Directory permission

Hi,
Is it possible to set permissions for java at the directory level instead of the file level uaing
dbms_java.grant_permission( 'SCHEMA', 'SYS:java.io.FilePermission', 'c:\program files\oracle\jre\incoming', 'read' )
I want the ability for my java classes to read any file within a directory, and any new file that gets put into it later on...
Thanks in advance,
Ned

Hi,
See if the following commands help you.
To denote all files within a directory, provide the "*" symbol, do it as follows:
X -> Oracle database user
dbms_java.GRANT_permission('X','java.io.FilePermission','c:\program files\oracle\*','read');To denote all directories and files within a directory, provide the "-" symbol, do it as follows:
dbms_java.GRANT_permission('X','java.io.FilePermission','c:\program files\oracle\-','read');regards,
Savitha.

Similar Messages

Mac - SGD won't start - home directory permission problem?

Mac OSX 10.5.6 when attempting to login to SGD fails to start. Relevant section from java console:
security: Certificate has failed the verification with the Root CA certificates
security: Adding certificate in Deployment session certificate store
security: Added certificate in Deployment session certificate store
security: Saving certificates in Deployment session certificate store
security: Saved certificates in Deployment session certificate store
network: Connecting https://zsgd.open-tech.com/sgd/tcc/java/Tester.class with cookie "JSESSIONID=F5602C38467AC1159DCF761A6AA3CE44; TTA_SESSION_OBJECT=-1721504362694110337:zsgd.open-tech.com:1234879815946:-1085814744412016712:2; TTA_CLIENT_COOKIE=1234818729782-6121439398221565261"
basic: Loading https://zsgd.open-tech.com/sgd/tcc/java/Tester.class from cache
Tue Feb 17 08:21:58 CST 2009 JEP creating applet Tester (https://zsgd.open-tech.com/sgd/tcc/java/)
basic: Starting applet
basic: Referencing classloader: sun.plugin.ClassLoaderInfo@a32ea4, refcount=1
basic: Loading applet/u2026
basic: Initializing applet/u2026
basic: Added progress listener: sun.plugin.util.GrayBoxPainter@946d22
basic: Referencing classloader: sun.plugin.ClassLoaderInfo@a32ea4, refcount=2
basic: Releasing classloader: sun.plugin.ClassLoaderInfo@a32ea4, refcount=1
network: Connecting https://zsgd.open-tech.com/sgd/tcc/java/ttalwG-jps.jar with proxy=DIRECT
network: Connecting https://zsgd.open-tech.com/sgd/tcc/java/ttalwG-jps.jar with cookie "JSESSIONID=F5602C38467AC1159DCF761A6AA3CE44; TTA_SESSION_OBJECT=-1721504362694110337:zsgd.open-tech.com:1234879815946:-1085814744412016712:2; TTA_CLIENT_COOKIE=1234818729782-6121439398221565261"
basic: Loading https://zsgd.open-tech.com/sgd/tcc/java/ttalwG-jps.jar from cache
basic: Reading cached JAR file from JRE 1.5 release
basic: Certificates for https://zsgd.open-tech.com/sgd/tcc/java/ttalwG-jps.jar is read from JAR cache
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Checking if certificate is in Deployment session certificate store
security: User has denied the priviledges to the code
java.lang.IndexOutOfBoundsException: Index: 1, Size: 1
So I created another account and it works fine there. Compared permissions between the two accounts and they appear identical. Looks like it can't create the .tarantella directory in my home directory. Did have some home directory permission problems a couple weeks ago and used the utility on the Mac OSX install disk to reset home directory permissions and ACLs.
Any suggestions greatly appreciated.
Mark G.

