User Acess

All,
Is there a way that we can grant the select acess on oracle 9i table to the user with column(s) restriction?
I have to restict the sensitive data access from some users. Please advice.

Prior to 10g, you cannot hide individual columns using VPD. Assuming you are stuck on 9i (note that specifying the actual version rather than the marketing label may help because there may be differences between 9.0.1.x and 9.2.0.x), your only realistic option would be views.
I'm not sure what you mean when you say
"If i create a view with out thse columns that doesn't get updated by my daily imports.in order to do that , i need to do lot of scripting changes which is a big pain"
Your batch loads should be able to continue to write directly to the base table and should, presumably, be able to see all the columns. It is only users that need to query the data and see a subset of columns that would need to run their queries through a view. And setting up appropriate synonyms may limit or eliminate the need to make code changes, assuming your code doesn't hard-code schema names.
Justin

Similar Messages

  • Best practice standard User Acess Test for WIN2012 AD

    What is the Best practice standard User Acess Test  for WIN2012 AD

    Hello,
    as before, add a computer to the domain and log on with a domain user account to the computer.
    You should be able from the client machine to open the sharedfolders on the DCseither with:
    \\DCName\sysvol
    \\DCName\netlogonor \\NetBiosDomainName\sysvol
    \\NetBiosDomainName\netlogon
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://blogs.msmvps.com/MWeber
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    Twitter:  

  • SAP Security: how can i findout any changes for user acess

    hi ,
    How can i check the changes in user access for some transactions?
    i have tried with S_BCE_68001439 transction, but i didn't find any changes in the respective roles which were assigned to the particular user ID.
    is there any other way  to find out changes in user acess?
    Please respond at the earliest. Thanks in advance.
    Ramesh.

    Ramesh,
    You should first look at what as changed with the user master record, you can check this by going to SU01, enter the User ID and goto Information Menu and Change Documents for users, you can then specify no start date and any other criteria you want to see changes to the user master.
    Then if nothing has changed here, or as an extra check you can goto PFCG, open the Role for display and goto Utilities Menu and Display Changes. You can then do the same as before and specify no start date with other criteria to find changes to any Role the user has.
    Hope this helps.
    Regards
    Ashley

  • Weblogic EM Users Acess

    Hi ,
    Is it possible to create a user for Weblogic EM and restrict the user to acess only Business Intelligence components.
    for activities like upload RPD and Restart the OBIEE services.
    he must not be able to change any security settings in both EM and Console.
    Please help me

    user12078402 wrote:
    Hello,
    Thanks for your reply.
    I have installed OBIEE 11.1.1.6.2 on llinux.
    can you please help how log in to Enterprise Manager Grid Control
    when i am using URL http://hostname:7777/em ...it dosnt open any page
    and http://hostname:7001/em
    is taking me to weblogic Enterprise Manager.
    Please help me.It is a seperate tool. Refer to this link for installation guide: http://docs.oracle.com/cd/B16240_01/doc/em.102/e10953/installing_em.htm

  • Oracle Retail Allocations - User Acess

    Hi,
    I'm having trouble finding information about the diference between a Administrator User or a User User (you can define a user as being Administrator (A) or User (U)).
    I've search in all the documentation about Orallocs and the only thing that I found was that DAS controls the definition of this users, and the privileges that each have, but only for the DAS application.
    Can you help me with this issue? What's the difference for the Orallocs aplication when you are a defined as a 'A' or 'U' user. (This definition appears in the ALC_USERS table).
    Regards,

    This is a Documaker community forum. Perhaps you should be posting your question in one of the retail application forums. You can search for Oracle community forums as shown below.

  • Trigger for blocking user using third party tool !

    Dear Friends ,
    I have to block the users from using sqlplus, TOAD, PLsldev etc (Except SYSTEM user) from client end using the below trigger :
    create or replace trigger check_logon
    after logon on database
    declare
    cursor c_check is
    select
    sys_context('userenv','session_user')
    username,
    s.module,
    s.program
    from v$session s
    where
    sys_context('userenv','sessionid')=s.audsid;
    lv_check c_check%rowtype;
    begin
    open c_check;
    fetch c_check into lv_check;
    if lv_check.username in ('SYSTEM')
    then
    null;
    elsif upper(lv_check.module) like
    ('%SQL*PLUS%') or
    upper(lv_check.program) like
    ('%SQLPLUS%')  or
    upper(lv_check.module) like
    ('%T.O.A.D%') or
    upper(lv_check.program) like
    ('%TOAD%')    or
    upper(lv_check.program) like
    ('%PLSQLDEV%')    or
    upper(lv_check.program) like
    ('%BUSOBJ%')    or
    upper(lv_check.program) like
    ('%EXCEL%')
    then
    close c_check;
    raise_application_error(-
    20100,'Banned! Contact with Database Admin!');
    end if;
    close c_check;
    end;
    It works fine all normal user cannot access the database using above third party tools .
    But the problem is , user with DBA privileges can access the database with generating an trace file . Is there any way to restrict DBA Privileged user ? or is there any mechanism to create a log/trace file so that If there any  DBA Privilege user acess to the Database , then we can get the information from that specified log/trace file ? 
    Waiting your kind reply ... ...

