Revoke select on "all_source" view from the public ?

Fellow DBA's
There is a security audit going on at my client's site and one of the requirements is to
revoke select on "*all_source*" view from the public .
1) Can Someone point out if there are any immediate ramifications of doing this (As in will the application
get affected in any way.. I don't assume so ) I scoured metalink but couldn't find any docs which cautions agaist it .
2) Now there are over 150 databases (8i,9i,10g) with several different development teams . How do i go about ensuring that the developers are not affected by this change . DO I need to create a seperate view based on this one for seperate teams .. ?
I am kinda new to this and any pointers are much appreciated
Regards,
SV

user8636840 wrote:
Thanks for your instant response guys ...I agree with u all in thats it's not the smartest thing to do .
I will try and explain it to the them ..but these big firm auditors tend to be rather thickheaded
In the event that I am still forced to do it ....do u have any pointers on the best way to go about this .
Any pros and cons from past experiences or link to some useful material would be great.
There are a number of "security hints" type papers on the intertubes, generally they say things like:
SQL> REVOKE SELECT ON ALL_SOURCE from PUBLIC;
SQL> CREATE ROLE VIEW_CODE_ROLE;
SQL> GRANT SELECT ON ALL_SOURCE to VIEW_CODE_ROLE;
SQL> GRANT EXECUTE ANY PROCEDURE to VIEW_CODE_ROLE;
The general idea is to protect against random bad guys figuring out various things from unwrapped code. Doesn't do anything to protect against inside jobs, but there's other things the auditors care about for that. Of course, this particular solution I got from one of those papers on the intertubes gives a major security hole to newbie developers with the execute any procedure, whatcha gonna do? They gotta see their own code, right?

Similar Messages

How to create a normal view from the RDF sparql query?

Hi,
I am trying to create a view from the below query.
select id, name from table(SEM_MATCH('
(?id rdf:type dm:Conceptual_SMA_Information_Group)
(?id dm:hasConceptualSmaInformationGroupName ?name)',
SEM_Models('nyc_sma_curr'), null,
SEM_ALIASES(SEM_ALIAS('dm','http://www.cdse.com/sbip/dwh/mdm/data_modeling#')), null))
order by name,id;
I am trying the below syntax to create a viewa but its giving the error and m unable to create view.
create view Information_Group as
select id, name from table(SEM_MATCH('
(?id rdf:type dm:Conceptual_SMA_Information_Group)
(?id dm:hasConceptualSmaInformationGroupName ?name)',
SEM_Models('nyc_sma_curr'), null,
SEM_ALIASES(SEM_ALIAS('dm','http://www.cdse.com/sbip/dwh/mdm/data_modeling#')), null))
order by name,id;
Error: ORA-00600: internal error code, arguments: [17046], [0x46E62D720], [0x46F2485F0], [1], [], [], [], [], [], [], [], []
Please help me to create a view.
Let me know if you need more details.
Regards,
Kavitha.

Hi,
This is a known issue in 11.1 (RDBMS Bug 6688356).
Please contact Oracle Support to get the patch for this bug. Alternatively, you can upgrade to release 11.2.
Thanks,
Matt

After I've heard an audiobook downloaded from the public library, how do I delete it from the Shuffle? When I plug it into my computer, I get a screen showing how much space is left on the Shuffle but no list of files that I can delete. WRA

After I've heard an audiobook downloaded from the public library, how do I delete it from the Shuffle to make room for other audiobooks? When I plug it into my computer, I get a screen showing how much space is left on the Shuffle but no list of files that I can delete. These books, incidentally do not appear in the ITunes screen. WRA

Select the iPod shuffle in the iTunes sidebar (under DEVICES). If this is a current 4th (or 3rd) gen iPod shuffle, you should be able to see the contents of the shuffle by type, intented under the shuffle's name (still in the sidebar). Select Music or Audiobooks (not sure where those items from the library will be listed). The items will be listed to the right, for each category. Find the items, select, and delete.
It's on page 20 of the manual
http://manuals.info.apple.com/en_US/iPod_shuffle_4thgen_User_Guide.pdf
NOTE: If this is an 1st or 2nd gen iPod shuffle, select the iPod shuffle in the iTunes sidebar (under DEVICES). Over to the right, go to the Contents tab, where the items are listed. Select and delete them from this list.
I find it more convenient to make a playlist in iTunes with things I want to put on the shuffle. I then set up automatic syncing (or use autofill) to have iTunes load the shuffle from that playlist, automatically.

