Datapump and table privileges

I am doing an export and import with the DBMS_DATAPUMP api. I am doing a SCHEMA version. Do explicit table grants get included in the dump file. After I import the SCHEMA back into the database I have to regrant execute on DBMS_LOB and DBMS_SQL to my SCHEMA. Is this correct?
thanks.

Hi,
Yes, this is correct. Let's say you are exporting schemas=scott, what will get exported are grants owned by scott, not grants given to scott.
Dean

Similar Messages

ALTER TABLE privilege and CREATE/DROP/ENABLE/DISABLE constraint privilege

Hi,
I am looking for some detailed info regarding the below previleges
ALTER TABLE, CREATE CONSTRAINT, DROP CONSTRAINT, ENABLE CONSTRAINT AND DISABLE CONSTRAINT PRiVILEGES.
I have two schemas 'A' and 'B', I want to provide user 'A' with Alter table, create or drop constraint,Enable or Disable constraint on schema B.
Please let me know how to make this work.
Thank you

I got the answer for my second question, I have an option to grant 'Alter ANY table' privilege to the user.Yes, but you should not do that.
Regarding question one, Suppose I have two schemas A and B and I want Schema A to have alter table privilege on all tables of Schema B.
Can I do this in one command No
or I need to grant alter on each table saperately?Yes
If I am chosing the second option for each table saperately then whenever a table is added in schema B we need to grant privilege on that table as well.Yes. But nothing strange there. Designing and creating objects includes the privileges on them.
If user A is granted with alter table privilege on a table which user B owns then can user A drop/create/enable/disable constraints for that table?Yes, isn't that what all this about?
Again, letting one user alter the objects of another user is generally not such a good idea. Hope you see this from our discussion.
Alter table privilege includes adding and dropping columns. This is why I suggested writing a procedure that does exactly what you need. And then grant execute on that to A.
The best thing of course would be NOT TO disable the constraints, they are probably there for a reason.
I am currently handling an issue where one session doing this, deadlocks with another session doing only selects - From other tables, that is!
Regards
Peter

How to check in my db have db-link and table name also

Is there any query which shows table information which could be access through db-link.

List of oracle dictionary tables that stores various privileges
TABLE_NAME                     COMMENTS
DBA_AQ_AGENT_PRIVS
DBA_COL_PRIVS                  All grants on columns in the database
DBA_PRIV_AUDIT_OPTS            Describes current system privileges being audited across the system and by user
DBA_REPGROUP_PRIVILEGES        Information about users who are registered for object group privileges
DBA_ROLE_PRIVS                 Roles granted to users and roles
DBA_RSRC_CONSUMER_GROUP_PRIVS Switch privileges for consumer groups
DBA_RSRC_MANAGER_SYSTEM_PRIVS system privileges for the resource manager
DBA_SYS_PRIVS                  System privileges granted to users and roles
DBA_TAB_PRIVS                  All grants on objects in the database
ALL_COL_PRIVS                  Grants on columns for which the user is the grantor, grantee, owner,
                                or an enabled role or PUBLIC is the grantee
ALL_COL_PRIVS_MADE             Grants on columns for which the user is owner or grantor
ALL_COL_PRIVS_RECD             Grants on columns for which the user, PUBLIC or enabled role is the grantee
ALL_REPGROUP_PRIVILEGES        Information about users who are registered for object group privileges
ALL_TAB_PRIVS                  Grants on objects for which the user is the grantor, grantee, owner,
                                or an enabled role or PUBLIC is the grantee
ALL_TAB_PRIVS_MADE             User's grants and grants on user's objects
ALL_TAB_PRIVS_RECD             Grants on objects for which the user, PUBLIC or enabled role is the grantee
USER_AQ_AGENT_PRIVS
USER_COL_PRIVS                 Grants on columns for which the user is the owner, grantor or grantee
USER_COL_PRIVS_MADE            All grants on columns of objects owned by the user
USER_COL_PRIVS_RECD            Grants on columns for which the user is the grantee
USER_REPGROUP_PRIVILEGES       Information about users who are registered for object group privileges
USER_ROLE_PRIVS                Roles granted to current user
USER_RSRC_CONSUMER_GROUP_PRIVS Switch privileges for consumer groups for the user
USER_RSRC_MANAGER_SYSTEM_PRIVS system privileges for the resource manager for the user
USER_SYS_PRIVS                 System privileges granted to current user
USER_TAB_PRIVS                 Grants on objects for which the user is the owner, grantor or grantee
USER_TAB_PRIVS_MADE            All grants on objects owned by the user
USER_TAB_PRIVS_RECD            Grants on objects for which the user is the grantee
COLUMN_PRIVILEGES              Grants on columns for which the user is the grantor, grantee, owner, or
                                an enabled role or PUBLIC is the grantee
ROLE_ROLE_PRIVS                Roles which are granted to roles
ROLE_SYS_PRIVS                 System privileges granted to roles
ROLE_TAB_PRIVS                 Table privileges granted to roles
SESSION_PRIVS                  Privileges which the user currently has set
TABLE_PRIVILEGES               Grants on objects for which the user is the grantor, grantee, owner,
                                or an enabled role or PUBLIC is the grantee
GV$ENABLEDPRIVS                Synonym for GV_$ENABLEDPRIVS
V$ENABLEDPRIVS                 Synonym for V_$ENABLEDPRIVS
36 rows selected.
SQL>

