Allow user to create objects in specific schema

I would like to be able to grant a user/role permission to create/drop tables/views/etc.. in a specific schema, other than their own.
It appears like I can do either
grant create table to role
or
grant create any table to role
the former allowing them to create tables in their own schema, the latter allowing them to create tables anyplace.
Is there really nothing in the middle?
Why....
In my application i have a couple of "users" that are really just schemas. They are not used for users to login.
We have actual user account(s) that are used for connecting to the db by the application.
We have a role that all of these users belong to.
At certain points in our application, our use needs to modify one of these application schemas.
I do not want the user to be able to modify any other schema in the database.
I can't be the first person to have encountered this. I'm hoping that there is some clever solution that I have just missed thus far.
10g would be ideal, 11g only would be ok.
Thanks.
Edited by: 854248 on Apr 23, 2011 8:54 AM

854248 wrote:
I would like to be able to grant a user/role permission to create/drop tables/views/etc.. in a specific schema, other than their own.
It appears like I can do either
grant create table to role
or
grant create any table to role
the former allowing them to create tables in their own schema, the latter allowing them to create tables anyplace.
Is there really nothing in the middle?
Why....
In my application i have a couple of "users" that are really just schemas. They are not used for users to login.
We have actual user account(s) that are used for connecting to the db by the application.
We have a role that all of these users belong to.
At certain points in our application, our use needs to modify one of these application schemas.
I do not want the user to be able to modify any other schema in the database.
I can't be the first person to have encountered this. I'm hoping that there is some clever solution that I have just missed thus far.
10g would be ideal, 11g only would be ok.
Thanks.
Edited by: 854248 on Apr 23, 2011 8:54 AMYou can give them CREATE ANY TABLE/VIEW privileges and then limit their actions by DDL triggers:
http://psoug.org/reference/ddl_trigger.html
http://www.java2s.com/Tutorial/Oracle/0560__Trigger/AFTERDDLONSCHEMA.htm
Regards
Gokhan

Similar Messages

Allow users to create reports based on their own selection of fields

Is there a way to allow users to create reports based on their own selection of fields?
And if there is a way, then how?
In access we retrieve all demographic info on one screen and on another screen user can be able to choose specific fields from a list box to import data into file.

Hi,
This can be handled in various ways - but the principles are the same.
You need to apply conditional displays to all of the columns that your user can select and base the display of a column on the value of a field on the page.
You can have a series of Yes/No options - one for each field and base the display on the corresponding field being Yes. Or you can use checkboxes.
However, if you wish to use a multiselect list (which is probably easier as you can dynamically generate the list of field names), you will need to have hidden fields that will store either Y/N or 1/0 (I use ones/zeros) and have the conditional displays watch these fields instead. Populating these hidden fields is a bit more tricky than just having fields on the page that the user can control, but is doable:
1 - Create one hidden field for each field in the report that you want to show/hide. Put these fields in the same region as the select list in a region above the report
2 - Set conditional display values to "Value of Item in Expression 1 = Expression 2" and use the appropriate hidden field for Expression 1 and in Expression 2 enter in 1
3 - Create a page process that runs on submit, and create PL/SQL code something like:
DECLARE
lFields HTMLDB_APPLICATION_GLOBAL.VC_ARR2;
vField VARCHAR2(1000);
BEGIN
:P31_SHOW_EMPNO := 0;
:P31_SHOW_ENAME := 0;
:P31_SHOW_JOB := 0;
:P31_SHOW_MGR := 0;
:P31_SHOW_HIREDATE := 0;
:P31_SHOW_SAL := 0;
:P31_SHOW_COMM := 0;
:P31_SHOW_DEPTNO := 0;
lFields := HTMLDB_UTIL.STRING_TO_TABLE(:P31_FIELDS);
FOR i IN lFields.FIRST..lFields.LAST LOOP
vField := lFields(i);
IF vField = 'EMPNO' THEN
:P31_SHOW_EMPNO := 1;
ELSIF vField = 'ENAME' THEN
:P31_SHOW_ENAME := 1;
ELSIF vField = 'JOB' THEN
:P31_SHOW_JOB := 1;
ELSIF vField = 'MGR' THEN
:P31_SHOW_MGR := 1;
ELSIF vField = 'HIREDATE' THEN
:P31_SHOW_HIREDATE := 1;
ELSIF vField = 'SAL' THEN
:P31_SHOW_SAL := 1;
ELSIF vField = 'COMM' THEN
:P31_SHOW_COMM := 1;
ELSIF vField = 'DEPTNO' THEN
:P31_SHOW_DEPTNO := 1;
END IF;
END LOOP;
END;
4 - Finally, add a button that generates the report - this just needs to submit the page and branch back to the same page
I've used the standard EMP table for this example and my hidden fields are P31_SHOW_fieldname. The code resets the hidden fields to 0, checks if the user has selected the field from the list (P31_FIELDS) and changes the hidden fields value to 1 for all those selected. When the page is re-rendered, the report hides the columns where the hidden field value is 0 and displays those where it is 1. The export option will then only export those fields that are displayed.
You can see an example of this here:
http://htmldb.oracle.com/pls/otn/f?p=33642:31
Regards
Andy