I probably should have included more of the java console output. This is output after what appears to be certificate checking:
basic: Reading cached JAR file from JRE 1.5 release
basic: Certificates for https://zsgd.open-tech.com/sgd/tcc/java/ttalwG-jps.jar is read from JAR cache
security: Loading certificates from Deployment session certificate store
security: Loaded certificates from Deployment session certificate store
security: Checking if certificate is in Deployment session certificate store
security: User has denied the priviledges to the code
java.lang.IndexOutOfBoundsException: Index: 1, Size: 1
     at java.util.LinkedList.entry(LinkedList.java:368)
     at java.util.LinkedList.get(LinkedList.java:313)
     at com.sun.deploy.security.MacOSXTrustDecider.isAllPermissionGranted(MacOSXTrustDecider.java:163)
     at com.sun.deploy.security.MacOSXTrustDecider.isAllPermissionGranted(MacOSXTrustDecider.java:86)
     at com.sun.deploy.security.MacOSXTrustDecider.isAllPermissionGranted(MacOSXTrustDecider.java:79)
     at sun.plugin.security.PluginClassLoader.getPermissions(PluginClassLoader.java:146)
     at java.security.SecureClassLoader.getProtectionDomain(SecureClassLoader.java:192)
     at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:124)
     at java.net.URLClassLoader.defineClass(URLClassLoader.java:260)
     at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
     at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
     at java.security.AccessController.doPrivileged(Native Method)
     at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
     at sun.applet.AppletClassLoader.findClass(AppletClassLoader.java:147)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:316)
     at sun.applet.AppletClassLoader.loadClass(AppletClassLoader.java:119)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:251)
     at sun.applet.AppletClassLoader.loadCode(AppletClassLoader.java:605)
     at sun.applet.AppletPanel.createApplet(AppletPanel.java:723)
     at sun.plugin.AppletViewer.createApplet(AppletViewer.java:1864)
     at jep.AppletFramePanel.createApplet(AppletFramePanel.java:189)
     at sun.applet.AppletPanel.runLoader(AppletPanel.java:652)
     at sun.applet.AppletPanel.run(AppletPanel.java:326)
     at jep.AppletFramePanel.run(AppletFramePanel.java:176)
     at java.lang.Thread.run(Thread.java:613)
Tue Feb 17 16:43:26 CST 2009 JEP creating applet com.tarantella.tta.client.tcc.lwplugin.pluginG.TCCHelper (https://zsgd.open-tech.com/sgd/tcc/java/)
java.security.AccessControlException: access denied (java.util.PropertyPermission user.home read)
     at java.security.AccessControlContext.checkPermission(AccessControlContext.java:264)
     at java.security.AccessController.checkPermission(AccessController.java:427)
     at java.lang.SecurityManager.checkPermission(SecurityManager.java:532)
     at java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1285)
     at java.lang.System.getProperty(System.java:628)
     at com.tarantella.tta.client.tcc.lwplugin.qG.k.a(k.java)
     at com.tarantella.tta.client.tcc.lwplugin.qG.h.l(h.java)
     at com.tarantella.tta.client.tcc.lwplugin.qG.h.a(h.java)
     at com.tarantella.tta.client.tcc.lwplugin.qG.h.a(h.java)
     at com.tarantella.tta.client.tcc.lwplugin.qG.h.a(h.java)
     at com.tarantella.tta.client.tcc.lwplugin.pluginG.c.p(c.java)
     at com.tarantella.tta.client.tcc.lwplugin.pluginG.c.<init>(c.java)
     at com.tarantella.tta.client.tcc.lwplugin.pluginG.TCCHelper.run(TCCHelper.java)
     at java.lang.Thread.run(Thread.java:613)
basic: Starting applet

