Accessing objects without access rights

Hi,
does anybody know if is possible to set object's attributes with no matter on its ACL?
Describe of situation:
I have an object SeqNum defining form of sequence number for instances of other objects. For example, documents of class Document can have automatically set attribute with sequence numbers "DOC001", "DOC002", "DOC003", etc. on their insert to iFS.
Each SeqNum object have its ACL, by what I want to say that only admins can manage (change) definition of sequence numbers.
SeqNum object has also an attribute, containing last used sequence number. The problem is that I need to increment (in background, with setAttribute method) this attribute every time some user inserts document with created sequence number. In order to do that, every SeqNum object must have Public ACL, else I get error message with insufficient access rights. Any idea to solve this?
Thanks in advance
Radek Zeman
[email protected]

>
I get "table or view does not exist" error. Is there a way I can wirte refer to objects in this schema without having to indicate the owner. So instead of writing SCOT.EMPLOYEES I want to write just EMPLOYEES.
>
Create a public synonym for the object.
CREATE PUBLIC SYNONYM EMP32 FOR SCOTT.EMP;Then you do not need to specify the schema.
--- edited to add doc reference
See CREATE SYNONYM in the SQL Language doc
http://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_7001.htm
>
CREATE SYNONYM Purpose
Use the CREATE SYNONYM statement to create a synonym, which is an alternative name for a table, view, sequence, operator, procedure, stored function, package, materialized view, Java class schema object, user-defined object type, or another synonym. A synonym places a dependency on its target object and becomes invalid if the target object is changed or dropped.
>
Edited by: rp0428 on Apr 5, 2012 10:56 PM

Similar Messages

  • Accessing object without passing it?

    Im making a complicated program with a swing UI. Every component is its own file and is created in the frame classes. There is a controller class that controls the application. I want to be able to access and modify variables in the controller class in each component. Is there a way to do this without passing any variables? Thanks!!

    There are a number of ways you could do it (you could make all controller methods and variables static... But please don't do that... or you could monkey around with ThreadLocals... Again, really think hard before going there).
    But if you're going to have a single controller I'd recommend enforcing that through a singleton pattern. Expose the controller instance through your Controller.getInstance() and call the methods you need on that.
    It's probably the cleanest way to do it and is less of a dependency nightmare than passing the controller or component objects through to each object that needs a connection to it.

  • Get DDL of objects in another schema without access to their content

    Hi,
    is there any object privilege which could be granted to a user A so that he can get only the user's B object definitions (DDL) but without accessing their content or executing them (in case of packages/procedures/functions)? E.g. to get the user B's tables DDL, user A should have at least the SELECT privilege on them (at least I think so), so he has access also to the table's data. To get stored procedure DDL, I don't want to give user A the ability to also run them with EXECUTE privileges, etc.
    I checked the Security Model section of DBMS_METADATA http://docs.oracle.com/cd/E11882_01/appdev.112/e25788/d_metada.htm#i1016867. The SELECT_CATALOG_ROLE role is mentioned there, which would allow me to to what I need, but it would also give a user access to all dba_* views which I don't think is ok.
    Any thoughts?
    Thanks in advance and regards,
    Jure

    If you want userA to be able to see the dictionary information for userB and no others other than him or her-self then there is another potential option. Create a sys owned view based on the Oracle user_source code that changes the filter condition to allow seeing UserB. Now if your developer is using Toad or some other tool this will likely not be suitable since the tool makes use of specific dictionary views, but for access via SQLPlus it works fine. My developers have a view that provides the same information as DBA_SOURCE but do not have access to any other dicitonary views outside the expected all_ views which work as normal.
    This may also not be practical if you want to provide access to all the views but if you actually only need a few such as tables, indexes, and _source then this is another option for you to consider.
    HTH -- Mark D Powell --

  • How to access the remote Objects Without Db_links?

    Hi ,
    I want to know how to access the remote objects without db_link.That is i want to access a object in some other server which has different database.

    SanjayBala, just so you know that it is possible to create a database link in Oracle to non-Oracle databases in some circumstances. Look up Generic Connectivity aslo know as Heterogenous Services. With 11g Oracle has basically renamed the feature and replaced it with somethinkg named ike DG4ODBC.
    I have not spent time studying the details for DB4ODBC but with HS Oracle provided the interface and you had to obtain the necessary ODBC driver on your own. I had Oracle on AIX reading and writing to SQL Server on Windows but the developers chose to write a java program and connect to both via it. On Windows and Linux platforms the necessary ODBC drivers might be available without the requirement to go out and purchase one.
    The Oracle Open Gateway product is an advanced version of the above features with drivers for specific non-Oracle databases included like DB2 or Informix.
    HTH -- Mark D Powell --

  • Does the user have to be the owner of CWM2 objects to access them via OLAP API?