Differences Between Object And System Privileges

Hi,
Whats the difference between object and system privileges in oracle?
Cheers
Paul

System Privileges
A system privilege is the right to perform a particular action, or to perform an action on any schema objects of a particular type. For example, the privileges to create tablespaces and to delete the rows of any table in a database are system privileges.
Schema Object Privileges
A schema object privilege is a privilege or right to perform a particular action on a specific schema object:
For example, the privilege to delete rows from the departments table is an object privilege.
Some schema objects, such as clusters, indexes, triggers, and database links, do not have associated object privileges. Their use is controlled with system privileges. For example, to alter a cluster, a user must own the cluster or have the ALTER ANY CLUSTER system privilege.
A schema object and its synonym are equivalent with respect to privileges. That is, the object privileges granted for a table, view, sequence, procedure, function, or package apply whether referencing the base object by name or using a synonym.
Granting object privileges on a table, view, sequence, procedure, function, or package to a synonym for the object has the same effect as if no synonym were used. When a synonym is dropped, all grants for the underlying schema object remain in effect, even if the privileges were granted by specifying the dropped synonym.

Oracle users and revoking privileges

Hello,
To test out some error conditions in an application, I'd like to temporarily revoke a privilege on a table from a database user.
I am trying to do that, logged into SQL*Plus as "sys" or "system", and running the command:
REVOKE UPDATE ON USERX.TABLE_A FROM USERX;
However, this is failing with the following message:
ORA-01927: cannot REVOKE privileges you did not grant
I've also tried logging into my server as oracle, typing "sqlplus /nolog" at the command line, then "connect internal as sysdba;" from the SQL*Plus prompt, and then running the REVOKE command, but that results in the same error message.
So basically my question is: if neither the "sys" nor the "system" user is able to revoke the privilege from the "userx" user (because they did not specifically grant it), how would I determine which oracle user would be able to do this? Or how else would I go about revoking the privilege?
I'm running Oracle8i Enterprise Edition Release 8.1.6.1.0 on Linux.
Thanks for your help with this. I am not very familiar with Oracle DBA concepts.

Hello,
I am fully agree with Eric....Yes! a User created a table means...the User is OWNER of the table....and that means......the User is by default having the privilege of DML operations...i belive...OK
And the privilege which you have not granted...then how could you revoke them...Whether it may b e SYS or SYSTEM or for that matter any User a/c.
If you really want to restrict the restrict option on table owned by your User, then i can suggest to put a Schema Level Trigger on DML action. This will be fired when update in invoked on table by the user and there you can have your STOP mechanism.....BUT..this is not really suggested.
Regards,
Kamesh Rastogi
Oracle - DBA

Does The Create Table Privilege allow to insert data ?

