Executing queries in another schema in an APEX application

Hello all,
I'm using Application Express 2.1.0.00.39 with Oracle Database Express.
Following this post (Re: Including a SQL GUI in APEX applications I made a page that executes users' queries. The user inputs his SQL statement in a textarea and submits the page, then a new region returning the query results is displayed. Actually I did hardly the same as Vikas did here: http://htmldb.oracle.com/pls/otn/f?p=24317:228:4426360772935581::NO:::
However my needs are very specific: as there will be a lot of users and all users will have their own schema, I need to execute the queries a user inputs in his own schema and not the default parsing schema.
I looked around and found a few solutions.
First, GRANT. But I can't grant the default schema priviledges on all users' schema. It will permit everyone to work on all schemas and I don't want that. I want to force the parsing schema to be the same as the user authentified.
Next, I found that post: Re: how to connect to another user from a named pl/sql block. I tried the EXECUTE IMMEDIATE but it won't work with the CONNECT statement.
Finally I found that post: Change Parsing Schema dynamically? I tried to put the ALTER SESSION in a process. The success message appears, meaning the statement was executed successfully. But the query in input is still executed in the APEX default parsing schema. Then I tried to put the ALTER SESSION statement in the Report (which is a PL/SQL function body returning a SQL query), like that:
BEGIN
EXECUTE IMMEDIATE 'ALTER SESSION SET CURRENT_SCHEMA=:APP_USER';
RETURN v('P2_QRY_TEXT');
END;
It didn't work either.
What should be the best practice for my problem? Is there anyway to do what I want?
Thanks,

Re-thinking my solution:
Instead of having the package for each user, make 1 schema hold the package (whichever represents your system and not a user). Then declare the package to run as AUTHID CURRENT USER, which should make the calling schema's privileges be active. That way you avoid the hassle of having the manage 1 package for each user.
User Shema ===(SQL QUERY)==> Your System's Schema ==(QUERY) ===> Your Package w/ Authid Current User ==(Dynamic SQL Execution) ==> END
For your package, you might want to consider implementing/simulating variable argument lists, so that you can provide binds if necessary. You would just match up the binds within the query (using dbms_sql would be the only way, execute immediate does not give supporting query information) to the corresponding arguments.
I'm not sure what your goal is, but at least you have a direction to run in/at.

Similar Messages

How to execute another schema procedure from toad?

Hi,
i want to execute procedure from another schema from toad. already i have created synonym for that procedure and provided execute permission.
how to execute procedure from toad?
Thanks,

Hi,
The vendor of that product is running their own forums
http://toadfororacle.com/index.jspa
Not sure how they feel about
Handle:      user2017273
Status Level:      Newbie
Registered:      Oct 4, 2009
Total Posts:      64
Total Questions:      44 *(36 unresolved)*

Best Approach to create Security / Authorization Schema for an APEX Apps

Hi,
I am planning to create a Security / Authorization Schema for an APEX Application.
Just want to know what is the best approach to create the security feature in APEX, so that it should be re-used in other APEXApplications too..
I am looking for following features...
1. users LOGIN and then user's name is stored in APEX_USER...
2. Based on the user, I want to restrict the Application on following levels.
- TABS
- TABS - Page1 (Report
- Page2 (Form)
- Page2 (Region1)
- Page2 (Region1, Button1)
- Page2 (Region1, Items,....)
AND so on.....basically depending on user....he will have access to certain TABS, Pages, Regions, Buttons, Items...
I know, we have to create the Authorization Schema for this and then attach these Authorization Schema to the different Level we want.
My Question is, what should be the TABLE structure to capture these info for each user...where we will say...this USER will have following access...AND then we create Authorization Schema from this table...
Also what should be the FRONT end, we should have to enter these detail...
SO, wondering, lot of people may already have implemented this feature....so if guys can provide the BEST Approach (re-usable for other APEX Application)....that will be really nice..
Thanks,
Deepak

