How to restrict access to the particular presentation table in a given area?

My current configuration in the presentation layer is:

Business generic sale-> field

-Sales-> presentation Table measures

-TotalSalesofGoods ->field

-The costs of the measures -> presentation Table

-CostOfGoods ->field

-Customer Dimensions -> presentation Table

-Items-> field

I have two built roles, 'ShouldSeeGenericSalesSubjectArea' and 'ShouldSeeCostFields '.

  • Permissions
    • "Domain generic sales."
      • User authenticated-> no access
      • ShouldSeeGenericSalesSubjectArea-> read
      • ShouldSeeCostFields-> default
    • "Measures of sales."
      • User authenticated-read >
      • ShouldSeeGenericSalesSubjectArea-> default
      • ShouldSeeCostFields-> default
    • "Measures of costs".
      • User authenticated-> no access
      • ShouldSeeGenericSalesSubjectArea-> default
      • ShouldSeeCostFields-> read
    • "Dimensions of the client".
      • User authenticated-read >
      • ShouldSeeGenericSalesSubjectArea-> default
      • ShouldSeeCostFields-> default
    • All fields have permissions to:
      • User authenticated-read >
      • ShouldSeeGenericSalesSubjectArea-> default
      • ShouldSeeCostFields-> default

Given two users:

  • UserA
    • The user has following roles:
      • ShouldSeeGenericSalesSubjectArea
      • ShouldSeeCostFields
    • The user can see everything except the table of fees
  • UserB
    • The user has following roles:
      • ShouldSeeGenericSalesSubjectArea
    • The user can see everything except the table of fees

  • My ultimate goal is:
    • "ShouldSeeGenericSalesSubjectArea" allows access to see the "generic sales subject area", but does not measure cost
    • "ShouldSeeCostFields' allows you to see the presentation layer of"measures of cost. "
    • Example:
      • UserA from above should see everything (including the "cost measures").
      • UserB above should see everything, except 'measures of cost. "

I tried several different combinations of levels of authorization without result. From my understanding, Oracle security works by taking the path of any restriction. I do something wrong with my permissions on the presentation layer of "measures of cost? Please let me know if there is anything I can clarify or if you need more information.

I was able to make it work by giving access to role of cost at the level of the subject area. Then each material is no access on the cost, but access if had the other role.

Tags: Business Intelligence

Similar Questions

  • How to restrict access to the drive of Wndows xp sp3?

    I have 3 user account on my computer, it is has the administrator rights and the other is a standard user account.

    I want to restrict access to all readers for the standard player.
    I used gpedit.msc to enable the administrative model, but it also limits the account admin and me to access the road
    OS: windows XP SP3
    Please advice
    Hi Utkarsh.Ranjan,
     
    If you want to restrict access to a drive by using the Group Policy Editor, you can not apply for a particular user account. This will change for the user accounts.
     
    You can't restrict access to the complete transmission. However, you can resrtict access to folders and files inside a car to a particular user.
     
    Refer to the section "set, view, change, or remove special permissions for files and folders" in the following article and follow the steps to remove the authorization of the user access to the file/folder.
  • How to restrict access to the service web application deployed on weblogic for user group only

    I built the web service application in jdevelopler 11.1.1.7. Their security policy applied in the web service of the default Oracle policy which is (policy: Wssp1.2 - 2007-Https-UsernameToken - Plain.xml)

    Now all want to access the web service application must provide the name of user and password in the header section of the SOAP request to meet the requirement of the policy.

    the following steps I'm trying to restrict access to the application of web service with a specific group of users among users of weblogic:

    Connect to the weblogic administration console

    Create user or group of users

    Click on the links of deployments

    Select your web service

    Click the Security tab

    Click the sub-tab political

    Choose your authorization provider in the menu drop-down (looks like by default)

    Choose Add Conditions-> Group-> Type in the name of the Group

    Finishing

    But access is always available for all weblogic users (IE users not in the group specified in the above security configuration). How can I restrict access to only authorized group? Any thing lacking in my approach?

