Create user who can update another schema table

Hi,
We have a prod system under which we need to update  the application schema by running different update statement and  create/execute function,procedure,package body. This is very easy if you use the owner schema. But i need to run those activities from another user due to some restriction. How can i do that??
May u suggested to give update any table privilege..but this would give all the dictionary table access also.
Is there any privilege that would allow any other user to update another schema table without using the schema name infront of the table name??
Plss suggest

John,
Can we use public synonym for it ?  I don't know the security risk for it though :
SQL> connect hr/hr
Connected.
SQL> select * from scott.emp;
select * from scott.emp
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> connect scott/tiger
Connected.
SQL> create public synonym scotemp for scott.emp;
Synonym created.
SQL> connect hr/hr;
Connected.
SQL> select * from scotemp;
select * from scotemp
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> connect scott/tiger
Connected.
SQL> grant select on emp to hr;
Grant succeeded.
SQL> connect hr/hr
Connected.
SQL> select * from scotemp;
14 rows selected.
SQL> show user;
USER is "hr"
SQL> update scotemp set ename='SMITHX' where empno=7369;
update scotemp set ename='SMITHX' where empno=7369
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> connect scott/tiger
Connected.
SQL> grant update on emp to hr;
Grant succeeded.
SQL> connect hr/hr
Connected.
SQL> update scotemp set ename='SMITHX' where empno=7369;
1 row updated.
SQL> rollback;
Rollback complete.
SQL>
Regards
Girish Sharma

Similar Messages

  • VsFTPD, creating a user who can upload

    Hello everyone!
    I setup ftp-server with this configuration:
    listen=YES
    anonymous_enable=YES
    local_enable=YES
    write_enable=YES
    local_umask=022
    anon_upload_enable=YES
    anon_mkdir_write_enable=YES
    anon_other_write_enable=YES
    dirmessage_enable=YES
    xferlog_enable=yes
    connect_from_port_20=YES
    xferlog_std_format=YES
    idle_session_timeout=600
    data_connection_timeout=120
    anon_world_readable_only=NO
    I have several questions of finishing setup.
    Everything I wanna work except one. I don't know how to create the user who as a client can upload files. Now I have the directory upload, where everyone can do anything that he want (upload delete rename etc..) and others dir such as music, films where users (they all will be anonymous) can only download. I want to create user who can upload files to this directories. How can I make this? now no pam, no authantification.
    Another question. How can I limit space of upload's folder?
    another info, permissions of ftp folder: dr-xr-xr-x  3 ftp    ftp      4096 2009-10-04 21:09 ftp
    upload folder:drwxrwxrwx 2 root root 4096 2009-10-06 22:58 upload
    I think it's not pretty good that upload is root's folder. what aobut this?
    Thanks!! and sorry for my english, i first time write so long text on foreign forum))

    ok. I had done all writing in the guide. but this example is without anonymous users. I want to create two types of directories ("shared" and others) and two types of users (anonymous and several admins which must log in)
    1) anonymous users who can do anything in directory "shared" and only download in other directories.
    2) admins users can upload and delete files or folders at any directory.
    home directories aren't interesting to me.
    What permissions should specify for dir?
    thanks in advance for patience

  • Creating a database link to another schema in the same database

    Hello,
    I'm trying to create a database link to another schema in the same database. It was created without errors, but when I try to use it I receive "ORA-12154: TNS:could not resolve the connect identifier specified" message...
    I'm trying to do it because on my production enviroment the databases are separated, so there I can use database links without problem, but in my development environment it's all in one database separated by schemas...
    So I'm trying to simulate the same system to not need to rewrite the query every time I move from development to production environment.
    Any ideas?
    Thanks