Hi,
I wish to know if it's possible that a user UserA allows another user UserB to create a table but does not allow him (does not allow UserB ) to insert data in a table UserB has created .If it's possible, I would want to know the commands to do that.
Thanks .

sys@LINUX>create user user1 identified by user1;
User created.
sys@LINUX>grant connect, resource to user1;
Grant succeeded.
sys@LINUX>create user user2 identified by user2;
User created.
sys@LINUX>grant connect, resource to user2;
Grant succeeded.
sys@LINUX>conn user1/user1
Connected.
user1@LINUX>create table t (id number);
Table created.
user1@LINUX>disc
Disconnected from Oracle Database 10g Enterprise Edition Release 10.1.0.5.0 - Production
With the Partitioning, OLAP and Data Mining options
user1@LINUX>conn / as sysdba
Connected.
sys@LINUX>grant create any table to user2;
Grant succeeded.
sys@LINUX>conn user2/user2
Connected.
user2@LINUX>create table user1.tab (id number);
Table created.
user2@LINUX>insert into user1.tab values(1);
insert into user1.tab values(1)
ERROR at line 1:
ORA-01031: insufficient privileges
user2@LINUX>select * from user1.tab;
select * from user1.tab
ERROR at line 1:
ORA-01031: insufficient privileges
user2@LINUX>delete from user1.tab;
delete from user1.tab
ERROR at line 1:
ORA-01031: insufficient privileges
user2@LINUX>update user1.tab set id=1;
update user1.tab set id=1
ERROR at line 1:
ORA-01031: insufficient privilegesInteresting issue. Although user2 was able to create a table in user1 schema (because he has "create any table" privilege), he's NOT able to run ANY DML on that table (NO insert, update, delete and select)!
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com
[Step by Step install Oracle on Linux and Automate the installation using Shell Script |http://kamranagayev.wordpress.com/2009/05/01/step-by-step-installing-oracle-database-10g-release-2-on-linux-centos-and-automate-the-installation-using-linux-shell-script/]

Owner of schema SYS_REPL and table RS_REPLICATION_COMPONENTS

Hello Tobias,
in your SLT guides is stated that the schema SYS_REPL gets created during the first use of SLT.
You recommend to use the user SYSTEM or another user with similar privileges for the initial creation.
Since i'm about to implement a proper auth.concept I just came over the database owner concept.
Which means, if i use a non-technical user to create the schema SYS_REPL the schema belongs to that user and
will be deleted as soon as the user is deleted from the DB.
I'm wondering why the Schema SYS_REPL and table RS_REPLICATION_COMPONENTS aren't created as
repository object, which is owned by _SYS_REPO after activation and could be transported in a delivery unit?
Why is this way not used by SAP?
Thanks for your feedback
Johannes

As regards the Numbers in Type column , i have posted this to Db forum....:
Number in column Type in view Dba_ddl_locks...
I'll be glad if you provide me with an answer.....
Thanks......
Sim

System and object privileges

hi,
when we assign the privileges to a user using connect, resource that user will be having connect privilege and create table, view... etc. but we are not assigning any alter table, updating table, drop table privileges to him, how he can perform this object level privileges on the objects.
please let me know.
thank u

851707 wrote:
hi,
when we assign the privileges to a user using connect, resource that user will be having connect privilege and create table, view... etc. but we are not assigning any alter table, updating table, drop table privileges to him, how he can perform this object level privileges on the objects.
please let me know.
thank uIf the user is the owner of the object, he doesn't need to be explicitly assigned the object privs. He already has all the privs on the object . So the user can perform all the operations on the object.
Aman....

How to find how name of view and table using in Discoverer report

Hi all,
Please help me, i have requirement, i need name of views and tables used in discoverer reports.
plz help its urgent.
regards,
Vivek Gautam

As per my knowledge goes, We can see from Administrator which Folder is associated with a Workbook. Else you may have to manually open each and every workbook and look for the objects.

