Find all_objects modified user

HI all,
Is there a way to find OS user or mac id of the person who modified any object in db.
Linux OS 5.6
DB : 10.2.0.3.0
Thanks

HI
1) Step create table:
CREATE TABLE SYS.DDL_LOG
  DBNAME         VARCHAR2(50 BYTE),
  USERNAME       VARCHAR2(30 BYTE),
  OBJECTNAME     VARCHAR2(200 BYTE),
  OBJECTTYPE     VARCHAR2(30 BYTE),
  OPERATIONTYPE  VARCHAR2(50 BYTE),
  DDLDATE        DATE,
  SQLTEXT        CLOB,
  MACHINE        VARCHAR2(50 BYTE),
  APPLYFLAG      VARCHAR2(1 BYTE),
  OBJECTOWNER    VARCHAR2(30 BYTE),
  ACTION         VARCHAR2(40 BYTE),
  CLIENTINFO     VARCHAR2(40 BYTE)
2) Step create TRIGGER SYS.DDL_TRIGGER
CREATE OR REPLACE TRIGGER SYS.DDL_TRIGGER
AFTER DDL
ON DATABASE
declare
sql_text ora_name_list_t;
stmt clob;
n number;
v_terminal varchar2(30);
v_action varchar2(40);
v_applyflag  varchar2(1);
v_client_info varchar2(40);
begin
SELECT action into v_action   FROM v$session where sid= ( select distinct sid from v$mystat ) ;
if v_action = 'NOLOG' then   v_applyflag := 'X'; else  v_applyflag := '0'; end if;
SELECT SYS_CONTEXT('USERENV','TERMINAL') into v_terminal FROM DUAL;
SELECT SYS_CONTEXT('USERENV','ACTION') into v_action FROM DUAL;
v_client_info:=substr(SYS_CONTEXT('USERENV','ENTERPRISE_IDENTITY'),1,40);
if ora_dict_obj_type   in ( 'FUNCTION','PROCEDURE','PACKAGE','PACKAGE BODY','TRIGGER',
                            'JAVA CLASS','JAVA DATA','JAVA RESOURCE','JAVA SOURCE',
       'LIBRARY')
                                   and ora_sysevent in ( 'CREATE','ALTER' )
       then
   stmt := NULL;
else
   n := ora_sql_txt(sql_text);
   if n > 1000 then n:= 1000; end if ;
         FOR i IN 1..n LOOP
          stmt := stmt || sql_text(i);
        END LOOP;
end if;
     insert into ddl_log values
     ora_database_name,
     ora_login_user,
     ora_dict_obj_name,
     ora_dict_obj_type,
     ora_sysevent,
     sysdate,
     stmt,
     v_terminal,
     v_applyflag ,
  ora_dict_obj_owner,
      v_action,
      v_client_info
end;
Thank you

Similar Messages

  • How to find out which user has the permission to execute startsap ?

    Hi All
    How do I find out which user has the permission to execute the startsap and stopsap? Do I control the permission on those script using windows standard authorization? For example: only allow certain user have the read and write permission?
    Thank you.!
    Vincent Lo

    Well to me this is really weird question..
    <b>noone un-authorized should have access to OS on your system</b>
    If this is valid you do not need to solve problems who can and who cannot start/stop SAP, because if you want to prevent some users from shutting down the SAP you have really hard job to do - there are many ways how to kill the SAP (for example killing relevant process from task manager, killing of database, messing with services etc.) - yes, this is harmful way of stopping SAP, but we are talking about attack, right? I would contact some Windows specialist to help you disable all the ways how to harm the running SAP. But still after that - there are many files that can be modified/deleted so SAP will crash after restart - you need to protect them too, etc.
    In case you take the first assumption as granted (and you really limit access to this server) you do not need to worry who can stop or start SAP - at the other hand it may be handy to be able to start/stop SAP from other users - for this you can run the stop/start script "under different user".
    But to answer the question - to me this is question just of access control (but really never tried that myself):
    <a href="http://technet2.microsoft.com/WindowsServer/en/library/c6413717-511e-42bd-bd81-82431afe4b2a1033.mspx">Permit or restrict access to a snap-in for a domain</a> (or see other related links down there on this page)
    Please award points for useful answers.
    Thanks

  • After 10.1.2 upgrade, Create/Modify User/Group requires re-authentication

    I have 3 systems - 2 were 9.x (AS10g R1) upgraded to 10.x (AS10g R2), 1 was installed as 10.x. On the two upgraded systems, after a Portal user logs in (with administration privileges), navigates to the "Administration" tab and clicks either the "Create New User", "Modify User", "Create New Group" or "Modify Group" links, they are prompted for a username and password again. On the system installed with 10.x, this does not happen. Submitted iTar was unresolved. Has anyone seen this before?
    Thanks in advance.