    Hi,
    What are required for RDBMS users to use OLAP API? Regarding page 6-9 of Oracle9i OLAP User's Guide 9.2.0.1, following access rights are required.
    CONNECT role
    QUERY REWRITE system privilege
    SELECT privilegs on the database objects containing the data to be analyzed
    So, I created a new user TEST1 and granted all the priviges above. Then I tried to create a new crosstab using New Crosstab Wizard in JDev903_pre(OLAPConnecton is using TEST1). When I choose a measure that is created in CWM1, I could create a crosstab without problem. But when I tried to create a crosstab from a measure that is created in CWM2 by OLAPSYS user, I recieved the following error.
    BIB-9509 Oracle OLAP did not create cusor.
    oracle.express.ExpressServerExceptionError class:OLAPI
    Server error descriptions:
    DPR: Unable to create server cursor, Generic at TxsOqDefinitionManager::createCursorManager
    OES: ORA, Generic at TxsRdbSelectStatement:execute()
    The curious thing is that I can create a crosstab from the same measure if I use another connection that uses OLAPSYS. Does the user that connects to CWM2 using OLAP API have to be the owner of those CWM2 objects?
    Thank you.
    Best Regards,
    Seiji

    The user does not have to be the owner of the cwm2 objects to access them. Access to cwm2 objects is based on database security. Therefore, if the user is not the owner of the object (if user is the owner, they obviously have access to the object), then as long as the user has been granted access to the underlying physical object (i.e., the table the dimension or cube has been mapped to), the user will be able to access the object.

  • Accessing objects with jstl

    Hello forum,
    A question about JSTL - one of the things I have not figured out until now. How can you access an object declared by a specialized tag? Generaly you c:set the variable you wish and you use EL to malipulate it. But how can you access a locale object or resource bundle object? Let's take the bundle object for example:
    The code that would declare it would be:
    <fmt:setLocale value="theLocale"/>
    <fmt:bundle basename="thebasename"/>
    Suppose that later in the code you want to access the created resource bundle object - how can you do that? Obviously a resource bundle object has been created, but how can you call one of its methods?
    Thanks in advance,
    Michael

    "and I really I am not that willing to decide that I will revert them to JSTL, at least not if they are really long"
    Well, right there is your problem. You will need to decide to do it, or not. You are experiencing one of the major problems of NOT using JSTL... when scriptlets get long they are difficult to maintain and change (which is why you shouldn't use them from the beginning.. but that is not pertinent to this topic).
    The issue is that some JSTL and some custom Tags have their own means of working with objects without sharing those objects with the application (it preserves encapsulation.. they can only be sure something is kept correct if they handle it themselves and don't let others mess with it).
    "This is a major problem for using jstl."
    This isn't a problem with JSTL, it is a problem of combining JSTL with scriptlets. JSTL should be used as a replacement for scriplets, in my opinion, not alongside them. It makes it much easier to
    1) plan what you are doing when coding
    2) read the code and understand it later when maintaining.
    So my advice would be to stick with one or the other (further I would suggest going all the way with JSTL, but the time of converting old scriptlet code is a negative that you will have to measure yourself...)

  • How to access objects in the Child Form from Parent form.

    I have a requirement in which I have to first open a Child Form from a Parent Form. Then I want to access objects in the Child Form from Parent form. For example, I want to insert a record into a block present in Child Form by executing statements from a trigger present in Parent Form.
    I cannot use object groups since I cannot write code into Child Form to first create object groups into Child Form.
    I have tried to achieved it using the following (working of my testcase) :
    1) Created two new Forms TESTFORM1.fmb (parent) and TESTFORM2.fmb (child).
    2) Created a block named BLK1 manually in TESTFORM1.
    3) Created two items in BLK1:
    1.PJC1 which is a text item.
    2.OPEN which is a push button.
    4) Created a new block using data block wizard for a table EMPLOYEE_S1. Created items corresponding to all columns present in EMPLOYEE_S1 table.
    5) In WHEN-NEW-FORM-INSTANCE trigger of TESTFORM1 set the first navigation block to BLK1. In BLK1 first navigable item is PJC1.
    6) In WHEN-NEW-ITEM-INSTANCE of PJC1, code has been written to automatically execute the WHEN-BUTTON-PRESSED trigger for the "Open" button.
    7) In WHEN-BUTTON-PRESSED trigger of OPEN item, TESTFORM2 is opened using the following statement :
    open_form(‘TESTFORM2',no_activate,no_session,SHARE_LIBRARY_DATA);
    Since its NO_ACTIVATE, the code flows without giving handle to TESTFORM2.
    8) After invoking OPEN_FORM, a GO_FORM(‘TESTFORM2’) is now called to set the focus to TESTFORM2
    PROBLEM AT HAND
    ===============
    After Step 8, I notice that it passes the focus to TESTFORM2, and statements after go_form (in Parent Form trigger) doesnot executes.
    I need go_form with no_activate, similar to open_form.
    Edited by: harishgupt on Oct 12, 2008 11:32 PM

