DB02 privileges on SYSIBM etc.

Dear communitiy,
I've a problem with transaction DB02 after and upgrade from basis 6.20 to 7.00:
SQL0551N "SAPPSM" does not have the privilege to
perform operation "SELECT" on object
"SYSIBM.SYSDUMMY1". SQLSTATE=42501
sappsm is the connect user which is in the newly created group dbpsmmnt and in also in group sapsys.
db2 get dbm cfg:
SYSADM group name              (SYSADM_GROUP) = DBPSMADM
SYSCTRL group name             (SYSCTRL_GROUP) = DBPSMCTL
SYSMAINT group name            (SYSMAINT_GROUP) = BPSMMNT
db2 version is 8.1 fixpak 11
also saproot.sh was executed successfully...
I don't know what more to do. I cross checked all permissions with a 6.40 system and everything I can think of is the same.
Regards,
Pascal

Hi Dirk, this is the result:
db2psm> db2 connect to psm user sappsm
Enter current password for sappsm:
   Database Connection Information
Database server        = DB2/LINUX 8.2.4
SQL authorization ID   = SAPPSM
Local database alias   = PSM
db2psm> db2 get authorizations
Administrative Authorizations for Current User
Direct SYSADM authority                    = NO
Direct SYSCTRL authority                   = NO
Direct SYSMAINT authority                  = NO
Direct DBADM authority                     = NO
Direct CREATETAB authority                 = YES
Direct BINDADD authority                   = YES
Direct CONNECT authority                   = YES
Direct CREATE_NOT_FENC authority           = NO
Direct IMPLICIT_SCHEMA authority           = YES
Direct LOAD authority                      = NO
Direct QUIESCE_CONNECT authority           = NO
Direct CREATE_EXTERNAL_ROUTINE authority   = NO
Direct SYSMON authority                    = NO
Indirect SYSADM authority                  = NO
Indirect SYSCTRL authority                 = NO
Indirect SYSMAINT authority                = YES
Indirect DBADM authority                   = NO
Indirect CREATETAB authority               = NO
Indirect BINDADD authority                 = NO
Indirect CONNECT authority                 = NO
Indirect CREATE_NOT_FENC authority         = NO
Indirect IMPLICIT_SCHEMA authority         = NO
Indirect LOAD authority                    = NO
Indirect QUIESCE_CONNECT authority         = NO
Indirect CREATE_EXTERNAL_ROUTINE authority = YES
Indirect SYSMON authority                  = NO
So it should be correct, by the way I added user sappsm to group dbpsmadm and the DB02 problems are gone. But this isn't a real solution...
Regards,
Pascal

Similar Messages

TO MAKE BW REPORT ON DB SPACE MONITORING (DB02)

Hello,Gurus
I am working on project where user wants DB Monitor (Transactin code-DB02)Data to be avilable on BW reports as he want to see consumption of DB size and he want it to be on BW report,I found so many Tables on DB02 ex psapods2/psapfact2 etc....,when i tried to browse in SE16 its giving error OBJECT IS INACTIVE IN DICTIONARY,
Help me on this and also suggest what are the various fesible alternative avilable to make DB02 data avilable in BW report.
thanks

Hi Mansoori,
You can generate similar (or even better - for example alert when table space is less than daily required for next x days etc.) report by accessing dba specific tables (assuming your database is Oracle) like dba_tablespaces, dba_data_files and dba_segments. However, these tables are only accesible to DAB (user id SYS). Also you will have to build a logic to use the information from these dba tables.
Hope it helps.
Cheers,
Yogesh
Message was edited by: Yogesh Baviskar

Viewing privileges for a Role

Hi ,
I have a role R.
I want to see what privileges have been granted to this Role R.
Where should i query?
Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
PL/SQL Release 11.2.0.3.0 - Production
"CORE 11.2.0.3.0 Production"
TNS for Solaris: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production

Hi, whilst this response does not directly answer your question, it will give you a greater ability to answer questions such as these for yourself without having to wait for someone else to post the solution for you.
SELECT *
FROM dict
WHERE table_name LIKE '%ROLE%';
DICT is a view that allows you to see the names (and minor details) of all the data dictionary tables (the sort of place you will find the tables pertaining to roles, privileges, tables, tablespaces etc etc etc)
Give it a try, and pass different values into the search string too.

