION ALL
 SELECT TO_DATE('12/02/2012','DD/MM/YYYY') d, 1100 n FROM DUAL UNION ALL
 SELECT TO_DATE('14/02/2012','DD/MM/YYYY') d, 1000 n FROM DUAL UNION ALL
 SELECT TO_DATE('14/02/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('15/02/2012','DD/MM/YYYY') d, 112500 n FROM DUAL UNION ALL
 SELECT TO_DATE('15/02/2012','DD/MM/YYYY') d, 13500 n FROM DUAL UNION ALL
 SELECT TO_DATE('15/02/2012','DD/MM/YYYY') d, 45000 n FROM DUAL UNION ALL
 SELECT TO_DATE('15/02/2012','DD/MM/YYYY') d, 1500 n FROM DUAL UNION ALL
 SELECT TO_DATE('19/02/2012','DD/MM/YYYY') d, 1500 n FROM DUAL UNION ALL
 SELECT TO_DATE('20/02/2012','DD/MM/YYYY') d, 400 n FROM DUAL UNION ALL
 SELECT TO_DATE('23/02/2012','DD/MM/YYYY') d, 2000 n FROM DUAL UNION ALL
 SELECT TO_DATE('27/02/2012','DD/MM/YYYY') d, 4320 n FROM DUAL UNION ALL
 SELECT TO_DATE('27/02/2012','DD/MM/YYYY') d, 300000 n FROM DUAL UNION ALL
 SELECT TO_DATE('01/03/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('04/03/2012','DD/MM/YYYY') d, 17280 n FROM DUAL UNION ALL
 SELECT TO_DATE('06/03/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('06/03/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('06/03/2012','DD/MM/YYYY') d, 4320 n FROM DUAL UNION ALL
 SELECT TO_DATE('08/03/2012','DD/MM/YYYY') d, 100 n FROM DUAL UNION ALL
 SELECT TO_DATE('13/03/2012','DD/MM/YYYY') d, 1000 n FROM DUAL
days AS
 SELECT TO_DATE('2012-02-01','YYYY-MM-DD')+(LEVEL-1) d
 FROM DUAL
 CONNECT BY LEVEL <= 60
totals_per_day AS
 SELECT dy.d,SUM(NVL(dt.n,0)) total_day
 FROM
 data dt,
 days dy
 WHERE
 dy.d = dt.d(+)
 GROUP BY dy.d
 ORDER BY 1
SELECT
 d,
 SUM(total_day) OVER
 ORDER BY d
 RANGE BETWEEN 5 PRECEDING AND CURRENT ROW
 ) AS five_day_total
FROM totals_per_day;
2012-02-01 00:00:00 0
2012-02-02 00:00:00 0
2012-02-03 00:00:00 0
2012-02-04 00:00:00 0
2012-02-05 00:00:00 0
2012-02-06 00:00:00 0
2012-02-07 00:00:00 0
2012-02-08 00:00:00 0
2012-02-09 00:00:00 1180
2012-02-10 00:00:00 1180
2012-02-11 00:00:00 1180
2012-02-12 00:00:00 3280
2012-02-13 00:00:00 3280
2012-02-14 00:00:00 4380
2012-02-15 00:00:00 175700
2012-02-16 00:00:00 175700
2012-02-17 00:00:00 175700
2012-02-18 00:00:00 173600
2012-02-19 00:00:00 175100
2012-02-20 00:00:00 174400
2012-02-21 00:00:00 1900
2012-02-22 00:00:00 1900
2012-02-23 00:00:00 3900
2012-02-24 00:00:00 3900
2012-02-25 00:00:00 2400
2012-02-26 00:00:00 2000
2012-02-27 00:00:00 306320
2012-02-28 00:00:00 306320
2012-02-29 00:00:00 304320
2012-03-01 00:00:00 304420
2012-03-02 00:00:00 304420
2012-03-03 00:00:00 304420
2012-03-04 00:00:00 17380
2012-03-05 00:00:00 17380
2012-03-06 00:00:00 21900
2012-03-07 00:00:00 21800
2012-03-08 00:00:00 21900
2012-03-09 00:00:00 21900
2012-03-10 00:00:00 4620
2012-03-11 00:00:00 4620
2012-03-12 00:00:00 100
2012-03-13 00:00:00 1100
2012-03-14 00:00:00 1000
2012-03-15 00:00:00 1000
2012-03-16 00:00:00 1000
2012-03-17 00:00:00 1000
2012-03-18 00:00:00 1000
2012-03-19 00:00:00 0
2012-03-20 00:00:00 0
2012-03-21 00:00:00 0
2012-03-22 00:00:00 0
2012-03-23 00:00:00 0
2012-03-24 00:00:00 0
2012-03-25 00:00:00 0
2012-03-26 00:00:00 0
2012-03-27 00:00:00 0
2012-03-28 00:00:00 0
2012-03-29 00:00:00 0
2012-03-30 00:00:00 0
2012-03-31 00:00:00 0Hope this helps.
Regards.

