Clarification regarding the revoke privilege

The customer revoked "select any table" privilege from a user.
(If SELECT ANY TABLE is revoked from a user, then all procedures contained in that users schema relying on this privilege will fail until the privilege is reauthorized)
In the below user's procedure,there isn't any select statement.But,the procedure still becomes invalid after revoke.why ?
And after the customer had run the procedure again,it becomes valid again .(The customer hasn't recompiled the procedure explicitly).
SQL>create or replace procedure calling
is
i number;
begin
--pining;
dbms_lock.sleep(60);
end;
/

To answer the question as to why the procedure worked when invoked: Oracle automatically attempts to recompile any invalid stored procedure, function, or package when an attempt to execute the objects occurs. If all necessary privileges are in place the recompile works and the execution proceeds. If the recompile is not successful then an error is returned to the caller.
As to why the procedure went invalid when the "select any" privilege was revoked I am not sure though I suspect it has to do with the way the privilege is tracked and maintained internally.
The full Oracle version should have been included in your post. You never know when it is important to some specifics of the question. Such as with 11g Oracle has improved dependency tracking so that many table alterations should no longer result in stored code going invalid in cases where the change does not affect the actual code logic.
HTH -- Mark D Powell --

Similar Messages

  • Need clarification regarding the test cable-diagnostics tdr command

    Hello,
    I've read about the test cable-diagnostics tdr command but I need clarification on the examples listed below to make sure that I am providing the right answer to my co-workers.
    Example 1:
    CXXX7SW17#show cable-diagnostic tdr int g0/20
    TDR test last run on: July 16 10:23:00
    Interface Speed Local pair Pair length        Remote pair  Pair status
    Gi0/20    auto  Pair A     N/A                        N/A                Normal
                           Pair B     72   +/- 10 meters  N/A                Open
                           Pair C     75   +/- 10 meters  N/A                Short/Crosstalk 
                           Pair D     74   +/- 10 meters  N/A                Short/Crosstalk
    Does this example mean that there's a cable length issue in the line which is causing the device that it's connected to not to work properly?
    Example 2:
    CXXX2SW140#show cable-diagnostics tdr int g0/21
    TDR test last run on: July 16 09:16:22
    Interface Speed Local pair Pair length        Remote pair Pair status
    Gi0/21    100M  Pair A     N/A                      Pair A           Normal
                              Pair B     N/A                      Pair B           Normal
                              Pair C     N/A                     Pair C           Normal
                              Pair D     N/A                     Pair D           Normal
    Does this example state that the cable line is okay for use?
    Example 3:
    CXXX1SW19#show cable-diagnostics tdr int g0/22
    TDR test last run on: July 16 06:36:53
    Interface Speed Local pair Pair length            Remote pair Pair status
    Gi0/22    auto    Pair A       1    +/- 10 meters  N/A               Open
                              Pair B     39   +/- 10 meters   N/A               Open
                              Pair C     72   +/- 10 meters   N/A               Open
                              Pair D     1    +/- 10 meters    N/A               Open
    Does this example mean that there isn't a device connected on the other end? No pin-contact?
    Thank you very much for any help you could provide.
    S

    I found this article here at supportforums that seemed like the best explanation I've read so far for TDR info.
    Hope that helps.

  • Just needed some clarification regarding the Viewer Builder and actually publishing your App...

    If someone could let me know if my understanding is correct, that'd be a huge help... So I've designed my publication in InDesign and exported the .zip file from the Folio Producer. I've created all of my certificates/splash screens/icons. Lastly, I just recently went through the steps of the Viewer Builder. I'm now at the stage of this process that requires me to purchase the $395 single edition so that I can enter the serial number in the last stage of the Viewer Builder. Now, to my knowledge, once I get the serial number, Viewer Builder will then give me access to an .ipa file and a .zip file. The .ipa file is for me to test on my iPad, and the .zip would be used to distribute to the App Store. I guess this is where I get confused... Let's say after I test the .ipa on my iPad, I don't like some part of my publication. I know how to update my own documents obviously, and I understand that I would have to export another .zip file from the Folio Producer, in turn requiring me to edit the exported folio link in the Viewer Builder. If I had to do that, would I need to purchase another single edition serial number since the original App was edited? Or would the same serial number apply since I'm editing that same App in the Viewer Builder? My next question is somewhat similar. Let's say all of the information is up to date and I go ahead and publish the App to the App Store. However, maybe a month later or some time in the future, I needed to update a phone number or email address--some little detail like that. Again, I understand that I'd have to update the export link in the Viewer Builder, but would I then need to create a new app since my app was already published? Would I then have to purchase another $395 single edition serial number just so that I can update my information? This seems to be the only thing in this whole process that I could use some clarification on so that I don't run into any surprises in the future. Any help would be great, thanks!