Flash app that allows users to create mini animations

Hi,
I am fairly new to flash, and was wondering if the community could point me in the right direction for my current project.
I am looking to build an app that allows end users to draw and save mini animations (simple predetermined shapes that move in 2D). So far I have a written a app that allows the user to draw a single frame using simple shapes and lines, but I am having some small troubles at this stage, and have not attempted to allow the user to animate or save the drawing.
If anyone knows of a tutorial or some other resource to put me on the right path I would be very grateful. I can also share what I have if anyone would be willing to give me some pointers (I am going to assume that as a newbie, my code could use a lot of improvement).
Regards,
Robbie Vos

Hi Andei1,
Thanks for the input. I figured that the save functionality would be a little difficult.
However, if I can get the basic app going (allowing users to create mini animations) I think I should be able to get save going with some (ok, alot) of effort.
Regards,
Robbie Vos

How to find invalid objects in specific schema?

Please let me know hoe to find invalid objects in specific schema such as SYS?
Please help and guide
Thanks,
Waheed.

Ok i get invalid objects now if i want to delete these invalid objects which query i have to run?
also let me know there is no harm if i del invalid objects from SYS schema?
Please help and guide
Thanks,
Waheed.

How to export objects of specific schema?

I need to export object of specific schema so please let me know how?
Thanks,
Waheed.

First thing you want to do - decide whether you will use the exp/imp or the expdp/impdp (data pump) routines.
To make THAT decision for 10g/11g look at CHapter 11 of the Concepts manual. (no decision in 9i - no data pump)
Once that decision is made, use the appropriate parameters as found in the Utilities manual - for every version from Oracle version 5 on. The parameters are different between exp and expdp

Allowing user to create link to a network file

Is there a way to allow the user of a form to enter the path to a local network file (such as a Word document), so that when others click it, it will take them to the file?
In a thread in another forum, someone posted the following method of create a button containing the following code that converts text entered into a text field into a hyperlink:
if (xfa.host.name != "XFAPresentationAgent")
    var oURI = xfa.resolveNode("form1.page1.header.TextField2").rawValue;
    var oLink = "<body xmlns=\"http://www.w3.org/1999/xhtml\" xmlns:xfa=\"http://www.xfa.org/schema/xfa-data/1.0/\"><p style=\"letter-spacing:0in\"><a href=\"" + oURI+ "\" style=\"margin-top:0pt;margin-bottom:0pt;text-valign:bottom;font-fami ly:'Myriad Pro';font-size:8pt\">" + oURI + "</a></p></body>";
    xfa.resolveNode("form1.page1.header.TextField2").value.exData.loadXML (oLink, false, true);
This works great for internet URLs; however, when you enter a local or network path (for example "Y:\Network\File.doc"), you get the following error message in your default browser:
Firefox doesn't know how to open this address, because the protocol (y) isn't associated with any program.
How would you alter this code so that it links to a local or network file, and doesn't try to open it in a web browser? Or, if this isn't possible, is there any other way to allow the user to create a clickable link to a file?
Thanks,
Jo

I've never tried it and there may be alternative ways of doing it, but I would think the only way you can provide formatting tools - without recreating each tool - is to use an Applet.
What you're trying to do is create a document object on the server, have the user select an command on the client side (such as underlining text), have the client pass the command back to the server, and echo the results of that operation, right?
It would be incredibly awkward and impractical to do that through a conventional stateless HTTP medium such as JSPs, PHP or JavaScript. It may have been done before, I'm just not aware of any attempts to do so.
Are you willing to consider alternative third-party solutions, open source or not? Or is this something that you explicitly have to code?