Secure hash function with salt to create a not spoofable PRC (SAP CRM)

Hello SAP Security Community,
SAP CRM Marketing provides a functionality called Personalized Response Code (PRC, 10 characters). This code can be used in mail, fax, sms or letters to customers. When the customer returns the PRC to the communication initiator, it can be mapped to a campaign and the business partner number of the customer. See also the [SAP Standard Help|http://help.sap.com/saphelp_crm700_ehp01/helpdata/EN/2a/c13463f09c4a1f9c45903e7a0a7230/frameset.htm].
By default this standard implementation of the BAdI CRM_MKT_PRC_CONVERT is called:
METHOD if_ex_crm_mkt_prc_convert~convert_prc.
DATA lv_no      TYPE crmt_mkt_icrh_prc_num.
DATA lv_string TYPE string.
DATA lv_pos     TYPE int4.
DATA lv_base31 TYPE string VALUE '0123456789BCDFGHJKLMNPQRSTVWXYZ'.
**** converting the numeric-base10 into base31
lv_no = iv_prc.
CLEAR lv_string.
DO.
    lv_pos = lv_no MOD 31.
    lv_no = lv_no DIV 31.
    CONCATENATE lv_base31+lv_pos(1) lv_string INTO lv_string.
    IF lv_no = 0.
      EXIT.
    ENDIF.
ENDDO.
MOVE lv_string TO ev_prc.
ENDMETHOD.
As you can see it does a simple base31 encoding of the provided input parameter iv_prc which is a number provided by the number range for PRC's.
I want to use the PRC to make our customers registration process for a trade fair easier. We send out the PRC via a letter to the customers where we don't have an E-Mail address. The letter contains instructions which point the user to a Website that has an input field for the PRC. When the user submits the PRC I'd like to show him/her some personal information (Name, Address, E-Mail) that we lookup using the PRC in the CRM System. This information is then posted to a 3rd party website that has to be used to do the trade fair registration.
If I would use the simple base31 encoding, then the current counter state could be easily decoded, the next number can be chosen and by applying base31 encoding again, the next valid PRC is created. This could then be misused to read personal information of another customer. I think what could solve this problem would be to use a secure hash function that allows also to be salted to create the PRC.
Do you think I'm on the right track? Or would it be OK to use the classes described in [Note 1410294 - Support SHA2-family for Message Digest and HMAC|https://service.sap.com/sap/support/notes/1410294] and before doing the hashing add a random number to the PRC number that I've got from the number range? What problems do I run in as the PRC could not be longer than 12 characters? For sure I have to check that I don't create any PRC twice.
Best regards
Gregor

