When defining access control, Unable to expand searchbase

Hi
Has anyone came across problem where in the identity console, when trying to view/edit the directory structure, it doesn't allow to expand the domain branches?
Identity console - > User Manager - > Configuration - > set searchbase - > (Expand the serachbase domain ) & Target domain
The user are logged in as Master Identity Admin (orcladmin). Any feedback appreciated.
thank you
Edited by: user641052 on Sep 15, 2009 12:53 PM

Hi,
I haven't come across this. You could try to see if you get the same problem from different machines and/or browsers, to see if it's caused by a java version or similar. Also, groups and users are by default excluded from the applet, exactly which object classes are excluded is configurable with the ExcludeOCsForTreeInApplet parameter in globalparams.xml.
Regards,
Colin

Similar Messages

Any best practice to apply role based access control?

Hi,
I am starting to apply the access permissions for new users as being set by admin. I am choosing Role Based Access Control for this task.
Can you please share the best practices or any built-in feature in JSF to achieve my goal?
Regards,
Faysi

Hi,
The macro pattern is my work. I've received a lot of help from forums as this one and from the Java developers community in general and I am very happy to help others and share my work.
Regarding the architect responsibility of defining the pages according to the roles that have access to them : there is the enterprise.software infrastructure.facade
java package.
Here I implemented the Facade GoF software design pattern in the GroupsAndRolesAccessFacade java class. Thus, this is the only class the developer uses in order to define groups and roles of users and to define their access as per page.
This is according to Java EE 6 tutorial, section VII Security, page 471.
A group, role or user is created with an Identity Management application or by a custom application.
Pages of the application and their sections are defined or modified together with the group, role or user who has access to them.
For this u can use the createActiveGroup and createActiveRole methods of the GroupsAndRolesAccessFacade class.
I've been in situations where end users very strict about the functionality of the application.
If you try to abstract web development, u can think of writing to database, reading from database and modifying the database as actions.
Each of these actions should have suggester, approver and implementor.
Thus u can't call the createActiveGroup method for example, without calling first the requestActiveGroupCreationHelper and then the approveOrDeclineActiveGroupCreationHelper method.
After the pages a group has access to have been defined with the createActiveGroup method, a developer can find out the pages and their sections a group has access to by calling the getMinimumInformationAboutGroup method.
Further more, if the application is very strict, that is if every action which envolves writing to the database must be recorded, this concept of suggester, approver and implementor is available throught the recordActiveGroupAction method.
For example, there is a web shop, its managers can change the prices of the products, but the boss will want to know who had the dared to lower prices.
This action of lowering prices, is an action of modifying the information in the database and u can save in the database who suggested it, who approved it and who implemented it.
Now that I write about the functionality of the macro pattern, I realise that some methods should have more proper names and I haven't had time to write documentation in the API, but this will be a complete when I add the web pages for the architect to use for defining access control and for the end users to view who and what is doing with their application.

What is better for security? WPA2 or Access control

I have a Airport express and 2 computers; a Mac and a PC.
When it come to securing your wi-fi connection so you don't get unauthorized clients on your network.
What is better
A- Just using encryption like WPA2 or some other password based system or
B- Just entering the "Airport ID" (MAC) of the computers I want to authorize in my network on the Access control panel.
Seems to me like the later is easier on the clients since they don't need a password or anything, It's completely transparent for the client. And I believe encryption slows down the connection a bit and create overhead for the computer. But maybe I don't have the full picture of the situation.
Is there anybody who can illuminated this subject for me?
thanks
PowerBookG4 Mac OS X (10.3.9)

WPA2 is virtually uncrackable only really vulnerable if you use a real word as a password.
When using access control, MAC addresses are sent unecrypted can be read and spoofed and therefore do not add any security.
Unfortunately "Closed" networks, MAC access control lists, and reduction in transmission power are all more "feel good" security rather than real security. All these various approaches are dated and mistakenly lead to overconfidence.
WPA is your friend if you value wireless security.

I made my main account a parental control account and when I accessed the account created as admin, at the Parental Control options I deleted my main account and now I can't get back in it. I need help with this problem.

I made my administrator account a parental control account, at the time of creating it, the system asked for my administrator password, to restart the computer, and the new account was created. When I accessed that account at the parental control menu I could see my main account on the list and i deleted the account from that list, and now i'm trying to get back to it but I'm not able to because every time i restart the computer brings me back to the account I created. I searched for help on the web and it says to go to users and select the account I want to restore but I can't do it. Please help.

User account – restore missing admin

How do I get into iTunes to access Netflix, when I get "iTunes unable to connect until time has been set", after submiting my password?