    isn't it easier to find a solution without a second form? If you have a second window, then you can navigate and code whatever you want.
    If you must use a second form, then you can handle this with WHEN-WINDOW-ACTIVATED and meta-data, which you have to store in global variables... ( I can give you hints if the one-form-solution is no option for you )

  • Confusion... Data Access Object and Collection Class

    Please help me...
    i have a Book class in the library system, so normally i would have a Collection class eg. BookCollection class which keeps an array/ arrayList of Book objects. In BookCollection class i have methods like
    "searchBook(BookID)" which would return me a Book object in the array.
    But now i'm confused with Data Access Object... In sequence diagrams there's a "Data Access class" which is used to retrieve data from and send data to a database. So, if i have the Data Access class, do i still need BookCollection class? Because BookCollection serves as a database also rite? ...

    I think you're in the right rail.
    The BookCollection class could be still usefull if you will need to manage search results with more than onne record (e.g.: search by author name).

  • Accessing object of the main class from the thread

    Hi, I'm having problem accessing object of the main class from the thread. I have only one Thread and I'm calling log.append() from the Thread. Object log is defined and inicialized in the main class like this:
    public Text log;  // Text is SWT component
    log = new Text(...);Here is a Thread code:
    ...while((line = br.readLine())!=null) {
         try {
              log.append(line + "\r\n");
         } catch (SWTException swte) {
              ErrorMsg("SWT error: "+swte.getMessage());
    }Error is: org.eclipse.swt.SWTException: Invalid thread access
    When I replace log.append(...) with System.out.println(..) it works just fine, so my question is do the log.append(..) the right way.

    This is NOT a Java problem but a SWT specific issue.
    It is listed on the SWT FAQ page http://www.eclipse.org/swt/faq.php#uithread
    For more help with this you need to ask your question on a SWT specific forum, there is not a thing in these forums. This advice isn't just about SWT by the way but for all specific API exceptions/problems. You should take those questions to the forum or mailing list for that API. This forum is for general problems and exceptions arising from using the "core" Java libraries.

  • Is there a way to access object from other schema?

    1. Is there a way to access object from other schema
    Without using synonym/public synonym without prefixing schema owner?
    2. If you do not see any object in all_objects by same name owned by connected user or public, can there still be objects hidden from this view? for instance synonyms created by SYSTEM
    TIA for help

    Well, you missed something somewhere. If there is no
    ALTER SESSION SET CURRENT_SCHEMA=whoeverthen there must be either public synonym for the object as this shows:
    SQL> CREATE USER a identified by a;
    User created.
    SQL> GRANT CREATE SESSION to a;
    Grant succeeded.
    SQL> CREATE USER b identified by b;
    User created.
    SQL> GRANT CREATE SESSION, CREATE PROCEDURE, CREATE PUBLIC SYNONYM to b;
    Grant succeeded.
    SQL> connect b/b
    Connected.
    SQL> CREATE PACKAGE test AS
      2     PROCEDURE testit;
      3  END;
      4  /
    Package created.
    SQL> CREATE PACKAGE BODY test AS
      2  PROCEDURE testit IS
      3  BEGIN
      4     NULL;
      5  END;
      6  END;
      7  /
    Package body created.
    SQL> connect a/a
    Connected.
    SQL> desc b.test
    ERROR:
    ORA-04043: object b.test does not exist
    SQL> connect b/b
    Connected.
    SQL> GRANT EXECUTE ON test TO a;
    Grant succeeded.
    SQL> connect a/a
    Connected.
    SQL> desc b.test;
    PROCEDURE TESTIT
    SQL> desc test;
    ERROR:
    ORA-04043: object test does not exist
    SQL> connect b/b
    Connected.
    SQL> CREATE PUBLIC SYNONYM test FOR TEST;
    Synonym created.
    SQL> connect a/a
    Connected.
    SQL> desc test
    PROCEDURE TESTITAnother possibility without public synonyms is that crv had granted the other user privileges on some object, and the other user creates a private synonym for that. When crv granted privileges on a different object with the same name, the private synonym became valid again. Something like:
    SQL> connect /
    Connected.
    SQL> drop public synonym test;
    Synonym dropped.
    SQL> GRANT CREATE SYNONYM TO a;
    Grant succeeded.
    SQL> connect a/a
    Connected.
    SQL> desc test;
    ERROR:
    ORA-04043: object test does not exist
    SQL> desc b.test
    PROCEDURE TESTIT
    SQL> CREATE SYNONYM test FOR b.test;
    Synonym created.
    SQL> desc test;
    PROCEDURE TESTIT
    SQL> connect b/b
    Connected.
    SQL> REVOKE EXECUTE ON test FROM a;
    Revoke succeeded.
    SQL> connect a/a
    Connected.
    SQL> desc test;
    ERROR:
    ORA-04043: object "B"."TEST" does not exist
    SQL> desc b.test
    ERROR:
    ORA-04043: object b.test does not exist
    SQL> connect b/b
    Connected.
    SQL> DROP PACKAGE test;
    Package dropped.
    SQL> CREATE FUNCTION test (p_num IN NUMBER) RETURN NUMBER AS
      2  BEGIN
      3     RETURN p_num * 10;
      4  END;
      5  /
    Function created.
    SQL> GRANT EXECUTE ON test TO a;
    Grant succeeded.
    SQL> connect a/a
    Connected.
    SQL> desc test;
    FUNCTION test RETURNS NUMBER
    Argument Name                  Type                    In/Out Default?
    P_NUM                          NUMBER                  INSo, I would go looking for the synonyms.
    TTFN
    John

