Export object privileges to another user

dear,
i want to export thr object privilege to another user on oracle 10g. how can do it? i try to export the user/scheam than immport to another user but still no work..
Regards

I guess he want user B to have same object privileges as user A
If this is the case, it depends on what object privileges user A has.
You can find that out from user_tab_privs after logon as user A.
If the GRANTABLE = 'NO' you have to logon as each schema holder to grant the privs.

Similar Messages

How to view object privileges of a user in Oracle10g?

I try to view the object privileges of a user through the table user_object_privs but it didn't work. I didn't get the correct name of the table or there were some problem with my Oracle. Please help me. Thanks a lot.

Thanks, that link helped me out. I was looking for this:
SELECT OWNER, TABLE_NAME, GRANTEE, PRIVILEGE FROM DBA_TAB_PRIVS WHERE GRANTEE='<put name here>';

Which view I can query to get the granted objects privilege to a user?

Hi all,
which view I can query to get the granted objects privilege to a user?
for example:
grant execute on accounting.get_name to scott;
Which view has above object granted information?
Thanks

SQL> select * FROM all_tab_privs where grantor = upper('accounting');
no rows selected

Insufficient privilege: Can't export objects in schema..user has no privilege on the underlying objects

I'm using SYSTEM user but
HDBSTUDIO continues on triggering this error when I try to export the catalog:
SAP DBTech JDBC: [258]: insufficient privilege: Can't export objects in schema DARTEL_TRANSPORTES. Can't export procedure DARTEL_TRANSPORTES.PAL_TRIPLE_SMOOTH_WRAPPER. user has no privilege on the underlying objects
When trying to grant the SYSTEM user to that particular object I get a new error : Could not modify user 'SYSTEM'. Several issues occurred
Have anyone have struggled with this error before, any help will be highly appreciated
Kind Regards

rev 69 too
tomorrow I will have the webex and let you know
Something happenned after my customer change the suse's server IP, I had to perform a re-installation of SAP Business One only
We were supposed to install using the hostname but no one of the installers let me use the hostname
so it Kind of forced me to use the IP.
After asking Support about that one of the specialists told me that he prefers to use IP instead of the hostname. So I used IP.
Maybe this changed something I cannot detect yet. but tomorrow we'll see.
KR

Granting table privileges on another users tables

Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
Any ideas what I'm doing wrong here?

Ok... well...
The 'with grant' option doesn't appear to be the issue.
The user attempting to perform the grants:
i.e. GRANT SELECT ON user_2.table_1 TO view_role
has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
i.e.
l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
EXECUTE IMMEDIATE l_sql;
And - it's this that's giving me the insufficient privileges...
I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
I'm at a loss.

Granting object privileges to remote users.

Hello,
Here's the situation:
I have 2 databases located on 2 different servers both running Win2k3. In the first database the main schema is M1 and it has to read objects on the another schema M2, located on the second database.
I created a database link on the first database, to point to the second database
create database link connect2M2db connect to M2 identified by M2 using 'connect2M2db'Now I would like to grant object privileges(insert,update,delete) to M1 on M2' objects. Can anyone tell me how to do that?
Thanks in advance.

I didn't put the whole thing, (my bad) but your reply was helpful. As I said before, I have 2 dbs, on 2 differents servers. I created the dblink on the first server. I also created synonyms on the first server using the following syntax:
"create or replace synonym syn_name for user2.table" which from the link you provided me, is wrong as I didn't append the dblink name.
After that, I would like to grant object privileges to user1, by executing the command from server2. For doing that, is the following syntax correct: "grant select on table_name to user1". My issue is that user1 does not exist on server2. Should I rather use the following: "grant select on table_name@dblink to user1"?

How do I share iTunes access privileges with another user on my mac?

My wife and I use the same Mac. I recently created a separate user account for her after upgrading to Mountain Lion (so that we can get full functionality out of the new features). I gave her user account full administrator access as well as read & write sharing ability in certain folders... So why can she not purchase content on iTunes? What is the best way to extend the same iTunes account across different users on the same Mac?