    Hi,
    If the DBA users has the DBA role granted to them so they will by passes the logon trigger. For example, the SYSTEM user has the DBA role and the DBA role has the ADMINISTER DATABASE TRIGGER privilege. The ADMINISTER DATABASE TRIGGER by pass the logon trigger. If you want to restrict the access to a DBA user, then you need to revoke the ADMINISTER DATABASE TRIGGER privilege from the DBA role or grant individual privileges except the ADMINISTER DATABASE TRIGGER privilege to the DBA users.
    Cheers
    Legatti

  • Settings at User Level

    Hi
    I need to set the F4 Help to Dialog(Modal) for each of the Iview from Menu > Help > Settings option from every Iview. Now I have plenty of users acessing such kind of Iviews. How do I make this setting common to all users and all Iview also ?
    Murali.

    hi
    its depends on which setting u want default
    like u can default plant and other field defult in PO using default values button in PO only
    then u can default some fields using parameter ID and setting the default value for it in Su01
    be clear on which field s u need to be user specific default

  • Multiple user on my Mac?

    Before I upgraded (if you'd call it an upgrade) to Mavericks I was using Mountain Lion. I had 2 users: one was called "Main User" and the other was called "Public". My main user acess was password protected with all my personal files on it.
    I kept my iTunes library in Macintosh HD>Users>Shared
    This allowed me to leave my Mac in the "Public" user whenever friends came over, so they could play with my iTunes without having access to my files.
    Since moving to Mavericks I can not get a my second user ("Public") to access the shared folders where my iTunes library is stored.
    I have checked all the sharing settings and they seem ok. But when I try to access my itunes library I get a message saying the library file is locked.
    Any ideas welcomed...?

    Do a Get Info (command - I) on the iTunes library, click the padlock to unlock, and change 'everyone' to 'read/write' or 'read'. This is my iTunes library which also is in Shared.

  • Transaction codes executable for user

    Hi
    I want a function module which says whether a user acess to particular transaction code.
    I am using this FM, but it says the user has authorization to a particular transaction code although he/she is not having access to that transaction
    SUSR_AUTHORITY_CHECK_SIMULATE
      CALL FUNCTION 'SUSR_AUTHORITY_CHECK_SIMULATE'
                 EXPORTING
                      user_name       = usr21-bname
                      object          = 'S_TCODE'
                      field1          = 'TCD'
                      val1            = lv_tcode_val     ( transaction is ME21N)
                 IMPORTING
                      sy_subrc        = lv_rc
                 EXCEPTIONS
                      not_authorized  = 1
                      user_not_exists = 2
                      internal_error  = 3
                      OTHERS          = 4.
    can anybody tell how to handle this situation?

    Hello Folks,
    Thank you all for your answers.... I got it.
    Actually I copied that code from 4.6c to 4.7 and making some changes.
    The function module which I am using is
    'SUSR_AUTHORITY_CHECK_SIMULATE'   and in 4.7 SAP has given additional exporting parameter which is missing in 4.6c
    The parameter is   "dummies" and you have pass  "0000" to it and it works as expected.
    I got the info from OSS notes.
    Thankyou all for your time.
    Thanks,
    Krishna

  • History of activities by users on portal?

    Hi,
    How do we come to know about the activities performed by users on portal?
    Like which users has assigned which ivew page. Assigned which role etc...
    Regards,
    Anagha

    Hi,
    Have you checked the portal activity report iview.
    Using this iview you can display the number users logged on , most active users,  number users acesses a particular iview/page with in a specific period of time.
    Check the below help link also
    About portal activity report
    http://help.sap.com/saphelp_nw04s/helpdata/en/58/728ea01cf64fff996b827f2a06f9b1/frameset.htm
    For creating portal activity report iview
    http://help.sap.com/saphelp_nw04s/helpdata/en/fb/144120ea5b4e9c9385d493a578d6c9/frameset.htm
    Raghu

  • Exhaustive List of Default Users

    Can anyone tell me where I can locate an exhaustive list of default user ids for oracle 8 and 9i databases? We are going thru an audit and need to verify that all defaults users are locked and/or expired.

