DBMS_DATAPUMP privileges needed.

Greetings All,
I am working on restricting access to Oracle supplied packages. One of the packages I am looking at is DBMS_DATAPUMP.
I am aware that in order to execute EXPDP and/or IMPDP that exp_full_database and/or imp_full_database privileges are required.
Is the DBMS_DATAPUMP package used by IMPDP and EXPDP? Execute privilege for this package has been granted to PUBLIC.
In my database environment many schemas exist. We have nightly jobs that execute expdp under each schema’s owner. If I were to “revoke execute on DBMS_DATAPUMP from public;”, would I then need to grant execute on the package to each schema owner that will be exporting?
Thanks for your time,
Bob

Yes.
Also please remember that the users need to have permissions on the directory!
Greetings,
NK

Similar Messages

Minimum privileges needed to create a new page at runtime

Some body know the minimum privileges needed by a user to create a new page at runtime (using PORTAL.WWSBR_API.add_folder). Actualy the user have MANAGE_CONTENT on the parent page where the page need to be create by we got an exception (If we had the MANAGE_CONTENT on the page group, we dont receive this exception)
thanks
J.
Message was edited by:
user510720

You'll need to set the "series" property of the chart. This will be an array of BarSeries objects.
You may also need to set the horizontalAxis and verticalAxis properties for the chart. (I forget if there are defaults for these.)

What privileges needed for producing explain plan for other user's object ?

Hi there,
What privileges needed for producing explain plan for other user's object (tables) ?
Cheers
Soheil

Experiment: (public plan table exists)
create user bob identified by bob;
grant create session to bob;
connect bob/bob
start sample_plan
If will error off on the table being read in the plan
connect dba_or_privileged_user
grant select on the referenced_table(s) to bob;
connect bob/bob
start sample_plan
It will now work providing a public plan table exists or you give bob create table and create a bob.plan_table
I ran the experiment on Oracle version 9.2.0.6 running on AIX 5.3. Select privilege on all referenced tables in the explained SQL must exist
HTH -- Mark D Powell --

Which Privilege needed to create a new Package and Stored procedure usage(in HANA studio)

Hello Friends,
In my company I have access to SYSTEM user(i.e. having all required permissions) ,I wish to create new " USER(s) " for trainees thus which "System privilege" or other privileges is/are needed for the following requirements -
1>To allow the "new user" to create new Packages(and the columnar views inside it and be able to execute,edit them)
2>Create Procedures inside their schema and execute using "call " command
I have given the following privileges as suggested by an ebook (SAP certified author).
The SELECT privilege on the _SYS_BI schema
The SELECT privilege on the _SYS_REPO schema
The EXECUTE privilege on the REPOSITORY_REST procedure
According to my knowledge "create schema" should be given for new schema creation.For my other requirements which all privileges are needed.
Thanx.

In addition to Krishna if you don't want to expose all the package to the trainee, then create a new role keeping everything same as default MODELING role (open it and have a look) but in "PACKAGE PRIVILEGES" add only those package that you want to expose to the end users.
Regards
Kumar

Privilege need to create functional index

Greeting gurus?
What privilege I needed for create functional index
I am writing a definer righted procedure to create index however when creating functional index, it gives me ora-0131 insufficent but unique, bitmap and reverse index works
and I granted create any index and create any indextype already. what else is missing ?

CREATE INDEX
To create a function-based index, in addition to the prerequisites for creating a conventional index, if the index is based on user-defined functions, then those functions must be marked DETERMINISTIC. Also, you must have the EXECUTE object privilege on any user-defined function(s) used in the function-based index if those functions are owned by another user.

Privileges needed to view procedures, triggers, package bodies

What privileges are needed for a user to view procedures, triggers, package bodies in another schema? I don't want to grant privileges more powerful than needed like 'select ANY'.

If you want to give somebody access to view only some of objects without giving read/execute access to them probably the best method is to build your own view and give select acces to this view.
Example:
create view special_definitions as
select view_name obj_name, 'VIEW' obj_type text
    from dba_views
   where owner='OTHERSCHEMA'
       and view_name in ('VIEW1', 'VIEW2', ...)
union all
select trigger_name,'TRIGGER', trigger_body
    from dba_triggers
   where .....
grant select on special_definitions to special_user;Bartek

Privileges needed to run a job?

I have a database procedure that I have put in the 10g R2 job queue with a disabled status. I would like to allow a user to pass some parameters to the database procedure using the dbms_scheduler.set_job_argument_value and then enable the job with the dbms_scheduler.enable to run the job, but when I try this the user gets access errors. What privileges do I need to grant to a user to get this to work?

Hi,
You can use the SQL ALTER privilege on the job e.g.
GRANT ALTER ON JOB SCOTT.J1 to BLAKE ;
If you do not want the user to be able to do other modifications to the job you will have to create a procedure which does only the required steps, have it run with definer's rights and then grant access to that procedure to the user.
Hope this helps,
Ravi.