  • Data access Objects

    Deepak,
    Can you throw some light on the 'Data access Objects" pattern? and how it can be used with Entity beans? I am trying to apply this to the following scenario and having a hard time.
    We need users to be transparent of the data retrieval from various sources like oracle database, flat files or legacy storage. If I use the data access object pattern it is easier to use java classes in place of entity beans.
    Thanks
    Shreyas Kamat

    Shreyas,
    [For those not familiar with our Data Access Object Pattern, the
    beta version of the pattern is available on JDC (needs JDC login) at:
    http://developer.java.sun.com/developer/restricted/patterns/DataAccessObject.html]
    Data Access Objects (or DAOs) are objects that hide the database
    implementation from data clients. Data clients are any objects
    that need to retrieve data from the data source. And the data source
    could be anything that contains data, not necessarily only RDBMSs.
    For example, an external system could be a data source.
    Now using DAOs with Entity beans is applicable only in bean-managed
    persistence (BMP) scenario. In BMP, the entity beans are responsible
    to provide the data load and store implementation in the ejbLoad()
    and ejbStore() methods of the bean implementation. Without using
    the DAOs, the entity bean class will contain all the JDBC code (assuming
    that the data source is an RDBMS), SQL, etc. This makes the
    entity bean class bloated and difficult to manage when changes
    are made to the data logic. In addition, this tightly couples the
    data source implementation with the entity bean implementation.
    By using DAOs, the ejbStore() and ejbLoad() methods are much
    simpler. Also, it is easier to change from one datasource implementation
    to another by replacing the DAOs. Further flexibility is possible
    by employing the DAO factory strategy as described in the DAO pattern
    in our catalog.
    Coming back to you point about making the data access transparent
    to the clients; it is possible to achieve this by using DAO and
    DAO factory strategy. In the current version of the pattern,
    included in the book, we provide sample code to show how
    to design DAO classes and to apply DAO factory strategy.
    On your last point about using java classes instead of entity beans, this
    is not the intention of the DAO pattern. Entity beans serve a different
    purpose in the architecture as coarse-grained transactional components.
    entity beans use DAOs in BMP implementations, but are not replaced
    by DAOs. However, DAO classes are reusable. The same DAO that is
    used by an entity bean to retrieve some data in one application scenario,
    can be reused by a servlet in another application scenario
    that needs the same data, but does not use entity beans.
    So bottom line is that DAOs address the need to data access and
    manipulation and work together with entity beans in BMP implementations.
    thanks,
    -deepak

  • Data Access Objects and associations....

    Ive got a few classes which are 'value based', and represent some configuration for some dynamic part of my application.
    I was going to employ the Data Access Objects pattern (http://java.sun.com/blueprints/corej2eepatterns/Patterns/DataAccessObject.html) to decouple the data source (either XML or RDB in this case) from the content.
    In my case though, I have associations between the content.
    E.g, an X contains 0..n Ys' which have 0..1 Zs'.
    So, X has 'getYs()' for example.
    Is the DAO pattern meant for cases like this, or just for single data object cases (E.g, 'Customer') with simple properties?
    I cant see any disadvantages for using it in my case, but wondered if any one has any thoughts on the design?