I found the answer on the Quicken Support site. Unbelievable!!!!
Article ID: GEN82981 Updated: 8/11/2011 |
Unable to Share a Data File Between Multiple Users on the Same System
Cause The Quicken Essentials data is a data package that contains multiple files. Each item in the package has permission set based on the current users profile. When the Package is moved to a shared folder, the permission in the data package are not changed, therefore cannot be accessed by another user.
You can change the permissions for each individual file within the data package to be accessed by other users. However, the first user who opens the file after the permissions have been changed, will take ownership of the data package, and it will no longer be accessible by the other party again.
SolutionThis issue is currently a product limitation and is expected to be resolved in a future version of Quicken Essentials for Mac.

Grant Privileges to another user

Hi,
I am new to plsql. In course of my learning. I created two tables BOOKS and AUTHORS in orcl database(10g) through SYSDBA.
Again i logged in to SCOTT user account and am unable to see the BOOKS and AUTHORS tables.
Please let me know how do i grant administrative privileges(to edit,delete,insert,update) to SCOTT user for these tables.
Thanks & Regards,
Amrutha.

808099 wrote:
1. Got now that SYSDBA is a role and SYS is user.
2. I was able to login to sqlplus through giving "/ as SYSDBA" as the username. Hence i thought it as user."/ as sysdba" connects to the database as the SYS user using operating system authentication with the SYSDBA role enabled.
3. Secondly, I dont know which schema does my BOOKS table belong to. Because i just ran a create table script in scott/tiger@orcl. PLease suggest how i can know which schema it belongs to.If you connected to the database as the SCOTT user and ran the script to create the table, the table would almost certainly be owned by SCOTT. If you connected to the database as the SYS user and ran the script to create the table, the table would most likely be owned by SYS. If the script specified the schema owner, i.e.
CREATE TABLE library.book ...the table would be created in the specified schema. But you need to have very powerful privileges in order to create objects in other user's schemas and SCOTT does not have those privileges unless you've specifically granted them.
4. Thirdly, I will delete the BOOKS and AUTHORS from SYS and create them in SCOTT user. But thought if GRANT privileges can be an alternative.Not really. It's much better to have the tables owned by the correct schema in the first place. You use grants to allow other users to access (or modify) tables but other users are not going to have the same level of privileges (for example, they're not going to be able to run DDL against the table).
Justin

Object locked by another user-during job scheduling

Hi experts,
We are facing a issue where in which we are scheduling a program in one system and inside which RFC is calling some other system and inside the RFC we are calling a BDC to update one field (this is only becoz we are in a situation to track change history ) else we might have used update table using enqueue and dequeue concepts.
Now say for example we are using change vendor (XK02) in BDC. now while some user is opening XK02 and editing the vendor , scheduling the program cause the job to be abbended , this is the issue we are facing currently.
so please provide some jist on this or suggest some best practice for this.
Thanks in advance
S.Janagar

Hi Janagar,
According to my opinion, following would be a good approach and will take into account the following problems;
a) No need to directly update standard table - it is not recommended
b) Even if other user is using that t-code for that vendor, we can still update it later
To use this, we can use the RFC function module in BACKGROUND TASK. (please see F1 help on this).
By calling the same RFC with the suffix in BACKGROUND TASK (and also using DESTINATION ofcourse),
the system will ensure that
a) at the time of calling the rfc in background, the other system's vendor code is locked/enqued,
then the system will automatically, AFTER SOME TIME, try again and run the RFC. So probably after some time, the vendor should get un-locked and the RFC bdc will do the update. The system will keep on trying in frequent intervals for a prefixed number of times. (please see F1 help on BACKGROUND TASK)
hope this helps.
regards,
amit m.

Object privilege question

Hi, the oracle documentation says:
A user automatically has all object privileges for schema objects contained in his or her schema. A user can grant any object privilege on any schema object he or she owns to any other user or role. A user with the GRANT ANY OBJECT PRIVILEGE can grant or revoke any specified object privilege to another user with or without the GRANT OPTION of the GRANT statement. Otherwise, the grantee can use the privilege, but cannot grant it to other users.
For example, assume user SCOTT has a table named t2:
SQL>GRANT grant any object privilege TO U1;
SQL> connect u1/u1
Connected.
SQL> GRANT select on scott.t2 \TO U2;
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'employees';
GRANTEE                        OWNER                                GRANTOR                        PRIVILEGE                            GRA
U2                             SCOTT                              SCOTT                          SELECT                                NONow this confuses me. Surely it is U1 who is the grantor, and not Scott, no??

