Create user with select privilege only one schema

can someone tell me how i can create user with select priviliges only one schema.
i don't want the user to have any select privileges with other schema.
can someone advise me.
Thansk

In general, you would do something like
CREATE ROLE abc_read_only;
FOR x IN (SELECT * FROM dba_tables WHERE owner='ABC')
LOOP
EXECUTE IMMEDIATE 'GRANT SELECT ON abc.' || x.table_name || ' TO abc_read_only';
END LOOP;
CREATE USER your_user ...;
GRANT abc_read_only TO your_userYou create a role, grant the role SELECT access to all the tables in the ABC schema (you can extend this to grant access to views, functions, etc depending on the requirements), and then grant that role to your user.
Justin

Similar Messages

Create user with dba privileges

How do I create a user with DBA privileges in Oracle? The user should be able to create, insert, delete, truncate and other functions without any limits. Do I have to issue GRANT statements?

Hi,
I don't believe there's any way to create a user and grant privileges in one command.
First, create the user:
CREATE USER foo IDENTIFIED BY bar;Then grant the privileges. There's a pre-defined role called DBA that has all the privileges you mentioned.
GRANT dba TO foo;It's easy to write a script to do these two commands together, so you could say
@CREATE_USER foo bar dba

Create new user like another user with select privilege???

our user requested create another user similar to "apps" , but only "selec t" privilege to "apps" objects and other user's objects which grant to "apps".
In this case they can use tool login and do some work.
Does anyone know how to "create a new user like APPS", bur only copy APPS "select" privilege to this new user?
Thanks.

This has been discussed many times in the forums. Pl see this thread Re: How to create a read only database or conduct a search for more hits.
HTH
Srini

Create user with DBA privileges with a restriction to access user data

Hi
I need to create a user with all DBA privileges with a restriction to access all user schemas
Thanks,
Balaji

Use Database Vault - http://download.oracle.com/docs/cd/E11882_01/server.112/e16544/toc.htm
HTH
Srini

Using an NT user with DBA privileges does not permit to create schema : why ?

Hi,
I use an Oracle 8 on an Windows NT server.
I have two NT users with DBA privileges.
But, when I use the migration workbench to create the oracle schema, my users are not granted.
Why ?
Regards.
Pascal

Please clarify your problem.
The workbench creates users (which are visible in the oracle model within the tool) with the password oracle .
I am not sure if you are asking about accessing the database using your OS user identity, or have you found that the users exist but do not have dba privileges.
Turloch
Oracle Migration Workbench Team
null

How to create full new user with all privileges

how to create full new user with all privileges?
and how to delete existing users?
Thanks in advance..

Common solution is probably to use sudo for privilege elevation, wiki should help

Query to get objects list for which the current user has 'SELECT' privilege

Hi,
I want to get tables and views list for which the current user has 'SELECT' privilege excluding sytem tables and views. The privilege information for the current user is scattered in more than one system views. I have following system views
USER_TAB_PRIVS_RECD - Object grants for which the current user is the grantee
ROLE_TAB_PRIVS - describes table privileges granted to roles. Information is provided only about roles to which the user has access.
If the object privilege is granted explicitly like "GRANT ALL ON TABLE_NAME TO "USERNAME" then this privilege entry goes to USER_TAB_PRIVIS_RECD
If the object privilege is granted by ROLE. Role is created with certain object privileges. this role is assigned to user "GRANT ROLE_NAME TO "USERNAME"", then this entry goes to ROLE_TAB_PRIVS
From these findings, I have composed below query
(SELECT DISTINCT TABLE_NAME FROM USER_TAB_PRIVS_RECD) UNION (SELECT DISTINCT TABLE_NAME FROM ROLE_TAB_PRIVS WHERE PRIVILEGE = 'SELECT')
Have I got user's all prvilege details? should I look some other system views?
How to exclude system table privileges details?
(SELECT DISTINCT TABLE_NAME FROM USER_TAB_PRIVS_RECD) UNION (SELECT DISTINCT TABLE_NAME FROM ROLE_TAB_PRIVS WHERE PRIVILEGE = 'SELECT' AND OWNER NOT IN ('SYS','SYSTEM') Is this right?
What about Public role in Oracle? Should I consider public role here?
Oracel Version :11g
I want make this query to work on Oracle 8i or above version
Thanks

>
I want to get tables and views list for which the current user has 'SELECT' privilege excluding sytem tables and views.
>
You will need a hierarchical query to do that.
Try this script for Listing privileges recursively for Oracle users
http://www.adp-gmbh.ch/ora/misc/recursively_list_privilege.html

Changing DB character set for only one schema

We are interested in changing the characterset of only one user from Western European to AL32UTF8.
Could you please verify if the following steps will be correct to do the same.
1. Run CSScan on the one user
2. Fix any issues
3. Export that one user (with NLS_LANG set to <your old database character set>)
4. Create a new database in the AL32UTF8 character set
5. Import that one user into the new database (with NLS_LANG set to <your old database character set>)

Actually your title is a little incorrect. You are not changing CS for only one schema in existing DB which is not possible. You are trying to migrate a schema to new CS DB. Which is totally doable and your approach is mostly correct.
Database Character Set Scanner provide user scan mode
http://download.oracle.com/docs/cd/B19306_01/server.102/b14225/ch12scanner.htm#i1006013
Mostly the issue could be data truncation, especially if you have column defined using char or varchar2 vs nchar and nvarchar2
because char/varchar is defined in bytes, AL32UTF8 is multi-bytes char set, some character of your old data could saved more than 1 bytes in new DB and can't fit into the column size.

Printing invoices with VF31 in only one spool request

Hello,
we want to print a number of invoices with VF31 using only one spool request, as at this time we become one spool request for each document.
The problem is that VF31 calls indirectly RSNAST00 and this program makes a call to the print program where we have OPEN_FORM and END_FORM each time, so this creates one spool request every time the program is called.
Is there a way to print in only one spool request without doing big changes to programs?
Thanks and regards.

Hi,
To append to an existing spool, see the SAP Notes 85318 and 16410.
For spools to be appended the parameters 'New spool request' and 'Do not Append Print Jobs' must be set to 'No' by the application creating the spools.
For Sapscript, when the application call the function module OPEN_FORM in your print program, you can transfer a structure ITCPO to the parameter OPTIONS. Via ITCPO-TDNEWID, you can select the option 'New Spool Request'.Via ITCPO-TDFINAL, you can can select if the spool is closed.
Regards,
Aidan

Proxy user with limited privileges

Hi Expert,
Wanted to know if there is any way to restrict proxy user with certain privileges.
For an example, If i'm logging in as fnadvi[scott]/password....in this certain circumstances, fnadvi would override all the privileges from SCOTT user.
And can do insert/update/delete/select whatever under schema SCOTT.
<quote>
BANNER
Oracle Database 11g Release 11.2.0.2.0 - 64bit Production
PL/SQL Release 11.2.0.2.0 - Production
CORE 11.2.0.2.0 Production
TNS for Linux: Version 11.2.0.2.0 - Production
NLSRTL Version 11.2.0.2.0 - Production
</quote>
Is there any way, that I can setup for user:fnadvi to select certain tables, update certain tables and so on?
The default proxy user can do anything as SCOTT can do.
Thanks

Nadvi wrote:
Hi Expert,
Wanted to know if there is any way to restrict proxy user with certain privileges.
For an example, If i'm logging in as fnadvi[scott]/password....in this certain circumstances, fnadvi would override all the privileges from SCOTT user.
And can do insert/update/delete/select whatever under schema SCOTT.
<quote>
BANNER
Oracle Database 11g Release 11.2.0.2.0 - 64bit Production
PL/SQL Release 11.2.0.2.0 - Production
CORE 11.2.0.2.0 Production
TNS for Linux: Version 11.2.0.2.0 - Production
NLSRTL Version 11.2.0.2.0 - Production
</quote>
Is there any way, that I can setup for user:fnadvi to select certain tables, update certain tables and so on?
The default proxy user can do anything as SCOTT can do.
ThanksThe short answer is NO.
With Oracle everything is prohibited, except that which is explicitly GRANTED.