    There is nothing wrong with the steps mentioned in the question. In addition, you must do the following

    At the time of the application deployment with regard to the security part, there is a list in the title of the question (which security template you want to use with this application?)

    You must select (Advanced: use a custom template that you have configured on the page of configuration of the Kingdom) a configuration mentioned in the question will be work

  • How to restrict access to the system.

    Hello

    I thought it is possible to restrict access to the system during the processing of payroll is. The GI company is currently working to, so is distributed departments in a different location across the country during the payroll run payroll users are still transaction, insert/update of the data in the entry of the item, monthly data on the pay to play.

    It is technically possible to restrict access to the system or component during the race entry window? no idea to proceed accordingly?

    Thank you

    Published by: user10893201 on March 3, 2010 07:27

    Hi user;

    Please check:

    Security profile is not limiting access to payroll employees [ID 344649.1]
    How install bank account maintenance and security of access to the account in Release 12 [403975.1 ID]
    Restrict access to security of payroll is not working correctly on the safety profile of set [244652.1 ID]

    Also, check search below:
    http://forums.Oracle.com/forums/search.jspa?threadID=&q=restrict+access+&objid=f475&DateRange=all&userid=&NumResults=15

    It may be useful

    Respect of
    HELIOS

  • How to restrict access to the network for customers in the lobby.

    Hello

    How is - this preferable to limit the access of the data ports in the lobby of the company for Internet access only? Although the hosts are not on the field, is it safe to allow them to reach the port of data?

    I suggest setting up a vlan separate for these ports and usig dot1q on trunk this vlan to a DMZ interface dedicated or the subinterface on your firewall with an ACL that only allows access to the internet. That should do the trick.

  • How to restrict access to the workstations on the Security Server

    Hello

    I wonder if it is possible to limit access to desktop view to some groups, if the connection is from a security server. To explain it a bit further

    * We have users who access it offices internally to a thin/Zeroclient. They comes to connect to their office pool.

    * Other users have a thick client with client view installed.

    * Others have a laptop and cann access their workstations to "everywhere" with client access or view html

    Only users in the latter group should be able to connect on a security server. Right now anyone who knows the URL of the Security Server can access as long as it has right to your desktop.

    I'm sure that this is possible, but I don't know how...

    Another option is to use the external radius authentication. In this way, that you don't have to have separate categories.

  • Restrict access to the Page of the user in the relational database

    I have a relational database with two tables on a common ID field. The user can access all their entries in the child table with simple SQL queries and then select from a list of correspondence which of its documents records in the child table that they wish to change (i.e. ['ID'] ParentTable, ChildTable ['ID'])). Registration is then displayed using $_GET passed through the URL as parameter "recordID". However, when the user is connected and accessing a folder that matches the query, they can then enter another "RecordID" number in the URL and go to any record in the table child whether they are 'owner' of the record or not.

    I tried to put a statement of equivalence in the authorization user code to restrict the access to the child records users since ParentTable ['ID'] == ['ID'] ChildTable only when you are connected the user accesses the records they created previously. (In other words, when a user type a different "RecordID" in the URL, the ParentTable ['ID'] and ChildTable ['ID] are not equivalent.) The code that I entered in the authentication of the user generated by DW is as follows:

    If ((isset ($HTTP_SESSION_VARS ["MM_Username"]) & & ($row_ParentTable ['ID'] == ['ID'] $row_ChildTable))) {}
    ...

    Is still not accessible, even if tests show the ParentTable ['ID'] and ChildTable ['ID'] are not equivalent

    Any ideas on how to restrict access to the child records "unknown"? I'm sure it's relatively simple, but I'm having trouble to get through this obstacle.

    Thank you

    Thank you, Philo. In fact I got it to work by initializing a session variable of tha parent ID of the table and comparing it to the variable ID of child table, then using a header redirect in case of inequality. Part of my problem was where I put the code in the page. Anyway, it works now. It seems that the answer is always just after you have posted the question.