Directory Permission in 10g Express for Windows XP

I am using Oracle 10g Express on a Windows XP machine. I want to use External Tables. I created a directory(c:\Datafiles), but the Database does not have acces to it. I tried changing the Oracle Service to run from "System" to a local user, but when I do that I am unable to open the Databse Web-Page or connect to the Database using SQL Developer. I am looking for any solution that will help.
I would like to know how I can change the permission for the "System" account so that it can access the files.
OR
Where do I find the values for the right connection setting if I run the Database as a Local User.
Any help will be appreciated.
--Thanks
My code:
CREATE OR REPLACE DIRECTORY admin_dat_dir
AS 'C:\Datafiles\data';
CREATE OR REPLACE DIRECTORY admin_log_dir
AS 'C:\Datafiles\log';
CREATE OR REPLACE DIRECTORY admin_bad_dir
AS 'C:\Datafiles\bad';
GRANT READ ON DIRECTORY admin_dat_dir TO hr;
GRANT WRITE ON DIRECTORY admin_log_dir TO hr;
GRANT WRITE ON DIRECTORY admin_bad_dir TO hr;
I plan to use these directories for External Tables:
CREATE TABLE admin_ext_employees
(employee_id NUMBER(4),
first_name VARCHAR2(20),
last_name VARCHAR2(25),
job_id VARCHAR2(10),
manager_id NUMBER(4),
hire_date DATE,
salary NUMBER(8,2),
commission_pct NUMBER(2,2),
department_id NUMBER(4),
email VARCHAR2(25)
ORGANIZATION EXTERNAL
TYPE ORACLE_LOADER
DEFAULT DIRECTORY admin_dat_dir
ACCESS PARAMETERS
records delimited by newline
badfile admin_bad_dir:'empxt%a_%p.bad'
logfile admin_log_dir:'empxt%a_%p.log'
fields terminated by ','
missing field values are null
( employee_id, first_name, last_name, job_id, manager_id,
hire_date char date_format date mask "dd-mon-yyyy",
salary, commission_pct, department_id, email
LOCATION ('empxt1.dat', 'empxt2.dat')
REJECT LIMIT UNLIMITED;
Now when I call (From Hr schema)
SELECT *
FROM ADMIN_EXT_EMPLOYEES
I get the following errors:
ORA-29913 : error in executing ODCIEXTTAVLEOPEN callout
ORA-29400: data cartridge error
KUP-04080: directory object ADMIN_LOG_DIR not found
ORA-06512: at "SYS.ORACLE_LOADER", line 19
I did some reading and found that this error is because Oracle does not have acce to the directory:C:\Datafiles\log
So I come to the problem, how do I grant access to Oracle.

I just checked the permission on my Folders, after following your advice. Thanks for the link.
The "SYSTEM" account has permissions to the folder, and I still see an error:
ORA-29913: error in executing ODCIEXTTABLEOPEN callout
ORA-29400: data cartridge error
KUP-04080: directory object ADMIN_LOG_DIR not found
ORA-06512: at "SYS.ORACLE_LOADER", line 19

Strange wine behavior, home directory permission change!!

hi all, archers.
i'm an arch user since early 2007 and this is my first post. Since now i've always found every information needed and enjoyed this great distribution.
btw, now i have a strange behavior with last version of wine in extra repository (0.9.61).
situation:
clean wine install, w/o .wine prefix from previous version creation (i always redo prefix creation every new version).
the fact:
after wineprefixcreate, as usual, i execute winecfg for the last personalization and sound interface selection.
fortunately and surprisingly, i notice that my home directory AND my desktop directory have completely screwed up permission. they was set to 777!!! aargh!
my home desktop is not so critical mission but i think this is not good!!!
after some test, i can say, in this my strange personal experience, that it's winecfg fault. wineprefixcreate don't change any permission. this happen only after the first winecfg execution AND only the first time. following execution of winecfg does not trigger the fault.
googled anywhere but it seems that i'm the only one in the world with this wine strange behavior. Is it true? any else?
a little report of my config:
(multi device are all raid5)
/dev/sda2 ext2 /boot
/dev/md0 ext3 /
/dev/md1 ext3 /home
... other devices in irrelevant mount point.
not so strange rc.conf
untouched /etc/skel
not so strange gnome DE on top of GDM
not so strange any else
thanks in advance and good arching

Solved in another Thread

Directory permission checking view?

Hi All,
Can any one let me know the view to check the permission on the directory
or query itself will be of more help.
weather the directory has the read,write permission in oracle 9i.
Regards,
Asif.

