Dbca and permissions to public

I am looking for a minimum list of the permissions that need to be granted to public.
I have used the dbca (10g) to create a database and am a little alarmed to find that there are database tables that have insert, update and delete granted to public. Plus there are a lot of procedures/packages that allow public execute. I realize that there is some basic stuff that needs public access, but I have to really wonder about some of the things I am seeing when I do queries like:
select * from dba_tab_privs where grantee='PUBLIC' and privilege in ('INSERT','UPDATE','DELETE')
when you add 'EXECUTE' to that list, you get lots of items returned.
I am wondering if there is a list somewhere of what is absolutely necessary. I have been hunting in the docs for this and have come up with nothing so far. If anyone can point me at the right place, I'd appreciate it. Thanks

this is an excellent site. http://www.petefinnigan.com
Look for database checklists.
HTH -Kevin

Similar Messages

Public grants and permissions

Hi,
could any one please answer to these queries.
1.)what is the difference between normal grants and permissions & public grants and permissions?
2.)what is the sql to find out public permissions/grants in database

Hi,
could any one please answer to these queries.
1.)what is the difference between normal grants and
permissions & public grants and permissions?
You may be granted Permissions to write or read from certain folder or to access or execute certain objects.
A privilege granted to normal user (private) is only to that specified user. A grant to Public means every user in the database has access to it (for security, this is not recommended unless you know what you are doing)
2.)what is the sql to find out public
permissions/grants in databaseQuery the DBA_xxx_PRIVS views
DBA_AQ_AGENT_PRIVS
DBA_COL_PRIVS
DBA_ROLE_PRIVS
DBA_SYS_PRIVS
DBA_TAB_PRIVS
E.g
SQL> select * from dba_tab_privs where grantee ='PUBLIC';

Drag and drop to public folder

I have an Intel Mac Mini running 10.4.9 connected to a windows domain & MS Exchange Server 2003 in a corporate environment. My problem: using Mail.app, I can read items within the public folders; however, I cannot drag-and-drop messages from my inbox to folders within the public folders. Any time I attempt this, the message in question is present within the public folder briefly, but then disappears once a sync occurs with Exchange.
Any suggestions would be greatly appreciated.

As I wrote before, when I tried to drag and drop the Public Folder Tree Hierarchy, I used account which had delegated Exchange Full Administrator role in Exchange 2003 and was also member of Enterprise Admins / Domain Admins in AD and Exchange Organization
Administrators in Exchange 2007. According to Sembee suggestion, it is more than needed ...
I think about manual deleting Public Folder Tree Hierarchy object from old Administrative Group (using ADSIEdit) and then recreating the new one in Exchange Administrative Group - using the following steps:
http://blog.bruteforcetech.com/archives/766
But I'm not sure if System Folders will be accessible then. There are many Outlook 2003 in organization, so "old" OAB access is necessary ...
I can take report of permissions for the problematic Public Folder Tree Hierarchy object using dsacls.exe, if needed (there are many ACEs in DACL on them). I can also check Effective Permission for user I used for moving.
But in both cases, I don't have any reference. I mean correct permission set for such object or necessary permission set for user used for moving.
Regards,
Jacek
MCT, MCITP, MCTS, MCSE+M, MCSA+M

Grants and Permissions

Need to find out how to implement grants and permissions for a Page. Which module/responsibility/navigation path we have to select to set this

Hi,
could any one please answer to these queries.
1.)what is the difference between normal grants and
permissions & public grants and permissions?
You may be granted Permissions to write or read from certain folder or to access or execute certain objects.
A privilege granted to normal user (private) is only to that specified user. A grant to Public means every user in the database has access to it (for security, this is not recommended unless you know what you are doing)
2.)what is the sql to find out public
permissions/grants in databaseQuery the DBA_xxx_PRIVS views
DBA_AQ_AGENT_PRIVS
DBA_COL_PRIVS
DBA_ROLE_PRIVS
DBA_SYS_PRIVS
DBA_TAB_PRIVS
E.g
SQL> select * from dba_tab_privs where grantee ='PUBLIC';

File permissions in public folder

sharing out the public folder on an imac i am using for a networked file share. I set the folder so that everyone has access to read and write. When some one creates a file the permissons to the file do not allow others to read or write. Any suggestions?