Hi Raghu,
thanks for the detial info.
so that means..I should have 2 table...
master table (2 columns - username, password)
        username    password
   user1       xxxx
   user2       xxxx2nd table (2 columns - username, chq_disp_option)
- In this table, we don't have Y/N Flag you mentioned..
- If we have to enter all the regions/tabs/pages in the Applications here or just those regions/tabs/pages for which are conditionally diaplayed.
- so that means in all the Pages/Regions/tabs/items in the entire Application, we have to call the Conditionally display..
- suppose we have 3 tabs, 5 pages, 6 regions, 15 items..that means in this table we have to enter (3+5+6+15) = 29 records for each individual users..
          username    chq_disp_option
   user1       re_region1
   user1       re_region2
   user1       tb_main
   user1       Page1
   user1       Page5
   ----        ----     - how you are defining unique name for Regions..i mean in static ID or the Title
- is the unique name for tab & item is same as the TAB_NAME (T_HOME) & Item Name (P1_ITEM1) or you are defining somewhere else.
Thanks,
Deepak

How to backup Apex applications using some script ?

We have Apex 3.1 installed on our server.
We have several workspaces + applications installed.
I wanted to backup all the apex applications in our database, just as a precautionary measure.
I know we can export each application individually using the web login, but I was wondering
if there is any kind of sql script or something which I can run as a batch job in windows which
will automatically backup all the apex applications installed.

Does the logical backups of the database what we take include the Apex applications as well ?
So lets say:
Database schema name: abc
apex workspace: abc_ws
applications in that workspace: 1,2,3,4,5
Now at the database level if export the ABC schema and restore it to another database,
will my apex applications are also backed up ?

Cannt execute stored proc of one schema in another schema from java app.

I am posting my problem in this forum as i i though it could be server-independent.
I am working on apache tomcat and spring framework with Oracle db (schema/user A)
We access oracle db from our java application by setting jndi and works fine.We have sqlstatements, stored procs and functions all run fine.
Now we create a role (DBROLE) with all permissions to that original db schema/user(A) . We created another empty schema B and assigned that role(DBROLE) to that user B.
(We grant all kind of permissions on tables/packages of schema A to user role DBROLE and also created synonyms)
Intentions are: to access the schema A though schema B from application and avoiding direct access.
In our spring application, we replaced database-settings with schema B.
Things work fine: When its plain SQL statement is run from Java code but Stored proc wont run and we get
'Wrong num of arguments/data types' error.
Also all stored procs are in packages.To execute stored proc in java code, we use SimpleJdbcCall.
I also checked run stored proc from schema B and its works. Only from web app, it doesnt work.
Please suggest,what should be done to make this working or if there is other alternative.
Thanks

Instead of importing a scema in another schema specifiy the schemas in the external-schemaLocation property.
SAXParser saxParser = new SAXParser();
saxParser.setProperty("http://apache.org/xml/properties/schema/external-schemaLocation", "xmlschema1.xsd, xmlschema2.xsd");

Function: I get ORA-04063 if I try to execute from another schema

Hi All,
I have a schema named "SCHEMA_A" and in this schema I have a function named TEST" that gets a numeric parameter "ID" and returns a string.
Then I have a schema named "SCHEMA_B" with a grant on functions SCHEMA_A.TEST. I want to use function "TEST" from SCHEMA_B.
If I try to execute SELECT SCHEMA_A.TEST(1) FROM DUAL inside schema SCHEMA_B I get ORA-04063.
But if I try to execute TEST(1) from owner schema (SCHEMA_A) and then again from SCHEMA_B it works. But it works only for parameter with value = 1.
If I try SELECT SCHEMA_A.TEST(2) FROM DUAL I get again ORA-04063. It seems that to use a specific value for function parameter, I need to execute first in the owner schema and only after that I can execute from the other schema.
Function code is very simple:
+CREATE OR REPLACE FUNCTION TEST(ID IN NUMBER)+
+RETURN VARCHAR2+
+IS+
+l_return VARCHAR2(256);+
+BEGIN+
+l_return := 'hello world';+
+RETURN (l_return);+
+END TEST;+
I use Oracle 11g R2.
Any idea why it happens?...