Problem in creating users with password restrictions

I have enabled the following option in the Authentication>Enterprise tab of CMC.
Must contain at least N Characters and specified N as 7
Enforce mixed-case passwords
However I am able to create user with password as abcd.
Please suggest.
Thanks in Advance

I might be missing something but the rule applies to users changing their pw not administrators creating accounts. If the administrator sets this rule it would be thought/assumed that they would enforce their own rule when creating accounts. The users however should not be able to select 4 character passwords.
I'll run some tests and see if I find out anything different.
Tested this on XIR2 SP4 and XI 3.0 The rules apply to the user not the administrator creating the account.
So create an account while the 7 character pw is enabled. By default the user logs in with the pw (any amount of characters) and is prompted to change their pw. They cannot choose anything less than 7 characters. So unless an administrator creates an account with a password less than 7 characters AND deselects the option to force a pw change. All new users will be forced to select a 7 character password.
This is by design. If it forced the administrator to create accounts without a 7 character pw they could simply deselect the options(as administrators) so there is no security in forcing this.
Regards,
Tim
Edited by: Tim Ziemba on Aug 13, 2008 5:28 PM
Edited by: Tim Ziemba on Aug 13, 2008 5:33 PM

Creating user with extension mobility on prime provisioning 10.5

Hi All,
Does anyone know any document or have any expirenece on creating user with extension mobility on prime provisioning 10.5?
I'm facing challenges on it, appreciate if you have any document or experience to share with me.
Thanks,
Cherry

What sort of issues are you facing?
I'm also having problems, but I think it is system related.
CUCM is LDAP synced.
When PCP tries to provision Extension Mobility Access, it actually seems to be trying to update the user on CUCM (via AXL) (this fails as it is an LDAP user and the values come from LDAP and cannot be updated)
I've got a tac case open.
Bug details are currently hidden - CSCuo11522 - but this one is extension mobility provisioning issue
There was also mention of another bug related to failures to provision users with directory URI's in their LDAP record. I didn't catch a bug ID for this one though.
Cheers,
Tim

How to set a keyframe with setValueAtTime for only one axis?

Hi,
I´d like to set a keyframe for the layer´s scale, anchor point values but separately. Let´s say I want to add the following keyframes to a layer:
time: 0, value: 100, axis: X
time: 0.3, value: 10, axis: Y
time: 1, value: 110, axis: X
If I use setValueAtTime(time ,[x, y]) it always places a keyframe for both axis.
How can I set a keyframe with setValueAtTime for only one axis?
Regards,
Thomas

Dan, thanks for your fast reply. But the problem is a bit difficult to describe for a german like me
I´m try to convert given keyframes from another application. Let me visually show how it handles keyframes that are set on different axis at different times:
X: O---O---O
Y: ---O--O-O
You see when the user sets a keyframe and both axis were modified, both have a keyframe (see the last key). But if only one axis is transformed and the other not, there is only one keyframe. The problem that I try to solve is that AE is only able to set a keyframe for both axis at a given time. So if I set the 3 keyframes of the X axis first, the AE script will set keys on the Y axis simultaneously. That´s bad because it adds keyframe to the other axis where there is no value "cache". So if I would set all keyframes it would look like this:
X: O--•O-•-O
Y: •--O•-O-O
The small dots indicate those "forced" in-between keys.
So is there a "native" scripting way to separate the dimensions (like the position prop) for other props and add independent keyframes?

HT4060 iPad will not charge if hooked by USB to pc or plugged into wall. How do I know if the problem is with iPad, cable or power adapter. I have a 12, 10 and 5W adapters no success with any. Only one lightening cable so can't swap cables.

iPad will not charge if hooked by USB to pc or plugged into wall. How do I know if the problem is with iPad, cable or power adapter. I have a 12, 10 and 5W adapters no success with any. Only one lightening cable so can't swap cables.

I'm sorry but this is too funny to pass up.

DateField: Restrict user to select date only from the calender control ??

How can I restrict user to select date only by using the Calender control, not by typing.
Abhinav

Hi,
This is working perfectly but user can enter or delete date into the text_item >>>through keyboard i want to restrict that they can only select date from calendarSet Insert allowed to 'NO' in property pallete of item ENTRY_DATE.
In ON-ERROR Trigger::
BEGIN
DECLARE
err_code CONSTANT NUMBER := error_code;
err_type CONSTANT VARCHAR2(3) := error_type;
BEGIN
IF (err_type = 'FRM'
AND err_code IN (40200)) THEN
Message('Updates Not allowed, Please Select Your Date from Calendar');
Message(' ');
ELSE
NULL;
END IF;
END;
END;
Thanks,
Bhujendra

Create user with select privilege only one schema

Similar Messages

Maybe you are looking for