Files added to a "write only" folder are treated specially by AFP - permissions are set to give user, group and other full "read & write" privileges. Changing the permissions of the "Drop Box" so that it is no longer "write only" would prevent the permissions changes from happening.
A sharepoint can be configured so that permissions are inherited for a folder regardless of whether or not it is "write only". I've never used Sharepoints, but if there is an option to set both "ownership" and "permissions" to be inherited from the parent folder, try setting both - AFP is a bit quirky and it doesn't seem to work well unless both are set.
AFP can also be glitchy - it was in "Panther" and I get the feeling it is worse in "Tiger" (there might have been a bug fix in an earlier 10.4.x, but some problems persist), especially with respect to the "inherit" options. When the "inherit" settings are enabled but the change doesn't propagate through subfolders, sometimes restarting the AFP server ("Personal FIle Sharing") makes the problem go away. Other times, the whole computer may need to be restarted.
I think the state of AFP in OS X is a little sad, considering what you could do prior to OS X where you could go in to "Get Info", share any folder and specify who could access the share, through a control panel. Now the official solution for adding your own share point is to purchase OS X Server.

I want to change the sharing and permissions of a large number of photos. How can I do this in bulk rather than one at a time?

I want to change the sharing and permissions of a large number of photos. How can I do this in bulk rather than one at a time?

Does this involve iPhoto in some way?

SharePoint 2013 - Site Settings - Users and permissions - "Access Request and invitations" link missing

I am site collection administrator and have configured the outgoing email in Central administration but "Access Request and invitations" link is missing, pl advice any additional configurations for this link to show up
I was though able to configure access requests by going to Site Settings->Users and permission and on the ribbon selected "Access Request Settings"
What is the difference in either of the approaches?
Thanks
Abhishek

Hi there,
I noticed this post, and didnt really find an appropriate solution to your issue. I noticed the same issue when dealing with Access Requests. First of all to make sure that the Request feature is enabled, you need to access
Site Settings -> Site Permissions -> Access Request Settings -> Make sure the
'Allow access requests' option is enabled.
The Allow access screen just allows you to enable the feature and also to specify a email address that notifications are sent to. Whereas the 'Access Requests and Invitations' section provides a screen to manage Access Requests and request history.
I noticed then that the Access Requests and Invitations link under 'User and Permissions' didnt actually appear until someone actually requests to join the site. It seems that this is needed to display the screen. Once actioned once, the option stays there.
Hope it helps

Unable to download from AppStore, updates,etc.Messages 'the installer is damaged' to 'there might be a problem with file ownership and permissions.' I am the owner and only user of a new MBP. What could be going on?

Is anyone having the same type of problems I'm having with Lion. I have a new MacBook Pro, received 7 weeks ago, preinstalled with Leopard 10.6.7. I didn't migrate anything from my old iMac, wanted a clean install from the Apple Store. While there, I asked for the upgrade to Lion 10.7, however their system was down.
I installed it myself, wirelessly about a week later, and Apple emailed me a receipt. Now, I've had to call support directly last week when I lost Mail, Address Book, was unable to open Preview or iTunes, among other problems. Seemed fixed after a session that baffled even the store tech. Now I am unable to download or install the recent Mac updates for Lion, from the App Store, could not install Adobe Reader, etc. Messages range from 'A network error has occured - Check your Internet connection and try again' to 'The Installer is damaged and cannot open the package. There may be a problem with file ownership or permissions.' All fail and I'll probably have to call Apple again. I am frustrated beyond words. Logs 'Install's runner tool is not properly configured as a setuid tool', domain errors, 'attempt to write a readonly database, and on and on. I have barely done a thing on this computer except search online for help with these problems. Safari gives me a 'You are not connected to the internet' too often. Diagnostics disagrees. I do see wi-fi problems in the forum. Disk and permissions were fine at the beginning of the earlier problems, checked first by support tech. I'm not sure if support tech even knew. I was just happy they were fixed. Anyone have these download and/or install problems after a 'clean bill of health' so to speak, only a week ago?