    Hi Joshua,
    When you have purchased the serial, you can rebuild your app with your updated content, as long as you use the same bundleID (applicationID), that is tied to your Apple mobile provisioning profile. The serial number is valid for a one year period.
    After you have submitted your app to Apple and it has been approved, please read: http://forums.adobe.com/message/4172167#4172167
    With kind regards,
    Klaasjan Tukker
    Adobe Systems

  • Clarification regarding the patch 16213642

    Hi All,
    We upgraded our instance to R12.1.3 and applying the RPC patch 16213642. As per the readme,
    B) If you are Non Federals customers:
    If You are applying RPC on 12.1.1 instance then please apply     1. 12359561:R12.PSA.B
         Note: AP patches 11930938:R12.AP.B/11651946:R12.AP.B mentioned in
    readme of this patch are included in this RPC, hence no need to apply
    them manually
         2. 9461290:R12.AR.B
    3. 9756446:R12.IBY.B
    As we are non-federal and on 12.1.3. Should we skip the patches? Could anyone confirm. as its not clear from the readme.
    Thanks

    B) If you are Non Federals customers:
    If You are applying RPC on 12.1.1 instance then please apply     1. 12359561:R12.PSA.B
         Note: AP patches 11930938:R12.AP.B/11651946:R12.AP.B mentioned in
    readme of this patch are included in this RPC, hence no need to apply
    them manually
         2. 9461290:R12.AR.B
    3. 9756446:R12.IBY.B
    As we are non-federal and on 12.1.3. Should we skip the patches? Could anyone confirm. as its not clear from the readme.According to MOS search, those patches are not included in 12.1.3, however you will need to query AD_BUGS table to verify if any of those patches is applied or not.
    If the patches are already applied then you can skip them, but if they are not then you need to apply them.
    Please note that some of those patches have been superseded, so make sure you apply the latest ones.
    Thanks,
    Hussein

  • Whats the available privileges on a table column

    Dear all,
    i want to know whats the available privileges that i can assign on a table coulmn.
    and the revoke privileges
    Best Regards,
    Shooosh

    If I have well understands, the principals are
    The following are the object privileges that can be granted to users of the
    database:
    SELECT Grants read (query) access to the data in a table, view, sequence,
    or materialized view.
    UPDATE Grants update (modify) access to the data in a table, column,
    view, or materialized view.
    DELETE Grants delete (remove) access to the data in a table, view, or
    materialized view.
    INSERT Grants insert (add) access to a table, column, view, or
    materialized view.
    EXECUTE Grants execute (run) privilege on a PL/SQL stored object, such
    as a procedure, package, or function.
    GRANT SELECT, UPDATE ON CUSTOMER TO JAMES;
    You can revoke a user’s object privileges and system privileges by using the
    REVOKE statement.
    but I believe that you am more profit reading manual: dba administrator or sql reference

  • Help needed regarding the deployment architecture for PROD env

    Dear All,
    Please help me with some clarifications regarding the deployment architecture for PROD env.
    As of now I have 2 single node 12.1.1 installations for DEV and CRP/TEST respectively.
    Shortly I will be having a PROD env of 12.1.1 with one DB node and 2 middle tier (apps) node. I need help in whether -
    1) to have a shared APPL_TOP in the SAN for the 2 apps node or to have seperate APPL_TOPs for the 2 apps node. The point is that which will be benificitial in my case from business point of view. The INST_TOPS will be node specific in any case right?
    2) Where to enable the Concurrent Managers, in the DB node or in the primary apps node or in 2 apps node both for better performance.
    12.1.1 is installed in RHEL 5.3
    Thanks and Regards