I can compile and grant as you did.
But if I try to execute from a schema different by owner (in your case SCOTT) something like
SELECT <your schema>.TEST(1) FROM DUAL
I get an error.
To fix, I have to execute this function in the owner schema with exactly the same parameter.
If I execute with a parameter in the owner schema (suc as 1,2 and 3), I can execute also in schema different by owner (in your case SCOTT). But if I try with a new parameter (es: 4) from SCOTT it give me an error.
Strange...

How to share data in "User_*" tables with another schema

I would like to share the data in the USER_SEGMENTS table with another schema. If I create a view and grant select on the view, when the other schema queries the view the data is identical to themselves querying the SYS.user_segments table directly.
create view sys_user_segments as select * from sys.user_segments;
grant select on sys_user_segments to A;My guess is that the SYS.user_segments table is a view based on the current user.
Is there a way to share this data without creating a copy of the table?
Oracle: 10g
Thanks

Hi,
All the data dictionary "tables" whose names start with user_ (or all_ or dba_) are actually views, and what results they bring back depend on what schema you logged in to. I don't think there's any way to allow user A to directly see what's in user B's version of user_segments.
Why do you need this? Can you use the all_ views instead, by giving A some privileges on B's objects?
Failing that, you can replicate the data into a regular table. Inside a AUTHID DEFINER stored procedure, the data dictionary views (such as user_segments) are the versions of the procedure owner, so B can write a stored procedure (let's call it populate_my_segments) that populates a regular table (let's call it my_segements), and then grant EXECUTE privilges on populat_my_segments and SELECT privileges on my_segements to user A. A can then refresh the table and look at it whenever he wants to.
If A only needs to see a little information, e.g. the total number of bytes, from B's user_segments, then B can write a function just to return that information.

SQL Report From Another Schema

Is there anyway to select a table from another schema?I have a default schema for my application but i want each user to use their own schema.
I'm looking for something like #OWNER#.table_name but replacing #OWNER# with the name of another schema in the workspace.
Kind Regards,
BgUrsea
APEX 4.0 10g XE

Hello BgUrsea,
you could achieve this by granting the needed privileges (e.g. select, insert, update, delete) on each table in the #OWNER#-schema to your applications parsing schema.
If you can't use a direct mapping (e.g., you can't assign the schema name of a user as usernames for his application user), you probably need a mapping table in your parsing schema. Define an application item (e.g. "F_OWNER") and create a application computation that executes "On New Instance" and does something like
SELECT schema
FROM mapping_table
WHERE owner=v('APP_USER');If you aren't sure you always have a mapping, you might think about an application process that not only computes the value but also handles the action to be performed in case there is no mapping for a user.
But I suppose it could be easier to have a copy of you application for each user and assign the appropriate schema to each copy. That way, you don't need the mapping, you don't need to care about always using the #OWNER# when developing your application, and of course, no user can (not even accidently) access another users (or your default) schema.
-Udo

Apex Application not working after importing to my apps schema...

Hi friends,
I created one DB application in my sample schema that is associated with apex 4.0.....
Application details:
*) login page(where i will be giving username and password)
*) page 1 (consist of several form fields, like
--->name:
--->module:
--->projects:
----->email:
the above are the fields, if i put any entries in the above field means, it will get automatically inserting in the report column, which is also in the same page consist of the above fields in the table manner...
since this report table consist of an edit icon in front, if i clicked the edit icon of an one row means, it will go to another page..
*) i.e. page 3(consist of the same fields with entries in it automatically corresponding to the each and every row, suppose if i want to update any changes means i can update in it....
this is my application that i developed it is working well with in the sample schema apex 4.0..
What i did is i created a new workspace with APPS schema in it...and i have imported my application that i developed in sample schema to APPS schema....
Since after importing to APPS schema...when i tried to open the application, it is not showing any datas in it...That is due to the tables that are supporting the application is not in APPS schema, so what i did is i have given grant privilege to the respective tables and also i have created a synonym for accessing the table in APPS schema for supporting the application.....
Now if i tried to put any entries in the form in page 2, it is getting inserting in the report column which is also in the page2....
But my problem starts here, if i clicked the edit icon symbol in each and every row of the report column it is going to the page 3 which has a respective form fields, but it is not showing any entries in it automatically, and if i tried to put any entry in it, it is not getting updating in the report table......
why this problem occurred for my application in APPS schema....But my application works very well within the sample schema......why it is not showing any entries in the form automatically soon after i clicked the edit icon in each and every row.....
i couldn't know what is the real problem behind this..... help me friends.
As this is my urgent requirement in my project..Reply me ASAP...
Thanks in Advance..
Regards,
Harry...