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you boot, and again when you log in.
    Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
    The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, reboot as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

  • How to find the appropriate user exit for invoic02 idoc in idoc_output_invo

    Hi all,
    I am new to this community p
    i have issue regarding  the How to find the appropriate user exit for invoic02 idoc in idoc_output_invoic function module.........
    thanks,

    Hi ,
    welcome to SDN.
    You can select the appropriate Customer exit accrding to the available parameters .
    The list of exits available are 
    EXIT_SAPLVEDF_001
    EXIT_SAPLVEDF_002
    EXIT_SAPLVEDF_003
    EXIT_SAPLVEDF_004
    For Example , if you want  to modify the Idoc data(EDIDD) you have to use the EXIT_SAPLVEDF_002. accodingly you can select the user exit according to the avaialable parametres.Use Table MODSAP fto get the Enhancement name.
    Hope this Helps
    Rgds
    Sree
    Edited by: Sree on Jul 23, 2010 12:11 PM

  • Financial Reports last Modified user name.

    Hi,
    I Observed some of the reports were modified in Production, Unfortunately few of our users have the access to modify them. But when i ask who did the change no one is responding as usual.
    Is there any way we can find out the user ID who modified the report lately?
    thanks.

    Hi,
    Try enabling User Tracking option under Repoting Analysis from Workspace.
    Also, you can check out various FR activities in FRLogging.log file.
    Thanks,
    Santy.

  • How to modify user attributes in Microsoft IAS or Active Directory??

    Anyone have an idea?? What I'm trying to do is to authenticate management access to an ACE 4710 against a Microsoft IAS server.
    According to the document below:
    http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/security/guide/aaa.html#wp1519045
    it sounds like I need to be able to modify user attributes similar to what I know is doable in ACS. I base my assumption on this because of the following statement in the link above:
    "Step 3 Go to the User Setup section of the Cisco Secure ACS HTML interface and double-click the name of an existing user that you want to define a user profile attribute for virtualization. The User Setup page appears.
    Step 4 Under the TACACS+ Settings section of the page, configure the following settings:
    •Click the Shell (exec) check box.
    •Click the Custom attributes check box.
    •In the text box under the Custom attributes, enter the user role and associated domain for a specific context in the following format:
    shell:<contextname>=<role> <domain1> <domain2>...<domainN>"
    Is something like this possible in IAS??
    I have the authentication piece working for the ACE however when I login, I'm assigned an ACE defined default role of 'network-monitor' which gives me only read-only access. The way I'm interpreting what needs to be done to resolve this is to have the authentication server send an attribute value that states that the user is in the role 'Admin' in which case I'll have unlimited access to my ACE.
    Make sense?? Any thoughts??
    Thanks in advance.
    -Lloyd

    Lloyd,
    It is possible via Radius and not TACACS. On the same link if you scroll down, you will see option of doing it via Radius.
    "Defining Private Attributes for Virtualization Support in a RADIUS Serve"
    Find attached the doc that explains about setting up user attributes on IAS.
    Regards,
    ~JG
    Do rate helpful posts

  • I want to find if the user is inactive inside my swing application

    i want to find if the user is inactive inside my swing application i.e he has not used the keyboard or mouse over a period of time

