How to revoke access of PUBLIC permissioned objects for one DB User.

Hi
I am using 10.2.0.4.0 , and i have a production1 schema and production2 schema in one Database.
Some of the objects of Production1 schema having PUBLIC permissions.
Eventhough some of the Production1 schema objects are PUBLIC production2 schema should not able access.
Is it possible, if possible can you help me.
Thanks in Advance.

To add to what others have already posted consider replacing the grants to public with grants to a role and grant that role to all users except the username in question and future users who fall into the same category as far as what you want them to see.
If you cannot change the public grants then you basically have to live with the target user having access to the objects.
IF public synonyms are used to access the objects then in the target user account you could potentially create a set of private synonyms that point to an empty set of tables by the same name. In the case of where access is via an application under the target user username this would mast the tables of interest; however, if the user has direct access to Oracle it would not stop them from accessing the objects using the owner.table_name format as this would bypass using the private or public synonyms.
Generally speaking all object access privileges should be granted to user created roles and usernames should be granted only those roles necessary for them to perform their job related tasks.
HTH -- Mark D Powell --

Similar Messages

  • How to find out the Number range object for Incident number

    How to find out the Number range object for Incident number ?
    CCIHT_IAL-IALID
    regards,
    lavanya

    HI, an example.
    data: vl_num type i,
          vl_char(6) type c,
          vl_qty type INRI-QUANTITY,
          vl_rc type INRI-RETURNCODE.
    CALL FUNCTION 'NUMBER_GET_NEXT'
      EXPORTING
        NR_RANGE_NR                   = '01'
        OBJECT                        = 'ZRG0000001'
       QUANTITY                       = '1'
      SUBOBJECT                     = ' '
      TOYEAR                        = '0000'
      IGNORE_BUFFER                 = ' '
    IMPORTING
       NUMBER                        = vl_num
       QUANTITY                      = vl_qty
       RETURNCODE                    = vl_rc
    EXCEPTIONS
       INTERVAL_NOT_FOUND            = 1
       NUMBER_RANGE_NOT_INTERN       = 2
       OBJECT_NOT_FOUND              = 3
       QUANTITY_IS_0                 = 4
       QUANTITY_IS_NOT_1             = 5
       INTERVAL_OVERFLOW             = 6
       BUFFER_OVERFLOW               = 7
       OTHERS                        = 8
    IF SY-SUBRC <> 0.
    MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
            WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
    ENDIF.
    vl_char = vl_num.
    write vl_char.
    Regard

  • How to provide access to  v$tables in oracle 10g to user

    Hi,
    can any one suggest me how to provide access to v$tables in oracle 10g to user .
    its requried for auditor.
    PLease help me.
    regards

    user12009184 wrote:
    HI have to provide access to all V$ tables
    it required for configuration of new tool.
    ThanksYou can grant it the select catalog role to the user. It should provide all the required access to the general v$* & dba_* views.
    GRANT SELECT_CATALOG_ROLE TO USER;
    Let me know if this helps.
    Regards,
    Rizwan

  • How can I export a list of events for one of many calendars - e.g. "sailing" to use in Excel

    How can I export a list of events for one of many calendars - e.g. "sailing" to use in Excel?

    See this thread here
    Display number of emails by sender

  • Is there a report showing all the DDL objects for one APP?

    Hi,
    Is there a report showing all the DDL objects for one APP?
    I need to move an app to my workspace. The workspace I need to move it from has approx 20 applications in it, thus all the tables, procedures, etc are too many.
    What way is the easiest?
    I've looked at exporting the DDL and the app. and look to see what the app needs. But it has many pages.
    Thank you, BillC

    Hello Bill,
    You might find the report in the following location to be helpful:
    Home>Application Builder>Application XXX>Application Reports>Shared Components>Application Database Object Dependencies
    Regards,
    Arie.

  • How to reset all Internet Explorer 8 settings for a different user profile?

    Sometimes users on locked down PCs that need their IE settings reset to resolved issues such as improper/old cached credentials stored in the browser after a password change etc.  These issues can be resolved by opening
    Internet Options, Advanced tab, Reset, Delete All, Reset.
    The users cannot do this because the Advanced Tab is hidden by policy.  If an administrator logs in with a different account, of course, anything they change is in their profile and not the user's profile.
    Is there some way for an administrator user to log in and access Internet Control Panel settings for a different user's Internet Options so they can reset the browser for a limited user?
    We need a more streamlined way to do this instead of needing to either blow away the user's entire Windows profile or else go through the convoluted process of getting the GPO admins to undo the group policy for one user to unhide the tab, have the help
    desk reset the browser for the user and then have the GPO admins reapply the original policy.