    Hi,
    Yes, you can create a database link to your own database. I've done it before for exactly the same reason you want to.
    (By the way, I think it's a good reason. What are the alternatives?
    Having different versions of code for Development and Production? Absolutely not! Terrible idea!
    Using synonyms or substitution variables that are set differently in the different databases? That might be more efficient than a database link, but efficiency probably isn't such a big issue in Development.
    [Conditional compilation|http://download.oracle.com/docs/cd/B28359_01/appdev.111/b28370/fundamentals.htm#sthref250]? This might be good; it has all the efficienty of the above options, with more clarity.)
    Assuming you do want to stick with a database link, not all errors are caught when you create the link.
    Is the Development database in the tnsnames.ora file of the Development server? Do you have other database links, either in the Development server or pointing to it, that work? What is different about the ones that work, and the one that doesn't?
    Edited by: Frank Kulash on Oct 14, 2009 1:58 PM
    The more I think about this, the more I agree with the earlier respondent: synonymns are a good solution for this.
    To that suggestion you replied:
    On this way I might use "select * from SCHEMA.table" instead of "select * from table@SCHEMA"... I looking for an option to use the second way...Actually, the suggestion was that you say:
    select  *
    from    SCHEMA_table_ptr;where schema_table_ptr is a synonym.
    In Development, that synonym is defined as schema.table.
    In Production, that synonym is defined as table@SCHEMA
    Why are you "looking for an option to use the second way"?
    If you think that people reading the code should realize that the query is being done via a database link (at least in Production), then add a comment.

  • How to craete a user who can only browse the dashboard??

    Hi friends,
    How to create a test user who can only browse the dashboards and not able to modify any of the reports using answers??
    Please tell me the steps.
    Thanks

    @Alastair: I thought it'd be nice to start a new trend in the forum.
    @bob123: Depends on how you manage your user and groups in general. Everything created in the RPD? Read from some Oracle tables? LDAP/ADSI? You can do it in the RPD, in the web catalog (Edit Group -> Group Membership ==> The table below contains a list of the current members of this group. Users can join the group by entering the group's password from the Join Catalog Group screen, or you can manually add them by clicking Add New Member below.) or outside.

  • How to set the user who can access to repository

    Hi,
    I know we can create user and group in the tools->security.And if this users is belong to Administrators Group, it can access to RPD and do some modify..
    Can we create group or user who can access RPD in some situation(like mentioned in HELP, A can access to repository on Mondays and Wednesdays, B can access to repository on Saturdays and Sundays) and how to set the privilege..
    Thanks
    anne

    Hi Anne,
    The example specified in Help is about restricting query execution on weekdays/weekends for a particular webgroup. Inorder to configure such access ,
    Double click on the web group name -> Query Limits tab ->Click on Restrict button provided against the physical connection pool ->Select Allow/Disallow by selecting a particular time period.
    Rgds,
    Dpka

  • I have a requirement where I have to give the list of users who can access a specific computer. I am new with PS. Do you have a script to list users that can access a computer object of AD ?

    I have a requirement where I have to give the list of users who can access a specific computer define in AD.
    I am new with PS.
    Do you have a script to list users that can access a computer object of AD ?
    I have executed the following script  but it does not give me the access rights of who can access the computer 'computername'
    How can i have this information. please help
    Import-Module activedirectory
    $computer=get-adcomputer "computername" -properties ntSecurityDescriptor
    $omputer.ntsecurityDescriptor.Access | select-object -expandproperty IdentityReference | sort-object -unique

    I would say that, since the OP has so little info, there are no policies in use.  It there were then this question would never be asked the way it is being asked.
    I had a client call with a letter from their insurance company; an accountant with malpractice insurance.  THey asked the same question inmuch the same way.  "What computer can you users access?"  The question should be more like
    "Do you have a policy that restricts access to computers and do you audit for compliance?"
    I have had other clients whose insurance asked the question in that way.  It produces a better view of what should be happening and how to show compliance.
    I recommend that companies being asked these questions by their legal departments or insurance companies should contract with a god computer security consultant to assist with answering these very tricky questions.  Of course if it is just you boss's
    curiosity  then you may need to discuss his requirements with him in more depth.
    ¯\_(ツ)_/¯

  • Error occurred in deployment step 'Uninstall app for SharePoint': Only users who can View Pages can list Apps

    While deploying the SharePoint Hosted App I am facing the issue  'Uninstall app for SharePoint': Only users who can View Pages can list Apps"
    - Provided the permissions for App Management and Subscription Services as well as DB.
    - Added into Host web as SC Administrator
    Thanks in Advance.

    Hi,
    The user you are running with Visual Studio should have read permission on the pages of SharePoint web you are trying to deploying your app.
    I suggest you add the login user to the SharePoint web in the “Site Settings”->”People and Group”.
    Here is a similar thread for your reference:
    http://sharepoint.stackexchange.com/questions/68590/error-occurred-in-deployment-step-uninstall-app-for-sharepoint-only-users-who
    More reference:
    Step by step How to configure environment for app development:
    http://gianespo.wordpress.com/2014/01/30/step-by-step-how-to-configure-environment-for-sharepoint-app-development/
    Best regards
    Zhengyu Guo
    TechNet Community Support

  • Using imessenger is it free to chat with iphone users who are in another country?

    Using imessenger is it free to chat with iphone users who are in another country?

    my understanding is yes because it worked with ipod touches via your Apple ID and there is no payment process agreement when setting up iMessage.

  • How to restrict users who can use a submit button.

    I have a submit button which I would like to limit the names of the users who can use it. Is there any way I can limit who can use it.
    Thanks

    Hi
    Use SUIM and find the users have this authorization.
    Here the first tab user--list of users with critical authorization select that and u can find the users list.
    Regards
    Bhaskar
    Edited by: bhaskar1818 on Jul 22, 2008 2:32 PM

  • How can I find the user that created a user account and the user who last updated the account

    How can I find out who created a user account and who last updated the account. I think that this is the same information that is displayed in the description field on the General tab.
    I am using ADO commands and vbscript
    ug3j

    I should point out that there are two attributes of all AD objects that can help you track down the correct information in the system logs. These are the whenCreated and whenChanged attributes. This will tell when the object was created and when it was last
    modified, which should help when you search the logs. Also, while whenCreated is replicated to all DC's, so they will all have the exact same creation time, the whenChanged attribute is technically not replicated. The date/time on each DC reflects when
    the last modification was replicated to that DC. The values will differ slightly on each DC, reflecting how long it took for the change to replicate.
    Richard Mueller - MVP Directory Services

  • Another user who can't use an Apple TV

    After much anticipation I managed to get my hands on an Apple TV 2 days ago. Unfortunately, I seemed to have joined the club of folks who can't seem to get their Apple TVs up and running (see elsewhere on this forum, e.g. http://discussions.apple.com/thread.jspa?messageID=12471381). The story goes like this...
    1. Apple TV connects to my wifi, but then sits on the "Waiting for network services..." screen with pin wheel indefinitely (I waited for over 6 hours, periodically knocking the screensaver off, making sure it didn't go to sleep).
    2. Pressing the menu button while it was failing to connect would take me to the main menu. Movie thumbnails were visible and I could watch previews. Couldn't connect to youtube but I could connect to my MobileMe gallery.
    3. Couldn't activate home sharing as it claimed my iTunes Store username/password were invalid. This isn't the case as the same username/password combination work fine on my other machines (an iMac, two MacBooks and an iPhone). To be double sure I updated my account details to have a password with more than 8 characters including a number and a combination of uppercase/lowercase) and checked my c/card details were up to date. Still no joy. So, I can't connect to my iTunes library to watch video or listen to audio (making the ATV a bit pointless).
    4. Having read all the discussion of this on the forums (and the Apple trouble shooting guides) I've tried the following
    - making sure all ports are open on my router (especially the relevant ports for NTP etc)
    - checking the network traffic was OK (all my devices are able to get network time OK, use Home Sharing withing the LAN, connect to the iTunes store etc)
    - Updating to iTunes 10.0.1
    - Turning off/on home sharing on my iMac
    - Restarting my machines
    - Restarting my router
    - pulling my hair out
    5. I called apple support who were useless. This was a real blow. In the past, I've always found Apple support to be brilliant, but today the guy I spoke to couldn't get me off the phone fast enough. All he wanted to do was email me a link to the support page, even though I had already told him that I had spent two days working through these!!! Totally useless. This is a real shame since the support was one of the reasons to choose Apple. If I wan't bad service, I'd have bought a Dell.
    6. I returned the ATV to the Apple Store. Unfortunately, they were unable/unwilling to test it in the store but offered me an exchange or a refund. In the end I left with a new unit. Unfortunately this has not solved the problem - exactly the same result with the new unit.
    So where am I left? Two units won't work in my home, so it's unlikely to be a faulty unit. I tried my router wide open (allowing all incoming/outgoign traffic) so I don't see that being the problem. My ISP (Plusnet in the UK) clearly isn't blocking the required ports as my other machines (using the same Netgear DGN2000 ADSL wireless router) seem to be able to use these ports/services just fine.
    I can see that some would take the above as evidence that my network is to blame. However, all the tests I can do suggest that my network and router are working perfectly well and that the ATV should also work. At the end of the day, if I went and bought an airport extreme (which costs 150% of the cost of the ATV) I'd still have to connect to my ISP though my router since the airport extreme isn't an ADSL router. Frankly, I resent having to buy new routers just to test to see if the ATV will work. The kit I have meets the industry standards to the ATV should work!!
    The replacement ATV is going back to the store for a refund this week, unless anyone has a useful suggestion?

    Alley_Cat - all good advice, thanks. Sadly, I've already tried most of your suggestions...
    Alley_Cat wrote:
    You seem to be partially connected to the internet, so AppleTV is seeing the that, it looks as though LAN communication is the issue.
    Yes and no. As I understand it, Home Sharing verification is via the iTunes store, and my account wont verify, so there are still some WAN issues. "Partially connected" seems to be the right word!
    Alley_Cat wrote:
    I can't say I've ever seen 'waiting for network services', but had problems getting Home Sharing to work initially as it seemed to disable itself when I pressed 'Done' at the end of the enabling process in iTunes. Try disabling/enabling again and not pressing done just clicking movies or something in iTunes - if I didn't do this the Home Sharing icon kept disappearing.
    I've seen this reported elsewhere on the forum. Tried not pressing "done" after activating Home Sharing, but still no connectivity
    Alley_Cat wrote:
    I would be tempted to configure your router to assign a fixed LAN IP address for AppleTV based on it's MAC address, then restart everything. Also try temporarily disabling any wi-fi security, can you then connect fully (you may have done this I think)?
    If you have a long ethernet cable or ethernet connection is simple (nearby router, or direct to a local computer) try connecting that to the router to see if it's a wi-fi issue.
    Yeah, already enabled all traffic, tried with both fixed IP and DHCP assigned IP, both wifi and wired, Also tried connecting via my iMac. Makes no difference
    Alley_Cat wrote:
    You can clearly connect in part to the internet, but it's odd you can access MobileMe, and not YouTube. It would be worth checking your ISP is not blocking anything or having issues - you've already sorted the router by the sounds of it.
    I contacted my ISP, but this seems unlikely. All my other Apple devices seem to be able to communicated just fine over the internet.
    Alley_Cat wrote:
    On the Mac, things like NetBarrier, Little Snitch might block AppleTV if not configured to allow traffic. Temporarily disable software firewalls including OS X if you haven't done so.
    Don't have any of this software (and the software firewalls are all turned off)
    Alley_Cat wrote:
    I can't remember at the minute if AppleTV 2 has an iTunes Store country setting (old one did) but if your store credentials are not being recognised it could be defaulting to the wrong country for some reason, and not set to UK. Another possibility is that the authentication happens via iTunes (I don't think it does in all honesty), so if AppleTV isn't seeing iTunes, it may not be able to authenticate and gives a vague error message.
    Early ATV2 users noted that they had to change the country settings from US, but mine was shipped with UK already set.
    Alley_Cat wrote:
    This is obvious but I assume you are not inadvertently trying to enable Home Sharing with your MobileMe credentials - it could easily be done, but doubt your doing that. I also assume you don't have multiple itunes Store login names.
    One final thing I would do before giving up is to create a dummy account and set up a new itunes library with a few things in it, enable Home Sharing etc again with this - if there's a configuration issue with the existing user's iTunes account, or some library corruption, the communication could be falling over as it encounters an error in the library it can't deal with (poor error handling in itunes or AppleTv code).
    Always good to rule out user-stupidity!!! :o)
    I've made sure I'm using the correct username/password combination for my iTunes account (this is different from my MobileMe account). I've also made sure that my password conforms to the requested standard (min 8 chars, at least 1 numeric, at least 1 uppercase, at least 1 lowercase, no spaces). I've also tried creating a new iTunes store account. Still no good.

  • Updating another custom table from create screen

    Hi,
    In create screen i have some fields which has to be updated in another custom table. I created package and procedure in it and i am passing the parameters into it.But somehow it is is updating 4 filed and remaining two are not updated.
    How to check that what are the values passed in the package,so that i can find out the reason behind it.
    Kindly reply asap..

    Put some debug statement and check the root cause.
    http://oracleanil.blogspot.com/2009/04/favourite.html
    And if you are running page locally then use
    System.out.println("Test");Thanks
    --Anil
    http://oracleanil.blogspot.com

  • Create Index on another schema table stored in my table

    Hi,
    I want to create index on a table column which is in another schema from my schema and the index to be stored in my schema.
    ex: current user 'hr'
    sql>create index idx1 on scott.emp(eno);
    Does the above query works??
    thanks,
    Sri

    Why cant you give a try?
    Are you getting any error message?
    See below..
    SQL> show user
    USER is "SCOTT"
    SQL> grant select on emp to hr;
    Grant succeeded.
    SQL> conn
    Enter user-name: hr@***
    Enter password:
    Connected.
    SQL> show user
    USER is "HR"
    SQL> create index ndx on scott.emp(sal);
    create index ndx on scott.emp(sal)
    ERROR at line 1:
    ORA-01031: insufficient privileges
    SQL> conn
    Enter user-name: system@*******
    Enter password:
    Connected.
    SQL> create index ndx on scott.emp(sal);
    Index created.
    SQL> drop index ndx;
    Index dropped.
    SQL> grant create any index to hr;
    Grant succeeded.
    SQL> conn
    Enter user-name: hr@*******
    Enter password:
    Connected.
    SQL> create index ndx on scott.emp(sal);
    Index created.Edited by: jeneesh on Oct 8, 2012 3:53 PM

  • Create a user who can run only 'rman script'

    Dear Friends ,
    I have created a 'rmanback; user who only can run the RMAN script only . I have created user like follwoing way :
    1)
    SQL> CREATE USER rmanback IDENTIFIED BY rmanback;
    User created.
    SQL> GRANT RECOVERY_CATALOG_OWNER TO rmanback;
    Grant succeeded.
    SQL> GRANT CONNECT, RESOURCE TO rmanback;
    Grant succeeded.
    2)
    And My rman script is :
    rman target rmanback/rmanback@orcl <<!
    run
    allocate channel t1 type disk;
    backup format 'df_%t_%s_%p'
    (database);}
    3) And I make a situation where sys user cannot enter the database using its password . For this reason i give the follwoing entry in "sqlnet.ora" :
    SQLNET.AUTHENTICATION_SERVICES=(NONE)
    Now when I run the script then it shows the follwing error :
    [oracle@localhost RMAN]$ sh rman.sh.copy
    Recovery Manager: Release 10.1.0.3.0 - Production
    Copyright (c) 1995, 2004, Oracle. All rights reserved.
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
    RMAN-00571: ===========================================================
    RMAN-00554: initialization of internal recovery manager package failed
    RMAN-04005: error from target database:
    ORA-01031: insufficient privileges
    Now plz tell me where is the problem . If I make any mistake then plz inform me .....
    Thx
    -----

    SYSOPER is a privilege that is not enough for recovery manager. Talking about SYSOPER privileges to perform a backup/recover operation from a sqlplus prompt, SYSOPER can perform backup operations, but when recovery is required, the only kind of recover it can perform is a complete recover, if the user requires any kind of incomplete recover it won't be possible since SYSOPER cannot issue neither of until time|change|cancel|controlfile operations, which require the user to connect with the SYSDBA role.
    If you attempt to connect to the database by means of recovery manager with an account with SYSOPER role, you will get the following error:
    RMAN-00571: ===========================================================
    RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS===============
    RMAN-00571: ===========================================================
    RMAN-00554: initialization of internal recovery manager package failed
    RMAN-04005: error from target database:
    ORA-01031: insufficient privilegesFor the OP, there is no way to create some sort of operator accout, since this will have to connect as SYSDBA to perform all operations required by recovery manager, you will absolutely have to rethink your security strategy, and as I previously posted, you should use OS authentication and protect access to the host server.
    ~ Madrid
    http://hrivera99.blogspot.com/

  • Copy data from one schema to another schema tables

    Hi,
    I was doing a copy using sql developer copy feature, data copy worked perfect but for few table data didn't move there are about 30 tables from schema prod to schema dev i need to move tables are already created only data needs to be moved from prod to dev
    Can you suggest me any method were I can move all the tables data at a time from one schema to another. Please suggest.
    Thanks
    Sudhir

    Hi,
    If table structure is the same then:
    insert into dev.table_name
    select
    from
      prod.table_name  --if prod is in another database change to prod.table_name@db_link_to_prod_db
    commit
    ;Hope this helps. Otherwise give some more info about where these schema's are.
    Regards,
    Peter

Maybe you are looking for

  • When I define my R/3 system in XI SLD,I got CIM_ERR_ALREADY_EXISTS message

    <b>CIM_ERR_ALREADY_EXISTS: Instance already exists: SAP_BCSystem.CreationClassName="SAP_BCSystem",Name="BRP.SystemNumber.0020270914.SystemHome.sapprddb"</b> Before I defined R/3 system in XI SLD wrongly, after that I delete from Business and technica

  • XML style sheet error at Validate step in FDM for few locations

    Hi All, Users are facing the "XML page cannot be displayed - The style sheet doesnot contain a document element. The style sheet may be empty, or it may not be weel-formed XML document.." for very fre locations while validating the data. Please advis

  • How to Remove Blackberry ID from Phone without Password

    Hey People. I have a Blackberry Curve 9300 Unlocked. I have the Blackberry Add On to my contract. The blackberry i own is currently 2nd hand as i bought it off the market. I can't access Blackberry App World, everytime I try it, it comes up with some

  • Error Installing Premiere Elements 9 - Exit Code 7

    Hi, I'm trying to install Premiere Elements 9 on a Mac (running 10.6.4), but it always comes up with an error, and the program can't be installed. Last time I tried it got to about 95% but then gave me this error: Exit Code: 7 -----------------------

  • Does'nt accept my account

    i give my iphone to my cousin, when he go to his dorm, he make restore, he make DFU mode when he restore because it has my icloud, my cousin restored my iphone and asked my icloud, my cousin tried so many times wrong account and pssword, and now my r