  • is it possible to restrict access to a particular application for the particular user?

    is it possible to restrict access to a particular application for the particular user

    for example, if an application will not be editable for user mode

    or it will be only editable for a user

    We gave access as a developer of a workspace to a single user

    but we don't want him to change a single application.

    Oracle Application Express 5.0

    Your terminology is mixed - looks like you're talking about limiting applications, a developer can edit in the application builder in a workspace.

    No, you can't.

  • IPSEC RA - activate crossed but restrict access to the web

    ASA5520 8.2 (5) 30

    Greetings,

    I have an IPSEC RA strategy that has implemented to tunnel all traffic (no split tunnel) by the ASA (which ends on the external interface).  I need to be able to allow VPN users to access a web page (crossed) thesesame on the external interface.

    ++++++++++++++++++++++++++++++

    Here are the current settings:

    Group Policy Admins L internal

    attributes of Group Policy L_Admins

    value of server WINS 172.16.0.33 172.16.0.9

    value of 172.16.0.33 DNS server 172.16.0.9

    VPN-idle-timeout 60

    VPN-session-timeout 480

    VPN-value filter-admin-l

    IP 172.30.4.0 allow Access-list l-admin-test-filter extended 255.255.255.252 host 172.16.0.33

    IP 172.30.4.0 allow Access-list l-admin-test-filter extended 255.255.255.252 host 172.16.0.9

    IP 172.30.4.0 allow Access-list l-admin-test-filter extended 255.255.252.252 172.16.1.4 host

    IP 172.30.4.0 allow Access-list l-admin-test-filter extended 255.255.252.252 welcome 172.16.1.2

    access-list extended l-admin-test-filter permit ip 172.30.4.0 255.255.252.252 10.24.0.0 255.252.0.0

    IP 172.30.4.0 allow Access-list l-admin-test-filter extended 255.255.252.252 the host 172.16.0.233

    Protocol-tunnel-VPN IPSec

    Split-tunnel-policy tunnelall

    value by default-field IHI.local

    type tunnel-group L_Admins remote access

    attributes global-tunnel-group L_Admins

    address ili_global pool

    PhoneFactor authentication-server-group

    Group Policy - by default-L_Admins

    IPSec-attributes tunnel-group L_Admins

    pre-shared-key *.

    ++++++++++++++++++++++

    Crossed is not currently enabled, so I guess I have to add:

    permit same-security-traffic inter-interface

    and (I guess)

    mask IP local pool l_admins 172.30.4.1 - 172.30.4.2 255.255.255.252

    Global (outside) 1 interface * PAT IP

    NAT (outside) 1 mask 172.30.4.1 - 172.30.4.2 255.255.255.252

    But from there I don't know how to restrict access to a single external IP on the web on port 80.

    Hello

    Enter the correct command to permit traffic and the same interface of leave is

    permit same-security-traffic intra-interface

    The command you posted allow traffic between 2 different interfaces that have the same value of 'security level'

    permit same-security-traffic inter-interface

    What about PAT Dynamics for Internet traffic

    If you have already

    Global 1 interface (outside)

    Then you will need the command "nat" for the VPN pool

    NAT (outside) 1 172.30.4.0 255.255.255.252

    In what concerns the control of Internet traffic, should not be able to simply add this destination IP address to the VPN filter ACL you have ever used? I mean the ACL named "l-admin-test-filter".

    For example

    L-admin-test-filter access list note allow the external server connection

    access-list l-admin-filter-test permit tcp 172.30.4.0 255.255.255.252 host eq 80

    access-list l-admin-filter-test permit tcp 172.30.4.0 255.255.255.252 host eq 443

    access-list l-admin-filter-test permit tcp 172.30.4.0 255.255.255.252 host eq 8080

    -Jouni

  • How to restrict access to a single user for a proxy in OSB service

    How to restrict access to a single user for a proxy in OSB service

    A. go to the Proxy Service and click on the Security tab

    B. click on Transport Acess political of control to be edited.

    C. click Add to the terms to restrict users.

    D. in the main list, select the category from the user

    E. give the user name to which you want to give access.

  • Restrict access to the Portlet producer

    I want to restrict access to the Portlet producer.
    I mean, it is supposed that there 5 portlets to the producer.
    I want user1 will have access to only 2 portlets and user2 will have access to another 3 portlets.

    Could you please suggest how to achieve this type of authorization.

    I know everything right and single sign on in WSRP. My hypothesis is to combine these two long I can achieve.

    Thank you

    Bénédicte

    Ah ok
    something like that then?
    http://eDOCS.BEA.com/WLP/docs102/Federation/chap-entitlements.html

  • Restrict access from the view of external endpoint

    Hello world

    I got an interesting question to come today: is it possible to restrict access to the view of physical endpoint?  This client does not support BYOD somehow and provided instead of thin laptops HP for their users access to the view since then at home, via a security gateway.  I know that you can disable the web interface from view completely, but they seek to block connections to nothing but these thin laptops.  Thank you!

    Here's a more recent document - https://www.vmware.com/files/pdf/VMware-View-KioskMode-WP-EN.pdf

  • How many objects is using the particular user

    Hi all


    I use the peoplesoft database and I need to know the list of objects that a "dba_users" user has access in database.particular users unable to see what are the objects they use in the peoplesoft database.

    Example of the user

    GREYNOLD
    SYSADM
    SUDHIR
    CLDBA


    Thank you
    GS

    You can or cannot find scripts that are useful to the ADDRESS below

    http://www.petefinnigan.com/tools.htm

  • How to eliminate or remove the zeros of table 1 d

    How to remove or delete the zeros of table 1 d. Let's say I table 1 d with following elements

    "0 0 0 0 0 4 0 0 9 0 0 1 4 0 0 0 0 0 0 0 0 10 9 0 0.

    So after deletion or removal of zeros, it will become as follows

    "4 9 1 4 10 9.

    So any body can guide me how I can do? See picture attached for more details.

    Thank you

    JK

    I do not know this post might help you.

  • Windows Media player on my machine does not run some AVI files. How can I check what the problem with AVI files. Files are running in other utilities of free ware

    Windows Media player on my machine does not run some AVI files. How can I check what the problem with AVI files. Files are running in other utilities free ware. Also, windows Explorer does not display dimension and other video related information for the file. Y at - it a tool that can indicate what exactly is the problem with the file.

    Ritu

    Hello

    1. you get any error message?

    2. don't you make changes to the computer before the show?

    Please follow the steps from the link below.

    http://support.Microsoft.com/kb/279242

Maybe you are looking for

  • Windows Update makes me once again that it is 6 or 7 times

    an uninstall at the end it says service pack 3 is only paritally installed and programs might not work right. Yes like windows is unbootable. How can I totally get rid of service pack 3. safe mode works smoking didn't last good configuration.

  • PCCARE support a scam?

    original title: * e-mail address is removed from the privacy *. According to me, there are other people who has been scamed by them - even PCCARE I was taken for $199.99 for 2 comptures they told me that it would take 60 to 90 minutes belive I was on

  • How to get rid of the impostors of dll?

    I've shortened entertainment: the Russia TV episodes, and so now my office. When I tried to delete the dll is associated with these shortcuts (there were a dozen for each site! throughout my PC), it wouldn't let me delete them because he thinks they

  • Main menu works fine on the first play, does not respond when I get back to it.

    I've set up a very basic Blu - ray project using Encore CS6. Almost everything works except for this one problem which I can't understand. Firstly, some information... I have two total menus. One is the main menu and one is a chapter submenu. As you

  • Host computer cannot see do not comment

    I worked on it for a few days and just can't get this to work! Would appreciate any help!I have a host computer that running Windows 7 Professional 64 bit. It is the output of an ipconfig/all command from the host:Windows IP configurationName of the