    Its not very clear, what do u mean when u say Default Users. U can get an exhaustive list of user with user_id using ALL_USERS or DBA_USERS.
    If u want to stop normal user acess, and want that only DBA users can acess the database for a certain period of time, then u can start the Database in RESTRICTED SESSION mode.
    If u want to know users by Roles granted to them, u can use DBA_ROLE_PRIVS view. Like, if u want to know users who are having DBA roles, u can check this:
    select * from DBA_ROLE_PRIVS where GRANTED_ROLE like '%DBA%';
    Regards,
    Sayan

  • Solution Manager Service Desk authorization

    Hi
    We're in the middle of implementing service desk for key-user acess. I.e our key-users should be able to use the system to veiw tickets and to be able to respond and set some statuses.
    The problem I have is to restrict the change authorization to only their own tickets. Anyone know if and how this can be easily done?
    The idea is that the Key-User should be able to view all tickets to be able to find a soluton to their question before creating an incident but only to view all those tickets. When the Key-user has created a ticket he should be able to change his own ticket and for example to create a reply to service desk or set status to Solution Confirmed. We will be using both work centers and GUI acess.
    Any ideas are welcome!!
    BR
    Andreas

    S0004503877 wrote:>
    > Hi Andreas,
    >
    > you can implement BADI CRM_ORDER_AUTH_CHECK, Method CRM_ORDER_ADD_AUTH_CHECK to achieve this.
    > It is called on message display or edit in both GUI and Workcenter.
    >
    > Check if business partner of user is in partner function "Requester". If so, he has full authorization to edit.
    > If not, he has only display authorizaiton.
    > Create a new authorization object which is assigned to all non Key-Users. If the authorization check for this object is successful, the above checks are ignored and the user has full access (because he is no key user).
    >
    > Regards,
    > Christoph
    Perfect!!
    Thank you very much, this did exactly what I was asking for!
    Many thanks!
    /Andreas

  • Excel file download in jsp

    Hi,
    Is it possible to download excel file on the server on a JSP page. Kindly advice.
    Thanks in advance.

    yes...
    What is the scenario....
    is it..
    1. You have a XLS on server...alredy created..
    2. Now you need a link on JSP page....that is linked to this EXS file...
    3. User acess your web application and click on link....
    4. A popup comes up....and user selects either to save or download the file....
    Is this your scenario....
    If not then specify steps you are looking for....and you face issue in which step....
    Edited by: Saurabh Agarwal on Jul 6, 2011 12:21 PM

  • Using predefined JDBC database connection in runtime for BC4J

    I've created an aplication using BC4J context, however I want to have several distinct users acessing this aplication, so I create the connection to the database using stantart JDBC 2.0, and now I want my application to use this connection instead of the one defined for BC4J.
    The database user owner of the objects must be locked.
    Is this possible?
    Many thanks.
    Nuno

    In Forms I used the following code to change the user at runtime. I created 3 char fields 'u','p' and 'c' for username, password and connect string respectively.
    declare
    uname varchar2(10);
    begin
    uname := get_application_property(username);
    -- To display your current username
    message(uname);
    pause;
    logout;
    logon(:u,:p| |'@'| |:c);
    end;
    Have a nice day,
    Abhijith Unnikannan,
    Oracle Support Services

  • My computer will not load Pay per-view sites

    I have tried numerous times to pull up payperview sites. When I try to access the site i get the message:
    "Safari can’t open the page ....... because it can’t find the server .......
    I have called customer service for the sites and they have tried troubleshooting. However, they will only do so much due to liability. They aslo stated that they have not have had any issues with mac users acessing their site.
    It is not my Internet provider because I can access the site with my lap top that is running windows. I used to be able to access the site without any problems until power went out during a storm.
    I have also tried to access the site using Internet explorer and Firefox.
    What can I do to solve this problem?

    Hi linkbayou, and a warm welcome to the forums!
    For Safari, might try putting these in Network>TCP/IP>DNS Servers:
    208.67.222.222
    208.67.220.220
    Apply.
    Also check if anything is set in Network>Proxies.

Maybe you are looking for

  • How can i send an ibook to a friend?

    How can I send an iBook to a friend?

  • Keynote with 3 screens

    How do I make the presenter screen go on screen 2 and the display onto screen #3... So that my iMac is NOT being used, just the other two screens. This is necessary for me because the two external monitors are sent to a stage monitor and the projecto

  • N97 problem with latest version

    Hello everyone,   I„m very disappointed because after upgrading to the latest version of Ovi maps it seems I can„t use it anymore.The software keep tries to get my position with no results.The red spot keep blinking but I can„t get localized.   My ph

  • Windows server 2003 PDC DNS issues

    Cannot view the company website internally. But it shows up normally outside of the network. The old website worked fine inside and out but new website hosted by godaddy cannot be seen internally.

  • Iphone to iphone 4 keep contacts

    i currently have an iphone and i am going to get an iphone 4... what can i do to keep all my contacts notes and pretty much all my data to transfer it to my new iphone 4. thanks.!