问题标签 [rights-management]

我在 OracleXE db 中有 2 个用户：ALICE和BOB. 以下步骤序列在我的本地机器上是成功的：

• 连接为ALICE
• 创建顶级类型：（create or replace type testtype as object(x number(16)); 编辑：更正错误的名称 foo 误导了 Matthew McPeak）
• 连接为BOB
• BOB看到ALICE's 类型：
  • select * from all_types返回行
  • declare x ALICE.testtype; begin null; end;编译

在类型对 不可见的情况下应用于我们的开发数据库产生相同的步骤BOB，即选择不返回该类型的行，PLSQL 块编译失败并PLS-00201: identifier 'ALICE.TESTTYPE' must be declared出现错误。

我需要使类型可见，所以我问：什么可能导致这种差异？（我猜想需要对类型或公共同义词进行授权，但是这个简约的例子证明相反。）用户/会话的某些属性？尽管我希望解决方案是微不足道的，但我在谷歌搜索方面尽了最大努力，现在卡住了。两个数据库都是 Oracle 11g（11.2.0.1.0 开发，11.2.0.2.0 本地）。

谢谢！

我希望能够直接在我的程序中控制其他用户可以做什么或不能做什么。我有一个 ActiveDirectory，其中用户保存在 4 个不同的权限组中：“用户”（启动程序的基本功能）、“销售”、“会计”和“管理”（管理）。该程序检查用户拥有哪些权限。因此，如果我想更改“会计”等权利，现在我必须更改代码并发布新版本。但在不久的将来，我希望能够在我的程序中的一个特殊窗口中找到“RightsManagement”之类的内容，并更改哪个组可以使用哪个功能。这些“RightSettings”应保存在一个全局文件中，该文件将从我们公司的每个用户处加载。那是为了理论... 我想知道是否有一种完美的方法可以做到这一点，我想获得许多不同的方法来解决这个问题，以便我可以选择最适合我的方法。类似于只读 Xml 文件的东西？它可能是放置在网络驱动器中的 xml 文件，因此程序可以从公司的每台电脑上访问该文件。并且该文件对用户应该是只读的，因此他们无法更改该文件中的设置。当然，通过代码和“特殊窗口”管理员可以设置这些设置，从而覆盖文件。并且该文件对用户应该是只读的，因此他们无法更改该文件中的设置。当然，通过代码和“特殊窗口”管理员可以设置这些设置，从而覆盖文件。并且该文件对用户应该是只读的，因此他们无法更改该文件中的设置。当然，通过代码和“特殊窗口”管理员可以设置这些设置，从而覆盖文件。

感谢您的帮助！

在过去的几天里，我一直试图在 Windows 2012 Server（Windows Server 2012 R2 Essentials 更新 64 位）上设置 AD RMS，但没有成功，我总是收到以下错误。

“无法配置一个或多个 AD RMS 角色服务：

部分或全部身份参考无法翻译。”

我使用了全新且完全更新的 VM，并在更新后直接开始安装和配置 AD RMS。

对于配置（以管理员用户身份完成），我使用以下内容：

“创建新的 AD RMS 根群集”

“在此服务器上使用 Windows 内部数据库”

具有域管理员权限的服务帐户

“使用 AD RMS 集中管理的密钥存储”

“默认网站”作为集群网站

“使用未加密的连接”和 Standartsite 作为域名

安装成功并且在配置过程中出现错误（作为安装结果）。

现在我只希望它在小环境中工作以进行一些实验。

任何意见，将不胜感激。

谢谢。

我将创建一个网站，我将在其中展示一些图像和 pdf 文件。在搜索了几种解决方案以使访问者无法下载/复制这些文件（并且没有找到解决方案）之后，我有了这个想法：因为网站将受到密码保护，访问者必须先接受协议输入，我正在考虑是否可以根据用于访问网站的凭据为每个访问者提供标记或签名的文件，这些文件带有隐藏的“印章”。即我想知道是否有人知道在字节到达客户端浏览器之前是否知道一种方式来提供动态服务，可能是通过 php，标记文件。这样，如果有人使用或共享未经许可下载的文件，就有可能找到这样做的来源。谢谢你，费德里科

我正在使用微软的 ADAL 库和 RMS 4.2。我已经使用 android studio 编译并构建了 rms 示例应用程序。我也在我的应用程序中导入了相同的库，但我在示例应用程序和我的应用程序中都遇到了问题。下面是失败的异常跟踪和网络调用。

Stacktrace 有点冗长，所以我避免了 UI 混乱（请参阅http://pastebin.com/xavNPj80），我也无法在微软的开发者论坛上找到任何帮助。

我尝试实现 RMS 服务器并启用 SharePoint 上的 IRM 以连接到此 RMS。但是，在为文档库启用 IRM 后，我通过上传一些文档进行了测试，结果发现没有人，甚至是文档作者，都没有权限查看它。我尝试打开用户配置文件并使其同步，但问题仍然存在。

问题似乎来自 SharePoint，因为我已经仅使用 Microsoft Office 测试了 RMS 服务器，它仍然可以正常限制用户，而不会出现与 SharePoint 中相同的问题

请支持

错误信息

.

文档库

IRM 设置

我有一个关于文件权限的问题。我一直在使用 FileSystemWatcher 监视一个文件夹 {Workspace}。当我试图从工作区中删除文件时，Watcher 会在文件被删除后给我删除事件。

我想挂钩windows的文件删除事件。当用户尝试从工作区中删除文件时，会弹出我的自定义消息并要求用户确认“您确定要删除文件吗？？” 如果用户按“是”，则 n 然后文件被删除，否则什么也不做。

因此，当用户尝试从我的工作区中删除文件时，请帮助我介绍我的自定义消息。

是否有任何 python 模块使用我们可以创建一个新的 pdf 文件或修改现有的只有读取权限的 pdf 文件。我想禁用 pdf 文件的“另存为”和“另存为其他格式”。（DRM 的事情。）

我已经建立了一个简单的权限管理，基于二进制加法。

我的数据库中的每个导航条目都遵循以下结构：

等等..