    Hi,
    Please refer to (Note: 384248.1 - Sharing The Application Tier File System in Oracle E-Business Suite Release 12).
    For enabling the CM, it depends on what resources you have on each server. I would recommend you install it on the the application tier node, and leave the database installed on one server with no application services (if possible).
    Regards,
    Hussein

  • Need Clarification for the Attribute Property (Calculated)

    hi
    I am new to Web Dynpro and i am in need of clarification regarding the Attribute
    Property - Calculated
    Thanks in Advance
    Regards
    S.Chandran

    Hi,
    Calculated Property in webdynpro is required when you want to handle node context attribute programmatically.
    When you say Context Attribute as True, it generates two methods, Setter and Getter Method for that attribute.
    In getter method you will be getting one ‘element’ it is the context node, where you created attribute. These methods will be called automatically.
    For more Info check this link
    Related to calculated property
    Hope that helps

  • How to revoke the alter privilege.

    I'm wondering how to revoke the alter privilege for the owner of a table.
    Any ideas?
    Thanks
    Todd

    nop, owner is the boss, this is DAC. If you don't trust the user, you don't need to give user connect to the schema.
    <BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Todd Thompson ([email protected]):
    I'm wondering how to revoke the alter privilege for the owner of a table.
    Any ideas?
    Thanks
    Todd<HR></BLOCKQUOTE>
    null

  • Oracle users and revoking privileges

    Hello,
    To test out some error conditions in an application, I'd like to temporarily revoke a privilege on a table from a database user.
    I am trying to do that, logged into SQL*Plus as "sys" or "system", and running the command:
    REVOKE UPDATE ON USERX.TABLE_A FROM USERX;
    However, this is failing with the following message:
    ORA-01927: cannot REVOKE privileges you did not grant
    I've also tried logging into my server as oracle, typing "sqlplus /nolog" at the command line, then "connect internal as sysdba;" from the SQL*Plus prompt, and then running the REVOKE command, but that results in the same error message.
    So basically my question is: if neither the "sys" nor the "system" user is able to revoke the privilege from the "userx" user (because they did not specifically grant it), how would I determine which oracle user would be able to do this? Or how else would I go about revoking the privilege?
    I'm running Oracle8i Enterprise Edition Release 8.1.6.1.0 on Linux.
    Thanks for your help with this. I am not very familiar with Oracle DBA concepts.

    Hello,
    I am fully agree with Eric....Yes! a User created a table means...the User is OWNER of the table....and that means......the User is by default having the privilege of DML operations...i belive...OK
    And the privilege which you have not granted...then how could you revoke them...Whether it may b e SYS or SYSTEM or for that matter any User a/c.
    If you really want to restrict the restrict option on table owned by your User, then i can suggest to put a Schema Level Trigger on DML action. This will be fired when update in invoked on table by the user and there you can have your STOP mechanism.....BUT..this is not really suggested.
    Regards,
    Kamesh Rastogi
    Oracle - DBA

  • How to "revoke" privilege with dbms_xdb.changeprivileges

    Dear All!
    How to "revoke" privilege granted with the following code
    DECLARE
    r pls_integer;
    priv xmltype;
    priv_data varchar2(2000);
    BEGIN
    priv_data :=
    '<ace
    xmlns="http://xmlns.oracle.com/xdb/acl.xsd"
    xmlns:dav="DAV:"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://xmlns.oracle.com/xdb/acl.xsd
    http://xmlns.oracle.com/xdb/acl.xsd
    DAV:http://xmlns.oracle.com/xdb/dav.xsd">
    <principal>DVLP</principal> <grant>true</grant>
    <privilege><all/></privilege>
    </ace>';
    priv := xmltype.createxml(priv_data);
    r := dbms_xdb.changeprivileges('/xdbconfig.xml', priv);
    END;
    This code is generated by Enterprise Manager
    I guessed that it is necessary to replace grant with deny
    But there is not schema defenition for deny is parent 'ace'
    Thank you in advance for help
    Regards
    Artem

    Dear Mark!
    Thank you for you reply
    I'll try and let you know about results
    Note that This code was generated by Enterprise Manager
    and it seems that it generates the same code when you try
    to grant and revoke privilege!
    Regards
    Artem

  • The exception Privileged instruction.