TS1389 I am trying to authorise a new computer. The Apple instructions are to select Authorise this computer from the itunes store menu. I can't find this in any menu. Can you please help? How do I authorise my computer?

I am trying to authorise a new computer. Apple's instructions are to select "Authorise this computer" from the itunes store menu. I can't find this in any menu. Can you please help? How do I authorise my computer?

Authorization and Deauthorization
Macs: iTunes Store- About authorization and deauthorization.
Windows: How to Authorize or Deauthorize iTunes | PCWorld.
In iTunes you use the Authorize This Computer or De-authorize This Computer option under the Store menu in iTunes' menubar. For Windows use the ALT-S keys to access it. Or turn on Windows 7 and 8 iTunes menus: iTunes- Turning on iTunes menus in Windows 8 and 7.
More On De-authorizing Computers (contributed by user John Galt)
You can de-authorize individual computers, but only by using those computers. The only other option is to "de-authorize all" from your iTunes account.
1. Open iTunes on a computer
2. From the Store menu, select "View my Account..."
3. Sign in with your Apple ID and password.
4. Under "Computer Authorizations" select "De-authorize All".
5. Authorize each computer you still have, as you may require.
You may only do this once per year.
After you "de-authorize all" your authorized computers, re-authorize each one as required.
If you have de-authorized all computers and need to do it again, but your year has not elapsed, then contact: Apple - Support - iTunes - Contact Us.

"Select music to play from the music library" error mess

This is an error that I am just after spotting today. When I navigate through my music collection and through the various options?on the Creative Vision M 30GB the message "Select music to play from the music library" appears for a few seconds on screen.
Can figure out what is causing the error, I am using just over 50% of the devices capacity. The problem suggests that the device is having problems keeping up with my selections. Is this a known bug, is there a software undate available for the device?Michael.Message Edited by Mike55 on 08-6-200709:09 AM

Thanks for the reply, but I just reset the setting and the massage didn't come up anymore.

If you right-click an image you can select to "Block Images" from the site, but how do you reverse this choice?

If you right-click an image on a web page you can select to
"Block Images from [the url of the site]".
This works well, particularly to make the page printer-friendly, but how do you reverse this choice to see the images again?

You can see all permissions for the current page in Tools > Page Info > Permissions
If it is from a different domain then use this:
*A way to see which images are blocked is to click the favicon (Site Identification icon) on the left side of the location bar.
*A click on the "More Information" button will open the Security tab of the "Page Info" window (also accessible via "Tools > Page Info").
*Open the Media tab of the "Page Info" window.
*Select the first image and scroll down though the list with the Down arrow key.
*If an image in the list is grayed and there is a check-mark in the box "Block Images from..." then remove that mark to unblock the images from that domain.

How can I get help for ADE downloads from the public library. I am suddenly getting error messages

How can I get help for ADE downloads from the public library. It worked for years and now I am getting error messages. I cannot find any practical help

If you are trying to open the book on a device, try using the latest DL Reader on Android and iOS
https://play.google.com/store/apps/details?id=com.datalogics.dlreader&hl=en

Protecting/hiding Business Catalyst website from the public and search engines while in development.

How can we protect/hide our Business Catalyst-based website from the public and search engines while we are developing it? It seems like anyone can access it, even though it is not complete.
We are using Dreamweaver to build our website, if that helps. Is there any way to have a test instance of BC that is password protected for development and testing? Thank you for your ideas.

I have something in my room but I do not tell you it is there or where it is or what it does.
How do you know unless I show you?
Do not share your links out, the sitemap is not on till you activate the system.
I have built BC sites for over 5 years and only one case for me of a client posting out an unfinished site got it indexed by google.