This may also be of help:
create or replace force view sys.all_directories (owner, directory_name, directory_path) as
select u.name, o.name, d.os_path
from sys.user$ u, sys.obj$ o, sys.dir$ d
where u.user# = o.owner#
and o.obj# = d.obj#
and ( o.owner# = userenv('schemaid')
or o.obj# in
(select oa.obj#
from sys.objauth$ oa
where grantee# in (select kzsrorol
from x$kzsro
or exists (select null from v$enabledprivs
where priv_number in (-177, /* create any directory */
-178 /* drop any directory */)

Directory permission set by mkisofs

When I use mkisofs to create an image and write it to cd with cdrw, the directory access permission becom 555, how can I change the persion to something like 755?

Hi
From the man page of mkisofs,
It is possible to graft the paths at points other than the
root directory, and it is possible to graft files or direc-
tories onto the cdrom image with names different than what
they have in the source filesystem. This is easiest to
illustrate with a couple of examples. Let's start by
assuming that a local file ../old.lis exists, and you wish
to include it in the cdrom image.
foo/bar/=../old.lis
will include the file old.lis in the cdrom image at
/foo/bar/old.lis, while
foo/bar/xxx=../old.lis
will include the file old.lis in the cdrom image at
/foo/bar/xxx. The same sort of syntax can be used with
directories as well. mkisofs will create any directories
required such that the graft points exist on the cdrom image
- the directories do not need to appear in one of the paths.
Any directories that are created on the fly like this will
have permissions 0555 and appear to be owned by the person
running mkisofs. If you wish other permissions or owners of
the intermediate directories, the easiest solution is to
create real directories in the path such that mkisofs
doesn't have to invent them.
HTH
Shridhar

Home Directory Permission Fix Sought

I have a problem with one of my file sharing servers - an XServe running 10.5.4, where all the user's home directories now show owner as _unknown in the POSIX permissions. ACLs appear to be OK. The problem is that users can see each other's files if they go to open and save dialog boxes in applications.
Someone mentioned a script to fix on Apple Support phone call, but we are unable to Goggle it. fixhomedirperm.sh is the script name. Can someone assist us?

If you are comfortable with the Terminal, you can ssh to the Share Point and run something like this one-liner:
for i in `ls -d *`; do chown -R $i:staff $i; chmod -R 700 $i; done
You should do this as root, or as an administrative user. If done as an administrative user, use "sudo" before the chown and chmod commands:
for i in `ls -d *`; do sudo chown -R $i:staff $i; sudo chmod -R 700 $i; done
All this does is list the directories within the share point, which for a User Home Directory folder should be a bunch of folders named with the users' short names. Then, it loops through the directories, changes the owner (chown) of all files within the directory to the user short name (and the group to "staff", the default group), then changes the permissions (chmod) so that only the user can see files within his or her home directory.
This assumes that a) Your user home directories are all named with the user's short name, and b) That you want the permissions to be set so that no one else can see inside the user's home directory. This nixes things like user dropboxes in their accounts and websites served from the user's home directory.
I would suggest trying the one-liner on a directory with the same folder structure as the share point for a test.

New directory permission

I'm developing a vi that will create a directory and then immediately create a text file inside the directory. The attached vi is what I have so far. I can create the folder, but any vi I use to write to the folder generates error 8 about file permissions. I have checked and set write permissions on the parent folder. Any ideas?
I'm using winxp pro with LabVIEW 7.1
Tay
Attachments:
file save fix.vi ‏26 KB

Hi Tay,
now i see that is not the only problem. If the first folder "Power Box Results" doesn´t exist, you have to create this one first. See the attachment.
Hope it helps.
Mike
Attachments:
file%20save%20fix[1].vi ‏42 KB

Directory permission warning

warning: directory permissions differ on usr/bin/
filesystem: 4755 package: 755
should i go about changing /usr/bin dir to 4755?