    Hello,
    I builded a dll which communicates with TDC card. But when I call dll from labview. It gives me the error
    The exception Privileged instruction.
    (0xc0000096) occured in the application at location 0x02e6121c.
    I have installed giveio driver.
    I am not getting where am I geeting wrong. Can somebody help me out.
    Regards,
    Maithili

    Maithili,
    It very much sounds like the error is in the DLL that you built. I assume that you have tested it outside of LabVIEW?
    Do you know exactly where the error is happening? You should set a breakpoint on the Call Library Function node and if the error happens before then, then the error is in LabVIEW. If the error happens during the Call Library Function, then the error is in the DLL itself. From there, you can print information from your DLL as you go to see where the crash is happening or use the information in the "Using External Code in LabVIEW" manual that is on your PC in the manuals directory under your LabVIEW directory.
    With no files (and no hardware to test if I had), I cannot offer any more advice. If you can do a little more digging or post a
    more detailed explaination of your issue, then the community can take another look.
    Randy Hoskin
    Applications Engineer
    National Instruments
    http://ww.ni.com/ask

  • Clarification regarding Shadow Table

    Hi All,
    Clarification regarding Shadow Table. FKK_GPSHAD is a shadow table that belongs to Business Partner. The doubts that i have is
    What is Shadow Table?
    What is the purpose of Shadow table?
    Is it correct way to update Shadow table Manually(Not using any BAPi etc....)?
    Is any BAPI available to update The above mentioned Shadow table.
    Thanks in Advance..

    Reclustering InfoCubes:
    With reclustering, the InfoCube fact tables are always completely converted. The system createsshadow tables with a new clustering schema and copies all of the data from the original tables into the shadow tables. As soon as the data is copied, the system creates indexes and the original table replaces the shadow table. After the reclustering request has been successfully completed, both fact tables exist in their original state (name of shadow table) as well as in their modified state with the new clustering schema (name of original table).
    You can only use reclustering for InfoCubes. Reclustering deactivates the active aggregates of the InfoCubes; they are reactivated after the conversion.
    Reclustering DataStore Objects
    Reclustering completely converts the active table of the DataStore object. The system creates a shadow table with a new clustering schema and copies all of the data from the original table into the shadow table. As soon as the data is copied, the system creates indexes and the original table replaces the shadow table. After the reclustering request has been successfully completed, both active tables exist in their original state (name of shadow table) as well as in their modified state with the new clustering schema (name of original table).
    You can only use reclustering for standard DataStore objects and DataStore objects for direct update. You cannot use reclustering for write-optimized DataStore objects. User-defined multidimensional clustering is not available for write-optimized DataStore objects.
    Pls chk this thread:
    Shadow Table?
    http://help.sap.com/saphelp_nw2004s/helpdata/en/47/5cf74153b6ca17e10000000a155106/content.htm
    Hope this helps,
    Reward points...

  • Clarifications regarding Logistics Invoice Verification

    Hi SAP Gurus,
    I just wanted to confirm with you something that I noticed regarding the behavior of SAP MM LIV:
    1. It seems that for purchase orders with Account Assignment, you can change the Account Assignment Category in the LIV process. Say for example, I had a PO line item charged to a Cost Center; however, upon LIV, I can change the charging to say an Asset instead. I was just wondering why would SAP allow such transaction/s to happen? Wouldn't it compromise the integrity of the whole document trail (PO account assignment is different from the LIV)?
    2. Is there a way to edit the Account Assignment for a Purchase Order line item even if that item has been fully received and invoiced? I checked with the standard test system that I have at the moment and I observed that you can still edit the other PO details (quantity, price) even though the PO line item has been fully GR'ed and LIV'ed. However, the Account Assignment field is set to Display only. I checked the field selection for purchase orders and found no connection (the Account Assignment field is set to optional for all relevant factors)
    Hope to hear from you soon!
    Best regards,
    DeLo