Knowledge of PCR should not reveal any personal information to you.
OK, but in this case the PCR is mapped to the campaign number and the BP-number. It would reveal the information. Hence a second hash which only allows further processing if it matches. The second hash is a "signature" of the PCR.
I don't agree with this. The security should NOT be based on hiding how system works. Only key should be secret. In this case it should all depend on quality of PRNG. Check Kerckhoffs's principle. Whenever I see proprietary algorithm in crypto I start to feel nervous about the system.
Ok, you convinced me. That is also true, but you will have to save the key or the hash it produces to be able to verify it again when the user returns to the website - and in this case it is in clear text ABAP (unless Mr. Wolf wants to create an external program, like SAP does with C-calls).
From the perspective of the user it is a password and they must be able to transfer it from a snail-mail readable text on paper into a website field.
As Mr. Wolf has noticed, the next PCRs can be obtained by anyone who can decode standard code (knowing that the BADI is activated).
I think a correctly placed split and concatenation does the trick for a 20 character field without knowing which part is the PCR and which is the signature (a human can still enter that into a website field).
I think the big question (appart from the principle - which I agree with you on) is whether the admins and their family members are allowed to bid? Also do the bidders have acces to this system as technical consultants?? (for example to single test methods and function modules in the production system??).
Also how does the process continue and finally get concluded? Typically there is some "horse trading" in the end anyway...
All these factors should influence the strength and complexity of the design, and maintenance of it IMO.
But generally you are correct and I rest my case.
@ Mr. Wolf: Are you enjoying the debate too much or are you going to give us more insight?
Cheers,
Jules

LiveCycle User Management

Hello,
I have a few questions to the User Management of the LiveCycle 7.0 products. Because there is no forum especially for UM and a documentation for the UM API comes with the SDK, I post my questions here and hope that somebody might be able to answer them.
My main problem is that I just need some users for testing purposes, so I would like to find a quick and easy way.
Is there a possibility to manually insert users in UM? I searched, but I haven't found one. The only possibilities I have found are
1. LDAP: I don't know much about LDAP, I have no idea how fast I can set up users here, and I don't have any Active Directory or similar to use LDAP with
2. JAAS: I haven't found any documentation how the JAAS interface needs to be configured, and I already crashed the installation in trying to use JAAS.
3. Write a custom service provider
Is there a possibility to configure LiveCycle UM to use the Windows OS users? How much effort is it to write a custom service provider which gets the user information e.g. from a file (remember it's just for testing, so need not be that secure) or from Windows OS? Has anyone already set up a custom service provider for the User Management? Do I have to set up authentication AND directory services or is authentication sufficient? Has anybody found the samples mentioned in the documentation 'Developing User Management Service Providers' (this relates to my other entry in this forum)?
Please, any help is really appreciated and urgently needed!
Thanks in advance!
Regards, Karin Garreis

<[email protected]> ha scritto nel messaggio news:[email protected].. > Hi Duncan, > > I suspect that you have an account named Administrator in your LDAP > directory and that when you did the Sync the Administrator account in LDAP > over wrote the LiveCycle Administrator account. Try logging in with the > LDAP defined admin and password. If you can then that is what has > happened. I do not know of a way to get your admin back other than to > uninstall and reinstall. When you reinstall, create a new super admin with > a unique name before you synch with LDAP > > Denver > Adobe Enterprise Developer Support Denver, is it possible to change username and password of the user by changing directly in the DB (i.e. MySQL in a turnkey installation)? Could this be a possible solution for Duncan's problem? If I understand well, in the DB there is a replication of all the users of the LDAP, is it correct? Bye, Alessio

Sap UM connector 9.1.2 trouble with "SAP User Management User Recon" task

Hello All,
i have a problem with Sap UM Connector version 9.1.2.
OIM version 11.1.1.5
Windows 2008 R2
Problem is:
Then accounts in Sap are created through direct provisioning feature of connector everything works ok (subsequent update or delete an account).
But if a user account is created in Sap using Sap GUI, scheduled task "SAP User Management User Recon" of connector doesn't create reconciliation event to link user.
Sometimes it does though, but for one user account created using Sap GUI in OIM created two reconciliation events, so corrsponding user in oim have two records for resource SAP.
In this reconciliation events, one have full set of attributes (Login, First Name, Last Name, E Mail, etc), another one - just these 3 attributes: IT Resource, User ID, Lock.
"SAP User Management Delete Recon" scheduled task works ok then user account has been deleted using Sap Gui.
How one can troubleshoot such behavior?
Can anyone advise please?

resolved the issue by updating sap um connector to version 9.1.2.5

After user managed restore, RMAN not work.

