Unable to access WebCenter Sites with fwadmin user - oracle

Error:
This account is not authorized to access this site. To gain access to
the system, you will need to login with an account authorized to
access this site. For additional questions, please contact your system
administrator.
Oracle says "The user does not have any roles on the site".
Link:
https://support.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=469675110594161&id=1991585.1&displayIndex=2&_afrWindowMode=0&_adf.ctrl-state=tecmcxrrr_423#SYMPTOM
fwadmin was the only user which I had to access. Since I had shared my creds, someone might had changed roles.
When I checked userpublication table as mentioned in the link, it looks fine. Help me how to proceed.

As mentioned in the link, GeneralAdmin ACL for fwadmin was missing in the DB. Inserted a new row and restarted the managed server. Solved.
https://support.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=469675110594161&id=1991585.1&displayIndex=2&_afrWindowMode=0&_adf.ctrl-state=tecmcxrrr_423#SYMPTOM

Related

Error: invalid_scope google read contact

What is the reason for this error?
How can I fix this?
Error: invalid_scope
This app hasn't been verified to access: {invalid = [https://www.google.com/m8/feeds/]} Please contact the developer for assistance. Are you the developer? If this project needs these scopes, sign in to an account with access to edit your project and try again. If not, contact the developer for help.
We have enhanced our risk assessment for new web applications that
request user data. Based on this risk assessment, some web
applications will require a manual review before users can approve
data permissions. Until the review is complete, unverified apps will
display an error message instead of the permissions consent page.
See our earlier blog post on accessing user data, which outlines your
responsibility when requesting access to user data from your
application. Our teams will continue our constant efforts to support a
powerful, useful developer ecosystem that keeps users and their data
safe.
Sources:
https://support.google.com/googleapi/answer/7394288
https://support.google.com/code/contact/oauth_app_verification

HttpError 403 google directory api

I got the super admin privileges for to my Google Account.
I need to get the list of all the chrome devices through an API.
I did enable Google Admin SDK but still facing some issues.
I copied the exact python script from Python Quickstart for checking but still getting error as
"googleapiclient.errors.HttpError: https://www.googleapis.com/admin/directory/v1/users?customer=my_customer&orderBy=email&alt=json&maxResults=10 returned "Insufficient Permission">"
When checked on Admin SDK API dashboard I can see 4xx errors for every call made from my python script.
When you run the sample you need to make sure that this step
The sample will attempt to open a new window or tab in your default browser. If this fails, copy the URL from the console and manually open it in your browser.
If you are not already logged into your Google account, you will be prompted to log in. If you are logged into multiple Google accounts, you will be asked to select one account to use for the authorization.
Is done from the Google account which has access to your admin account. The user you are logged in with now does not have access.
I managed to get Super Admin access of Google account and then grant access to my project for different scopes. The docs/ references are so confusing hence it took a while for me to figure it out. So under the admin console, we have to get into Security >> Advanced Settings >> Manage API Client Access(under Authentication) and then add the client name and the scopes(multiple scopes separated by commas) for which we need access. Client name is the client-id which we can get from the client-secretxxxxx.json file(downloaded while creating the oauth id).
NOTE :- You do NOT need super admin access it is just that I was new and the guy who gave me the initial access wasn't sure what has to be enabled across.
Also couldn't post as a comment due to the limitation of characters.

Website access with cached Windows credentials

I am working at a company which uses an intranet site as a portal to a bunch of other local sites. Unauthorized people in the company have been accessing it, so we want to secure it. Users, when accessing the website for the first time will have to enter a username and password. If they are on a certain group in the Active Directory, they will be given access and their credentials will be stored so that they don't need to enter their username/password again. I have looked into NTML, ASP.NET, but am not sure how to proceed.
Any thoughts/ideas are greatly appreciated.
Dump your solution. Use Integrated Windows Authentication, namely Kerberos, in IIS. It will automatically pass all credenentials to your server. Note that every participant must be part of your AD domain.

Dashboard is not loading for user with non-admin role

When I logged in with the user who has non-admin security role the dashboard is not loading and browser will get hanged. But when I logged in with user who had Admin role its working good. So, whats the issue in this scenario..?
It seems a security issue. You will have to check the permissions for the role that the non-admin user has and check if there are limitations on the entity that is being displayed in the dashboard.
maybe this link will help you: http://www.dynamicscrmtrickbag.com/2011/07/15/dynamics-crm-2011-charts-and-dashboards-who-can-see-what/
Hope this will be helpfull
EDIT: Maybe another role conflicts with the one of system admin that might also be possible

User Restriction in ENSEMBLE

HI friends
i develop a application in ENSEMBLE [2009], in that i restrict some user to access all links except "Ensemble Management Portal" i done this by changing roles for that particular user as Home->securitymanagement->Users->Editusers->roles. But when i logged in in to the system managenet portal and change the namespace it's logged out , Again i try to login means i got the Error Access Denied , Please help me to find the solution
Thansk in advance
I think you just don't have enough privileges to access specific namespace. Just remove $NAMESPACE=something from URL when you try to login again.

Resources