First, try a system reset although I can't give you any confidence. It cures many ills and it's quick, easy and harmless...
Hold down the on/off switch and the Home button simultaneously until you see the Apple logo. Ignore the "Slide to power off" text if it appears. You will not lose any apps, data, music, movies, settings, etc.
If the Reset doesn't work, try a Restore. Note that it's nowhere near as quick as a Reset. It could take well over an hour! Connect via cable to the computer that you use for sync. From iTunes, select the iPad/iPod and then select the Summary tab. Follow directions for Restore and be sure to say "yes" to the backup. You will be warned that all data (apps, music, movies, etc.) will be erased but, as the Restore finishes, you will be asked if you wish the contents of the backup to be copied to the iPad/iPod. Again, say "yes."
At the end of the basic Restore, you will be asked if you wish to sync the iPad/iPod. As before, say "yes." Note that that sync selection will disappear and the Restore will end if you do not respond within a reasonable time. If that happens, only the apps that are part of the IOS will appear on your device. Corrective action is simple - choose manual "Sync" from the bottom right of iTunes.
If you're unable to do the Restore, go into Recovery Mode per the instructions here.

How do I move a table from one schema to another schema?

How do I move a table from one schema to another schema?

Grant access to the table from the source schema to destination schema.
GRANT SELECT ON <TABLE_NAME> TO <DESTINATION SCHEMA>A simple way would be to use CREATE Table with select syntax (in destination schema)
CREATE TABLE <TABLE_NAME> AS SELECT * FROM <SOURCE SCHEMA>.<TABLE_NAME><li>However, you would be in trouble when the table has index,constraints and triggers.
So you can better of grab the DDL statement of the table(and any additional components) andd then create the table in the destination schema.You can use SQL developer, Toad or Apex's Object browser for this.
After the table is created, Insert the records using SELECT.
INSERT INTO <TABLE_NAME> SELECT * FROM <SOURCE SCHEMA>.<TABLE_NAME>This question is discussed in great detail in this AskTom thread

How do I view package bodies in another schema ?

For purposes of SOX and security/audit control, we log in under our network id's in our production environment. We have sourcecode compiled into Oracle seeded schemas ( APPS ) so that scheduled jobs are able to run with submitted from the Oracle Applications environment. We don't compile code into our personal network account areas.
I know how to GRANT EXECUTE privs so that we can execute a package in another schema, but what I want to do is to be able to view the sourcecode in another schema. Compile into APPS but be able to see the package body from my network id schema account.
I can't seem to find what the correct permission is anywhere. Granted I can look at DBA_SOURCE to get to it, but I want to use a tool like SQL Developer or TOAD to look at the code in a more presentable and easier to debug manner.
Any help ?

I did some more searching on the forum... seems its already a request... TOAD gives access to DBA_Views to resolve the issue... SQL Developer has not integrated that functionality yet, but forum entries seem to indicate that it is on the horizon.
Thanks for responding though.
~Barry

How to defer constraint of one schema from another schema

Hi All,
I am having a requirement of migrating data from one schema(SCHEMA_A) to another schema(SCHEMA_B). So I tried to implement the same using PL/SQL.
Because of foreign key contraint while migrating child table, Oracle throws an error message like parent key not available.
So I tried to set the all contraints to deferred and after completion of migration i planned to set all the contraints to immediate.
But Here I am executing the procedure from schema(SCHEMA_C) which has rights to access SCHEMA_A and SCHEMA_B.
How could I able to defer all the constraint in SCHEMA_B from SCHEMA_C?
Thanks in Advance,
Antany.