    You can try the following script
    Reset Internet Explorer all Setting to default using PowerShell Script
    http://gallery.technet.microsoft.com/scriptcenter/Reset-Internet-Explorer-20f838e7
    but this script still launches an interactive interface, you can ask in this form to improve the script to achieve an totally unattended process.
    The Official Scripting Guys Forum!
    http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
    You can create a task schedule to trigger the process. When computer starts or
     IE open , the script launches itself automatically.
    Schedule a task
    http://windows.microsoft.com/en-au/windows/schedule-task#1TC=windows-7
    Regards
    Yolanda
    TechNet Community Support

  • Maximum no'of Objects for one class

    Hello friends
    Please, tell me....Maximum no'of Obects for One Java class.
    Thanks & Regards
    S.Rajakrishna

    Is there any limit of creating the objects for One class?Instantiated objects go into the heap. There is only one heap for the whole JVM. There is no correlation between objects in the heap and the individual class files.
    100,000 objects may or may not fit into the heap. In general they probably will. If you don't, then yes, you'll get an Out Of Memory exception.
    Regardless there is no excuse for loading 100,000 objects just to render a JSP! You don't imagine your user is going read all of them do you? Restrict them to the number of objects that the user is actually going to be able to handle at any given time.
    You can do this by putting WHERE clauses on the hibernate query, and/or by setting limits (setFirstResult and setMaxResult) on the Query object before listing it.

  • How to revoke access?

    I have a problem that may be trivial, but I could not find a simple solution.
    I'm using the WRT120N router.
    I've granted my neighbor access to my wireless network (by pressing the magic button Wi-Fi Protected, while he tried to connect to it), to copy some files over the local network. Everything worked according to plan, but now I have a problem because I have no idea how to revoke his access to my network.
    Could you help me with this - how to revoke the permission to  access to the router?
    Thanks in advance
    M

    It seems to be I was happy to fast. For some reasons "wireless mac filter" does not work on my router.
    Adding any MAC address to the list of prevent pcs do just nothing - I've tried with my own MAC address and I was still able to access the network, although I belive that it should block my access. I've double checked the address with "dhcp reservation tab" and ipconfig command, so for sure it was valid
    From the other hand when I selected "Permit" it blocked everything, including my PC which MAC address was on the list.
    Could you tell me if this strange behaviour could be cosed by some misconfiguration in other tabs, or should I just update the software version (curently I'm using v1.0.01)?
    Thanks anyway
    M

  • How to regain access to public folder items

    Hi All,
    We have a few public folder items (mainly calendars) for which i (the admin) have no(or limited) access to.
    In outlook 2010 if i go to the properties of the public calendar i can only see an entry for Administrators for which has the access of only "Author"
    If i log into the exchange server powerscript shell and try and run
    Get-PublicFolderClientPermission -Identity \"<Item name>"
    I get the following error:
    No existing 'PublicFolderEntry' matches the following Identity: '\<Item name>'. Make sure that you specif
    ied the correct 'PublicFolderEntry' Identity and that you have the necessary permissions to view 'PublicFolderEntry'.
        + CategoryInfo          : NotSpecified: (0:Int32) [Get-PublicFolderClientPermission], MapiObjectNotFoundException
        + FullyQualifiedErrorId : C8510C4,Microsoft.Exchange.Management.MapiTasks.GetPublicFolderClientPermission
    These are items have had existed in exchange since before it started and from Exchange 2003 to now Exchange 2010.
    Is there a way i can force the Administrator to have Owner rights on these items again?
    Thanks