[oracle@blade1-redhat ~]$ rman target / catalog rman/rman@infra
Recovery Manager: Release 9.2.0.8.0 - Production
Copyright (c) 1995, 2002, Oracle Corporation. All rights reserved.
connected to target database: PROD (DBID=26786809)
connected to recovery catalog database
RMAN> backup database;
Starting backup at 22-FEB-07
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03002: failure of backup command at 02/22/2007 12:12:55
RMAN-03014: implicit resync of recovery catalog failed
RMAN-03009: failure of full resync command on default channel at 02/22/2007 12:12:55
RMAN-20032: checkpoint change# too low
RMAN-20032 checkpoint change# too low
Cause: The checkpoint change# is less than the one of the previous resync or the checkpoint change# is null.
Action: Make sure that the right control file is used
Hi,
I am using right control file
Thanks.

After user managed restore,From where did you restore?? Means from RMAN itself or from some other backup source?? Did you open it with resetlogs?? What actually you did can you explain in little detail.
Daljit Singh

Always used 1 main account. Started using individual user accounts. So how do I use software or applications with a lot of data like Quicken under my own user account?

I recently upgraded our family's mac to OS X. I thought this was the perfect time to create and use "user accounts". We had always used 1 main account. So how do I use software or applications with a lot of data like Quicken under my own user account? I wanted to be able to manage my own itunes library, iphone apps, messages. But I still really need to use the Stuff I have in Quicken essentials. I don't want to have to restart all my work done in Quicken already.

I haven't used Quicken in a while, but most applications store your files in your Documents folder. Is that where your Quicken data file is? What you do next depends on how many family members need to get at that data.
If multiple family members need to use the Quicken data file, try moving it to the Documents folder in the Shared account. That is an account that all accounts can see. It's at the same level as the other accounts. In other words, Shared is one level up from your Home account, or Hard Drive/Users/Shared.
If you're the only one allowed to see that Quicken data, move the Quicken data file from the old main account to your account, and don't leave a copy behind. You can use the Shared folder as a way station for the transfer since you won't be able to see both accounts' Documents folders at the same time (because you're not allowed to peek into other people's accounts). Or you can use another disk or server for the transfer, as long as you can get to it when logged into either account.

Using Jackrabbit User Manager programmatically for changing passwords and getting user data.

I am trying to do a change password request using the Jackrabbit User Manager with the REST URL /system/userManager/user/<username>.changePassword.json. The problem I am having is that this request requires an oldPwd form param in the request. The issue is that when I am trying to do this request it is in response to the user selecting "Forgot Password" so our logic has created a random password which we then email to the user so they can use that the next time they want to login. We need to change that user's password in CRX so they can log in using it next time. Since they haven't logged in there is no session, NOT the problem. THE PROBLEMS, I don't know 1. how to use the userManager to get that user's old password, since /system/userManager/user/<username>.json doesn't appear to return the password and 2. if I could get the old password it most certainly will be encoded, some how, so I will need some decoding algorithm to pass it through in order to get the actual password to set as the oldPwd form param to my change password request. Please let me know if you require any further explanation. Any assistance would be greatly appreciated. Thank you, in advance, for your assistance.
Sincerely,
Mike Sucena
[email protected]

Hi Mike,
msucena wrote:
Justin:
Does your response mean that until version 2.1.2 of Jackrabbit User Manager is released I cannot change the password without knowing the old password?
No. It means that this feature is not available in version 2.1.0 of the Sling Jackrabbit User Manager bundle. It was added after that release. You have a number of options:
Build the bundle from source.
Use one of the SNAPSHOT bundles available from the Apache Snapshots repository.
Use the release which is being voted upon now (https://repository.apache.org/content/repositories/orgapachesling-175/org/apache/sling/org .apache.sling.jcr.jackrabbit.usermanager/2.2.0/). (Note - we decided to use 2.2.0 as the version number rather than 2.1.2 as originally planned due to the scope of this release).
Write a different servlet which performs the same actions.
Meaning that being able to use either the credentials of the "Admin" user or using the credentials of a member of the "UserAdmin" group is not supported in the current released version 2.1.0?
Correct. It was added after the 2.1.0 release.
If I currently need the old password is there any Sling REST - Jackrabbit API call I can use in order to get the old password since using /system/userManager/user/<username>.json doesn't appear to return the password?
-Mike
The plain text password is not stored. And this should be considered a good thing.
If you have questions about the development process we follow in Sling (or at Apache as a whole), by all means ask on the Sling users mailing list. It is reasonably well-established and we love to talk about it.