    Hai,
    This is code to notify you when the keyboard is left inactive for 10 seconds it will throw a message then the sytem will get exit.
    For mouse event i don't how to do the same process.
    import java.awt.KeyEventDispatcher;
    import java.awt.KeyboardFocusManager;
    import java.awt.event.KeyEvent;
    import javax.swing.JOptionPane;
    * InactiveTest.java
    * Created on October 9, 2006, 12:33 PM
    public class InactiveTest extends javax.swing.JFrame {
        int timeCnt = 0;
        Thread th;
        /** Creates new form InactiveTest */
        public InactiveTest() {
            initComponents();
            th = new Thread() {
                public void run() {
                    while(true) {
                        try {
                            th.sleep(1000);
                            timeCnt++;
                            System.out.println("Time Cnt"+timeCnt);
                            if(timeCnt == 10) {
                                JOptionPane.showMessageDialog(objInactiveTest,"Inactive for 10 seconds");
                                System.exit(0);
                                th.stop();                           
                                break;
                        }catch(Exception e){}
            th.start();
            KeyboardFocusManager.getCurrentKeyboardFocusManager().addKeyEventDispatcher(new KeyEventDispatcher() {
                public boolean dispatchKeyEvent(KeyEvent event) {
                    timeCnt=0;
                    //th.stop();
                    //th.start();
                    return false;
        /** This method is called from within the constructor to
         * initialize the form.
         * WARNING: Do NOT modify this code. The content of this method is
         * always regenerated by the Form Editor.
        // <editor-fold defaultstate="collapsed" desc=" Generated Code ">
        private void initComponents() {
            jPanel1 = new javax.swing.JPanel();
            jLabel1 = new javax.swing.JLabel();
            jTextField1 = new javax.swing.JTextField();
            setDefaultCloseOperation(javax.swing.WindowConstants.EXIT_ON_CLOSE);
            jPanel1.setLayout(new java.awt.GridLayout());
            jLabel1.setText("Enter the Name  :");
            jPanel1.add(jLabel1);
            jPanel1.add(jTextField1);
            getContentPane().add(jPanel1, java.awt.BorderLayout.CENTER);
            pack();
        // </editor-fold>
         * @param args the command line arguments
        public static void main(String args[]) {
            java.awt.EventQueue.invokeLater(new Runnable() {
                public void run() {
                    objInactiveTest = new InactiveTest();
                    objInactiveTest.setVisible(true);
        // Variables declaration - do not modify
        private javax.swing.JLabel jLabel1;
        private javax.swing.JPanel jPanel1;
        private javax.swing.JTextField jTextField1;
        // End of variables declaration
        private static InactiveTest objInactiveTest;
    }rgds,
    rdRose

  • Manually add/modify users for pure-ftpd ftp server?

    Ave,
    Alright I downloaded, compiled & installed the latest pure-ftpd ftp server from pureftpd.org .. and it seems to have started off ok.
    Since there is no Leopard Compatible PureFTPD Manager out yet, I need to create/modify users manually. Does anyone know how to do that for Pure-FTPD FTP Server? I can't seem to find or see any .conf files or anything at all. How do you manage users for pure-ftpd through command line or configuration?
    Thanks!

    This seems like a good one:
    extra/bftpd 3.8-2
        Small, easy-to-configure FTP server
    From what i have read you can set individual configuration for each user or group:
    http://bftpd.sourceforge.net/doc/en/bft … html#ss3.1

  • Script to find out that users do not have inheritable permission checked

    Hi all,
    I just check our AD (windows 2003 R2) and some users have "allow inheritable permissions from the parent to propagate to this object and all child objects.  include these with entries expilitly defined here" checked  if I open active directory
    users and computers console and highlight this user and go to properties and select security and click advanced).  some users do not have ""allow inheritable permissions from the parent to propagate to this object and all child objects. " checked.
    Is there a way to script to find out which users do not have "allow inheritable permissions from the parent to propagate to this object and all child objects. .." checked?
    Thank you for your help.