Make tables, views etc, aviable for public users, how could sql look like?

Hey specialists,
I produced under my username several tables, views and sequenzes. How could sql or Psql look like to create for all items a public synonym.
where could I read more information about giving privilegs for tables etc to other users, for instance in dba-studio
regards
robert

Hi!
Create a sql script for sql*plus like:
set head off echo off feedback off pagesize 999 line 120 trimsp on
spool crepsn.sql
select 'create public synonym ' || object_name || ' for '|| object_name || ';' || chr(10)
from user_objects
where object_type in ( 'TABLE', 'VIEW', 'SEQUENCE', 'PACKAGE', 'PROCEDURE', 'FUNCTION' )
and   object_name not like 'BIN$%'
and   object_name not in ( select synonym_name
                           from   sys.dba_synonyms
                           where owner = 'PUBLIC'
                           and    synonym_name = object_name
                           and    table_owner = user )
order by object_type, object_name
spool off
prompt creating Public Synonyms
set termout on feedback on
@crepsn
set echo offThis creates public synonyms for the given object types of objects the current user is the owner of.
If you get an error that a public synonym is already defined, the obectname
is already in use by another user in the database.
After this you have to give other users / public access to your objects via grants.
Regards

How do I create a second user on my MacBook pro?

I am a new user to the Mac family, and I'm loving it! I bought my MacBook Pro 15" with retina display with the intention of me being its only user. I am now reluctantly thinking of letting my almost 15 year old daughter use it. She has used it as a "Guest User", but upon logging off, all of her information gets erased. How do I create a second user? I want to make sure she cannot access my files, alter my settings, etc. But I want her to be able to save whatever she is working on. And I also want to be able to access her user to monitor her internet usage, and also add parental controls. Mahalo folks!

Open System Preferences -> Users & Groups and use the plus sign to add a new user. You can elect to give your daughter admin privileges or not, etc.
Good luck,
Clinton

Newly hardened Oracle11g database - unable to create Spatial or Text index

Oracle 11g Rel2, Windows 2003 platform
Our customer recently hardened their database and then tried to recreate their (previously working) schema. Now they're suddenly encountering these errors when trying to create a spatial index and text index respectively.
ERROR at line 1:
ORA-29855: error occurred in the execution of ODCIINDEXCREATE routine
ORA-13249: internal error in Spatial index: [mdidxrbd]
ORA-13249: Error initializing geodetic transform
ORA-13249: SRID 8307 does not exist in MDSYS.CS_SRS table
ORA-29400: data cartridge error
ORA-04063: package body "MDSYS.SDO_CS" has errors
ORA-06512: at "MDSYS.SDO_INDEX_METHOD_10I", line 10
after running command
CREATE INDEX IDX_POINTGEOMETRY on PointGeometry(pointGeom) indextype is mdsys.spatial_index parameters('LAYER_GTYPE=POINT');
When I query mdsys.sdo_cs I can see that SRID 8307 does in fact exist.
AND
ORA-29855: error occurred in the execution of ODCIINDEXCREATE routine
ORA-04063: package body "CTXSYS.DRIXMD" has errors
ORA-06508: PL/SQL: could not find program unit being called: "CTXSYS.DRIXMD"
ORA-06512: at "CTXSYS.DRUE", line 145
ORA-06512: at "CTXSYS.TEXTINDEXMETHODS", line 366
ORA-04063: package body "CTXSYS.DRIXMD" has errors
ORA-06508: PL/SQL: could not find program unit being called: "CTXSYS.DRIXMD"
after running command CREATE INDEX IDX_REPORT_XMLTYPE ON report(xmlreport)
INDEXTYPE IS CTXSYS.CONTEXT PARAMETERS ('SYNC(ON COMMIT)');
Your help is greatly appreciated.