Oracleguy,
I do got your point but I guess the right reason for this would be this only that even though the user U1 didn't have the privilege and could grant it only because of Grant Any Object priv, he is not shown as the grantor but Scott does!
[oracle@edhdr1p0-prod sqlplus]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Thu Feb 18 09:19:39 2010
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> create user u1 identified by u1;
User created.
SQL> grant create session, create table to u1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> select * from tab;
no rows selected
SQL> conn scott/tiger
Connected.
SQL> create table t2( a number);
Table created.
SQL> conn / as sysdba
Connected.
SQL> grant grant any object privilege to u1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> select * from scott.t2
2 ;
select * from scott.t2
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> grant select on scott.t2 to system;
Grant succeeded.
SQL> conn / as sysdba
Connected.
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'T2';
WHERE TABLE_N 'T2'
ERROR at line 2:
ORA-00920: invalid relational operator
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
2 where table_name='T2';
GRANTEE                        OWNER
GRANTOR                        PRIVILEGE                                GRA
SYSTEM                         SCOTT
SCOTT                          SELECT                                   NO
SQL>
Now, when I explicitly give the priv to U1 and than he grants it, he is shown as the Grantee
Sorry, I didn't realize that its still Scott only which is shown at both the places.
USER is "SYS"
SQL> grant select on scott.t2 to U1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> grant select on scott.t2 to system;
Grant succeeded.
SQL> conn / as sysdba
Connected.
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'T2';   2
GRANTEE                        OWNER
GRANTOR                        PRIVILEGE                                GRA
SYSTEM                         SCOTT
SCOTT                          SELECT                                   NO
U1                             SCOTT
SCOTT                          SELECT                                   NO
SQL> Update:
Oracleguy,
This is what I found about this priv from docs,
http://download.oracle.com/docs/cd/E11882_01/server.112/e10592/statements_9013.htm#i2077938
GRANT ANY OBJECT PRIVILEGE
     Grant any object privilege that the object owner is permitted to grant.So I guess this should explain what is being shown in the view. Since the owner is Scott who is permitted to grant the privilege , its his name which is shown here since its his privilege which is passed to the second user. Does that sounds like a reasonable explanation?
HTH
Aman....
Edited by: Aman.... on Feb 18, 2010 9:36 AM
Edited by: Aman.... on Feb 18, 2010 11:55 AM added update

How to export user specific layouts to another user ID's

Dear Experts,
We saved some ALV layouts as a User Specific, now I want to export those layout to another user ID,
for example in User ID “X” I saved some ALV layouts as user specific now I want to move those ALV layouts to another user ID “Y” , but my “X” user Id is blocked how to export those layouts to another user ID, Kindly Help me out.
Thanks & regards,
AIM

Hi
You have to create a NOT User specific layout. This will be available for all the users depending on your security authorization. You cannot move a user specific layout from one id to another
Regards
Sanil Bhandari

Help Importing objects from 1 user to another user and problem with trigger

Hello community, i am having a little difficulty with the exporting objects from one user to another specifically the exporting of the trigger.
Here is the situation, because of SOX purpose whenever a update is sent to the client the dba have to execute the script as himself (priviliged user) and is not allowed to log into the schema to make changes. Therefore we perpend the object definitions with &user_schema.. and they define user_schema in sqlplus and execute the update script.
Here is a small example which requires two users (user1 and user2) with the following grants (connect, create table, create trigger, create view, create sequence). Please forgive the naming of the objects, just trying to be as simple as possible.
I start out by logging in as system user via sqlplus and execute the following.
------------------Begin sqlplus----------------------
define user_schema=user1;
create table &user_schema..abc01 (
col1 number,
col2 varchar2(20),
col3 number,
constraint pk_abc01_col1 primary key (col1)
create table &user_schema..xyz01 (
col1 number,
col2 varchar2(20),
col3 number,
constraint pk_xyz01_col1 primary key (col1)
create or replace view &user_schema..view1 as
select x.col1, x.col2, x.col3, a.col1 as acol1, a.col2 as acol2, a.col3 as acol3
from xyz01 x
inner join abc01 a on a.col1 = x.col1;
create sequence &user_schema..seq_xyz01 start with 1 increment by 1;
create or replace trigger &user_schema..trig01
before insert on &user_schema..xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
    select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;
/--------------------End sqlplus----------------------
I would then proceed to export using the exp utility via the command line
exp system/systempassword file=user1.dmp owner=user1
Then import user1 objects into user2
imp system/systempassword file=user1.dmp fromuser=user1 touser=user2
Now the problem:
When i take a look at the sql for user2 trigger (trig01) i see the following (viewed via sqldeveloper)
create or replace TRIGGER "USER2".trig01
before insert on user1.xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
    select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;its referring to user1.xyz01 table, however i want it to point to is user2.xyz01 table. Can someone please help me out or offer another solution to go about this because i need the ability to import the objects into a different user without the import failing and having to recompile the object.
I've also tried executing this while connected as system user via sqlplus:
define user_schema=user1
create or replace trigger &user_schema..trig01
before insert on xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
    select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;
/but that fails stating that table or view does not exist, please help
however that fails because i
Edited by: user3868150 on Nov 6, 2009 6:05 PM

