FMJ2 Carryfoward of commitment containing a Grant

Has anyone encountered the problem of performing the year end carryforward of a PO using FMJ2 but because the PO contains a Grant, the following error message is received?
Message no. GRANTMGMT637
Grant xxxxxxxxxxxxxxxxxx cannot be used for entering budget in Funds Management
We have a tedious workaround for this but I am sure there is a more efficient way.
If the resolution involves BAdi FMBCCF_ENTRY_DOC please elaborate as our ABAPer has previously looked into it.
Edited by: Will Sutton on Apr 8, 2011 11:08 AM

Hi, seems there is auto budget carryforward while FMJ2 is performing. Look at note 1475789.
Do you have an opportunity to enter budget in bcs with real grant? Because it's not allowed by default(only with non-relevant grant or blank). But there is badi which could allow you to do so.

Similar Messages

Grant.sql

hi all
i wish to grant select privelege to all the tables in user_tables to a user created by me
select ' Grant Select on '|| table_name || ' to user_name ' from user_tables ;
now when i run this i do get the grant succeeded
when i spool and create a .sql file and then run it it helps, is there any other way?
can i not grant from the query above ...
pls clarify
regards
prem

Create a file containing the statements below and run it in SQL*Plus
--- file begin ----
set heading of
set feedback off
set pages 1000
set termout off
spool a.sql
select ' Grant Select on '|| table_name || ' to user_name;'
from user_tables ;
spool off
set termout on
set feedback on
set heading on
set pages 14
--- file end ---
To grant a privilige to a user, you have to mention the object and the user.
The select statement creates the right statement to grant the select privilige to the user.
So, you select the objects (table_name from user_tables) and hardcode the user (user_name).
The first three lines instruct SQL to show no heading, no feedback and that 1000 lines will fit on a page
Otherwise the spool file wil contain header rows every couple of rows and the last row in yor spool file
will be something like '50 rows selected.'
Spool file_name instructs SQL to create a file wich contains the output of the statements executed.
The last three lines set everything back to the original state.
The a.sql now contains the grant script for user (user_name).
Just run this a.sql script to grant the select statements to the user.
Another way of granting the select privilige to the user is to type:
grant select on table_name to user_name;
and repeat this for every table_name the grantor owns. If the grantor owns just one or two tables, this might be faster than creating the statements dynamically. If the grantor owns quite a lot of tables, I would use the danamically created statements

Grant and revoke privilages from command line interface

hi all,
I have a lot of users that I need to give them a set of privileges to folders and containers of the repository, i thought that using the command line interface should help in loading a script.
i checked the manual for the syntax for such a command (i.e. to grant privileges) but i couldn't, searched the net and i didn't find anything.
So can we grant privileges from the command line interface and how ?
by the way is there anyway to create users from command line interface as well ?\
thanks in advance and have a good one

The granting of access rights cannot be done with a CLI script in Designer. Instead you have to use the Designer API Pl/Sql packages.
For detailed information, refer to the "API and Model Reference Guide", which is
installed with the Designer Repository Documentation, or can be found on OTN > Doco > Designer site.
Scroll through that document to the Reference section. You will need to read up on two topics at least: Workarea and Container Context, Privileges and Access Rights.
To grant rights, the easiest way is to grant them "just like some existing ones".
To do this, you'll need a Pl/Sql procedure with 5 input parameters:
1) the workarea context
2) the container to look at
3) the user to look like
4) the container to grant access to
5) the user to grant access for
The Pl/Sql procedure then needs to make a series of Repository API package calls to set context and get container IRIDs:
JR_CONTEXT.Set_Workarea (workareaname) - to set the context workarea
JR_CONTEXT.Set_Working_Folder (sourcefoldername) - to specify the source container
JR_CONTEXT.Working_Folder (sourcefolderid) - to get the ID of the source container
JR_CONTEXT.Set_Working_Folder (targetfoldername) - to specify the target container
JR_CONTEXT.Working_Folder (targetfolderid) - to get the ID of the target container
OR you can just do a couple queries after you set the WA CONTEXT such as ...
Select IRID from CI_Application_Systems where NAME = <sourcefoldername>
Select IRID from CI_Application_Systems where NAME = <targetfoldername>
Then you get the list of rights desired, and grant them back to the target user.
JR_ACC_RIGHTS.Get_Acc_Rights (sourcefolderid, sourceusername) > AccessList
[gets list of existing rights for some user on a container]
JR_ACC_RIGHTS.Grant_Priv_List (targetfolderid, targetusername, AccessList, Cascade? = TRUE)
[to set the list of rights for a user against the target container and its subcontainers]
There are other ACC_RIGHTS packages, like Grant_Priv, Revoke_Prive, Revoke_Priv_List, etc that you can use as well to build up a set of access management scripts.
Hope this helps

Problem Deploying a JDeveloper SOA Application (Task details application)