How to Create/Modify/Delete a query view from the web template in BI 7.0

All:
In BW 3.5, the Query Selection View web item was introduced for users to create a query view to save the navigational state of a query. This web item was also available to modify and delete an existing query view.
The Query Selection View web item does not exist in BI 7.0. I see the drop down web item can be used to display the query views associated to a query.
Can anyone share how to create,modify,save or delete a query view on the web in BI 7.0
Thanks,
Kumar

Sanjay, we experienced the same issue. Below are a few pieces of information that may be of help: 1-The Save As button on the 0ANALYZER template saves the query to the portal. From Bex Web or Bex Analyzer, you have no access to these saved views. We created a ZANALYZER copy of the 0ANALYZER template and removed the Save As button. 2- If you right mouse click on any item in the query results grid of Bex Web, you get a small menu. Clicking on the menu item Save View will save the view to BI. You do not have the ability to delete the saved views from Bex Web. However, you can delete them from Bex Analyzer. This was not an option for us since most of our users are using Bex Web. 3- On the same menu, clicking on Bookmark, saves the navigation and also opens the Internet Explorer Favorites maintence window. The navigation is saved as an entry into the users Internet Explorer favorites where they can organize and delete their entries. However, deleting the favorite does not delete the entry for the bookmark in BI. The bookmarks are stored in table RSWR_DATA. Program RSWR_BOOKMARK_REORG can be used to manage the saved bookmarks. We are loading RSWR_DATA into a chracteristic so that we can query the information in order to help us manage it. I hope this helps you and others that appear to be struggling with the issue of saved views in Bex Web.

Script to fetch the script of a existing view from the Database

Hi,
How to fetch a existing view's information (SCRIPT) dynamically from the database.
Thanks in advance
Regards,
Mr.R

I did not post to ask this question.
I try on the command line on SQL it prompts the first line of the script. How is the rest of the script?
QL> select dbms_metadata.get_ddl('VIEW','MY_VIEW') from dual;
BMS_METADATA.GET_DDL('VIEW','MY_VIEW')
CREATE OR REPLACE FORCE VIEW "MY_USER"."MY_VIEW" ("USER_ID *<== How to fetch the rest of the script.*

How to make a report to display next 18 months of data with when user select a particular month from the filter in power pivot tabular model.

Hi,
i have a dimension table with month_key having values (201201,201202,201203.......202011,202012) and month name ( Jan 12, feb 12,......NOV 20, Dec 20) and a fact table with columns (month_key ,measure_types, Amount)
My requirement is to create a power pivot report in which when a user select a month from the filter, the report should display the (selected month+18 ) month's data against each type . when JAN 12 is selected ,the jan 2012 +18 = june 2013
, month name should be populated with months till june 2013 only .
i tried creating calculated column"END DATE " in the fact table with dax expression to calculate the 18th monh from the current month as below
month_key END DATE
201201 201306
201202 201307
and thought of filtering the table with month key <= ENDDATE but it is not working as expected. could you please guide me on this ? Is there any time intelligence function that serve the purpose . Iam using excel 2010
..hence could not do any calculation on the report side also. please suggest .
Thanks in advance

Do you need to show the measure calculated for those 18 months as a total on 1 row, or do you need to select a single month and then display on row filters 18 distinct rows?
The first is trivial as driezl has suggested.
The second will require a second calendar table.
I created this example workbook for a coworker who had a similar problem. You will have to use the disconnected table as your filter and pull your related table onto the rows.
Finally, the easiest way to deal with the sort of date arithmetic you need to do is to restructure your date table to have a series of "Sequential" fields. These fields should be the number of units of time since the beginning of your calendar.
For example, consider a calendar starting on January 1, 2010. For January - December 2010, [MonthSequential] = 1, 2, ..., 12. For January - December 2011, [MonthSequential] = 13, 14, ..., 24, and so on, incrementing by 1 for each sequential month in time.
Assuming you have this set up in your date tables (one related to your model - DimDate - and one disconnected - DisconDimDate) your measure would look like this:
18 Month Measure:=
CALCULATE( [Measure]
, FILTER( DimDate
, DimDate[MonthSequential] >= MAX( DisconDimDate[MonthSequential] )
&& DimDate[MonthSequential] <= MAX( DisconDimDate[MonthSequential] ) + 18
Please review this example along with the workbook I have linked above.

How do I select photos in library from the side bar (source) folder?

I have placed photos from the library at different times in a side (source) folder. I now want to delete them. However, they are spread all over the library. If I delete them from the side folder they still remain in library. Is there a way to identify the library photos from the side folder, select and delete them in an easy way, rather than spend hours trying to find them individually?
Thanks, Max

Hi MaxFS,
To delete photos from both an album and the Library
at the same time:
Select the photo/photos in the album
press the Command-Option-Delete keys
this will remove the photo/photos from the library
and all albums it is in.
thanks, very simple, it does the trick. BTW, will the same action work in iTunes?

Best approach to select multiple/all photos from the iOS CameraRoll?