When performing an update in their system, the same script will be run with different values, thats not the problem.
The client currently have just that one schema in their environment, however they want to have another instance of the application set up in their environment (same database) and have that go off on its own track separate from the original application.
Now when we do an exp of the schema and the imp it into another user it get imported, however its incorrect. As stated before the trigger will be acting on the table in the original schema when it should be acting on the table in the newly imported schema.
I suppose there is no other way around this when a trigger is created the way in which i outlined above. I guess after the data gets imported into a different user the trigger would have to be recompiled to point to the correct table.
If you have an alternate solution to go about this i am open to suggestions. However like i mentioned in the original post because of SOX purpose the dba is not allowed to log in and execute update scripts as the schema user. The scripts should only be executed as that privileged user (dba).
Also if i hard code the user when the trigger is created
create or replace trigger user1.trig01
before insert on user1.xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;
/it still doesn't get imported the way that i want it to be imported in user2
create or replace TRIGGER "USER2".trig01
before insert on user1.xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
    select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;now when i do an insert to test
insert into user1.xyz01 (col2, col3) values ('abc', 123); -- Works fine, no problems here
insert into user2.xyz01 (col2, col3) values ('abc', 123);Results in an error ORA-01400: cannot insert NULL into ("USER2".XYZ01"."COL1") because the trigger doesn't exist on user2.xyz01 table.
Just try and create the schema like how i outlined above in your environment to see what i'm talking about. It seems that the only way to get the trigger to be imported the way i want it to is to actually log in as that user and create the trigger.
sqlplus user1/user1
{code}
create or replace trigger trig01
before insert on xyz01 for each row
begin
if (nvl(:new.col1, -1) = -1) then
select seq_xyz01.nextval into :new.col1 from dual;
end if;
end;
{code}
Edited by: user3868150 on Nov 6, 2009 6:10 PM

How can we import object from 1 user to another user using DATA PUMP

hi,
i have taken full export by EXPDP( data pump) now i want to import user objects from target user of one database to another user of different database.
plz reply me solution
Thanks

Hi,
impdp 'user/user@db' DIRECTORY=DATA_PUMP_DIR(DEFAULT) DUMPFILE=FILENAME.dmp LOGFILE=IMPORT.LOG REMAP_SCHEMA=SOURCE SCHEMA:TArget SCHEMA
1.Before Import check whether user importing has read,write on directory.
2.Always Try to Add logfile clause This will help.
3.Add TABLE_EXISTS_ACTION=REPLACE if you want target schema tables to be replaced by source schema table(if both has same table)
Regards,
NEerav

Create new user like another user with select privilege???

our user requested create another user similar to "apps" , but only "selec t" privilege to "apps" objects and other user's objects which grant to "apps".
In this case they can use tool login and do some work.
Does anyone know how to "create a new user like APPS", bur only copy APPS "select" privilege to this new user?
Thanks.

This has been discussed many times in the forums. Pl see this thread Re: How to create a read only database or conduct a search for more hits.
HTH
Srini

How to move database objects from one user to another user

Could someone help how to move database objects from one user to another user
Thanks in advance

Thanks a lot for the reply.
Actually I wanted to know whether there is any command to change the owner ship of the table.
For ex table1 belongs to user1. can the owner of table1 to be changed to owner2.
directly using an oracle command. I knew that it can be done using import and export, since the table was 200 million thought the rename command would be faster instead of import and export.
Thanks Billy for letting me know that it is not possible using oracle query.

Export object privileges to another user

Similar Messages

Maybe you are looking for