Field and Table for Pension Plan

Can anyone tell me what are the field name and table name in Pension plan

Hi Harini,
In Table VBUK you 3 different status related fields for sales documents.
Over all status field name GBSTK ( here it gives the total status of praticular sales document) here you see options
A Not yet processed      ( This means its complete open)
B Partially processed     ( This means the sales doc is partially processed)
C Completely processed ( This means the sales doc is completly processed)
Delivery status and over all delivery status field name LFSTK and LFGSK respectively, these 2 fields will be same always ( here it gives the total status of praticular sales document) here you see options
A Not yet processed      ( This means its completly open)
B Partially processed     ( This means the delivery doc is partially processed)
C Completely processed ( This means the delivery doc is completly processed)
So overall status can be different then delivery or overall delivery status.
If sales document has 100 quantity for 1 material, if delivery is done for 50 quantity.
Then over all status field name GBSTK will be B Partially processed and delivery and overall delivery will be C Completely processed .
Regards
vK

Field and Table for PGI status updation

Hi All,
I want to know in which field and table the PGI status will get updated.
i.e. once we do the PGI for a delivery in which table will this PGI status gets updated.
Thanks in advance for help.
Harini

Hi Harini,
In Table VBUK you 3 different status related fields for sales documents.
Over all status field name GBSTK ( here it gives the total status of praticular sales document) here you see options
A Not yet processed      ( This means its complete open)
B Partially processed     ( This means the sales doc is partially processed)
C Completely processed ( This means the sales doc is completly processed)
Delivery status and over all delivery status field name LFSTK and LFGSK respectively, these 2 fields will be same always ( here it gives the total status of praticular sales document) here you see options
A Not yet processed      ( This means its completly open)
B Partially processed     ( This means the delivery doc is partially processed)
C Completely processed ( This means the delivery doc is completly processed)
So overall status can be different then delivery or overall delivery status.
If sales document has 100 quantity for 1 material, if delivery is done for 50 quantity.
Then over all status field name GBSTK will be B Partially processed and delivery and overall delivery will be C Completely processed .
Regards
vK

Field and Table name for purchaser

I want to know the field and table name for purchaser id and purchaser name.
Plz help me.

Dear
Purchaser name are define in Header level data in Purchase Order EKKO & Purchase ID define as a Purchasing Group
Purchser Name EKKO-ERNAM
Purchase I D EKKO-EKGRP
Regards
Aamir

Field name and table

Dear Friends ,
I want to display discount , P&F , excise , tax , fright , octori , insurance so what is the fiels name for all fields and table name .

You have to create the report bu fetching the report from the table EKPO - Doc condition no KNUMV. Use this no in the table KONV to get all your requirements aginst the field KSCHL - Condition types.

Field NAme and Table Name

Hi All,
I got some output values from the legacy system with me but need to know whats the actual field name and table name to which i need to transfer these values. How can i do it, since which theres is not field name or despcription given for the data.
Is there any way i can do it.
Points will be rewarded for all useful answers.
Regards
AB

if you know the transaction code you use to post the uploaded data in SAP, you just need to do BDC recording in using transation SM35. Record the whole process and create a program from the recording... and you wont even need to know the tables and field names-- almost everything will be done for you....
All you need to do is replace record data with upload data.
You can also try to look for a standard Function Module / BAPI which can do the processing for you and provide it with a table containing the upload data ...
Reward points if useful

Where can i get SALES ORGANIZATION FIELD and TABLE

Can anybody tell me where can i get FIELD and TABLE Name OF " sales organization "

Dear Sandeep,
u will find VKORG is the Sales Organisation .
u will find this Field in every related SD Module Table...
Like ...VBAP,BKPF ..etc..
Hope it helps...!!!
Pls reward if Helpful...!!!

Datapump and table privileges

Similar Messages

Maybe you are looking for