Yes,
You could run something like this, for foreign keys:
BEGIN
FOR cur_rec IN (SELECT table_name, constraint_name FROM DBA_CONSTRAINTS WHERE OWNER = <owner> AND CONSTRAINT_TYPE = 'R' )
 LOOP
 EXECUTE IMMEDIATE 'ALTER TABLE <owner>.' || cur_rec.table_name || ' DISABLE CONSTRAINT ' || cur_rec.constraint_name;
 END LOOP;
END;
/

Granting Read Only Access to user in another schema

Oracle Database 10g
Red Hat Enterprise Linux Server release 5.3
We are requested by a developer to grant his account read only access to TABLES, VIEWS, INDEXES, SEQUENCES, FUNCTIONS, PROCEDURES, PACKAGES, TRIGGERS, JOBS of another schema.
I know granting read only access to Tables and Views. But is it possible to grant READ ONLY access to other mentioned objects ? How to do it ?
And some views are in INVALID status.
I tried to compile them using alter view owner.viewname compile;
But got this ---- Warning: View altered with compilation errors.
Those views are still in INVALID status. And then I tried to use utlrp.sql . Same result.
Then I used the following
SELECT TEXT FROM DBA_VIEWS WHERE VIEW_NAME='view-name';
select REFERENCED_NAME,REFERENCED_TYPE from dba_dependencies where name='view-name';
It turns out some reference types are non existent.
Does that mean DBAs cannot do anything about this ?

Nilton wrote:
We are requested by a developer to grant his account read only access to TABLES, VIEWS, INDEXES, SEQUENCES, FUNCTIONS, PROCEDURES, PACKAGES, TRIGGERS, JOBS of another schema.
I know granting read only access to Tables and Views. But is it possible to grant READ ONLY access to other mentioned objects ? How to do it ?
TABLES -> YES grant SELECT
VIEWS -> YES grant SELECT
SEQUENCE -> YES grant SELECT
INDEXES -> There is no read access for indexes...indexes are put on tables and a user who has read access on tables can read the index as well.
FUNCTIONS / PROCEDURES / PACKAGES -> I am not sure what you mean by read access on procedures, functions and packages. You may grant EXECUTE privilege on these.
TRIGGERS -> there is no read access on triggers required. They are implemented on tables for a DML event. If the user has DML access he has the execute access on the trigger as well.
JOBS -> I am not sure what to read from Jobs.
And some views are in INVALID status.
I tried to compile them using alter view owner.viewname compile;
But got this ---- Warning: View altered with compilation errors.
Those views are still in INVALID status. And then I tried to use utlrp.sql . Same result.
Then I used the following
SELECT TEXT FROM DBA_VIEWS WHERE VIEW_NAME='view-name';
select REFERENCED_NAME,REFERENCED_TYPE from dba_dependencies where name='view-name';
It turns out some reference types are non existent.
Does that mean DBAs cannot do anything about this ?There are compilation errors in the Views. e.g. the view may be referring to a table which doesn't exist etc.
Unless you fix the error in the view you can't compile it and male it valid. Fix the view errors. If objects are non existing create them or refer to view to some where else.
If the nonexistent objects were mistakenly dropped, or the data file which contained those objects was dropped, no matter what was the reason for that object to be gone a DBA can bring it back if he is a well prepared DBA and has setup his database for such kind of disasters.
Now tell us why those objects are non-existent ? were they meant to be gone ? or they were dropped mistakenly?
Now here are my guesses:
If they were meant to be gone then probably the views definitions need to be adjusted not to refer them anymore.
If they were mistakenly dropped then:
Do you have them in recyclebin? (only tables) if YES just FLASHBACK TABLE <<tablename>> AS BEFORE DROP.
Is your database has Flashback database ON? if YES FLASHBACK DATABASE until 'time/scn just before the object was dropped'
Do you have backups and your database is running in ARCHIVE LOG mode? if YES perform an incomplete recovery using RMAN.

