Bug: Grant/Revoke Privileges (11.1.0.5.10 Beta)

Started getting this when attempting to change Privileges on a proc:
"Could not launch the Grant/Revoke Privileges dialog:
Value was either too large or too small for an Int32."
This is happening consistently on one database but not on another.
John

I am also seeing this bug. When I right click on anything in the Server Explorer under my ODP based connection, I get this same message. It happens when I right click on any table icon and select "Privileges..."
-Valkyrie-MT

Similar Messages

  • JMS grant queue privileges problem

    I have two test users set up in different schemas. They each have their own identical queue tables and queues in their own schemas.
    One of the users cannot seem to grant queue privileges to the main schema owner. The error is as follows:
    Eception: oracle.jms.AQjmsException: JMS-122: Internal error payload object type must be specified
    at oracle.jms.AQjmsDestinatio.grantQueuePrivilege(AQjmsDestination.java:406)
    at src.AQSetup.jmsInitializeQueue(AQSetup.java:246)
    the offending code is as follows:
    cq_conn = AQjmsQueueConnectionFactory.createQueueConnection(p_conn);
    // create queue session
    commQSession = cq_conn.createQueueSession(true, Session.AUTO_ACKNOWLEDGE);
    // AUTO_ACKNOWLEDGE
    try
    cQTable = ((AQjmsSession)commQSession).getQueueTable(userID, QueueTableName);
    catch (AQjmsException e)
    cQTable = createJMSQueueTable(commQSession, userID, QueueTableName);
    try
    cQueue = ((AQjmsSession)commQSession).getQueue(userID, QueueName);
    catch (AQjmsException e)
    cQueue = createJMSQueue(commQSession, cQTable, QueueName);
    ((AQjmsDestination)cQueue).grantQueuePrivilege(commQSession, "ENQUEUE", "icowner",false);
    with the error coming from the last line and the referenced table and queue definition code as folows:
    private AQQueueTable createJMSQueueTable(QueueSession q_sess, String userID, String q_tableName) {
    try {
    AQQueueTableProperty qtable_prop = null;
    AQQueueTable cq_table = null;
    // Create an AQQueueTableProperty object (payload type - BYTES):
    qtable_prop = new AQQueueTableProperty("SYS.AQ$_JMS_TEXT_MESSAGE");
    // Create a queue table called command_table in user schema:
    cq_table = ((AQjmsSession)q_sess).createQueueTable(userID, q_tableName, qtable_prop);
    return cq_table;
    } catch (Exception ex) {
    return null;
    private Queue createJMSQueue(QueueSession q_sess, AQQueueTable q_table, String q_name) {
    try {
    AQjmsDestinationProperty dest_prop = null;
    Queue lq_queue = null;
    dest_prop = new AQjmsDestinationProperty();
    // create a queue
    lq_queue = ((AQjmsSession)q_sess).createQueue(q_table, q_name, dest_prop);
    return lq_queue;
    } catch (Exception ex) {
    return null;
    both users seem to have the same privileges.
    Can you tell me if it is an error in my code and what that is?
    - Ken
    null

    Might be a bug.
    Do you get the error when
    createQueue is followed by grantQueuePrivilege OT
    getQueue is followed by grantQueuePrivilege.
    null

  • Oracle users and revoking privileges

    Hello,
    To test out some error conditions in an application, I'd like to temporarily revoke a privilege on a table from a database user.
    I am trying to do that, logged into SQL*Plus as "sys" or "system", and running the command:
    REVOKE UPDATE ON USERX.TABLE_A FROM USERX;
    However, this is failing with the following message:
    ORA-01927: cannot REVOKE privileges you did not grant
    I've also tried logging into my server as oracle, typing "sqlplus /nolog" at the command line, then "connect internal as sysdba;" from the SQL*Plus prompt, and then running the REVOKE command, but that results in the same error message.
    So basically my question is: if neither the "sys" nor the "system" user is able to revoke the privilege from the "userx" user (because they did not specifically grant it), how would I determine which oracle user would be able to do this? Or how else would I go about revoking the privilege?
    I'm running Oracle8i Enterprise Edition Release 8.1.6.1.0 on Linux.
    Thanks for your help with this. I am not very familiar with Oracle DBA concepts.