    Ok... for all those other unfortunate souls out there who have no answer... here's the deal... The "Failed to Modify MAPI.NET Table" error is due to a problem with your DACL (permissions) table on the public folder(s). But, Exchange 2010 doesn't provide
    any utilities to correct this! exFolders replaces most PVDavAdmin functions but is does not have the "Fix DACL" option built in.
    After all my research and troubleshooting I discovered that the DACL issue was because I had entered explict permissions for the built-in Administrators group. This was resulting in the following error in event viewer: "The mailbox '' contains a folder <NAME
    OF MY PUBLIC FOLDER> with a security descriptor that violates the canonical format."
    Since I could not remove the existing public folders OR modify their permissions, but could still read their content, I copied all the content over to my mailbox. I then wanted to start completely fresh and created a new public folder store following the
    below steps:
    1. Dismount public folder database
    2. Move public folder database file and log (as a backup, not going to reuse it though)
    3. Mount public folder database (creates a new blank public folder database)
    *** NOTE: I could have probably just continued with the new blank public folder database, but I wanted to clear out all the old stuff and be sure it was all new and clean. So I continued through the following steps.
    4. Delete public folder database
    5. Delete database file and log files
    6. Opened ADSIEdit and deleted the existing "Folder Hierarchies" object from this location: Configuration\Services\Microsoft Exchange\<organization name>\Administrative groups
    *** NOTE: The next two steps are optional, as Exchange will do them for you when you create a new public folder database. BUT, exchange does NOT correctly assign the msExchPublicFolderTreeContainer class to the Folder Hierarchies object! It just makes it a
    container. So I opted to manually create it to force it to use the right class
    7. Recreated the "Folder Hierarchies" object in the same location (class is msExchPublicFolderTreeContainer)
    8. Create "Public Folders" object under "Folder Hierarchies" (class is msExchPFTree and attribute msExchPFTreeType MUST be set to 1)
    9. Went back to EMC, Organization Configuration, Mailbox, Database Management, and right clicked to create a new public folder database.
    10. Restart Information Store Service
    Once I had done all that I opened up outlook and created a new public folder. I then highlighted all the items in my mailbox that I had copied out of the original folder and copied them into this new public folder. As long as I do not add public folder permissions
    for the built-in Administrators group, then I am able to manage public folder permissions without any errors. I haven't tested to see if the same error occurs for other built-in security groups.

  • How does Apex access and manage db objects in other schemas?

    I'm looking for a description of how Apex accesses and manages database objects in other schemas.
    I'm sure I've seen such a description somewhere earlier but am unable to find it again...

    Hi Rene,
    When you are connected to sqlworkshop, it is basically connected to the sceham owner of the workspace. If you execute the query
    select sys_context( 'userenv', 'current_schema' ), user,  username from user_users;you would see the schema and user(currently connected) and schema owner through which you have logged in. The user will have all the privileges granted to schema owner. So basically you get connected through APEX_PUBLIC_USER and it has all the privileges of the schema owner.
    In order to run scripts in another schema you would need grants on other schema same like you are connected to user A through sqlplus and wants to create objects in schema B. For example lets say you want to create a table in schema B and you have create table privileges in scehma B , you can execute command create table B.emp as select * from A.emp;
    I hope this answers your question.
    Regards,
    Manish

  • Using public static object for locking thread shared resources

    Lets Consider the example,
    I have two classes
    1.  Main_Reader -- Read from file
    public  class Main_Reader
         public static object tloc=new object();
           public void Readfile(object mydocpath1)
               lock (tloc)
                   string mydocpath = (string)mydocpath1;
                   StringBuilder sb = new StringBuilder();
                   using (StreamReader sr = new StreamReader(mydocpath))
                       String line;
                       // Read and display lines from the file until the end of 
                       // the file is reached.
                       while ((line = sr.ReadLine()) != null)
                           sb.AppendLine(line);
                   string allines = sb.ToString();
    2. MainWriter -- Write the file
    public  class MainWriter
          public void Writefile(object mydocpath1)
              lock (Main_Reader.tloc)
                  string mydocpath = (string)mydocpath1;
                  // Compose a string that consists of three lines.
                  string lines = "First line.\r\nSecond line.\r\nThird line.";
                  // Write the string to a file.
                  System.IO.StreamWriter file = new System.IO.StreamWriter(mydocpath);
                  file.WriteLine(lines);
                  file.Close();
                  Thread.Sleep(10000);
    In main have instatiated two function with two threads.
     public string mydocpath = "E:\\testlist.txt";  //Here mydocpath is shared resorces
             MainWriter mwr=new MainWriter();
             Writefile wrt=new Writefile();
               private void button1_Click(object sender, EventArgs e)
                Thread t2 = new Thread(new ParameterizedThreadStart(wrt.Writefile));
                t2.Start(mydocpath);
                Thread t1 = new Thread(new ParameterizedThreadStart(mrw.Readfile));
                t1.Start(mydocpath);
                MessageBox.Show("Read kick off----------");
    For making this shared resource thread safe, i am using  a public static field,
      public static object tloc=new object();   in class Main_Reader
    My Question is ,is it a good approach.
    Because i read in one of msdn forums, "avoid locking on a public type"
    Is any other approach for making this thread safe.