I figured out the answer with help from the Oracle Spatial forum, but I wanted to follow up in case anyone was interested or would find this helpful.
As part of the hardening process, the system administrator (not a DBA), revoked execute privileges on DBMS_LOB (and a number of other packages) from PUBLIC. The problem was that he didn't read the fine print in the hardening manual that said that doing so "+may result in an inability to execute default Oracle applications and utilities. To correct this problem, grant execute privileges on these packages directly to the SYSMAN, WKSYS, MDSYSand SYSTEM accounts as well as any other default Oracle database and custom application object owner accounts as necessary to support execution of applications/utilities installed with an Oracle Database Server+". As a result, the MDSYS.SDO_CS and CTSXYS.DRIXMD package bodies had compilation errors from trying to access DBMS_LOB. To fix the problem I granted execute privileges on DBMS_LOB, etc to MDSYS and CTXSYS. I can now once again successfully create my Oracle Spatial and Oracle Text indexes.

Owb11gr2 mapping deployment problem

Hi all,
I have problems deploying mappings in this particular scenario:
My mappings are very simple. The source tables are actually the subscriber views created for cdc and are in the SUBSCRIBER schema. The target tables and the mappings themselves are held in STAGING schema. All I want to do is to load from the these subscriber views into the target tables, but upon deploying the mappings warning messages are produced complaining that the target table/view does not exist. I dont understand why this is happening. The target tables do exist.

When you register the location for the target tables are you using the STAGING schema?
Whatever schema you use to register the target location must have object privileges (INSERT, UPDATE, etc.) on the tables in the STAGING schema.
-gary

Macbook aluminium - hard disk slow

Hi, my macbook aluminium 2009 have a big problem!
The internal HD is very slow. The osx freeze and often i can see the death ball!
I try another HD, both 500gb, one samsung and one western digital.
I tried to repair privileges, the disk, etc...
I tried to create a new user accout...
I use 4gb on a single bank but i try with 2 bank of 1gb...
Finally yesterday i reinstalled the OSX 10.6.8 but i've the same problem...
Could be an hardware problem?
I read that the hd sata cable can have a problem...
I need a new mac?
thanks!

Anyone help me?

Securing Personalize on portlet page

Can one secure the 'Personalize' link in the porlet EDIT view to a particular LDAP group? this way only those persons who are in the group can personalize?

I know you can change the access on a Page or a Tabbed Region to specify which portal groups have one of the Personalize privileges and which groups may have one of the other privileges (Manage, View, etc.) Which group currently has Manage or Manage Content privileges on the page and can put the page into Edit mode? Is that group different than the group you want be allowed to edit the defaults of a portlet when the page in in Edit mode?

Security issues on Oracle Database (10g)

Hello,
I need to make a security manual for Oracle (10g) databases. This has to be some sort of checklist to assure a database is secure. I am thinking of encryption, least privilege, limit access, etc etc. I am sure this has been done before. Please help me with links to documents about this.
Kind regards,
Rob Schenk

(Funny thing - Oracle has hired people to write documentation and has placed it online for anyone to read.)
You just might find what you need in the "Security Guide" at http://www.oracle.com/pls/db102/portal.portal_db?selected=1
If documentation is not sufficient, I recommend http://www.amazon.com/gp/product/0974372749/

Tcode for DBA group

What are the common transaction code that should be assigned to the member of the DBA group? I'm trying to use the SAP GUI to support some of the SAP-Database related issue and sometimes I find it very hard, due to the missing access on the tcode.

only for db admin oracle?
-> db* (db01, db02, db12, db14, db17 etc.)
-> st04/st04n (db "cockpit")
-> st05 (tracing)
-> st02 & st06 (memory tuning etc.)
GreetZ, AH

ORACLE 9i Linux 9 RedHat

Hi, i'm install Oracle in my Linux, but when then installation start, this copy some files and stop (not send any message of error, simply stop when copy a file named README).
What happend ?
PLEASE !!!!!!!!!!!!!!!!! HELP !!!!!!!!!!!!!!!!!
** All variables, privileges, groups, semaphores, etc,etc, is OK