    There are several ways to use ADO in a VBScript program. The alternative below uses an ADO command object, so we can specify a "Page Size". This overcomes the 1000 (or 1500) limit on records returned, as it turns on paging. I have also modified
    the script for comma delimited output. This script should be run at a command prompt so the output can be redirected to a text file. For example:
    cscript //nologo FindUsers.vbs > report.csv
    The modified script follows:
    Option Explicit
    Dim adoCommand, adoConnection, strBase, strFilter, strAttributes
    Dim objRootDSE, strDNSDomain, strQuery, adoRecordset, strNTName, strDN
    Dim objUser, objSecurityDescriptor, intNTSecDescCntrl, strInheritable
    Const SE_DACL_PROTECTED = &H1000
    ' Setup ADO objects.
    Set adoCommand = CreateObject("ADODB.Command")
    Set adoConnection = CreateObject("ADODB.Connection")
    adoConnection.Provider = "ADsDSOObject"
    adoConnection.Open "Active Directory Provider"
    Set adoCommand.ActiveConnection = adoConnection
    ' Search entire Active Directory domain.
    Set objRootDSE = GetObject("LDAP://RootDSE")
    strDNSDomain = objRootDSE.Get("defaultNamingContext")
    strBase = "<LDAP://" & strDNSDomain & ">"
    ' Filter on user objects.
    strFilter = "(&(objectCategory=person)(objectClass=user))"
    ' Comma delimited list of attribute values to retrieve.
    strAttributes = "distinguishedName,sAMAccountName"
    ' Construct the LDAP syntax query.
    strQuery = strBase & ";" & strFilter & ";" & strAttributes & ";subtree"
    adoCommand.CommandText = strQuery
    adoCommand.Properties("Page Size") = 500
    adoCommand.Properties("Timeout") = 30
    adoCommand.Properties("Cache Results") = False
    ' Run the query.
    Set adoRecordset = adoCommand.Execute
    ' Enumerate the resulting recordset.
    ' Write a header line.
    Wscript.Echo """NT Name"",""Distinguished Name"",""Allow inheritable permissions"""
    Do Until adoRecordset.EOF
    ' Retrieve values.
    strNTName = adoRecordset.Fields("sAMAccountName").Value
    strDN = adoRecordset.Fields("distinguishedName").Value
    strDN = Replace(strDN, "/", "\/")
    Set objUser = GetObject("LDAP://" & strDN)
    Set objSecurityDescriptor = objUser.Get("ntSecurityDescriptor")
    intNtSecDescCntrl = objSecurityDescriptor.Control
    If (intNtSecDescCntrl And SE_DACL_PROTECTED) <> 0 Then
    strInheritable = "Disabled"
    Else
    strInheritable = "Enabled"
    End If
    Wscript.Echo """" & strNTName & """,""" & strDN & """," & strInheritable
    ' Move to the next record in the recordset.
    adoRecordset.MoveNext
    Loop
    ' Clean up.
    adoRecordset.Close
    adoConnection.Close
    Richard Mueller
    MVP ADSI

  • SPML Modify user workflow

    Does anyone come across with this error from SPML request " <spml:errorMessage>ID 'id' is invalid. </spml:errorMessage>.
    Im getting this error while im trying to modify user with SPML request. It is using custom form and custom workflow. The same workflow and form works fine for create user, but it is giving above error for modify user. I know that create and modify user uses same workflow and form.
    If i use create user workflow (out-of-the-box), it works fine for create and modify user using SPML, but i customized .
    Any suggestion is appriciated
    -S-

    I've usually seen errors like this when the accountId is null on a workflow view checkIn operation such as this snip below (note that id is an argument).
    <Action application='com.waveset.session.WorkflowServices'>
              <Argument name='op' value='checkoutView'/>
              <Argument name='type' value='User'/>
              <Argument name='id'>
                <ref>accountId</ref>
              </Argument>What I'd suggest you try if possible is put a global error handler in your workflow like right at the top outside of any Activity such as Start and just below the variable declarations like this:
    <Comments>&#xA;      Object containing information for registering a sunset date/time.&#xA;    </Comments>
          </Variable>
          <Variable name='error'>
            <Comments>Set in the event of unusual processing errors.</Comments>
          </Variable>
          <Variable name='options'>
            <Comments>Options to pass to the provisioning task regarding resource&#xA;              provisioning.&#xA;    </Comments>
          </Variable>
         <Transition to='end'>
    <Comments>&#xA; Terminate if we encounter unusual errors (not provisioning errors).&#xA; </Comments>
    <select>
    <ref>error</ref>
    <ref>WF_ACTION_ERROR</ref>
    </select>
    </Transition>
          <Activity id='0' name='start'>
            <Transition to='Rename'>
              <notnull>Then use the Workflow debugger to set a breakpoint on this <select> code and then you can trap the point in which the error occurs and inspect the variable namespace. If you don't want to use the debugger you could use the dumpView method:
    <invoke name='dumpFile'>
             <ref>user</ref>
             <s>c:/temp/requestAccess-userView.xml</s>
    </invoke> If you using activeSync and you're seeing this error I'd be tempted to breakpoint the activeSync userForm and simply step through the execution of the workflow until you find the error. Before the debugger was introduced debugging workflow errors was a world of pain.
    HTH,
    Paul

  • Modify User Registration page ?

    Hello everyone,
    I want to modify User Registration page.
    I want to change the style of page ,
    and add an register agreement.
    Where to download the file of User Registration page
    on EP7 SP6 Server?
    Is there anbody had done it ?
    Thanks & Regards,
    Jianguo Chen

    I am not sure how this is EP 7, but i am sure this should be very similar as in EP 6.
    From one of SDN post:
    you can try:
    just find the file com.sap.selfreg.portal.par.bak ( rename it to com.sap.selfreg.portal.par) in usr directory of installed drive import the file in netweaver developer studio(add the required jar files from lib of the portal usr directory) and open its jsp/pagelet folder and add the required fields in the corresponding jsp. and again redeploy the file through the component portal browser and just restart the server.
    Hope this helps.
    Please make sure you take a back up of cocerned file to avoid any trouble
    regards,

  • How to find out the user iD that previously deleted?