How do I get into iTunes to access Netflix, when I get "iTunes unable to connect until time has been set", after submiting my password?

You need to follow the instructions in this article that best apply to your situation:
Forgot passcode for your iPhone, iPad, or iPod touch, or your device is disabled - Apple Support
If you do not have a backup in either iCloud or iTunes, then you will have no way to retain the information on your device because you will have to restore it in order to access it again.
Sorry,
GB

"Access Control - Do Not Inherit" Grayed out when setting up a backup on Server 2008 R2 when trying to use remote NAS

I see one response here:
http://social.technet.microsoft.com/Forums/en-US/c99eead0-e2fc-4c83-8cb2-959d03512667/server-2008-r2-dc-backup-greys-out-do-not-inherit-option-for-file-share-backup
But it makes no sense to me. Running that command doesn't do anything.
How do I make the box stop graying out when setting up a backup with the GUI interface? This should be really simple I would think and for some reason the backup utility is graying out the "Do Not Inherit" option so I can backup to the NAS
device that has access control enabled in order to backup to the NAS.
Thanks in advance!

Hi,
From this article, it mentioned that it is by design that we cannot choose "do not inherit" in backup schedule when backup target is a remote shared folder.
Checklist: Schedule Automatic Backups
http://technet.microsoft.com/en-us/library/cc732540.aspx
If you use a remote shared folder, make sure that the folder is available, that you have write access to the folder, and that you are a member of the Administrators group or Backup Operators group on the computer hosting the folder. Each time you create
a backup, it will overwrite the older backups so that you will only have one backup at a time.
The backup will inherit the access control list (ACL) permissions of the folder.
For the account it required, as mentioned above, it should be "a member of Admin group or Backup Operators group, and it should have write permission on target folder".
Also map a network folder as a drive will not help show the mapped drive letter in backup destination. It is still a remote shared folder.
TechNet Subscriber Support in forum |If you have any feedback on our support, please contact [email protected]

Unable to use the Assign Access Control feature in shared services

Hi,
When I try to right click on the essbase applicaiton in Shared Services to assign access control( to assign a new filter) I keep getting the following error
" Internet cannot display the webpage" message with the following
This problem can be caused by a variety of issues, including:
Internet connectivity has been lost.
The website is temporarily unavailable.
The Domain Name Server (DNS) is not reachable.
The Domain Name Server (DNS) does not have a listing for the website's domain.
There might be a typing error in the address.
If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section
All the services are running file and I can create new users/ groups and also perform appication migration.
I'm using Hyperion 11.1.3.24 on windows 2003 r2.
Any help is appreciated. Thanks.
Regards

vs wrote:
John,
I tried the refresh button and nothing appears. I have created a group and gave it filter access. Now I'm trying to attach that filter to the group.
Appreciate your help.Can we replace backup .sec file for shared services?
For example: In planning if the .sec file corrupted then we replaced with old .sec file...rite...the same way can we do it in shared services?
I know if we replace the old sec in planning...it will take old securities only...
Edited by: Prabhas on Feb 12, 2013 9:27 PM

In facebook, When I access a picture directly, I am unable to advance the photo forwards or backwards using the mouse/cursor or the arrow keys.

I am using Firefox 16.0.1 on a macbook pro using 10.7.5 software.
When I access a picture directly, I am unable to advance the photo forwards or backwards using the mouse/cursor or the arrow keys. The same is true if I use an external mouse.
If I use Safari as the browser, I don't have this issue.
This problem just started a couple of days ago.
All had been working fine.

Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache.
Note: ''This will temporarily log you out of all sites you're logged in to.''
To clear cache and cookies do the following:
#Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
#Under "Time range to clear", select "Everything".
#Now, click the arrow next to Details to toggle the Details list active.
#From the details list, check ''Cache'' and ''Cookies'' and uncheck everything else.
#Now click the ''Clear now'' button.
Further information can be found in the [[Clear your cache, history and other personal information in Firefox]] article.
Did this fix your problems? Please report back to us!

I have recently downloaded Bootcamp onto my MBP. However, when i try to expand it from "downloads" it says "Unable to expand BootCamp5.0.5033 into downloads. Error 2-no such file or directory. I have tried changing the partition and Zipeg. didnt work

I have recently downloaded Bootcamp onto my MBP. However, when i try to expand it from "downloads" it says "Unable to expand BootCamp5.0.5033 into downloads. Error 2-no such file or directory. I have tried changing the partition and Zipeg. didnt work.

You need to read and follow the Boot Camp instructions. Boot Camp Assistant is already on your computer in the utilities forderf. You run Boot Camp Assistant. Part of the process is to to then download the Windows Support software. This download is then installed from within Windows.
There is no Boot Camp download that needs to be installed or unzipped from within OSx which you seem to be doing.

401 Unauthorized Error when accessing a task from REST API which contains Role or Privilege in Access Control definition

Hi Team,
As of IDM 7.2 SP8 patch2, when we use Enterprise role or Privilege in the access control definition of a task, accessing this task from UI5 i.e REST API is giving unauthorized error even though user is already having the required role or privilege.
But the task is working fine if we use fixed user ID or keeping blank value in allowed users field.
Attached the current access control definition of the task we configured & the error message info for reference
Regards,
Venkata Bavirisetty

Hi Ralitsa,
Thanks for your response and sorry for late reply.
The XXXX in role is not used as a wild card. the name itself is in that format. I have searched the role and then selected from search list.
Let me know if you need any clarifications?
Refards,
Venkata Bavirisetty

SharePoint Provider Hosted App (401) Unauthorized Microsoft.SharePoint.SPException: The Azure Access Control service is unavailable

Hello,
I'm attempting to get a SharePoint 2013 Provider Hosted Application working in a brand new SharePoint environment. I've created snapshots of both my dev and the sharepoint environments along the way and have meticulously documented every step of the
way. I've followed these instructions (among many other resources found along this journey) :
http://msdn.microsoft.com/en-us/library/fp179923(office.15).aspx
http://technet.microsoft.com/en-us/library/fp161236(office.15).aspx
http://msdn.microsoft.com/library/office/fp179901%28v=office.15%29
Upon package and publish of my application to SharePoint, I get a 401 Unauthorized error. I use Fiddler to obtain the SPErrorCorrelationID to ultimately obtain the following ULS Viewer Output. Please explain how to fix if you're able.
Please Note: I was under the impression that a Provider Hosted Application does not use the Azure Access Control service, so I'm confused as to why my system is attempting to make this connection?
Also Note: I've used a self signed and godday obtained certificate to successfully f5 debug my basic web.title (out of the visual studio 2012 box) sharepoint provider hosted application... so I know my certs are good.
Here's my ULS output:
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   Name=Request (GET:http://portal.cltenet.com/_layouts/15/appredirect.aspx?instance_id=22d5252f%2D392c%2D4f68%2Db820%2Da3053b9d4f24)
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Authentication Authorization   agb9s   Medium   Non-OAuth request.
IsAuthenticated=True, UserIdentityName=0#.w|cltenet\sp.apps, ClaimsCount=25   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.83   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   Site=/   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.84   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Deployment   acjjg   Medium   The current user has System.Threading.Thread.CurrentPrincipal.Identity.Name
= 0#.w|cltenet\sp.apps, System.Security.Principal.WindowsIdentity.GetCurrent().Name = NT AUTHORITY\IUSR, System.Web.HttpContext.Current.User.Identity.Name = 0#.w|cltenet\sp.apps.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.84   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsrv   Medium   redirectLaunUrl after getting it from query
string, web or app instance: https://hightrust31.cltenetapps.com/Pages/Default.aspx?{StandardTokens}   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   General   aib0n   High   trying to get app tokens for site: 888b71f7-51ee-40f5-8344-8de4869d37d0
Unable to load app tokens from appInstanceId: 22d5252f-392c-4f68-b820-a3053b9d4f24   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsrw   Medium   redirectLaunUrl after getting token replacement:
https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http%3A%2F%2Fportal%2Ecltenet%2Ecom&SPLanguage=en%2DUS&SPClientTag=0&SPProductNumber=15%2E0%2E4420%2E1017   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsry   Medium   m_oauthAppId after NormalizeAppIdentifier()
i:0i.t|ms.sp.ext|[email protected]8df36d5d. Now getting app principal info.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr0   Medium   decided that we need to do a POST to the
app.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr1   Medium   m_redirectMessage: EndpointAuthorityMatches
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr2   Medium   realm matched attempting to get app token
using GetAccessToken()   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   advzm   High   Error when get token for app i:0i.t|ms.sp.ext|[email protected]8df36d5d,
exception: Microsoft.SharePoint.SPException: The Azure Access Control service is unavailable.     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)
at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext
userIdentityContext, String applicationId, Uri applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   ajsr3   High   App token requested from appredirect.aspx
for site: 888b71f7-51ee-40f5-8344-8de4869d37d0 but there was an error in generating it. This may be a case when we do not need a token or when the app principal was not properly set up. LaunchUrl:https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http://portal.cltenet.com&SPLanguage=en-US&SPClientTag=0&SPProductNumber=15.0.4420.1017
Exception Message:The Azure Access Control service is unavailable. Stacktrace:    at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)
at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext
userIdentityContext, String applicationId, Uri applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenFromThreadIdentityOrUserToken(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPApplicationContextAccessTokenType tokenType, SPAppPrincipalInfo appPrincipal, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.ApplicationPages.AppRedirectPage.ValidateAndProcessRequest().
Since this is a nonfatal error, it will be sanitized and posted to the app as part of the app launch.   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   General   ajlz0   High   Getting Error Message for Exception Microsoft.SharePoint.SPException:
The Azure Access Control service is unavailable.     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext.GetApplicationSecurityTokenServicesUri(SPServiceContext serviceContext)     at Microsoft.SharePoint.ApplicationServices.SPApplicationContext..ctor(SPServiceContext
serviceContext, SPIdentityContext userIdentity, OAuth2EndpointIdentity applicationEndPoint)     at Microsoft.SharePoint.SPSecurityContext.SecurityTokenForApplicationContext(SPIdentityContext userIdentityContext, String applicationId, Uri
applicationRealm, SPApplicationContextAccessTokenType applicationTokenType, SPApplicationDelegationConsentType consentValue)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenPrivate(SPServiceContext serviceContext,
String appId, Uri appEndpointUrl, SPAppPrincipalInfo appPrincipal, SPApplicationContextAccessTokenType tokenType, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.SPServerToAppServerAccessTokenManager.GetAccessTokenFromThreadIdentityOrUserToken(SPServiceContext
serviceContext, String appId, Uri appEndpointUrl, SPApplicationContextAccessTokenType tokenType, SPAppPrincipalInfo appPrincipal, Boolean useThreadIdentity, SPUserToken userToken)     at Microsoft.SharePoint.ApplicationPages.AppRedirectPage.ValidateAndProcessRequest()
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   App Auth   aib0p   Medium   Doing appredirect from appredirect.aspx:
in site: 888b71f7-51ee-40f5-8344-8de4869d37d0 with RedirectLaunchUrl: https://hightrust31.cltenetapps.com/Pages/Default.aspx?SPHostUrl=http%3A%2F%2Fportal%2Ecltenet%2Ecom&SPLanguage=en%2DUS&SPClientTag=0&SPProductNumber=15%2E0%2E4420%2E1017
306c809c-66a1-d0d5-d8e2-89d3631ce1bf
03/24/2014 08:54:47.85   w3wp.exe (0x1448)   0x22D8   SharePoint Foundation   Monitoring   b4ly   Medium   Leaving Monitored Scope (Request (GET:http://portal.cltenet.com/_layouts/15/appredirect.aspx?instance_id=22d5252f%2D392c%2D4f68%2Db820%2Da3053b9d4f24)).
Execution Time=26.5933938531294   306c809c-66a1-d0d5-d8e2-89d3631ce1bf
Your help is very much appreciated.
With Respect,
Larry

Yes, actually - I was able to resolve it.
However I don't know how, unfortunately. I suspect it was because I needed to have the names of the certificates, defined during the certificate registration (to sharepoint) process, different.
I have a complete document that shows step by step instructions on the exact process I took to complete the provider hosted application creation, deployment and publishing. It was a daunting task, but I finished it successfully.
If there's a way to send private message on this forum, please do so and I'll respond with a way to obtain my document.
NOTE: I'm not all impressed with the way this forum works. This is supposed to be a Microsoft resource and I'll be damned if I ever get a response to highly technical questions. Completely lame. Boooooo Microsoft.

Unable to expand child links in ALV Tree

Hi,
I have written the following code for ALV Tree using function modules.
REPORT ZSID_ALV_TREE.
type pool declarations for tree
TYPE-POOLS : fibs,stree.
tables: ekko.
TYPES: BEGIN OF t_ekko,
ebeln TYPE ekpo-ebeln,
ebelp TYPE ekpo-ebelp,
statu TYPE ekpo-statu,
aedat TYPE ekpo-aedat,
matnr TYPE ekpo-matnr,
menge TYPE ekpo-menge,
meins TYPE ekpo-meins,
netpr TYPE ekpo-netpr,
peinh TYPE ekpo-peinh,
END OF t_ekko.
DATA: it_ekko     TYPE STANDARD TABLE OF t_ekko INITIAL SIZE 0,
      it_ekpo     TYPE STANDARD TABLE OF t_ekko INITIAL SIZE 0,
      it_emptytab TYPE STANDARD TABLE OF t_ekko INITIAL SIZE 0,
      wa_ekko     TYPE t_ekko,
      wa_ekpo     TYPE t_ekko.
DATA:w_repid type sy-cprog.
*Data declaration for additional node information
DATA : t_node TYPE snodetext.
*Internal table and wa decl for nodes
DATA : it_node LIKE TABLE OF t_node INITIAL SIZE 0,
       wa_node LIKE t_node.
*Start of selection event
START-OF-SELECTION.
*Select the data for tree
PERFORM fetch_data.
*Build the hierarchy for tree
PERFORM build_hierarchy.
*Build Tree for display
PERFORM build_tree.
*& Form fetch_data
text
--> p1 text
<-- p2 text
FORM fetch_data .
SELECT ebeln
up to 10 rows
    FROM ekko
    INTO corresponding fields of TABLE it_ekko .
loop at it_ekko into wa_ekko.
    SELECT ebeln ebelp statu aedat matnr menge meins netpr peinh
      FROM ekpo
      appending TABLE it_ekpo
     where ebeln eq wa_ekko-ebeln.
endloop.
endform.
*& Form build_hierarchy
text
--> p1 text
<-- p2 text
FORM build_hierarchy .
*Building the nodes and hierarchy for tree
CLEAR : it_node[], wa_node.
wa_node-type = 'T'.
wa_node-name = 'Product Hierarchy Level'.
wa_node-tlevel = '01'.
wa_node-nlength = '35'.
wa_node-color = '4'.
wa_node-text = 'Test'.
wa_node-tlength ='20'.
wa_node-tcolor = 3.
APPEND wa_node TO it_node.
CLEAR wa_node.
loop at it_ekpo into wa_ekpo.
wa_node-type = 'P'.
wa_node-name = 'Purchasing Doc'.
wa_node-tlevel = '02'.
wa_node-nlength = '25'.
wa_node-color = '4'.
wa_node-text = wa_ekpo-ebeln.
wa_node-tlength ='20'.
wa_node-tcolor = 3.
APPEND wa_node TO it_node.
CLEAR wa_node.
*Filling the values of internal table into tree
wa_node-type = 'P'.
wa_node-name = 'Material No'.
wa_node-tlevel = '03'.
wa_node-nlength = '20'.
wa_node-color = '1'.
wa_node-text = wa_ekpo-matnr.
wa_node-tlength ='20'.
wa_node-tcolor = 4.
APPEND wa_node TO it_node.
CLEAR wa_node.
ENDLOOP.
ENDFORM. " build_hierarchy
*& Form build_tree
text
--> p1 text
<-- p2 text
FORM build_tree .
*Fm for constructing the tree
CALL FUNCTION 'RS_TREE_CONSTRUCT'
TABLES
nodetab = it_node.
IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
w_repid = SY-CPROG.
*FM for displaying the tree
                CALL FUNCTION 'RS_TREE_LIST_DISPLAY'
                 EXPORTING
                   CALLBACK_PROGRAM                = w_repid
                  CALLBACK_USER_COMMAND           = 'USER1_COMMAND'
                  CALLBACK_TEXT_DISPLAY           =
                  CALLBACK_MOREINFO_DISPLAY       =
                  CALLBACK_COLOR_DISPLAY          =
                  CALLBACK_TOP_OF_PAGE            =
                  CALLBACK_GUI_STATUS             =
                  CALLBACK_CONTEXT_MENU           =
                  STATUS                          = 'IMPLICIT'
                   CHECK_DUPLICATE_NAME            = '0'
                   COLOR_OF_NODE                   = '4'
                   COLOR_OF_MARK                   = '3'
                   COLOR_OF_LINK                   = '1'
                   COLOR_OF_MATCH                  = '5'
                   LOWER_CASE_SENSITIVE            = 'X'
                   MODIFICATION_LOG                = 'X'
                   NODE_LENGTH                     = 40
                   TEXT_LENGTH                     = 75
                   TEXT_LENGTH1                    = 0
                   TEXT_LENGTH2                    = 0
                   RETURN_MARKED_SUBTREE           = 'X'
                   SCREEN_START_COLUMN             = 0
                   SCREEN_START_LINE               = 0
                   SCREEN_END_COLUMN               = 0
                   SCREEN_END_LINE                 = 0
                   SUPPRESS_NODE_OUTPUT            = 'X'
                  LAYOUT_MODE                     = ' '
                   USE_CONTROL                     = 'L'.
                IMPORTING
                  F15                             =
ENDFORM. " build_tree
FORM USER1_COMMAND TABLES node        STRUCTURE seucomm
                             USING command
                         CHANGING value(exit)
                                 VALUE(LIST_REFRESH).
write 'Hi'.
endform.
But I have a problem
1. I can expand the child links in tree structure when I comment the exporting parameter CALLBACK_USER_COMMAND in the function Module 'RS_TREE_LIST_DISPLAY'.
2 But when i uncomment the exporting parameter I am unable to expand the child links in output.
Please let me know if i have missed something in the code.
Useful answers will be rewarded
Regards,
Siddharth

Hi Sidhhart,
Check out this prog.
REPORT Z_KULDEEP_ALV_HIERARCHY
message-id zord
line-size 270.
Tables:
Vbap,
Vbak.
*& PROGRAM VARIABLES
type-pools slis.
*& INTERNAL TABLES & STRUCTURES
data:
begin of t_header occurs 0,
    EXPCOL type c,
    vbeln type vbak-vbeln,
    audat type vbak-audat,
    vkorg type vbak-vkorg,
    vtweg type vbak-vtweg,
    spart type vbak-spart,
end of t_header,
begin of t_item occurs 0,
    vbeln type vbap-vbeln,
    posnr type vbap-posnr,
    matnr type vbap-matnr,
    arktx type vbap-arktx,
    pstyv type vbap-pstyv,
end of t_item,
t_fieldcat type standard table of slis_fieldcat_alv with header line,
t_event    type standard table of slis_alv_event with header line,
x_keyinfo type slis_keyinfo_alv,
x_layout   type slis_layout_alv,
x_variant like disvariant.
*& GLOBAL VARIABLES
data:
    g_repid    type sy-repid,
    g_formname type slis_formname value 'TOP_OF_PAGE'.
*& SELECTION SCREEN                                                    *
selection-screen begin of block a with frame title text-000.
Select-options : s_date for vbak-audat obligatory.
   p_date type vbak-audat.
selection-screen end of block a.
*& INITIALIZATION                                                      *
initialization.
clear : g_repid,t_header,t_item.
refresh : t_header,t_item.
g_repid = sy-repid.
*& AT SELECTION-SCREEN                                                 *
at selection-screen.
if s_date-high > sy-datum.
    message e001.
endif.
start-of-selection.
select vbeln audat vkorg vtweg spart from vbak
into corresponding fields of table t_header
where audat in s_date.
select vbeln posnr matnr arktx pstyv from vbap
into table t_item
for all entries in t_header
where vbeln = t_header-vbeln.
end-of-selection.
perform sub_display_alv.
*&      Form sub_display_alv
      text
--> p1        text
<-- p2        text
form sub_display_alv.
*column 1
perform sub_populate_fieldcatalog using:
      'VBELN'                             " field name
      'T_HEADER'                          " table name
      'ORDER'                             " column heading
      '8'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 2
    perform sub_populate_fieldcatalog using:
      'AUDAT'                             " field name
      'T_HEADER'                          " table name
      'ORDERDATE'                         " column heading
      '10'                                " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 3
perform sub_populate_fieldcatalog using:
      'VKORG'                             " field name
      'T_HEADER'                          " table name
      'SALES ORG'                         " column heading
      '6'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 4
perform sub_populate_fieldcatalog using:
      'VTWEG'                             " field name
      'T_HEADER'                          " table name
      'DIVISION'                          " column heading
      '2'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 5
perform sub_populate_fieldcatalog using:
      'SPART'                             " field name
      'T_HEADER'                          " table name
      'CHANNEL'                             " column heading
      '4'                                " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 6
perform sub_populate_fieldcatalog using:
     'vbeln'                             " field name
     'T_item'                            " table name
     'Order'                             " column heading
     '8'                                 " column width
     ' '                                 " fix column?
     ' '                                 " key
     ' '                                 " no display
     ' '                                 " sum this column
     'X'                                 " do not sum
     ' '                                 " input allowed?
     ' '                                 " currenct type field name
     ' '                                 " data type
     'X'.                                 " hotspot.
*column 7
perform sub_populate_fieldcatalog using:
      'POSNR'                             " field name
      'T_ITEM'                            " table name
      'SALES DOC.ITEM'                    " column heading
      '8'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 8
perform sub_populate_fieldcatalog using:
      'MATNR'                             " field name
      'T_ITEM'                            " table name
      'MATERIAL'                          " column heading
      '8'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 9
perform sub_populate_fieldcatalog using:
      'ARKTX'                             " field name
      'T_ITEM'                            " table name
      'SALES ORDER ITEM'                  " column heading
      '8'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                 " hotspot.
*column 10
perform sub_populate_fieldcatalog using:
      'PSTYV'                             " field name
      'T_ITEM'                            " table name
      'ITEM CATEGORY'                     " column heading
      '8'                                 " column width
      ' '                                 " fix column?
      ' '                                 " key
      ' '                                 " no display
      ' '                                 " sum this column
      'X'                                 " do not sum
      ' '                                 " input allowed?
      ' '                                 " currenct type field name
      ' '                                 " data type
      'X'.                                " hotspot.
perform sub_assign_events.
Create a Layout for the ALV
perform sub_layout.
Define the key fields that links the header & item tables
perform sub_define_key.
dispaly list
perform sub_call_list_display.
endform.                    " sub_display_alv
*&      Form sub_populate_fieldcatalog
      text
     -->P_G_FIELDCAT text
     -->P_0198   text
     -->P_0199   text
     -->P_0200   text
     -->P_0201   text
     -->P_0202   text
     -->P_0203   text
     -->P_0204   text
     -->P_0205   text
     -->P_0206   text
     -->P_0207   text
     -->P_0208   text
     -->P_0209   text
     -->P_0210   text
     -->P_0211   text
     -->P_0212   text
     -->P_0213   text
form sub_populate_fieldcatalog using
                                 l_fieldname
                                 l_tabname
                                 l_column_heading
                                 l_outputlen
                                 l_fix_column
                                 l_key
                                 l_no_out
                                 l_do_sum
                                 l_no_sum
                                 l_input
                                 l_cfieldname
                                 l_datatype
                                 l_hotspot.
t_fieldcat-fieldname      = l_fieldname.
t_fieldcat-tabname        = l_tabname.
t_fieldcat-reptext_ddic   = l_column_heading.
t_fieldcat-outputlen      = l_outputlen.
t_fieldcat-fix_column     = l_fix_column.
t_fieldcat-key            = l_key.
t_fieldcat-no_out         = l_no_out.
t_fieldcat-do_sum         = l_do_sum.
t_fieldcat-no_sum         = l_no_sum.
t_fieldcat-cfieldname     = l_cfieldname.
t_fieldcat-datatype       = l_datatype.
t_fieldcat-hotspot        = l_hotspot.
append t_fieldcat.clear t_fieldcat.
endform.                    " sub_populate_fieldcatalog
*&      Form sub_assign_events
      text
--> p1        text
<-- p2        text
form sub_assign_events.
refresh t_event.
call function 'REUSE_ALV_EVENTS_GET'
   exporting
     i_list_type           = 1
   importing
     et_events             = t_event[]
   exceptions
     list_type_wrong       = 1
     others                = 2
if sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
endif.
Read the record for the top-of-page event
read table t_event with key slis_ev_top_of_page.
if sy-subrc = 0.
    t_event-form = g_formname.
    append t_event.
endif.
endform.                    " sub_assign_events
*&      Form SUB_LAYOUT
      text
--> p1        text
<-- p2        text
form sub_layout.
   clear x_layout.
x_layout-f2code = 'QUOTE'.
x_layout-zebra = 'X'.
x_layout-expand_fieldname = 'EXPCOL'. " Field for expand/collapse
*Stat
x_layout-colwidth_optimize = 'X'.
x_layout-no_totalline = 'X'.   " 0001+
endform.                    " SUB_LAYOUT
*&      Form SUB_DEFINE_KEY
      text
--> p1        text
<-- p2        text
form sub_define_key.
   clear x_keyinfo.
x_keyinfo-header01 = 'VBELN'.
x_keyinfo-item01   = 'VBELN'.
endform.                    " SUB_DEFINE_KEY
form top_of_page.
write :/10 sy-datum, 20 sy-pagno, 30 sy-uname.
endform.
form sub_user_command using f_ucomm like sy-ucomm
                            f_selfield type slis_selfield.
if f_ucomm = 'QUOTE'.
    if f_selfield-fieldname = 'VBELN'.
      Set Parameter id 'AUN' field f_selfield-value.
      call transaction 'VA03'.
    endif.
endif.
endform.
*&      Form sub_call_list_display
      text
--> p1        text
<-- p2        text
form sub_call_list_display.
call function 'REUSE_ALV_HIERSEQ_LIST_DISPLAY'
exporting
    i_callback_program             = g_repid
    i_callback_user_command        = 'SUB_USER_COMMAND '
    is_layout                      = x_layout
    it_fieldcat                    = t_fieldcat[]
    i_save                         = 'A'
    it_events                      = t_event[]
    i_tabname_header               = 'T_HEADER'
    i_tabname_item                 = 'T_ITEM'
    is_keyinfo                     = x_keyinfo
tables
    t_outtab_header                = t_header[]
    t_outtab_item                  = t_item[]
exceptions
   program_error                  = 1
   others                         = 2
if sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
endif.
endform.                    " sub_call_list_display

After trying to set up access control, my Airport Utility is no longer able to find my Base Station. My PC still sees my wireless network but I can't connect to it.

A friend told me he was able to access my network from a different device with no password so I decided to set up an access control. Following the prompts, I entered my IP address, and then my Airport stopped working. I tried uninstalling it and reinstalling it, but got the same thing. The screen I get is that "Airport Utility was unable to find any Airport wireless devices", and askes me if I want to rescan. When I rescan I get the same message. My Airport light is green and my PC recognizes the network, my software just can't connect to it. A friend suggested I entered the wrong IP address (which I found on my computer under "connections", but even after I tried a different one which is supposed to be from the network, I still get the same error message. What am I doing wrong?

A friend told me he was able to access my network from a different device with no password so I decided to set up an access control.
This could be bullsh!t on your friend's part perhaps? Do you ever recall seeing a blue-light on the base station?
Following the prompts, I entered my IP address, and then my Airport stopped working.
The acces control list is where you put in your Mac Address, this is not the same thing as an IP.

Unable to expand table (or 'any' object) node - permissions issue?

I am the dba for a database and hence have access to the system user. When I connect to the db through SQL Developer, I can expand the table node under any user and list tables. As I can with any object node.
I now want to create an admin user that has restricted capabilities, one of which will be to view objects, such as tables etc..
(I will ultimately do this via a role to allow multiple users to have the admin capabilities, but for now have just created an admin_user userid).
However, when I connect to the database using this admin_user userid, I am unable to expand any object node.
I have played with different permissions, granting 'select any dictionary', 'select_catalog_role', 'select on dba_tables' but the user still can not view any objects via the appropriate node. eg. attempting to go to Other Users - username - Tables just shows nothing. (There are no filters).
However the admin_user can run a SQL command to view the tables. eg. Select * from dba_tables, will list all tables for all users within the database. So they DO appear to have the appropriate access.
So why can't they see the tables in the tables node?
Is there some piece of configuration within SQL Developer itself that I have overlooked?
Cheers

I am the dba for a database and hence have access to the system user. When I connect to the db through SQL Developer, I can expand the table node under any user and list tables. As I can with any object node.
I now want to create an admin user that has restricted capabilities, one of which will be to view objects, such as tables etc..
(I will ultimately do this via a role to allow multiple users to have the admin capabilities, but for now have just created an admin_user userid).
However, when I connect to the database using this admin_user userid, I am unable to expand any object node.
I have played with different permissions, granting 'select any dictionary', 'select_catalog_role', 'select on dba_tables' but the user still can not view any objects via the appropriate node. eg. attempting to go to Other Users - username - Tables just shows nothing. (There are no filters).
However the admin_user can run a SQL command to view the tables. eg. Select * from dba_tables, will list all tables for all users within the database. So they DO appear to have the appropriate access.
So why can't they see the tables in the tables node?
Is there some piece of configuration within SQL Developer itself that I have overlooked?
Cheers

Access control - Restricted access not working

Hi
I have an application I have created an Access Control administration page in. I have set the application mode to 'Restricted access. Only users defined in the access control list are allowed'. I have defined two users one with administrator and one with edit privileges. I have a third workspace user who is not listed on the access control page.
I have added the authorisation scheme to the tabs, pages and page items I require. This appears to work fine if I change the privilege of one of the listed users to 'view' the items disappear and cannot be accessed.
The issue I have is that the workspace user who is not listed can still log into the application, and has the same access as 'view' privilege. My understanding is that the 'Restricted Access' application mode should prevent this user from accessing this application as they are not explicitly listed?
Have I missed some set-up, misunderstood the meaning of 'restricted access' or is it some sort of bug? I am assuming I have missed some set-up somewhere.
PS This is APEX 4.0.2 on 11g
Edited by: tlane on 15/02/2011 19:43

I have set the application up on apex.Oracle.com
http://apex.oracle.com/pls/apex/f?p=48123:101:506666493527664
four users have been defined :
control_admin
control_edit
control_view
control_na
The first 3 are defined on the access control page available on the user_admin tab when you login as control_admin user.
user control_na is not listed but can still access the application.
password for all users is : demo1234
Thanks in advance for all help with this issue.

When defining access control, Unable to expand searchbase

Similar Messages

Maybe you are looking for