    Hello,
    I am fully agree with Eric....Yes! a User created a table means...the User is OWNER of the table....and that means......the User is by default having the privilege of DML operations...i belive...OK
    And the privilege which you have not granted...then how could you revoke them...Whether it may b e SYS or SYSTEM or for that matter any User a/c.
    If you really want to restrict the restrict option on table owned by your User, then i can suggest to put a Schema Level Trigger on DML action. This will be fired when update in invoked on table by the user and there you can have your STOP mechanism.....BUT..this is not really suggested.
    Regards,
    Kamesh Rastogi
    Oracle - DBA

  • Revoking privileges

    HI,
    I need to revoke compiling of procedures to users. How can I do that?
    Thanks

    hi,
    grant execute on function/revoke to user;
    would grants execuet privileges to user to execute/compile functions/procedures to user.
    so
    revoke execute on functions/procedures from user would revoke compiling privileges from user.
    Regards
    Jafar

  • Grant Object Privileges Page

    I am running version 3.0.6.6.5 on Solaris 2.6 and using Netscape Navigator 4.51.
    On the Grant Object Privileges Page for a database object, the "Add to List" button is in an odd spot (crosses over a border) and does not work unless you click it on the left 1/3 of the button. This is not a problem when using IE 5.
    Is this a known bug?
    Fran Bailey
    EDS - Meredith Account

    i logged in as User1 and wrote:
    desc dbms_lock
    and nothing happened, then i disconnected and connected to db1 as User1 and retry and it was all the same (didn't assign the privilege). then i shut down sql plus and started it again as sys and when ran EXECUTE ON DBMS_LOCK the message is shown:
    SP2-0103: Nothing in SQL buffer to run
    then i logged in as User1 and repeat the EXECUTE ON DBMS_LOCK command, the same error message is thrown. same happened when tried with desc dbms_lock.
    am i doing something wrong or what?

  • How to "revoke" privilege with dbms_xdb.changeprivileges

    Dear All!
    How to "revoke" privilege granted with the following code
    DECLARE
    r pls_integer;
    priv xmltype;
    priv_data varchar2(2000);
    BEGIN
    priv_data :=
    '<ace
    xmlns="http://xmlns.oracle.com/xdb/acl.xsd"
    xmlns:dav="DAV:"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://xmlns.oracle.com/xdb/acl.xsd
    http://xmlns.oracle.com/xdb/acl.xsd
    DAV:http://xmlns.oracle.com/xdb/dav.xsd">
    <principal>DVLP</principal> <grant>true</grant>
    <privilege><all/></privilege>
    </ace>';
    priv := xmltype.createxml(priv_data);
    r := dbms_xdb.changeprivileges('/xdbconfig.xml', priv);
    END;
    This code is generated by Enterprise Manager
    I guessed that it is necessary to replace grant with deny
    But there is not schema defenition for deny is parent 'ace'
    Thank you in advance for help
    Regards
    Artem

    Dear Mark!
    Thank you for you reply
    I'll try and let you know about results
    Note that This code was generated by Enterprise Manager
    and it seems that it generates the same code when you try
    to grant and revoke privilege!
    Regards
    Artem

  • Grant select privilege to specific columns on a table to user in Oracle 9i

    Can anyone tell me how to grant select privilege to a user for specific columns in a table?
    I have tried the following statement
    GRANT SELECT (EMP_ID) ON EMP TO USER1
    But it's not working and I am getting this error "Missing ON Keyword".
    Please anyone tell me how to grant select privilege for specific columns.
    Edited by: 899045 on Nov 24, 2011 7:03 AM

    899045 wrote:
    Can anyone tell me how to grant select privilege to a user for specific columns in a table?
    I have tried the following statement
    GRANT SELECT (EMP_ID) ON EMP TO USER1
    But it's not working and I am getting this error "Missing ON Keyword".
    Please anyone tell me how to grant select privilege for specific columns.
    Edited by: 899045 on Nov 24, 2011 7:03 AMFrom the 9.2 SQL Reference manual, found at tahiti.oracle.com (http://docs.oracle.com/cd/B10501_01/server.920/a96540/statements_912a.htm#2062456)
    *"You can specify columns only when granting the INSERT, REFERENCES, or UPDATE privilege. "*

  • Granting table privileges on another users tables

    Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
    I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
    Any ideas what I'm doing wrong here?

    Ok... well...
    The 'with grant' option doesn't appear to be the issue.
    The user attempting to perform the grants:
    i.e. GRANT SELECT ON user_2.table_1 TO view_role
    has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
    However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
    i.e.
    l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
    EXECUTE IMMEDIATE l_sql;
    And - it's this that's giving me the insufficient privileges...
    I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
    I'm at a loss.

  • Granting object privileges to remote users.

    Hello,
    Here's the situation:
    I have 2 databases located on 2 different servers both running Win2k3. In the first database the main schema is M1 and it has to read objects on the another schema M2, located on the second database.
    I created a database link on the first database, to point to the second database
    create database link connect2M2db connect to M2 identified by M2 using 'connect2M2db'Now I would like to grant object privileges(insert,update,delete) to M1 on M2' objects. Can anyone tell me how to do that?
    Thanks in advance.

    I didn't put the whole thing, (my bad) but your reply was helpful. As I said before, I have 2 dbs, on 2 differents servers. I created the dblink on the first server. I also created synonyms on the first server using the following syntax:
    "create or replace synonym syn_name for user2.table" which from the link you provided me, is wrong as I didn't append the dblink name.
    After that, I would like to grant object privileges to user1, by executing the command from server2. For doing that, is the following syntax correct: "grant select on table_name to user1". My issue is that user1 does not exist on server2. Should I rather use the following: "grant select on table_name@dblink to user1"?