Let's try the following user tip with that one:
"There is a problem with this Windows Installer package ..." error messages when installing iTunes for Windows

DANGER: Do Not Change Hard Drive Ownership and Permissions

DANGER: Do Not Change Hard Drive Ownership and Permissions (Unless you know what you are doing... I didn't!)
FIRST, THE REPAIR PERMISSIONS SOLUTION:
Use Disk Utilities on the "Sofware Install and Restore" DVD that came with your computer to set the permissions back to the defaults. Not the MacOSX Installation Disk. (This worked in MacOS 10.3.9)
MY SCREW UP
In my Hard Drive's "Get Info" dialog I switched the permissions of the Owner to my username and all others to no access. I had not yet closed the dialog and decided that it was probably dangerous so I started changing them back. I first changed the owner back to system. It asked for authentication.
After entering my password I assumed that I would be able to go back and change the others as well. Nope! The dialog disappeared, my desktop disappeared and I couldn't do anything. I was locked out.
After ten minutes of the beachball I restarted to the "Panther Installation disk" and tried repairing permissioins using disk utility. Evertime it "lost contact" with the system and would not work. Restarting (without CD) took me to a root user login (black sreen). My username and password did nothing.
THE SOLUTION
I then restarted to the "Software Install and Restore" DVD that came with my computer and used its Disk Utility to repair permissions. IT WORKED! It set permissions back to the default. THANK GOD.
NOTE: I wonder, will using the Install and Restore DVD to repair permissions reset any computer's files to the defaults? Is that a backdoor into someones currently restricted files and folders? (Assuming that you have physical access and the computer specific DVD)

Using the Repair Permissions function will not change the permissions on an account's home folder or anything in it, but there are at least two other ways in which someone with a Mac OS X 10.4 installation disk can get access to an account's files or folders unless some or all of those files are encrypted.
(19285)

Org.clamav.freshclam and permissions error on freshclam.log

This is an adjunct to a branched discussion in this thread regarding org.clamav.freshclam continually generating error reports in the system log.
After enabling, but not starting, Mail service on my server (XServe Dual-G5, 10.5.8 Server) my system log began filling with the error as per the referenced thread. The first entry when the error cropped up was:
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Unknown key for integer: Iterations
Nov 5 15:23:20 xserve1 org.clamav.freshclam[40472]: ERROR: Incorrect argument format for option --checks (-c)
Nov 5 15:23:20 xserve1 org.clamav.freshclam[40472]: ERROR: Can't parse command line options
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam[40472]): Exited with exit code: 1
Nov 5 15:23:20 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Per the instructions in the referenced thread, I ran
launchctl unload /System/Library/LaunchDaemons/org.clamav.freshclam.plist
I then used pico to edit the org.clamav.freshclamplist file, removing the space between the '-c' and value in the line:
<string>-c 4</string>
I also edited the /etc/freshclam.conf file to change the value:
#DatabaseMirror db.XY.clamav.net
to
DatabaseMirror db.us.clamav.net
I then ran
freshclam -v
followed by
launchctl load /System/Library/LaunchDaemons/org.clamav.freshclam.plist
Checking the log again, not only had the original error continued whilst I was editing, but also on the relaunch of freshclam a new error cropped up:
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Unknown key for integer: Iterations
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Ignored this key: UserName
*Nov 7 08:35:39 xserve1 org.clamav.freshclam[474]: ERROR: Problem with internal logger (UpdateLogFile = /var/log/freshclam.log).*
*Nov 7 08:35:39 xserve1 org.clamav.freshclam[474]: ERROR: Can't open /var/log/freshclam.log in append mode (check permissions!).*
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam[474]): Exited with exit code: 62
Nov 7 08:35:39 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Nov 7 08:35:48 xserve1 org.clamav.freshclam[475]: ERROR: Incorrect argument format for option --checks (-c)
Nov 7 08:35:48 xserve1 org.clamav.freshclam[475]: ERROR: Can't parse command line options
Nov 7 08:35:48 xserve1 com.apple.launchd[1] (org.clamav.freshclam[475]): Exited with exit code: 1
Nov 7 08:35:48 xserve1 com.apple.launchd[1] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
Nov 7 08:35:49 xserve1 org.clamav.freshclam[476]: ERROR: Problem with internal logger (UpdateLogFile = /var/log/freshclam.log).
Nov 7 08:35:49 xserve1 org.clamav.freshclam[476]: ERROR: Can't open /var/log/freshclam.log in append mode (check permissions!).
Nov 7 08:35:49 xserve1 com.apple.launchd[127] (org.clamav.freshclam[476]): Exited with exit code: 62
Nov 7 08:35:49 xserve1 com.apple.launchd[127] (org.clamav.freshclam): Throttling respawn: Will start in 10 seconds
(Note: after the first 'Exited with exit code: 1' entry, it only repeated the last four lines as above as it respawned.)
Checking the ownership / permissions on the freshclam.log file showed that the owner/goup was _clamav:admin and the permisions were -rw-r----- which is proper and in line with the other clamav files in the directory. Thinking that perhaps the logfile was corrupted, I deleted it and made a new one, setting the owner, group and permissions as per the original. The log errors continued.
Finally, in desparation, I ran
chmod 660 /var/log/freshclam.log
setting the permissions to -rw-rw---- and the errors ceased!
Now, this is not proper file permissions nor does it explain why freshclam suddenly could not append the logfile, but freshclam is now happily churning away without generating continuous log error entries. For the moment, I am not going to argue with successful results!
-Doug