    Hi Delo,
    Please find answers to your queries below in bold.
    1. I was just wondering why would SAP allow such transaction/s to happen? Wouldn't it compromise the integrity of the whole document trail (PO account assignment is different from the LIV)?  -
    There could be some business scenarios in some organisations, where in Procurement team uses generic cost centre (header), which is specific to particular department or group, to procure. But at the time of Invoice Receipt, AP team knows exact cost centre or order, etc  to post the amounts. To cover these kind of scenarios, SAP probably has provided the option to change acount assignment.
    2. Is there a way to edit the Account Assignment for a Purchase Order line item even if that item has been fully received and invoiced? -
    These field changes at various levels can be configured via t-code OME9.
    a) IR Changeable - This field if selected will allow to change the account assignment of a purchase order item at the time of invoice receipt.
    b) Acct. assg. changeable - This field is selected will allow to change account assignment for an item following goods receipt or invoice receipt.         
    Hope this clarifies your queries.
    -Ravi

  • Need clarification on the Hyperion stuff

    I have some clarification on the following question which i came in certification last 2 days back.
    A calcualtion is performed on a database for which create block on equation is off.The command SET CREATEBLOCKONEQ ON is issued immediately before an equation in the script.which statements accurately describe when blocks will be created?
    1) blocks will be created ONLY when the equation assigns non - constant values to members of sparse diemension.
    2)blocks will be created only when the equation assigns constant values to memebers of sparse dimension
    3)blocks will be created when the equation assignes either constant or non constant values to a members of sparse dimension
    4)No blocks will be created.
    please clarify on the above.

    Vinith,
    I suppose I could ask the obvious question: How do you happen to have a question from an Oracle certification test? I don't have access to those questions. How do you?
    In the interests of actually providing (what I at least believe) the right answer, I think this thread is confusing what the docs say with what Essbase does.
    If you use SET CREATBLOCKONEQ ON, the docs state that Essbase will create a block even with a non-constant assign. But Essbase will also create a block with a constant assignment -- it always does that. That makes the third answer correct.
    Regards,
    Cameron Lackpour

  • Bug: Grant/Revoke Privileges (11.1.0.5.10 Beta)

    Started getting this when attempting to change Privileges on a proc:
    "Could not launch the Grant/Revoke Privileges dialog:
    Value was either too large or too small for an Int32."
    This is happening consistently on one database but not on another.
    John

    I am also seeing this bug. When I right click on anything in the Server Explorer under my ODP based connection, I get this same message. It happens when I right click on any table icon and select "Privileges..."
    -Valkyrie-MT

Maybe you are looking for

  • GR/IR clearing value in local currency

    Hi All, I have a service PO (Item cat D) in which the vendor and local currency is same as USD. when I see PO history, the amount of SES and GR (101) is shown as 0 (ZERO) in  "GR/IR clearing value in local currency" colunm, however the amont of IR is

  • I can't drag files from one shared library to another

    My computers recognize and display all shared libraries, and the files play on each computer, but files cannot be copied from one to another.  Is there a solution to this?

  • Mail error msg - can't open Mail program.

    When I click on the Mail icon I get an error message that reads (in part) "...Mail cannot update your mailboxes because your home directory is full." I've run Disk Utility permissions repair, Disk Warrior, and Tech Tools 4. I've restarted the compute

  • Manage Blob files

    Hi there, I have a problem: I'm trying to open a .jpg file stored in a BLOB field of the Database. I've followed the instructions founded on the online help but what I get is a file which is totally different from the original one! here's my piece of

  • Using Custom Legend without Using Legend Class for line Chart

    Hi , I m trying to create legend with checkbox without using Legend class of flex, but problem is that how to use itemrenderer of lineseries in the legend. My requirement is like this: