User role assignment

Similar Questions

• The error of the user role assignment

  Oracle 10.2.05
  Linux environment
  
  I just to give a role to a user, but the user has no role-based privileges.
  
  Here's what I did:
  
  First create a user (db_user) using system id
  Then, create the schema_admin_role role
  Then run the script to assign privileges to the role
  (SELECT ' grant select, insert, update, delete on ' | owner |) '.'|| table_name | ' schema_admin_role;' from dba_tables WHERE OWNER = "another_schema";
  
  Then run
  grant schema_admin_role to db_user;
  
  The problem:
  When db_user tries to update the table X own another_schema, he gets no sufficient privileges
  
  But when I run (select the owner, table_name, and privilege of dba_tab_privs where dealer = "SCHEMA_ADMIN_ROLE";), I see all the privileges belonging to this role.
  
  All your end solution will be appreciated.

  db_user start a new session after the GRANT?

• Error in postprocesshandler user role assignment

  Hey, 11 GR 1 material here.
  
  In my custom process manager post I am trying to assign roles to the user when creating, but I'm a java.lang.RuntimeException: method not implemented.
  
  Here is the code:
  
  String USER_KEY = "5";
  String roleKey = "12";
  < String > userKeys value = new HashSet < String > ();
  userKeys.add (USER_KEY);
  (..)
  RoleManager roleMgr = Platform.getService (RoleManager.class);
  roleMgr.grantRole (roleKey, userKeys);
  
  The grantRole is to launch a GrantRoleException caused by the RuntimeException that says the method is not implemented. It seems that the grantRole method calls a method that is not implemented, but I can't find a clue in addition.
  
  Edit: I also tried with the addMemberUser in the tcGroupOperationsIntf without success
  
  Thank you in advance for your help!
  
  The stack trace is complete:
  [2012-10 - 09T 14: 34:07.586 + 02:00] [oim_server1] [NOTIFICATION] [IAM-3056013] [oracle.iam.identity.rolemgmt.utils] [tid: [ASSETS].] [ExecuteThread: '2' for the queue: "(self-adjusting) weblogic.kernel.Default"] [userId: oiminternal] [ecid: 2b4b40dd6bd9493d :-46b5b083:13a457d730d :-8000-000000000000110 d, 0] [APP: IOM #11.1.1.3.0] search for role with the specified criteria.
  [2012-10 - 09T 14: 34:07.669 + 02:00] [oim_server1] [NOTIFICATION] [IAM-0080006] [oracle.iam.platform.kernel.impl] [tid: [ASSETS].] [ExecuteThread: '2' for the queue: "(self-adjusting) weblogic.kernel.Default"] [username: oiminternal] [ecid: 2b4b40dd6bd9493d :-46b5b083:13a457d730d :-8000-000000000000110 d, 0] [APP: IOM #11.1.1.3.0] process Orchestration moved to doesn't have a stadium, and the error corresponding East - {0} []
  java.lang.RuntimeException: method not implemented
  at oracle.iam.request.eventhandlers.RequestDataActionHandler.execute(RequestDataActionHandler.java:110)
  at oracle.iam.platform.kernel.impl.OrchProcessData.runPreProcessEvents(OrchProcessData.java:897)
  at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:634)
  at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:227)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:740)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.process(OrchestrationEngineImpl.java:499)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:444)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:378)
  at oracle.iam.identity.rolemgmt.impl.RoleManagerImpl.grantRoles(RoleManagerImpl.java:574)
  at oracle.iam.identity.rolemgmt.impl.RoleManagerImpl.grantRole(RoleManagerImpl.java:560)
  at oracle.iam.identity.rolemgmt.impl.RoleManagerImpl.grantRole(RoleManagerImpl.java:541)
  at oracle.iam.identity.rolemgmt.api.RoleManagerEJB.grantRolex (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy357.grantRolex (Unknown Source)
  at oracle.iam.identity.rolemgmt.api.RoleManager_ogut7n_RoleManagerRemoteImpl.__WL_invoke (unknown Source)
  at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
  at oracle.iam.identity.rolemgmt.api.RoleManager_ogut7n_RoleManagerRemoteImpl.grantRolex (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
  to $Proxy159.grantRolex (Unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
  at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
  to $Proxy356.grantRolex (Unknown Source)
  at oracle.iam.identity.rolemgmt.api.RoleManagerDelegate.grantRole (unknown Source)
  at com.thortech.xl.ejb.beansimpl.tcGroupOperationsBean.addMemberUsers(tcGroupOperationsBean.java:418)
  at com.thortech.xl.ejb.beansimpl.tcGroupOperationsBean.addMemberUser(tcGroupOperationsBean.java:368)
  at Thor.API.Operations.tcGroupOperationsIntfEJB.addMemberUserx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
  at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
  at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy372.addMemberUserx (Unknown Source)
  at Thor.API.Operations.tcGroupOperationsIntf_13pobh_tcGroupOperationsIntfRemoteImpl.__WL_invoke (unknown Source)
  at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
  at Thor.API.Operations.tcGroupOperationsIntf_13pobh_tcGroupOperationsIntfRemoteImpl.addMemberUserx (unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
  to $Proxy188.addMemberUserx (Unknown Source)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
  at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
  to $Proxy369.addMemberUserx (Unknown Source)
  at Thor.API.Operations.tcGroupOperationsIntfDelegate.addMemberUser (unknown Source)
  at solucom.iam.identity.support.orgrules.FranceHQSupportProcess.execute (unknown Source)
  at solucom.iam.identity.eventhandlers.UserPostProcessHandler.execute (unknown Source)
  at oracle.iam.platform.kernel.impl.OrchProcessData.runPostProcessEvents(OrchProcessData.java:1169)
  at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:711)
  at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:227)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:745)
  at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:791)
  at oracle.iam.platform.kernel.impl.OrhestrationAsyncTask.execute(OrhestrationAsyncTask.java:129)
  at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:101)
  at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:71)
  at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
  at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
  at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
  at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  at java.lang.reflect.Method.invoke(Method.java:597)
  at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
  at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
  at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
  at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
  at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
  to $Proxy352.onMessage (Unknown Source)
  at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:574)
  at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:477)
  at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:380)
  at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
  at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
  at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3822)
  to weblogic.jms.client.JMSSession.access$ 000 (JMSSession.java:115)
  to weblogic.jms.client.JMSSession$ UseForRunnable.run (JMSSession.java:5170)
  to weblogic.work.SelfTuningWorkManagerImpl$ WorkAdapterImpl.run (SelfTuningWorkManagerImpl.java:528)
  at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
  at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
  
  Published by: 955407 on October 9, 2012 06:53
  
  Published by: 955407 on October 9, 2012 07:16
  
  Published by: 955407 on October 9, 2012 08:03

  In addition, I did not mention the following. In my case, Execute, I have the following code to see if the creation was application and running only add it to the role if the request is:

  >
  HashMap requestContext = (HashMap) ContextManager.getValue ("requestData", true);
  String requestKey = "";
  long reqKey = 0;

  Checks whether the context of the request is null which means that the task was created through an application, otherwise, no action taken
  If (requestContext! = null) {}
  requestKey = (String) requestContext.get("requestKey").getObjectValue ();
  If (requestKey! = null &! requestKey.isEmpty ()) {}
  reqKey = Long.parseLong (requestKey);
  debug ("Key Request [" + reqKey + "]");
  }

  RoleManagerResult roleResult is addUserToRole (orchestration.getTarget () .getEntityId (), "Insertion role name here");.
  {if(roleResult!=null)}
  If (roleResult.getFailedResults () .size ()! = 0) debug ("failed to add to the role [" + roleResult.getFailedResults () + "]");
  If (roleResult.getSucceededResults () .size ()! = 0) debug ("success adding to the role [" + roleResult.getSucceededResults () + "]");
  }
  }
  >

  -Kevin

• Unable connect user AD to any role assignment

  We created users being authenticated by OBIEE 11 g AD. In the ad, we currently have the user, password and information associated with all created users group.

  According to the behavior of the system if group a user an is not mapped to a role within the EM, it should automatically be labeled authenticated role which, being a part of their role of 'BIConsumer' will give the privileges to this user. This doesn't seem to be the case. Any point of view on why this would be the case?

  -If there is a group associated to AD user in the active directory itself, is it mandatory that ad groups be associated with a role? What I mean by that is, if we block init level RPD to map users authenticated to imported within the RPD and EM custom database roles, they would not work unless there is a direct ad group for role assignment?

  The RPD had no access 'Authenticated users' and "Consumer Bi-role" nec for all areas, among other permissions layer of presentation, so at least that a user has been assigned to a role that could access any of the areas of knowledge, that the default authentication would not work.

• The worksheet name change for the interactive user role

  Hi all

  I have a question about DRM security for users with access add to the sheet and only read access to the members. The requirement is that the user should be able to add a sheet and change all the properties associated with the leaves but cannot add or change the Member or any property associated with a branch. To do this, I created a group of node (NAG1) and assigned categories of goods (PC1) associated with the hierarchy of the NAG1 with editing access to PC1. The NAG1 for journal access ADD and NAG1 for branch had read access. The user has only one role which is the interactive user. This way, the user cannot add spreadsheets, edit the properties associated with the leaves, but don't can't add limb or change all the properties associated with limb, HOWEVER, the user is not able to change the name of an existing journal. If I give the user role 'Director of Application', while they are able to change the name of the system, but then they see the section Administration on the left and everything related which we want give...

  Is it possible to give the user the ability to change the name of the worksheet without giving ""Application Administrator ' role? "

  Denzz Murali Pasumarti

  Thanks in advance

  Sumit

  Have you checked RenameLeaf and RenameLimb system preferences?  I think that by default, only the administrator can change the name of the node, but you can grant this possibility of additional roles.

• OIM 11 g R2 role assignment

  All,
  
  Everyone knows a scenario where OIM 11 g R2 does not assign a role to users when creating when applies the rule for this role to users?
  It seems that the event/process role assignment manager is only the trigger on a user create or maintain up-to-date, but does not trigger on the new creation of a role. If anyone else has experienced or has developed a workaround solution, let me know.
  
  Thank you
  D

  Looks like that it evaluates only membership in roles on a creation or update. Evaluate user task policies does not affect membership roles.

  To trigger this, I think I can create a scheduled task that merely updates an attribute on a user to trigger policy.

• Handler to process post is prevents the role assignment

  Guys,
  
  I have a process post event handler which runs on Trusted recon, is the issue that I am facing
  
  1 each time a new user is created the display name field becomes null (although I do not put any name to display in custom code, or I'm doing any first name, family name manipulation)
  
  which basically means that OOB event handler for the display name is not triggered. I checked it by removing the custom event handler, then full name starts the fill on Recon trust.
  
  FYI, the Custom event handler has a prescription = 1008
  
  2 event Handler is also bent the role assignment, which is a member of the rule.
  
  
  I tried to use the User Manager APIs in the events and also entityManager API, but the results are the same.
  
  
  Can help here.
  
  Thank you
  AK

  You must use the UserManager API to update the user if you are in the event of change of station. EntityManager does not trigger the spread through research.

  -Kevin

• How to hide users (roles and organization) list from a user in IOM

  Hello
  
  Admin (xelsysadm) has created a user to IOM. Now, if this user is connected to the IOM Self Service (http:// < url > / identity), he can see other users in his organization, as well as the list of roles, role categories, organizations, etc. I have an obligation to hide all links in the administration of the end-user. At present, it has the role of "All Users" and has no admin role, but can see all these links administration. What should I do to hide these links to the end-user? Should we delete the role of "All Users", or assign another role, or do something in law, or in the access policy?
  
  Thank you.

  You can write EL condition on visible (or display the component property) Administration menu item: #{oimcontext.currentUser.roles ['SYSTEM ADMINISTRATORS']! = null}

  Visit this link on the writing of EL http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/uicust.htm#BABHBFGH

• Error in the role assignment

  Hi all
  
  I had created a strategy to access the OIM 11 g to work for a final user role. Also, I've created a membership rule in design console to verify that a custom page attribute create a user called UserRole had the value of the end user. I applied this rule as membership rule in the role of the end user so that the role be assigned self if I chose EndUser in UserRole attribute then create user phase. Also, I assigned the access policy that I created for this role in the access policies tab. After this, whenever I created the user with attribute UserRole EndUser role was automatically assigned to the user as well as the access policy is invoked and it worked great.
  
  Then I activated the LDAP sync today and to check it worked I have disabled access policy by changing the role assignment he had to another role temporarily so that he would not get invoked. After awhile, I started the old role in the access policy so that it works as before. But now the access policy has stopped working. Also the user role is not automatically assigned. And on top of that, I'm still not able to assign the role to any user I create later manually. The error I get is:
  

  An error occurred. The corresponding error code is 0080062 IAM

  can someone please guide me to get the solution for this unacceptable mistake? I don't understand how I am unable to assign roles as well. If at all there is problem with the access policy so only he should have stopped working. But being not not able to manually assign roles is simply amazing. Help, please.
  
  Thank you
  $id

  Hey $id,

  Please run these scheduled tasks:

  LDAPSync Post allow provision users to LDAP

  LDAPSync Post Enable provision roles to LDAP

  LDAPSync Post Enable provision of roles for LDAP group memberships

  LDAPSync Post Select available role hierarchy in LDAP

  If you follow these scheduled tasks predefined LDAP above, all users of provisioning, roles and role memberships, as well as hierarchy, role of LDAP is reached.

  Please let me know if you have any doubt.

  I hope this helps.
  Leoncio Thiago.

• using storytelling and get the user role

  Hi all
  I have a quick question on the narrative.
  can we get/trap the user role (as if it is reportviewer/admin) in my account, or anywhere on the dashboard?
  
  Kind regards
  Pavan

  Hello
  create 2 groups...
  --> Dashboard--> settings--> administrator manage privileges
  assign him appropriate roles...
  subject of your question... you can make a simple table that has users and roles...
  and fix your star schema...
  then with your writeback, you can change anything you want...

  Audit and this blog...
  http://obiee101.blogspot.com/search/label/user

  I hope I helped...

  ///////////////////////////////////////
  http://greekoraclebi.blogspot.com/
  ///////////////////////////////////////

• Management of more than 20 user roles.

  Hello

  JDeveloper 11 g.

  So far, we have managed with the rendered user roles / disabled = ' #{bean.userRight!» = 'U' or bean.userRight == ' {' etc...}.

  However, we want to introduce several user roles, because we have different customers, and they have different types of users as well.  Adding the letters more will make the huge EL expressions.

  I am familiar with user roles made with the safety of the ADF. However, I see the same problem with them. (It becomes difficult to apply when there are more than several users).

  It is possible to make a table a lot to many users and rights. For each user, there will be a list of rights. However having "#{userBean.right == 100}" is not readable.

  Any suggestions?

  Kind regards

  Pamela.

  Rather than use an EL you can point to a bean method and calculate the value of the bean method, returning ture or false according to the connected user.

  Timo

• ViewObject where Clause SET based on logged in user roles

  Hello Experts

  I have a view object based on a custom query to get distinct values from a table. My requirement is to display the results as a listview. The listview is is filled without any problem. But I need to add a where clause clause the object view based on the user roles.

  I have a method that generates the where clause and returns one string something like "COUNTRIES ('USA', 'UK').

  I created a class of the view object Impl and put WhereClause as below: but where clause is not applied when I run the page. I see everywhere instead of just USA & UK.

  Can you let me know at what time should I set the where the clause?

  SerializableAttribute public class CountriesVOImpl extends ViewObjectImpl {}

  /**

  * This is the default constructor (do not remove).

  */

  public CountriesVOImpl () {}

  this.setWhereClause (getCountries ());

  }

  public String getCountries() {}

  return '('USA', 'UK') COUNTRIES. "

  }

  }

  In class ViewImpl try to replace "executeQueryForCollection" and setWhereClause in this function as:

      protected void executeQueryForCollection(Object object, Object[] object2, int i)
      {
          setWhereClause("COUNTRY in ('USA','UK')");
          super.executeQueryForCollection(object, object2, i);
      }
  

• Hide a metadata profile based on the user role.

  Hi all

  I need to hide a metadata profile (log, update) based on the user role page. I have added metadata to a rule like "change" and added the rule to the profile. Now I want the metadata submitted must be visible for couple of user roles (admin, contributor) and it should be hidden for other user roles. How to achieve this?

  The content Server: 11.1.1.8

  Thank you

  Maury

  (1) create a rule that allows you to hide the metadata for all roles

  (2) create a new one which will show use the condition of activation of rule with building userHasRole("contributor")

• What opening of database Service of Cloud Computing console receiveing "the user role cannot access the Cloud database Service" message and see no service. Why?

  What opening of database Service of Cloud Computing console receiveing "the user role cannot access the Cloud database Service" message and see no service. Why?

  Thank you in advance.

  Try now

• What is the difference between the role of support and the user role in the business group?

  I know there are a few differences between the role of support and the user role in the business as business group elements and Management group

  editable settings . But I can't find any document that introduces more precisely what they can do, what they can't.

  Are there any articles or documents or other means that can tell the specific differences between the Director, support and user group?

  If you have not taken a glance at this map permissions by GrantOrchard you should. It is very useful to know what permissions each user role. The big difference between the role of support and the user is that the user can only do things for themselves and user support can do things on behalf of other users. There is nothing quite as granular as you specified.