Try setting LD_ASSUME_KERNEL=2.4.19

Loading dynamic Content

I'm developing a site for an Intranet. Depending on the logged user I want to show him the menues he has access to.
To do that I thought of writing a jsp page that shows the menu and include it in a main page. But how does the bean used in this jsp page know who logged in he previous page?
The solution I found is to save the user in a session, and add two methods in the bean that loads the menu to set a get the user. Is this a good solution?
The code of the jsp page that loads the menu is:
<jsp:useBean id="modulosId" class="beans.configMenu.BeanAdmModulos" />
<table width="40%" border="0">
<% String nombreUsr=(String)session.getAttribute("sesion.usuario");%>
<% modulosId.setUsuario(nombreUsr); %>
<% java.util.Vector modulos = modulosId.getModulos(); %>
<% for(int i = 0; i < modulos.size(); i++) { %>
<tr>
<%= modulos.elementAt(i)%>
</tr>
<%}%>
</table>
Related with this I have another question. The menues I will load will be in a database. Each time I load the menues I will have to query the database. Is it better to add to the session all the menues or querying the database each time I load the page wouldn't bring performance penalties?
Thanks for your comments

I'm developing a site for an Intranet. Depending on
the logged user I want to show him the menues he has
access to.
To do that I thought of writing a jsp page that shows
the menu and include it in a main page. But how does
the bean used in this jsp page know who logged in he
previous page?
The solution I found is to save the user in a
session, and add two methods in the bean that loads
the menu to set a get the user. Is this a good
solution?
User credentials are often cached in the session, so this is fine. Your main decision will be whether to check the user's authorization (privileges, roles, rights, etc.) with each request or to cache those results with the user's authentication (logon) credentials in the session as well.
The code of the jsp page that loads the menu is:
<jsp:useBean id="modulosId"
class="beans.configMenu.BeanAdmModulos" />You have the option here of declaring this bean's scope to be 'session'. Otherwise, this is fine if you are manually checking the session itself (as you are doing below).
<table width="40%" border="0">
<% String
ng
nombreUsr=(String)session.getAttribute("sesion.usuario
");%>
<% modulosId.setUsuario(nombreUsr); %>
<% java.util.Vector modulos =
= modulosId.getModulos(); %>
<% for(int i = 0; i < modulos.size(); i++) { %>
<tr>
<%= modulos.elementAt(i)%>
</tr>
<%}%>
</table>
Related with this I have another question. The menues
I will load will be in a database. Each time I load
the menues I will have to query the database. Is it
better to add to the session all the menues or
querying the database each time I load the page
wouldn't bring performance penalties?
It is a speed versus memory tradeoff. If you are going to cache the menus, I would suggest caching the mapping between a role and a menu (or whatever equivalent exists in your app). There should be fewer roles than users; hence, this should use less memory. The solution may need some tweaking if users can have multiple roles.
Thanks for your commentsYou're welcome.
- Saish

Administrate Objects in Schema by Another Schema

Hi,
I am in a scenario to give administer privilege on one schema to another schema only.
Let me exxplain my scenario with an example.
I have a schema named HR in my database. Now I have create another schema named SH.
Now I need to do all operations like create table, create procedure etc on HR schema from SH schema.
And please note that I can't give create any table, create any procedure etc as it will be a big security breach.
Please help me to sort out this issue.
Regards,
Savad

user9292816 wrote:
Hi,
I am in a scenario to give administer privilege on one schema to another schema only.
Let me exxplain my scenario with an example.
I have a schema named HR in my database. Now I have create another schema named SH.
Now I need to do all operations like create table, create procedure etc on HR schema from SH schema.
And please note that I can't give create any table, create any procedure etc as it will be a big security breach.
AFAIK , without create any table/ or any any super privilege like DBA etc , you cannot achieve this.
Regards
Rajesh

Query to get the user profile

Hello
I would like to know the query to get the complete user profile, for example the user password, all the privileges it has, etc
Thank you

Go to tahiti.oracle.com
Drill down to your selected product and version
There, find the complete documentation set
There, find the find Reference Manual
There, find a complete description of all the data dictionary view.
Browse through the names of those view for something that looks like a likely candidate (thing with "user" or "priv" in the name)
Edited by: EdStevens on Oct 23, 2009 8:20 PM

DB02 privileges on SYSIBM etc.

Similar Messages

Maybe you are looking for