Hi Fred,
interesting.. but I'm of the mind "If it ain't broke.." and it has been running without problem since applying the fix. I may end up having to migrate Mail services to a different server soon though, so I'll keep it in mind if the error crops up again. Thanks for the tip!
-Doug

Can't use Ikea Home Planner because of Sharing and Permissions on plug-in

I'm not sure where to submit this, or if the Apple support community cares, but I swear there's an answer to this. I am on a Macbook Air using Lion 10.7.2
When I download the "NP_2020Player_IKEA.plugin" downloadable from this website http://kitchenplanner.ikea.com/AU/UI/Pages/VPUI.htm and try to mount the plug-in I get these errors...
1. letting me know that the Ikea plug-in can't be moved because internet plug-ins can't be modified. So I click "Authenticate".
2. Then I "Replace" and after this selection it's asks for the Administrator's password, and I give it.
3. I follow the directions of this prompt, but am unable to change all of the permissions to "Read and Write"..
4.Here is a screenshot of the "Get Info" window for the plug-in.
I am unable to change "staff" and "everyone" to "Read & Write".
So I just ignore it and restart Safari, hoping it will work. When I return to the Home Planner main page it automatically directs me to the download page again, prompting me to download the plug-in. From what I've read it should just open the home planner. I'm assuming it's because the plug-in was never mounted because I can't allow the sharing and permissions? I don't really know a lot about computers, can someone help? I know a lot of other people have had issues with this planner download, but I haven't found any answers about how to fix it. I'm an organization freak and really really would love to have this planner work. Google sketch-up is way too much work, and I don't trust grid paper and cut outs of furniture to convey the depth I need to see. But maybe that's my only option at this point?
< Edited by Host >