每个用户都有自己的访问级别..

用户 = 3 (1+2 - 访问级别) 管理员 = 15 (1+2+4+8)

到目前为止，一切都很好。我现在的问题是，通过 MySQL 从表中选择相应的字段。我的第一种方法是选择所有 access_level <= the sum of the users access_level 的条目，但很快我意识到这也包括其他具有较低 access_level 的页面。

Because I am running out of arguments discussing with our admins, I hope you can help me with the following issue.

We have a strange behaviour corresponding to our self-implemented windows-services. They freeze randomly. Sometimes they keep on working for weeks and sometimes they freeze multiple times in a week. I am pretty sure, there is no problem with bad code or unhandled exceptions. In my opinion this is some kind of a windows admin/rights management problem in combination with chronological coincidence.

But let's start with some information at first:

• All windows services are running on one server.
• All windows services are executed by the same windows user.
• The server is a virtual machine. (VMWare, Windows Server 2008 R2) (I know...)
• The services are implemented using VB.Net with .Net 4.0. (I know... Was not my decision ;-))
• We have 2 different kinds of services (called A, B).
• Both kinds of services read files from a directory and write some information in a database. It's problably not important, what they are doing exactly, because this is some kind of standard task.
• Every kind of a service exists in 3 variants, that are copies of each other, but use different SQL servers to store data (called 1, 2, 3).
• At irregular intervals one ore two of the six services seem to freeze.
• Inside the windows service manager the frozen services are marked as "running". Via Powershell command the services also are marked as running.
• There is no pattern you can see corresponding to which services freeze. Somethimes for example service A variant 2 is frozen, whereas variant 1 and 3 are working fine. Important: There is the same code behind these 3 variants.
• Each service writes one log file per day. Looking into the log of a frozen service you can see, that there is no exception or error logged. The services just have stopped doing their work.
• There is no relevant information I can find in the windows events.
• Restarting the frozen services always helps. Sometimes you cannot simply restart them. Instead you have to stop them first and start them after this. In this case you see "error 1061: service cannot accept control messages at this time". This also occurs irregularly.

Because I could not see any logged errors, I installed DebugDiag on the corresponding server, added crash rules for the mentioned services and perhaps found something interesting. Here is an extract of the DebugDiag log:

The last sign of life of the service (let's say it was service A variant 2), that was frozen again at this time, was at 01:04:29, where one thread has been exited. At 06:55:25 the service has been restarted by one of our admins, because he saw, that the service seemed to be frozen. No dump was written by DebugDiag, so I assume again, that the service did not crash.

For me it was strange, that wship6.dll, wshtcpip.dll, fwpuclnt.dll and security.dll were unloaded while restarting the service, because I have not seen this yet. I tried to restart another variant of service A several times, which was not frozen. I saw the same entries, but they were written only after the first restart. Even after stopping and starting the service again, I could not see, that the libraries were unloaded.

So after a lot of information:

• Can you tell me roughly the task of these windows libraries?
• Is there any hint, that the servers could have problems corresponding to user rights managment / group policies? I know, that we had issues with group policies in the past. The local rights of the user, which was executing the services, were overwritten by some invalid global group policies. That's at least what I understood. I am developing and don't do admin tasks.
• What else could I check to make sure, there really is no problem with the code / help our admins to solve this annoying issue?

Edit 16.06.2017: Last night it was another windows service that stopped working with the same behaviour. Some variants of the windows service are frozen and some are still working. But this time you cannot see that the mentioned DLLs were unloaded while restarting the service. Maybe the first suspicion about the unloaded DLLs does not help for further diagnostics. One interesting fact: This service stopped working at the same time as the first service. Maybe there is a problem with the VM backups or something equivalent? I guess there is a regular task that is causing the problem. Do you have any hints?

Edit 19.06.2017: I guess we have found something interesting. The freezing services all have one .Net component in common: a filesystemwatcher. This has never been a problem in the past because we extended the .Net-filesystemwatcher with a self-reconnecting feature. The fileserver, which contains the path that is relevant for our filesystemwatcher, is backed up every night. Our filesystemwatcher reconnect feature checks every second, if this network path is unavailable. If so, the filesystemwatcher is reconnected after the path is available again. The hosting server, which manages all our virtual servers, has been upgraded a few days ago. So we have the following suspicion: Let's assume our windows service checks the network path at time t_1000 and t_2000. The virtual server backup disconnects the virtual file server, which contains the network path monitored by the filesystemwatcher, at time t_1200 and reconnects the path at t_1500. In this case our reconnect feature cannot work properly, because at t_1000 and t_2000 the network path was available. The filesystemwatcher nevertheless lost his connection and does not react to incoming files in the mentioned network path. This has not been a problem before, because the reconnect triggered by our backup software took some milliseconds longer due to the slower hardware used in this server. So our reconnect feature worked fine.

So what can we do?

• Option 1: Contact the vendor of our backup software. Maybe this is a bug in his software?
• Option 2: Never ever use a filesystemwatcher again, because we are always working on network paths.
• Option 3: Maybe there is a way to optimize the filesystemwatcher even more? Can a filesystemwatcher catch any events like this, so we don't have to use our reconnect feature, which is working with a timer? What do you think?

Many thanks in advance.