Set the role to allow to do anything in a specific schema

Hi all,
I'm not sure which role or right a I must set to my users.
I want that all users can do anything in the a specific schema. Users can create, alter, drop, insert, delete, ... a table, index, sequence, etc.
My users are of developpers. But, I want to be sure that a developper won't alter another schema excepted his schemas.
I'm not sure the good role to choose to allow theses rights.
Anyone could help me please?
Jimmy

I would think that the resource and connect roles would be the best for your needs:
select * from dba_sys_privs
where grantee = 'RESOURCE';
GRANTEE PRIVILEGE ADM
RESOURCE CREATE TYPE NO
RESOURCE CREATE TABLE NO
RESOURCE CREATE CLUSTER NO
RESOURCE CREATE TRIGGER NO
RESOURCE CREATE OPERATOR NO
RESOURCE CREATE SEQUENCE NO
RESOURCE CREATE INDEXTYPE NO
RESOURCE CREATE PROCEDURE NO
Note that the role does not include the "create view" privilege, so you will need to grant this as well.
You will also need to give them privileges on tablespaces.
On 9.2 and before, the connect role would have most of these privileges, but since 10.1 (or 10.2) that role has only "create session" privilege.

Zero Client Design - allowing user to create document like a word document

Hi All,
I am planning to develop an internet based application. How can i allow user to start creating a document (Let say Word document). User does not have Microsoft Word installed on his/her client computer. my application offers create new document.
User clicks "create new" link on the page. Is it possible to lunch the word in create new page to let user to create document and at the end click Save link on the page to save it on to server?
Is it possible to call the word application from the sever?
Thanks
Sam

I've never tried it and there may be alternative ways of doing it, but I would think the only way you can provide formatting tools - without recreating each tool - is to use an Applet.
What you're trying to do is create a document object on the server, have the user select an command on the client side (such as underlining text), have the client pass the command back to the server, and echo the results of that operation, right?
It would be incredibly awkward and impractical to do that through a conventional stateless HTTP medium such as JSPs, PHP or JavaScript. It may have been done before, I'm just not aware of any attempts to do so.
Are you willing to consider alternative third-party solutions, open source or not? Or is this something that you explicitly have to code?

Best way to allow user to create JFrame

Hi,
I'm working on a part of an application that needs to allow a user to create some type of "Frame". I'll give an example: when you use an IDE an create a JFrame you can drag object to the frame until your happy with it. I you like to do something similar, obviously much more simple than an IDE.
I have been looking at some libraries, specially XML - SWING, but not sure if its the best solution. I don't want to reinvent the wheel. So anything that could help, is more than welcome.
thanks.

I may not have explained myself well here.
I want to only allow the operator to select sequences that are set up to be able to run independently. I don't want the callbacks and initialization sequences to show up in the list the operator can choose from.
The way I figured out how to do it is a little tricky, and I think I may have found a bug.
This is what I did:
For the sequences I do not want to be selectable, I setPropFlags_Hidden to true. (Sequence Properties...Advanced...Flags, check the box).
This immediately hides the sequence. In order to see all hidden sequences to edit them, set Configure->Station Options...Preferences->Show Hidden Properties.
I wanted to set this up automatically for the sequence file, so I added a SequenceFileLoad callback to set ThisContext.RunState.Engine.StationOptions.ShowHiddenProperties = False, and a SequenceFileUnload callback to set it back to true.
The bug I think I found:
This solution works when I open the sequence file in the editor, but not when I use the simple operator interface. The simple operator interface will show the hidden sequences, but only the unhidden sequences show up in the RUN_SEQUENCE control. If I make sure the station is configured not to show hidden properties BEFORE I run the simple operator interface, then the hidden sequences are indeed hidden in the Sequences list (except, because I hid MainSequence, the first list entry shows up blank until I select one of the unhidden sequences).
(see also
http://forums.ni.com/t5/NI-TestStand/Ignore-a-Sequence-in-a-SequenceCall/m-p/1754984/highlight/false...)

Creating directory under specific schema

What is the syntax to create a directory under a specific schema?
Here is what I've tried and I get an error:
CREATE OR REPLACE DIRECTORY test.utl_dir AS 'D:/utl_dir' ;
Here is the error:
Error starting at line 1 in command:
CREATE OR REPLACE DIRECTORY rcdtpump.novus_dir AS 'D:/Novus/novus_dir'
Error at Command Line:1 Column:36
Error report:
SQL Error: ORA-00905: missing keyword
+00905. 00000 - "missing keyword"+
*Cause:+
*Action:+

You can't, directories are database wide objects, see:
http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_5007.htm#i2061958
...+All directories are created in a single namespace and are not owned by an individual schema+...
HTH
Enrique

What auth obj to use for allowing user to create and save workbook?