Calling PL/SQL Procedure In Another Schema Gives Unexpected Result

I have a SQL Script that does this:
conn pnr/<password for user pnr>;
set serveroutput on;
exec vms.disable_all_fk_constraints;
SELECT owner, constraint_name, status FROM user_constraints WHERE constraint_type = 'R';
and the disable_all_fk_constraints procedure that is owned by user 'vms' is defined as:
create or replace
procedure disable_all_fk_constraints is
v_sql VARCHAR2(4000);
begin
dbms_output.put_line('Disabling all referential integrity constraints.');
for rec in (SELECT table_name, constraint_name FROM user_constraints WHERE constraint_type='R') loop
dbms_output.put_line('Disabling constraint ' || rec.constraint_name || ' from ' || rec.table_name || '.');
v_sql := 'ALTER TABLE ' || rec.table_name || ' DISABLE CONSTRAINT ' || rec.constraint_name;
execute immediate(v_sql);
end loop;
end;
When I run the SQL script, the call to vms.disable_all_fk_constraints disables the FK constrains in the 'vms' schema, whereas I wanted it to disable the FK constraints in the 'pnr' schema (the invoker of the procedure). I know that I could make this work by copying the disable_all_fk_constraints procedure to the 'pnr' schema and calling it as "+exec disable_all_fk_constraints;+" from within the SQL script but I want to avoid having to duplicate the PL/SQL procedure in each schema that uses it.
What can I do?
Thank you

You have two issues to solve.
First you need to write a packaged procedure that works with INVOKER rights. The default is DEFINER rights.
The difference is excatly what you need. Usually the package has the rights from the schema where it is defined (=Definer rights). In your case schema VMS. Whereas you need the privileges from the user that calls the package (PNR).
=> Check out the documentation for INVOKER rights
The second problem is that the view "user_constraints" will not give the results you expect when called from inside a procedure in another schema. An alternative could be to use the view DBA_CONSTRAINTS with a filter on the owner (where owner = 'PNR'). Not sure if there are other working possibilities. Well you could create a list of constraint names that you want to disable, instead of creating the list dynamically.
And you could have another potential disaster creeping up upon you. If you run this thing, then at this moment you don't have any referential integrity anymore. You can't be sure that you can create the FKs again after this action. This is EXTREMLY DANGEROUS. I would never ever do this in any kind of production or test database. I would be very careful when I do it on a development database.

Help on calling proc in another schema

Hi,
How to call a procedure that resides in another schema?
i used the following syntax
declare
v_id number;
BEGIN
EXECUTE IMMEDIATE 'DECLARE
BEGIN
fnm.PERFVESTADJUSTASOF@to_cefsd001('||v_id||',SYSDATE,null, null, FALSE, FALSE);
END;';
EXCEPTION
WHEN OTHERS THEN
vj_debug_fasb('mat1',sqlerrm);
END ;
but i get the error:
ORA-06550: line 3, column 50: PLS-00103: Encountered the symbol "," when expecting one of the following: ( ) - + case mod new not null others <an identifier> <a double-quoted delimited-identifier> <a bind variable> table avg count current exists max min prior sql stddev sum variance execute multiset the both leading trailing forall merge year month DAY_ hour minute second timezone_hour timezone_minute timezone_region timezone_abbr time timestamp interval date <a string literal wit
If i execute this from the other schema(where the proc resides) it works.
Any idea about this???
Thanks in advance for ur help....
thanks,
Mathew

Now i am getting another error:
declare
BEGIN
Execute immediate 'declare
v_id number;
BEGIN
fnm.PERFVESTADJUSTASOF@to_cefsd001 (v_id,sysdate , -1,-1, FALSE, FALSE);
commit;
END;';
EXCEPTION
WHEN OTHERS THEN
dbms_output.put_line(substr(sqlerrm,1,200));
END ;
Error:
ORA-00164: autonomous transaction disallowed within distributed transaction
any idea on this?

Executing queries in another schema in an APEX application

Similar Messages

Maybe you are looking for