Privileges needs for EnableVersioning/Disable Versioning

Hi ..
Does anyone know which privileges a users needs to have to able to successfully execute dbms._wm.EnableVersioning and dbms_wm.DisableVersioning ?
I have the wm_admin_role granted to this user , and the user has resource as well. Create Table and Create Sequence has also been explicitly granted. Cannot do enableversioning or disableversioning successfully though.
Thanks
Pierre

Hi Pierre,
What errors are you getting when you execute dbms_wm.EnableVersioning and dbms_wm.DisableVersioning? After the error occurs if you query the all_wm_vt_errors view, that would tell you exactly which statements are failing.
This information should allow me to tell you exactly which privileges are missing, if that is the source of the error. Also, what version of the database and Workspace manager are you using?
Regards,
Ben

Shell Script Adapter - what kind of sudo privilege needed?

Hi All,
I have a requirement in my project where I need to manage unix user provisioning and de-provisioning by using shell scripts in AIX servers. For this purpose, I selected Shellscript adapter as it allows us to execute scripts that run on the resource.
1. while I have account in the AIX server, I need to know what kind of sudo privilege is needed. Will I need sudo access to root? if yes, does it mean, I (or my account) should be added to root? please let me know.
2. also, I tried configuring the adapter using the login id, host, password, login shell prompt, port and SSH. When i tried to test the configuration, it gave the following error,
Test connection failed for resource(s):
Shell Script: Failed to find 'useradd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'usermod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'userdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupadd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupmod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin'
I am wondering why should it search for these commands? please let me know.
thanks.

Hi All,
I got this issue resolved after a fine-grained sudo setting to the account that is used for provisioning.
The revised sudo setting was able to do all the provisioning tasks without having a root access.
This is what I set on my service account
(root) /bin/awk, /bin/cat, /bin/cp, /bin/cut, /bin/grep, /bin/login, /bin/mv, /bin/rm, /usr/bin/auths, /usr/bin/cat, /usr/bin/chgroup, /usr/bin/chgrpmem, /usr/bin/chsec, /usr/bin/chsh, /usr/bin/chuser, /usr/bin/cp, /usr/bin/last, /usr/bin/lastlog, /usr/bin/listusers, /usr/bin/logins, /usr/bin/lssec, /usr/bin/mkgroup, /usr/bin/mkuser, /usr/bin/mv, /usr/bin/passwd, /usr/bin/profiles, /usr/bin/pwdadm, /usr/bin/rm, /usr/bin/roles, /usr/sbin/groupadd, /usr/sbin/groupdel, /usr/sbin/groupmod, /usr/sbin/lsgroup, /usr/sbin/lsuser, /usr/sbin/rmgroup, /usr/sbin/rmuser, /usr/sbin/useradd, /usr/sbin/userdel, /usr/sbin/usermod, /usr/sbin/logins
(root) NOPASSWD: /usr/bin/chgrp, /usr/bin/chmod, /usr/bin/chown, /usr/bin/chpasswd, /usr/bin/cp
In this way, you need not have to be a root user to perform provisioning using AIX.
Hope this helps!!
thanks.

Sys privileges needed to execute dbms_wm package

What (if any) system privilege does a user need to be grant in order to execute dbms_wm.* besides WM_ADMIN_ROLE and without using the dbms_wm.GrantSystemPriv procedure?

As sys you should only grant execute on sys.dbms_metadata package and have the select_catalog_role assigned.
~ Madrid

Problem with DBMS_DATAPUMP package ,need help urgently!!

Hi everyone
I'm trying to export data with PL/SQL DBMS_DATAPUMP package.
But I can't export data properly so far.
If anybody know slutions these case and errors what I explained,
pls help me.
1. when I use ADD_FILE Procedure, and set parameter of file type as logfile
then execute ORA-26535 error code returned as error.
but if I didn't set on filetype that error didn't returned.
2. when I execute package what I made, I could make DMP file but
strange named tables also made on Database which I use.
I don'(t why these table made it.
table name-----SYS_EXPORT_TABLE_01,SYS_EXPORT_TABLE_06
I attach my command under the below,
CREATE OR REPLACE PACKAGE BODY ETL.PACK_KHJ006_filemake IS
     PROCEDURE Filemakeprocess IS
          dir_name          VARCHAR2(50);
          dfile_name          VARCHAR2(50);
          dlog_name          VARCHAR2(50);
          file_handle          NUMBER;
     BEGIN
          dir_name     := 'PLSQL_DIR';
          dfile_name     := 'KHJT001_backup' || TO_CHAR
(sysdate,'yyyymmdd') || '.dmp';
          dlog_name     := 'KHJT001_backup.log';
          --file_handle     := DBMS_DATAPUMP.attach
('KHJT001_BACKUP');'KHJT001_BACKUP'
          file_handle     := DBMS_DATAPUMP.OPEN
('EXPORT','TABLE',NULL,'backup');
          DBMS_OUTPUT.PUT_LINE(dfile_name);
          DBMS_DATAPUMP.ADD_FILE
(file_handle,dfile_name,dir_name);
     -     DBMS_DATAPUMP.ADD_FILE
(file_handle,dlog_name,dir_name,DBMS_DATAPUMP.KU$_FILE_TYPE_LOG_FILE);
          DBMS_DATAPUMP.METADATA_FILTER(file_handle,'INCLUDE_NAME_EXPR','= ''ETL.KHJW001_changep");
          DBMS_DATAPUMP.SET_PARALLEL(file_handle,2);
          DBMS_DATAPUMP.START_JOB(file_handle);
     END;
END;
Thank you for your help