    The aim of the DAO is to hide the implementation of the datasource to the clients (i.e the classes using it). And the reason is the client should not care how the data is stored. It also means that I can change the way I store my data without changing the client(s) code (the client calls interface methods that do not change).
    If your code satisfies the above, it is implementing DAO, and it should not and does not matter how many Y's are in your X's or Z's...
    Always make a distinction between the general aim of a Design Pattern (its essence) and the (usually simple, even simplistic) examples supplied by different authors to illustrate the pattern.

  • How to find SPID without access to v$process

    To all experts,
    Is the another way to find out the value of SPID in v$process without accessing v$process? Just pure PL/SQL.
    Thank you all in advance.
    Best Regards,
    thomas

    KinsaKaUy? wrote:
    Hi Kuljeet,
    Ho can I get the info process from the OS side using the output of this query?
    Is the SPID referring to OS PID? If I have an output for this query's SPID of 7224
    Can I do > ps -ef |grep 7224 to get the OS side process? or No information will suffice?
    Thanks a lot,read & learn!
    bcm@bcm-laptop:~$ sqlplus user1/user1
    SQL*Plus: Release 11.2.0.1.0 Production on Wed May 16 20:08:36 2012
    Copyright (c) 1982, 2009, Oracle.  All rights reserved.
    Connected to:
    Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
    With the Partitioning, OLAP, Data Mining and Real Application Testing options
    20:08:37 SQL> select process from v$session where username = 'USER1';
    PROCESS
    5788
    20:09:08 SQL> !ps -ef | grep 5788
    bcm       5788  2054  0 20:08 pts/0    00:00:00 sqlplus           
    oracle    5789  5788  0 20:08 ?        00:00:00 oraclev112 (DESCRIPTION=(LOCAL=YES)(ADDRESS=(PROTOCOL=beq)))
    bcm       5802  5788  0 20:09 pts/0    00:00:00 /bin/bash -c ps -ef | grep 5788
    bcm       5804  5802  0 20:09 pts/0    00:00:00 grep 5788
    20:09:27 SQL>

  • I have all my movies on an external hard drive.  I want to be able to access them without copying everything to my iTunes.  How can I do this?

    I have all my movies on an external hard drive.  I want to be able to access them without copying everything to my iTunes.  How can I do this?

    I think DebinSC might mean using the movies without copying to the iTunes library?
    Maybe the solution is to uncheck this box?
    Or am I barking up the wrong tree?

  • How can I get my old iTunes music onto my new computer without access to my old computer? I left my previous job and forgot to transfer my music. I bought iTunes match and it shows my old Mac as a device, but I cannot get the music off it.

    How can I get my old iTunes music onto my new computer without access to my old computer? I left my previous job and forgot to transfer my music. I bought iTunes match and it shows my old Mac as a device, but I cannot access any of the old music. All I can find are what was on my iPhone, but that's not what I want. I need all my old music from my old Mac, which has been wiped clean by IT at my old job. BUT, I did have iCloud at that time and I thought all my music would be accessible through it. I don't understand the Cloud! And I'm thinking spending $24.99 on iTunes Match was a waste of money because I still can't access my old music.

    When you are done with this issue, consider the computer back at the office may still
    have access to your iTunes account, and it should be de-auhorized. You can do that
    remotely, but be sure you carefully do not mess up your other computer iTunes libraries.
    Good luck & happy computing!

Maybe you are looking for

  • Customer aging logic

    Hi, There is an requirement where i need to generate report on aging.. ie.. amount unpaid by the customer to be identified on different aging 0-15 days 16-30 days 31-45 days 56-90 days so the output of the report show be like above on different again

  • Why shopping cart created date is save with difference in hours?

    I created a shopping cart at 04.09.2008 12:14. But when I execute the FM BBP_PD_SC_GETDETAIL to obtain the detail data, I see in E_HEADER-CREATED_AT field the datetime 04.09.2008 17:14:36 and E_HEADER-TZONE field = "CST". The time zone is correct (CS

  • Create project material components with BAPI_RESERVATION_CREATE1?

    We have created a project structure down to network activities by using BAPI_PROJECT_MAINTAIN.  Now we want to add material components to the network activity like you do manually in CJ20N.  We do not want to release the network activity, just add th

  • Link to Internal Forum

    Hi , I am a new oracle employee. And I have been working on a new jdev version which is not public yet. Can you provide me link to the internal forum where I can ask questions. Thanks and Regards, Tarun

  • Wda dynamic programming

    Hi, How can we dynamically set the properties of the ui elements in wed dynpro abap?