  • Grant sequence privilege issue

    Hi,
    OS is windows server 2008
    Database oracle 11g r2
    i have created a schema with name SME having DBA privilege from SME i have created another user SME_USER using the same tablespace of SME with limited privileges. The sequence was created in SME user. I am accessing the tables from SME schema. I have given insert privilege to one of the table in SME to SME_USER,but while insertiing we are using the sequnece with name IPSRNO from SME schema. Now when i tried to insert value inot the table from SME_USER its giving me the output "Sequence does not exist". I have given the grant select privilege for sequence IPSRNO.
    Please guide me on this issue.
    Regards,
    Bobby

    See Using Synonyms in DML Statements in the DBA guide
    http://docs.oracle.com/cd/B28359_01/server.111/b28310/views003.htm
    >
    You can successfully use any private synonym contained in your schema or any public synonym, assuming that you have the necessary privileges to access the underlying object, either explicitly, from an enabled role, or from PUBLIC. You can also reference any private synonym contained in another schema if you have been granted the necessary object privileges for the underlying object.
    You can reference another user's synonym using only the object privileges that you have been granted. For example, if you have only the SELECT privilege on the jward.emp table, and the synonym jward.employee is created for jward.emp, you can query the jward.employee synonym, but you cannot insert rows using the jward.employee synonym.
    A synonym can be referenced in a DML statement the same way that the underlying object of the synonym can be referenced. For example, if a synonym named employee refers to a table or view, then the following statement is valid:
    INSERT INTO employee (empno, ename, job)
    VALUES (emp_sequence.NEXTVAL, 'SMITH', 'CLERK');
    If the synonym named fire_emp refers to a standalone procedure or package procedure, then you could execute it with the command
    EXECUTE Fire_emp(7344);

  • How to grant  view privilege for Instant Portal to public users?

    How to grant view privilege for Instant Portal to public users?

    Oracle Instant Portal was designed to offer secure access to company and departmental information, and it isn't currently possible to make instant portal pages public.

  • Granting select privileges

    I want to grant select privileges on all tables and views belonging to database xyz to the user abc.
    What's the best way to do that?
    Message was edited by: Diarmuid - 11/07/07
    user580522

    I beg to differ. Of course OP can try to 'GRANT SELECT ANY TABLE'. It's just a matter of his own privileges if he succeeds or not.
    To OP: Reading about GRANT might help:
    http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_9013.htm#i2077938
    Note this part from the docs:
    To grant a system privilege, you must either have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege.

  • Grant any privilege, privilege

    About 4 weeks ago i got some much appreciated assistance in setting up my environment so that a user could grant object privileges on objects in another user's schema. This solution required a function to be built in the schema which owned objects.
    I just found the 'GRANT ANY PRIVILEGE' privilege. Anyone know when this came about (we're using 10g) and if there's any problem to granting this?
    We have the init param 07_DICTIONARY_ACCESSIBILITY set to False. Will we be able to keep people of the SYS schema?
    -cf

    Let me specify, I was referring to the GRANT ANY OBJECT PRIVILEGE above, although I do see the GRANT ANY PRIVILEGE out there as well.
    -cf

  • GRANT (Schema Privileges) statement

    Good day!
    Is it possible to access a table in system/manager by granting TYRES privileges?
    Grant select on EMPLOYEE_MSTR to tyres.
    Tyres is another user. I wanted to access all the tables stored in SYSTEM/MANAGER when I logged in as TYRES/TYRES. I am using ORACLE 8 and I haven't use this since.
    Any help is appreciated.
    Thanks!

    First of all: you are in the wrong forum (try the database forum).
    Then: Yes this is possible, but I strongly suggest that you place specific user objects (tables, etc) in the sys tablespace, and do not access the database as system when not necessary.
    cu
    Andreas

  • GRANT syntax : Grant SELECT privileges on tables to a User on a Remote DB

    Hi
    I am having two databases: DEV1 and DEV2. DEV1 is my source database and DEV2 is target database. There is a table in Schema A on Dev1. I have created a PUBLIC DBLINK "TESTDBLINK" in Schema B on DEV2 that connects to Schema A on DEV1.
    Database Schema Table Machine
    DEV1 A EMP 192.168.210.10
    Database Schema Database Lik Machine
    DEV2 B TESTDBLINK 192.168.210.11
    How to grant SELECT privileges on Schema A Table EMP ( DEV1 ) to Schema B on DEV2 ? What is the syntax ?
    e.g. Log in as Schema A on DEV 1
    SQL> GRANT SELECT ON EMP TO *???????*
    Thanks for your inputs
    Harry

    You don't have to grant that table in schema A to schema B.
    Inside schema B, you can just issue a select statement like this:
    select *
    from table@db-link-to-AOracle will connect to the remote instance, using the credentials of schema A, and since A owns that table, Oracle can already access the table.

Maybe you are looking for