Good day all,
I managed to remove BO Explorer access for everyone by, literally, removing the BO group 'Everyone' as principals on the Explorer application in the CMC Applications area... ...on my production system...
Image may be NSFW.
Clik here to view.
Image may be NSFW.
Clik here to view.
The nett effect of this brainiac move is that absolutely no one has access to the Explorer, not even in the CMC Applications area. I tried to override the built-in security of not being able to remove a user from the Everyone group (if I can manage to do this then I'm sure I'll be home free) but it would not allow me to do this.
I found an OSS Note (1640881) that explains how to use the Java SDK to remove a user from a group. This piece of code is meant for BOBJ XI 3.1 so I hope it'll work. The code also does a manual check if to see if it is removing someone from the Everyone group then it halts so I'm hoping I've hit the jackpot with this code because I will just comment out the check for the Everyone group.
So, my questions - Does anyone know of another way to get an admin user to have access to the Explorer App in the CMC again? Or any tips on how to get this code to do the job for me? I've started compiling but it's missing the library files and I don't know where to find these - I can only find the .NET SDK download on the SMP.
PS BO BIP 4.0 SP5 Patch 17 (I think)