In using Office Mac 2011 I noticed that there is 3 gigs of data under Documents/Microsoft User data for Message Sources. Anyone know what this is and if it can be deleted?

In using Office Mac 2011 I noticed that there is 3 gigs of data under Documents/Microsoft User Data for meassage sorces. Does anyone know what these files are and can they be deleted?

Hi SDP1,
Do you use Outlook or Entourage? If so, that's where all of your emails are stored. If you don't use either of those applications I'd go digging through the folders and see where all the space is tied up. Check the Identifies folders, that's probably where everything is located.

Using User Management Engine API in Portal Application

Hello,
I actually develope a simple Portal Application, which print any User-Infos. Especially I need the date of the last Login. For this purpose I read the Article Using User Management Engine API - Portal - SAP Library where they use the library com.sap.security.api. In the articel they describe also, how to set DC dependencies. But this doesn't function for a Portal Component, because they do not appear in the Component Browser.
So my question is, how get I the User Management Engine API referenced in my Portal Application, so that I can use the package com.sap.security.api. In the filesystem I can not find a JAR-File for the Development Componenten tc/je/usermanagement/api
Greetings,
Thomas

HI,
Getting the last logon date can be a small problem. There is a method called: getLastSuccessfulLogonDate, but that one is deprecated since NW 2004s.
https://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/IUserAccount.html#getLastSuccessfulLogonDate()
In NW 7.3 the method is still there: Generated Documentation (Untitled), but even so, JavaDoc states that the value is not updated automatically
"get last sucessful logon date NOTE: This attribute is not automatically updated during login."

Migration Assistant created multiple users. After receiving my new MacBook Pro and seeing that Migration Assistant would take 40 hrs to transfer my data from my PC, I decided to do it incrementally - now my info is under 3 different users. Ideas?

First time Mac User. Just got my MacBook Pro 2 days ago. Uppon setup, I founf that Migration Assistant would take more than 40 hours to transfer my data from my PC. Thinking that I was taking a smart approach, I decided to break the transfer into smaller parts performing them when the PC was not needed. What I've ended up doing was migrating my data into 3 diferent user's on the Mac. So now I have an extensive iTunes library and contacts under one user, all of "my documents" under another user, and all of my pictures under a 3rd user. Anyone know how to get all my data over to one user and then get rid of the other user names?

Erase the drive, reinstall Mountain Lion, migrate using Setup Assistant.
Install or Reinstall Lion/Mountain Lion from Scratch
Be sure you backup your files to an external drive or second internal drive because the following procedure will remove everything from the hard drive.
Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
Erase the hard drive:
1. Select Disk Utility from the main menu and click on the Continue button.
2. After DU loads select your startup volume (usually Macintosh HD) from the
      left side list. Click on the Erase tab in the DU main window.
3. Set the format type to Mac OS Extended (Journaled.) Optionally, click on
        the Security button and set the Zero Data option to one-pass. Click on
      the Erase button and wait until the process has completed.
4. Quit DU and return to the main menu.
Reinstall Lion: Select Reinstall Lion/Mountain Lion and click on the Install button.
Note: You will need an active Internet connection. I suggest using Ethernet if possible
            because it is three times faster than wireless.
To restore wait until the installation is completed and the computer restarts. You should restart to the Setup Assistant where you'll be given an opportunity to restore directly from your Time Machine backup. Be patient since the restore will take so long. If your backup drive can run on FireWire instead of USB then use FireWire instead. It will cut that time down substantially.