Hi all,
We are on BI 7.0, we have requirement which will allow users to develop and save workbooks (NOT BEX query) via BEx Analyzer. I have examined the auth obj S_RS_WKBK but it is obsolete auth obj and there is nothing similar obj in BI 7.0.
i then looked at the S_BDS_D, is this all i need in order to allow user to save workbook on to the backend system?
pls note, user can only save workbook NOT BEx query.
regards,
Joe

Hi,
Actually there is no direct away to do it
First use the Authorisation s_user_agr , here in the activity field assign01,02,03 and 06 , in the role name assign a specific role name.
In s_user_tcd in transaction asssign - RRMX.
Got to PFCG, maintain the role.
Hopr this will be expedite.
ThaX and Regards
Vaibhave Sharma

Finder will not allow user to create folder on a network drive

I have an 27-inch iMac (Late-2012) that I recently did a wipe of the HD and reloaded the OS. When I did the reload, I installed MacOS X 10.9.2 but have kept it up to date, so that it is currently running 10.9.4. The user of this computer connects to a server and authenticates with a separate username and password. He can connect, authenticate, and view everything on the server fine, however, when he tries to create a new folder in the primary folder that he works with, Finder will prompt him for an Administrator Password and, despite what he puts in, (The Mac Admin Username & Password, his Mac username & password, and the username & password he uses to authenticate to the server) it will return that he does not have permissions to create the folder. Now, he can copy folders in this same folder, he can rename them, he can delete them, and he can also drag and drop a folder into the folder all from within Finder. He is also able to create new folders on his Mac without Finder prompting for authentication. I thought that it could be the network account that he uses to connect to the server, however, he is able to ssh to the server, navigate to the folder and run the mkdir command and create a folder. I have did a permissions repair, which has not corrected the problem, and I have even had him try being logged in under the Mac Administrator Account in which Finder prompted him for a password. I have also had him try to create a folder from another Mac on the network running the same version of MacOS, which he was able to do. I am at a loss. I cannot think of what it could be or anything else to try. Has anyone else encountered this problem before? Any help or thoughts are greatly appreciated.

Please read this whole message before doing anything.
This procedure is a test, not a solution. Don’t be disappointed when you find that nothing has changed after you complete it.
Step 1
The purpose of this step is to determine whether the problem is localized to your user account.
Enable guest logins* and log in as Guest. Don't use the Safari-only “Guest User” login created by “Find My Mac.”
While logged in as Guest, you won’t have access to any of your documents or settings. Applications will behave as if you were running them for the first time. Don’t be alarmed by this behavior; it’s normal. If you need any passwords or other personal data in order to complete the test, memorize, print, or write them down before you begin.
Test while logged in as Guest. Same problem?
After testing, log out of the guest account and, in your own account, disable it if you wish. Any files you created in the guest account will be deleted automatically when you log out of it.
*Note: If you’ve activated “Find My Mac” or FileVault, then you can’t enable the Guest account. The “Guest User” login created by “Find My Mac” is not the same. Create a new account in which to test, and delete it, including its home folder, after testing.
Step 2
The purpose of this step is to determine whether the problem is caused by third-party system modifications that load automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
Please take this step regardless of the results of Step 1.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
Test while in safe mode. Same problem?
After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of Steps 1 and 2.

Allow User to Create Metadata Fields

There should be a way to allow user to define their own metadata fields - Bridge is the most logical place to do this.
For example I'd like to add a field for color profile info:
1 a boolean field which indicates whether or not a CP is embeded,
1 text field for the name of the CP (This info should already be built into metadata - but until it is, I'd sure like a quick way to check)
--Take a look at Portfolio for an example of how this could be done.
thanks, xandr

yes yes.. I want to do this also??

Allowing user to create new Apex User

Hi,
I have a requirement that a certain user group needs to create new users to use Apex application. With my understanding, no user can create new user without apex admin privilege. I can't give admin privilege to any user. Is there any workaround? Thanks.

Instead of having Apex Authentication, build your custom Authentication.
Create a USER table with user detail and password.
Create a login page .. for new user give a link to public page to enter their detail.
For encrypting and decrypting the password see the sample applcation. You can copy that logic for protecting the password.
Regards,
Shijesh

Allowing Users to Create folders or files on desktop by .bat file

Dear Microsoft,
I had disabled the user to create file in desktop using a script which I had seen in the forum, script which I has used in Echo Y| cacls %userprofile%\desktop /P %username%:R and created a .bat file, it worked well and disabled user access to save
files in desktop. Now I need to enable the access. Please help me to make the changes in the script or to write a new script to enable the access
With Warm Regards,
Subin Thomas

Echo Y| cacls %userprofile%\desktop /P %username%:R save this in to .bat file and run as administrator..DONE
Since %UserProfile% and %UserName% can have embedded spaces, you should surround both with double quotes in order to make your script robust. Furthermore, by giving users read-only access to their own desktop, your popularity rating is likely to drop dramatically.
"Full access" might be more appropriate.
echo Y| cacls "%userprofile%\desktop" /G "%username%":F

Allow user to create objects in specific schema

Similar Messages

Maybe you are looking for