    Hi ,
    Since they are easily accessed by all threads, thus you need to apply any kind of synchronization (via locks, signals, mutex, etc).
    Mutex:https://msdn.microsoft.com/en-us/library/system.threading.mutex(v=vs.110).aspx
    Thread signaling basics:http://stackoverflow.com/questions/2696052/thread-signaling-basics
    Best regards,
    Kristin
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How do I access Camera Raw Plug-in for PSE 11?

    I can't figure out how to access the Camera Raw plug-in for Photoshop Elements 11 ( on a Macbook Pro OSX.)  I recently installed  PSE 11, and when I select "about plug-in" within the app, it brings up a box that shows version 7.1.0.354.  Does that mean it's already installed?  If so, how do I access it to edit a photo? In past PSE versions I simply chose "Open file / as Camera Raw" but that option doesn't come up.

    In the File Open dialog ensure you have All Readable Documents selected for Enable.
    Click on the file you want to open
    Change the Format to Camera Raw

  • How to delete all objects for one user from SE80

    Hi all,
    If i want to delete the customer objects defined in the customer space Y or Z from SE80. Object of one user is defined in one package, if i want to delete the pakcage it says, it contain the subobject. So can anybody help me how to delete the customer objects from SE80.
    Your response will be highly rewared.
    Tahnks,
    Salahuddin.

    hi
    good
    i think here you want to delege the development class, if you want to delete the particular development class you have to go for se09 where after selecting the particular development class you can select the delete button.
    thanks
    mrutyun

  • How to change original source system of objects at one time

    Hi, experts !
    I installed extra devlopment server using system copy of orignal
    delveopment system.
    We have planed that new objects applied to orginal server after developing
    finished on extra devlopement server.
    The problem is we can not modify or add old objects for specific
    package because orignal source system is different
    and I know this is SAP policy.
    Of course original source server can be changeed on t-code SE03 or
    function module TRINT_TADIR_MODIFY
    but it should be applied to every objects. This is big job to BC admin.
    Is there any solution to possible it at one time?
    Best Regards

    You can transport all relevant packages from the old to the new development box including a change of the original system using a special transport request of type "relocation of complete package". Check with your system administrators.
    Please close your similar post here:
    How to change original system SID to objects by batch?
    Thomas

  • HT1920 How do I access my security questions & answers for my apple account?

    How so I access my security questions and answers on my apple account?

    You need to ask Apple to reset your security questions; ways of contacting them include phoning AppleCare and asking for the Account Security team, clicking here and picking a method for your country, and filling out and submitting this form.
    They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
    (104176)

Maybe you are looking for

  • G/L Account Posting Issue

    Hi All, I posted documents to one G/L account (credit) and then tried clearing them. I got an error because I had not checked 'Open Item Management' in G/L account settings. So no clearing docs were created. I reversed all the docs which I had posted

  • Itunes says "update complete" but "do not disconnect" never goes away!

    So, I wait and wait and "do not disconnect" on my ipod never goes away. A little history: I got my nano a few weeks ago, put a few songs on - everything worked fine. Then, I got a new computer. Since I only put a few songs on, I didnt mind starting f

  • How to use the VBS MoveFolder methode in DIAdem without any error message?

    Hi, I want to move folders with the VBS MoveFolder methode, but in DIAdem I run in problems. When I use the following comman    fso.MoveFolder(project_folder & test_folder, project_folder & test_folder & "\" & test_ & " " & test_count)  I get error m

  • How do i get a Base code (Material) from a description through BOM?

    Hi, the right base code(material) for the production order '68647' is 100827 descriotion 'PIPE BASIC' . my requirement is i have an production order and relevent plant, how do i get a basecode ? from my previous finding i read that All BOMs will have

  • Travel Management - Cutover mileage

    We converting one of our Companies to SAP.  We will be using travel management for expenses, and employees are entitled to increased rates when they hit a certain mileage. As we will be going live 10 months into the tax year, we need to cut over the