Development Plans functionality in Talent Management

Hello,
We are planning to use the Development Plans functionality in Talent Management.
But the Development Plan is not opening from MSS. (MSS -> Talent management -> Assessment -> Development Plan).
I had created the Business partner object for all my test PERNRs and I had created a Development Plan Template (via IMG step in Talent management). I had activated the Business Functions and Services.
When I open the Development plan in MSS, it is showing the names of employees (i.e. the reports of the manager). But when I click on an employee, it's not opening any development plan. Nothing is happening.
Please help me,
Thanks
Raghu

Hi Bharti,
You must first delete the template names from the customizing tables where it is stored (under Talent Assessment node of Talent Management and Talent Development). Then you delete it under PHAP_CATALOG. Unfortunately you have created an databse inconsistency and you might need to see if Basis can delete the values from the table.
Best regards,
Luke

How to find solution for avoiding WARNING J2EE SECUR-00100 ********** user-manager (see application/server descriptors) will no longer be supported in the next release of this product

HI All,
We are using Oc4j version 10g 10.1.3 , and while starting conatiner getting below warning , let me know if anyone have solution for this,.
14/01/10 01:01:29 ********** user-manager (see application/server descriptors) will no longer be supported in the next release of this product!
Please take the appropriate actions to migrate to an alternative strategy! **********
2014-01-10 01:01:29.833 WARNING J2EE SECUR-00100 ********** user-manager (see application/server descriptors) will no longer be supported in the next release
of this product!

I just checked my BIOS and my current setting is set at IDE although it also mentions that the default should be AHCI. Currently I have a dual boot of Windows 7 (need it for Tax software) and Arch
So I guess, when I get the new HDD, I will first set it to AHCI and then install the OSes on it. See if NCQ helps any, and if not I will turn it back and re-install (if I have to). I am planning to have Windows only in virtualbox in the new drive.
Anyhoo, while I was in the BIOS I found two things which I had questions about :
1) Under Onboard Devices --> Integrated NIC , my setting is currently set at "On w/PXE" and it says the default should be just "On". Would it be ok to change it back to On since its a single machine and its not booting an OS on any server. I just don't want to have to re-install anything now since I will be doing that in the new HDD.
2) How would I know whether my BIOS would support a 64 bit OS in Virtualbox? I checked some setting under Virtualization, but they weren't very clear.
I will edit this post and let you know exactly what settings were present under the Virtualization sub-section.

How to restrict employees from accessing managers data using custom security profile

Hi,
I am using custom security profile for restricting the employees from accessing supervisors details(PG.SEGMENT2=4). I have written the custom code as below :
Responsibility :US Super HRMS Manager
ASSIGNMENT.PERSON_ID
IN
(SELECT PAF.PERSON_ID FROM PER_ALL_PEOPLE_F PAF,
PER_ALL_ASSIGNMENTS_F PF,
PAY_PEOPLE_GROUPS PG,
PER_PERSON_TYPE_USAGES_F PPU,
FND_USER FNU
WHERE PAF.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PAF.EFFECTIVE_START_DATE
AND PAF.EFFECTIVE_END_DATE
AND PF.PEOPLE_GROUP_ID=PG.PEOPLE_GROUP_ID
AND :EFFECTIVE_DATE BETWEEN PF.EFFECTIVE_START_DATE AND PF.EFFECTIVE_END_DATE
AND PPU.PERSON_ID=PAF.PERSON_ID
AND PPU.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PPU.EFFECTIVE_START_daTE AND PPU.EFFECTIVE_END_DATE
AND PAF.PERSON_ID=FNU.EMPLOYEE_ID
AND PAF.PERSON_TYPE_ID =2
AND PPU.PERSON_TYPE_ID
IN(2,62)
and PAF.person_id = FND_PROFILE.value('user_id')
AND PG.SEGMENT2=8)
and using "restrict the people visible to each other using this profile".
I have assigned the security profile to HR user responsibility
But when I query the supervisor name in HR User responsibility , it is not restricting me from viewing supervisor details.
When I query for first time, its restricting me to view others details, but when I close that click on torch button and try searching, its allowing me to access manages details.
Can any one please let me know what setups need to be done for restricting employees from viewing supervisors data.
I have gone through the document "Understanding and Using HRMS Security in Oracle HRMS" but didn't got any idea.
Please suggest.
Thanks & Regards,
Anusha.

Hi All ,
i solved the problem by using event 01 of header view and using the table "Extract" .
Regards,
Neha

Using Data Security under Functional Developer / User Manager

Similar Messages

Maybe you are looking for