HERE SHOULD BE YOUR SOLUTION:
Command+Space to bring up universal search, type in "Internet plug-ins"...
You may get multiple choices, one referencing OS-X Lion, perhaps one ref-ing your personal login...Choose one (I started with the main - OS X Lion - one)...it will open on your desktop...If you're like me (or like the Droitetgouche), you've already tried to install it, and it gave you all that crap about "can't be modified"...etc...So delete any of those plug-ins (there may be a few, depending how many installs you've tried), then right-click the "Internet Plug-ins" folder and choose "get info"...I'm not sure why "D...che" (spelling ease) couldn't change permissions...maybe wasn't logged in as the admin?...but click the "lock" symbol in the bottom right corner, unlock it, change ALL permissions to Read & Write, then relock it. Then open the IKEA dmg again and drag the item into the folder and it should work no problem.
Then quit Safari, restart, and it should let you work.
IF it doesn't, try going back to your universal search and choosing a different "Internet Plug-ins" folder...(Also, if you've tried the install, and you don't find any IKEA dmg's in the "Internet Plug-Ins" folder, you're likely in the wrong folder).
Also, you may want to go back later and restrict the read/write permissions when you're done with IKEA.
It worked for me, let me know if it works for you.

Why Can't VZ do the Right Thing For Once and Permit Network Extender Owners to Close their Networks?

Given the fact that the Network Extender can be set for managed access or open access, clearly it can technologically be configured so that a closed network could be set up so that ONLY those users that are included in the "priority list" could access the Network Extender.
If I had to guess, Verizon, prefers to benefit from your internet connection and your investment in a network extender by bolstering their network in poor reception areas for all of their customers in the vicinity on us Network Extender owners' backs rather than to do the right thing and permit a customer who has paid for the device as well as their internet access to close the network.
I find this sleazy and hope VZW will rethink its approach to this. We who subscribe to VZW for our cellular service pay the highest rates, on average, in the country for cell service. We have also paid hundreds of dollars for the Network Extender, and pay for the internet that is used to facilitate the phone calls made through the network extender.
Once it a while it would be nice if VZW did the right thing for its customers and not blatantly, at least, put their corporate greed about the needs of their customers.

I called Verizon tech support, and was informed that there is an option to close the Network Extender. This would allow only numbers on the white list to connect to the extender. Is the information I received incorrect? I spoke to them just the other day. Have you tried to configure the extender recently?
My post asking for clarification is here: https://community.verizonwireless.com/message/1002928#1002928
Thanks for any information you can provide.

Accidentally removed from,sharing and permissions the admin user,and now i do not when i find the home icon at my computer i do not have permmission,and the mac does not works properly,lots of question mark at the dock ,please help

accidentally removed from,sharing and permissions the admin user,and now i do not when i find the home icon at my computer i do not have permmission,and the mac does not works properly,lots of question mark at the dock ,please help

I'm going to assume that since you deleted your hard drive and all its files, you had a backup, yes? If the backup has an OS (bootable clone), then you can boot into it by holding down the option key when you start up you iMac and choose the backup drive. Then use Carbon Copy Cloner or Super Duper to copy the files back to your iMac.

In my library/sharing and permissions there are two users i do not recognize. One is called fetching and one is called wheel.

If I get info on my library I see under sharing and permissions a user called fetching and a user called wheel. I am not familiar with these users. Are they there for a reason?

I see this question was asked last Oct, and had gone unanswered.
I, too, have suddently noticed that all my folders on my external disk are giving permission to this "Fetching", and my system disk show permission for "Wheel".
It is gratifying to know more than one person is seeing this, but does it mean we are both being hacked by the same source, or is there some unexplained legitimate reason they are there?
Thank you for any further information.

What does the term "Wheel" mean under sharing and permissions?

Hi Everyone,
When I select a folder (in Applications for example) and then click "get info", under the sharing and permissions section where accounts are listed with their respective permissions, the list usually starts with system or admin, then a term called "Wheel", then everyone. What is Wheel?
Screen shot 2009-10-09 at 3.46.58 PM
I have attempted to paste a screen shot here.
Any thoughts?
joe
Screen shot 2009-10-09 at 3.46.58 PM
Looks like I'm not having any luck pasting a screen shot...How does one do that?
Message was edited by: K9Lover

wheel is a system superuser group. By default only the root user belongs to it. Snow leopard has changed some permissions and now the preinstalled system apps in the main Applications folder have the group wheel (it was admin in Leopard). I don't know why they did it but this is now normal. where else do you see wheel?

Dbca and permissions to public

Similar Messages

Maybe you are looking for