No, it is already at 4755, which is plain wrong: chmod 755 /usr/bin

Log directory permission

The Event Viewer on our farm is generating a couple of errors every five minutes:
Unable to access directory e:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\LOGS\ on server SACSHRPNTWFE1. Ensure that this directory exists and that the account HOTWATER\spfarm can access it.
And:
The Execute method of job definition Microsoft.SharePoint.Administration.SPUsageImportJobDefinition (ID 4be53048-55b8-4f43-82d0-baf38bf5516b) threw an exception. More information is included below.
The directory e:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\LOGS\ does not exist.
The directory definitely exists, and I have explicitly given the spfarm user full control of the directory and then restarted the timer service, but the error persists.
I've had no reports about anything on the site failing, but this is clearly not good. I would appreciate any suggestions.
Echo Train Nashville TN

The following local groups should have identical rights:
WSS_WPG
WSS_ADMIN_WPG
WSS_RESTRICTED_WPG_V4
They should have these rights:
Read/Write, with special permissions of Delete subfolders and files.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Help with ACL and directory permission

I have the following ACL for directory xyz. I have granted access to xyz for user user1, however user1 still cannot get into the directory. What is missing?
# file: xyz
# owner: owner1
# group: nogroup
user::rwx
user:user1:rw-         #effective:rw-
group::---             #effective:---
mask:rw-
other:---
default:user::rwx
default:group::---
default:mask:---
default:other:---Also what is the difference between the default and common ACL?
Thanks

user1 still cannot access directory xyz... something else missing? Thanks.
# file: xyz
# owner: owner1
# group: nogroup
user::rwx
user:user1:rw-         #effective:rw-
group::---             #effective:---
mask:rw-
other:---
default:user::rwx
default:group::---
default:mask:rwx
default:other:---

Windows executable have directory permission in udev automount

Hi! I've used the arch wiki to set automount
https://wiki.archlinux.org/index.php/Ud … n-mounting
My rule looks like that:
KERNEL!="sd[a-z]*", GOTO="media_by_label_auto_mount_end"
ACTION=="add", PROGRAM!="/sbin/blkid %N", GOTO="media_by_label_auto_mount_end"
# Individua l'etichetta
PROGRAM=="/sbin/blkid -o value -s LABEL %N", ENV{dir_name}="%c"
# utilizza basename per to gestire etichette come ../mnt/foo
PROGRAM=="/usr/bin/basename '%E{dir_name}'", ENV{dir_name}="%c"
ENV{dir_name}=="", ENV{dir_name}="usbhd-%k"
ACTION=="add", ENV{dir_name}!="", RUN+="/bin/su tomk -c '/usr/bin/pmount -A -u 177 --dmask 066 %N %E{dir_name}'"
ACTION=="remove", ENV{dir_name}!="", RUN+="/bin/su tomk -c '/usr/bin/pumount /media/%E{dir_name}'"
LABEL="media_by_label_auto_mount_end"
Directory are marked "executable" of course, all files but .exe are not. How can I change .exe permissions?

I actually have not configured UDev like you have mentioned.. But at times I have seen cases where files in windows partitions do not have any execute permissions.. It was always because the corresponding fstab entry had "noexec" flag.. I even got the problem a couple of times when "noexec" flag was not specified.. It always worked for me when I removed the "noexec" flag (if present) and added the "exec" flag to the fs entry in /etc/fstab
Maybe you can try the same

Windows Server 2012 R2 robocopy not copying inherited directory permission from source file server to destination ?

Can anyone here please help me with Robocopy on Windows Server 2012 R2 to copy the file server content from \\OldFileServer\Data share into the local S:\Data drive ?
here's my script that I use to copy 11 TB of file server contents:
robocopy.exe "\\OLDFILESERVER\Data" S:\Data *.* /E /SECFIX /SEC /XO /ZB /COPYALL /MIR /DCOPY:DAT /R:0 /W:0 /NP /NFL /NDL /TEE /LOG:"G:\robocopy.log"
Any kind of help and assistance would be greatly appreciated.
Thanks
/* Server Support Specialist */