I want to use FlashBuilder 4.5.1 to build a flex mobile photo organizer project that lets me select multiple photos from the iPhone Camera Roll.
I've seen the flash.media.CameraRoll class, but it only seems to provide CameraRoll.browseForImage() that opens a dialog to pick ONE photo.
Has anyone built an app that lets users select multiple photos or select all from the CameraRoll? Can you access the embedded thumbnail DB or do you have to import all the photos into the ApplicationStorageDirectory first? Am I better off writing a native iOS application?
Does flex mobile allow something like this:
// is this a security violation?
var cameraRoll:File = new File('/var/mobile/Media/DCIM');
var photos:Array = [];
var folders:Array = cameraRoll.getDirectoryListing();
for (var i:int=0 ; i<folders.length; i++) {
 var files:Array = folders[i].getDirectoryListing();
 for (var j:int=0 ; j<files.length; j++) {
 var photo:File = files[j];
 photos.push(photo);
// show photos, somehow...
However, this method does not provide access to thumbnails managed by: '/var/mobile/User/Media/Photos/Photo Database'
from: http://stackoverflow.com/questions/6936881/how-do-you-access-the-ios-camera-roll-from-a-fl ex-mobile-project

I paid someone to write a Native iOS app that works ok, but it's hard for me to extend. The "select multiple/all" photos component works fine, but loading the photos into the app sandbox is VERY SLOW, and not properly threaded.
I would like to move my dev to FlexMobile and am willing to contribute my current code if someone wants to take a hack at it. Please feel free to fork https://github.com/mixersoft/odesk-11563930
I'd help, but I only know scripting languages.
m.

Selecting Invoice (OINV) records from the current financial year

Hi Everyone,
I would like to select Invoices (OINV) from the current Financial Year. I am located in Australia and our financial year is measured from the 1st of July to the 30th of June.
Here is a pseudo - code sample -
SELECT T1.DocEntry, T1.DocNum, T1.DocDate
FROM AU.dbo.OINV T1
WHERE "CURRENT FINANCIAL YEAR"
Notice above that I would like to replace "CURRENT FINANCIAL YEAR" with an SQL code snippet that selects all dates from the beginning of the financial year (1/07/xx) to the current date.
Any help here will be greatly appreciated.
Kind Regards,
David

Hi Everyone,
Here is a code snippet that permits returning only values from the current financial year -
DECLARE @day nvarchar(2) = DAY(GETDATE())
DECLARE @currentMonthAndDay INT = CAST(CAST(MONTH(GETDATE()) as nvarchar(2)) + (REPLICATE('0', 2 - LEN(@day)) + @day) as int)
DECLARE @StartOfFinancialYear DATETIME
SET @StartOfFinancialYear = CAST(YEAR(GETDATE()) - CASE WHEN @currentMonthAndDay<701 then 1 else 0 end as nvarchar(max)) + '0701'
SELECT *
FROM AU.dbo.OINV T0
WHERE T0.DocDate >= @StartOfFinancialYear
AND T0.DocDate < DATEADD(yy, 1, @StartOfFinancialYear)
Many thanks to Faheem for providing the answer to returning only results from the current financial year, in this thread: http://social.msdn.microsoft.com/Forums/sqlserver/en-US/2edbe630-faca-4f94-a014-04f5a832f81d/returning-results-that-fall-within-the-current-financial-year?forum=transactsql
Kind Regards,
David

Exclude Server in Maintenance View from the Alert View?

Hello,
I don't know if my eyes are crossing but I would like to create a view excluding the server in maintenance mode. So far I do not see an easy way to do it... except maybe through a grouping process under Authoring!!!
I would like an alert views with only the active servers. If a server has a previous alert and I pass it in Maintenance Mode it remains in the view I would like to exclude it.
Any idea?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

I agree with Suresh and Gautam. One addition to this is that you have to ensure that you have procedures in place that requires to put an object into maintenance mode
BEFORE you do any maintenance. That saves you from a lot of unwanted alerts. What you see quite often is that users will put it in maintenance mode after the first alerts arrive. Teach your users to do it before and also make sure that this
is added to your RFC procedure and manuals. If you have this step added to runbooks you can reduce the amount of false alerts.
Hello Ruud
The training was done. The main issue we are facing is for upgrade/fix etc... the alert requesting the fix or the upgrade is often pending so the idea from Suresh is excellent
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Revoke select on "all_source" view from the public ?

Similar Messages

Maybe you are looking for