    Hi,
    My client has deleted some user ID in SBO v2004b. HOwever, when the client did that, he forgot to "deselect" the license that granted to the users going to be deleted. What's worse, he forgot the user ID that he deleted.
    It makes the license available decrease. So, how can i find out the user ID that i previously deleted? Or any method to retrieve the correct number of license originally. ?
    Thanks for your advice

    Hi,
    Have a look at the FAQ weblog, Missing licence topic:
    /people/ibai.pea/blog/2006/07/26/sbo-faq
    Regards,
    Ibai Peñ

  • How to find out the user exit is implemented

    Hi All,
    Kindly let me know the process to be followed to find out the User exit is implemented in SAP system.
    I have seen many senriors suggestions for some treads to check if there is any Exit is implemented in the process when the system is behaving differently rather standard.
    Is it the only way with help of ABAP'er we can find out or the functional consultant also can find out through some procedure?
    I tied in google for this doubt, but i could not get the relavant answer.Pleaea execuse me if this already answered.
    Thanks,

    Hi Krishna/TW,
    Thank you for your immediate replies. Sorry i think i have not explained correctly my requirment.
    Let me explain my requirement once again.Let us say Comapny has implemented one Exit in the project, now i want to find out what exactly the Exit was implemented.
    Example: In STO process user is able to increase the  qty in delivery. As per the client requriement system should not allow.
    This is not possible in standard to control even after maintainig  check over delivery field in 0VLP.
    For this comapny has already implemented one enahnceament.
    User Exit : USER EXIT_READ_DOCUMENT
    Program: MV50AFZ1
    like this when any one joined in the project we do not know what are all the Exits are implemented in the SAP system where we are working.
    So if i want to find out if there is any Exit or enhancement implemented, what is the process to find out?
    I hope now  am clear with my requirement.
    Thanks in advance.

  • How to find out the User Details for the particular transaction

    Hi,
    Actually AJAB -Asset Year closing was done by One User.How and Where to find out the User details who executed the Transaction.Kindly tell me the T-code for this.
    Thanks
    Sap Guru

    Hi:
    Please contact you basis administrator.Give him the T.code and date when Year closing was done. He may resolve your problem.
    Please let me know if you need more information,
    Assign points if useful.
    Regards
    MSReddy

  • How to find out the user from the Jobs queue in Report server

    Hello All!
    I have a doubt about finding out the user from the scheduled jobs queue. Say I go ahead and schedule a report on Reports Server how can I find out the user name. When I view the jobs using showjobs I could see that the DBMS_JOBS table has a column under "Job Owner". But it invariantly shows it is "rwuser". So is there a way to find out which user has scheduled which job?
    Regards
    Shobha

    hi,
    The below tables will give only the name .
    USER_ADDRS
    USER_ADDR
    USER_ADDRP
    USR02
    i think you need email address .
    you can use this Tcode : su01d
    and give the user name and excute it
    i hope it will help you.
    Ram
    Edited by: Ram velanati on Jun 30, 2008 6:57 PM

Maybe you are looking for

  • Message not working on iPad

    When I am connected to the 4G network messaging does not work. Messaging does however work when I am connected to WiFi

  • Deployed solution not appearing in Site Collection Features

    I've created and deployed a solution via VS 2012. The web parts are there functioning as intended. The problem is I do not see the feature in Site Collections features so when I go to deploy to production via powershell I cannot activate the feature

  • Abap ...alv question

    Hi, I got the error message, when I want to set ALV grid format ... how and where I can check this lenght... The call to the function module "REUSE_ALV_LIST_DISPLAY" is incorrect: In the function module interface, you can specify only fields of a spe

  • How to setup RDBMS Realm.

    Hi Can some one tell me the basic steps to setup RDBMS Realm for resouces like pool, Servlets and EJB. I am trying to use the weblogic example code. Thanks in advance!!! jtaneja

  • EPS Images -VS- TIFF/JPEG

    Hi everyone, thanks for reading my post I have always been told that Non-compressed, non layered, 300dpi CMYK TIFF images, were the optimal format for linking in InDesign. I am working with an agency that uses only EPS files for all their artwork, Ve