Hi,
Based on my tests, inherited permissions will not be copied using robocopy.exe.
That’s because that after we copy or move an objects to another volume, the object inherits the permissions of its new parent folder.
My suggestion for you is to disable the inheritance on corresponding subfolders, and Convert inherited permissions into explicit permissions on this object. After that, those permissions can be copied.
Here are some references below for you:
Robocopy not copying NTFS permissions
http://social.technet.microsoft.com/Forums/windowsserver/en-US/b36748cd-14d1-47a5-9fb6-878ca93ad6fc/robocopy-not-copying-ntfs-permissions
How permissions are handled when you copy and move files and folders
http://support.microsoft.com/kb/310316
Powershell ACL commands? NTFS Permissions - Turn inherited permissions into explicit permissions and remove inheritance
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/884e2837-ec1d-4937-83a5-722cd00d7d16/powershell-acl-commands-ntfs-permissions-turn-inherited-permissions-into-explicit-permissions-and?forum=ITCG
Best Regards,
Amy

Oracle 12c getting ORA-4846 (missing read...permission on directory during ADR initialization)

I'm in initial stages of testing Oracle 12c (12.1.0.1) on Windows, 64-bit with an application I develop.
I had two working instances on the system. After an unscheduled power cycle, the instances refuse to start.
The error I get is:
C:\Users\b>sqlplus SQL*Plus: Release 12.1.0.1.0 Production on Thu Oct 17 13:54:27 2013
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Enter user-name: / as sysdba
Connected to an idle instance.
SQL> startup
ORA-48146: missing read, write, or exec permission on directory during ADR initialization [d:\oracle\diag\rdbms\cldb12c] [0]
ORA-48187: specified directory does not exist
OSD-00002: additional error information O/S-Error: (OS 5) Access is denied.
The directory exists, but appears to be read-only. I've changed that (just to check), and there's no change except that the permissions are set back to read-only after the attempt. Ideas?

Is it Vista or 2008, by default in these severs only files have a read only attribute Any changes to the folder's read-only box will only affect the files inside the folder, then the read-only box will default back to blue when you check it again.
Because the attribute is set on the file level, then unchecking the folder box doesn't remove the Read-Only attribute, Check his note for more understanding and solution.
Directory Permission Problems While Creating Database On Windows Vista and Windows Server 2008 (Doc ID 838547.1)

FTPAdapter - logical directory name - file not moved to archive directory

I created a simple ftp service to read the file from remote inbound directory and archive it to an "archive" directory using logical directories. I supplied the input and archive directories. The process reads the file from the input directory, but doesnt move it to archive directory. In the opmn logs i see the following message
File Adapter::Outbound> Since file could not be copied to specified archive directory, file : CUST__20081113002951.xml is being copied to a default archive directory :/apps/oracle/product/10.1.3.1/OracleAS_1/j2ee/home/fileftp/defaultArchive/
I checked the a) directory permission - this is the ftp users home directory , so it has all the bits set rwxrxrx- I even tried rwxrwxrwx, but same issue
b) there is enough space on the box
c) I can manually move the files around as the same user.
Secondly, the files under the default archive directories are being created as root. Not sure why. Our server is running as "oracle" user.
We are on 10.1.3.4
any idea how to troubleshoot this ?
Edited by: user9514124 on Nov 13, 2008 5:27 PM

Just a thought. You are trying to archive to an FTP user's home directory. I assume that you want to archive remotely (on the source server)? If so you need to specify UseRemoteArchive="true" in the WSDL file for the adapter. If you forget that the adapter archives locallly on the SOA Suite server and perhaps there the directories are indeed missing or have the wrong rights?
If you are using remote archiving and it doesn't work, have you tried to login with an FTP client and upload a file to the archive folder with FTP (as the FTP adapter user)? That is what the FTP adapter will do.
If you are using local archiving, check all the parent directories and make sure that they are fine as well as the target directory. Also look into the file ownership issue, the files should not be created as root if everything really runs as oracle! Perhaps someone has accidentally started something as root?
Good luck!

Directory permission

Similar Messages

Maybe you are looking for