What version of the database are you running? It seems to be working as expected for me (9.2.0.3).
1 declare
2    jobno binary_integer;
3 begin
4    dbms_job.submit( jobno, 'foo_proc();', sysdate, 'sysdate + (1/24)' );
5    commit;
6* end;
scott@jcave > /
scott@jcave > column last_date format a20;
scott@jcave > column next_date format a20;
scott@jcave > select job, to_char(last_date,'dd-MON-yy hh:mi:ss') Last_Date, to_char(next_date,'dd-M
ON-yy hh:mi:ss') Next_Date from user_jobs;
       JOB LAST_DATE            NEXT_DATE
         1 25-NOV-03 05:06:39   25-NOV-03 06:06:39
Elapsed: 00:00:00.00As an aside, are you really rebuilding your indexes every hour? On most systems, index rebuilds are completely unnecessary. On those systems where they are necessary, I can't imagine that it would be useful more than monthly.
Justin
Distributed Database Consulting, Inc.
www.ddbcinc.com/askDDBC
Justin
Distributed Database Consulting, Inc.
www.ddbcinc.com/askDDBC

Is "parse as" the only way to restrict user privileges?

I have an application which is working in a schema blabla_owner.
Users do not need to log into this app, but I don't want them to be able to update data. Although I only have reports and no updateable forms or anything, my client is not very happy that all queries are implicitly done by the schema owner.
I read that "parse as" can be used, so we created a user blabla_read that can only read in the owner's schema and selected this user in the "parse as" attribute of the application, but unfortunately using this mechanism we need to grant the select privileges directly instead of through a role.
I tried changing the dad to use the readonly user but that is no use since the HTMLDB_PUBLIC_USER is only a dummy user and its privileges do not matter.
Is there another way of accomplishing the following:
- not requiring the users to log in
- be sure all queries are done by a user with readonly privileges only
- be able to use a role to grant privileges instead of doing this directly
Thanks

Not to put too fine a point on it, but as I said earlier An Apex application is no different than a "stored procedure" in that object privileges need to be granted directly to the parsing schema and not via a role
The reason for this might be that DBMS_SYS_SQL.PARSE_AS_USER, the underlying mechanism used by Apex to parse all SQLs requires object privileges to be granted directly to the "parse as" schema (for security reasons), but in any case whatever the reason, it is what is.
I have also "wished" many times that stored procedures/views would work with privileges granted through roles and not directly, but hey, what you gonna do?!

How to grant update privilege on custom procedures created in apps schema?

Hi
We have R12.0.6 instance running in our organization. Our programmers keep requesting the 'write (update)' access on some custom procedures that are originally created in apps schema. I created one read-only like database user and granted 'execute/debug' privilges on those custom procedures, but still using this user procedures cannot be updated (in sufficient privileges).
Once they modify procedure, forwarding me the code. Using apps user profile, i can recreate procedures using create or replace command. This way it is working fine. Our concern is how they (programmers) themselves using database read-only user does this job? What privileges needs to be granted?
Please guide me?
Regards
Ariz

Arizuddin wrote:
Hi
We have R12.0.6 instance running in our organization. Our programmers keep requesting the 'write (update)' access on some custom procedures that are originally created in apps schema. I created one read-only like database user and granted 'execute/debug' privilges on those custom procedures, but still using this user procedures cannot be updated (in sufficient privileges).
Once they modify procedure, forwarding me the code. Using apps user profile, i can recreate procedures using create or replace command. This way it is working fine. Our concern is how they (programmers) themselves using database read-only user does this job? What privileges needs to be granted?
Also provide "alter procedure" privilege to that user.
Regards
Rajesh

Granting table privileges on another users tables

Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
Any ideas what I'm doing wrong here?

Ok... well...
The 'with grant' option doesn't appear to be the issue.
The user attempting to perform the grants:
i.e. GRANT SELECT ON user_2.table_1 TO view_role
has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
i.e.
l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
EXECUTE IMMEDIATE l_sql;
And - it's this that's giving me the insufficient privileges...
I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
I'm at a loss.

Privilege to run loadjava

I'm new to loadjava. Pls. help. My question is to use javaloader to load a simple class into a schema, how much privilege have to be grant to the user? How?
I got error saying MD5 table doesn't exist. I guess the newly created user hasn't any privilege to the harsh table, nor other privilege needed.
Thanks.

Grant JAVAUSERPRIV to user
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Olive:
I'm new to loadjava. Pls. help. My question is to use javaloader to load a simple class into a schema, how much privilege have to be grant to the user? How?
I got error saying MD5 table doesn't exist. I guess the newly created user hasn't any privilege to the harsh table, nor other privilege needed.
Thanks.<HR></BLOCKQUOTE>
null

DBMS_DATAPUMP privileges needed.

Similar Messages

Maybe you are looking for