Hi, I am unable to access Taskdetails through worklist application
I was able to deploy the sample composite for VacationRequest on soa server, and the same is visible in Oracle BPM worklist, but when the taskflow application for human task for the same is deployed on soa server following error is shown on server logs
Access to internal workflow context is denied.
Requested access to internal workflow context is not allowed according to security policy.
Ensure that correct security policy is used. If the error persists, contact Oracle Support Services. at oracle.bpel.services.workflow.verification.impl.VerificationService.createTaskDisplayInternalWorkflowContext(VerificationService.java:1007) at oracle.bpel.services.workflow.client.worklist.servlet.TaskFlowDeployerThread$1.run(TaskFlowDeployerThread.java:318) at java.security.AccessController.doPrivileged(Native Method) at oracle.bpel.services.workflow.client.worklist.servlet.TaskFlowDeployerThread.getInternalWorkflowContext(TaskFlowDeployerThread.java:311) at oracle.bpel.services.workflow.client.worklist.servlet.TaskFlowDeployerThread.registerTaskFlowWithTask(TaskFlowDeployerThread.java:232)... 2 more
Caused by: java.security.AccessControlException: access denied (oracle.security.jps.JpsPermission VerificationService.createInternalWorkflowContext) at java.security.AccessControlContext.checkPermission(AccessControlContext.java:323)
Similar error is displayed on SOA server startup
The Taskflow application gets deployed, but when we click on the task in tasklist its displays message
‘Details not available for this task’.
I had also checked the system-jazn-data.xml file located at <MIDDLEWARE_HOME>user_projects\domains\SOADomain\config\fmwconfig
which contains following grant entries for bpm-services.jar
<permission>
<class>oracle.security.jps.JpsPermission</class>
<name>VerificationService.createInternalWorkflowContext</name>
</permission>
The problem seems to be due to some policy setting, Appreciate your help on the same
Technologies used:
Oracle SOA Suite 11g Release 1 (11.1.1)
Jdeveloper:
Studio Edition Version 11.1.1.1.0 Build JDEVADF_11.1.1.1.0_GENERIC_090615.0017.5407

hari wrote:
My question is does a desktop application need an application server as well if it's using adf? In other words, I'd like to create an application in jdeveloper that I can deploy as a simple executable jar file and send to a user for them to use on their desktop, is this possible? Is web logic required to run on that other users desktop?The answer to your question is No. You don't need an application server to run a Java client ADF application. You should be able to execute the application packaged on the jar file as is. I haven't developed myself anything like it, but as long as your necessary ADF libraries are accessible you shouldn't have any problems running it.
hari wrote:
I've tried doing this using a "Java Desktop Application (adf)" which creates two projects one for the model and one for the view controller. I created a simple prototype form that connects to my database and everything looks great when I hit the green play button. However when I try and deploy it as an executable jar with the entry point being the one and only form I can't run it. A jar file is created and it says its an executable jar file but when I double click it, the OS simply beeps (I'm using Windows XP).
You won't be able to run the jar file that way - unless you package a manifest file with it and set its Main-Class attribute to point to your class containing the main() method. Try instead executing java -jar yourJarFile.jar from the command line.

Cannot drop PDB - insufficient privileges

I created a PDB, and then tried to drop it. I cannot drop it, I get "insufficient privileges" error. Here is the SQL session :
==============================================
-bash-4.1$ ./sqlplus system/manager1
SQL*Plus: Release 12.1.0.1.0 Production on Thu Sep 18 07:28:53 2014
Copyright (c) 1982, 2013, Oracle. All rights reserved.
Last Successful login time: Thu Sep 18 2014 07:25:13 -07:00
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.1.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options
SQL> create pluggable database test002 admin user test2 identified by test2 file_name_convert=('/u01/app/testuser/oradata/orcl/pdbseed', '/u01/app/testuser/oradata/orcl/test002');
Pluggable database created.
SQL> drop pluggable database test002 including datafiles;
drop pluggable database test002 including datafiles
ERROR at line 1:
ORA-01031: insufficient privileges
==============================================
I gave sysdba privileges to user "system", as follows :
SQL> grant sysdba to system;
Grant succeeded.
but still get the same error.
However, if I login as "sysdba", I can drop the PDB. I cannot use "sysdba" user for a number of reasons. I need to login as some other user. Any ideas?

2639137 wrote:
I created a PDB, and then tried to drop it. I cannot drop it, I get "insufficient privileges" error. Here is the SQL session :
I gave sysdba privileges to user "system", as follows :
SQL> grant sysdba to system;
Grant succeeded.
but still get the same error.
Yes - as the exception says user 'system' does NOT have sufficient privileges to drop a PDB.
That grant of sysdba is ONLY for the current container which is the root.
Oracle 12c is NOT Oracle 11g - the multitenant architecture has SIGNIFICANT differences from previous versions in MANY areas especially in creating/managing users and granting privileges.
The default container for grants is whatever the current container is. If you want the grant to cover ALL containers then you need to specify that.
See the CONTAINER clause for the GRANT statement in the docs
GRANT
CONTAINER Clause
If the current container is a pluggable database (PDB):
Specify CONTAINER = CURRENT to locally grant a system privilege, object privilege, or role to a user or role. The privilege or role is granted to the user or role only in the current PDB.
If the current container is the root:
Specify CONTAINER = CURRENTto locally grant a system privilege, object privilege, or role to a common user or common role. The privilege or role is granted to the user or role only in the root.
Specify CONTAINER = ALL to commonly grant a system privilege, object privilege on a common object, or role, to a common user or common role.
If you omit this clause, then CONTAINER = CURRENT is the default.
See that last statement?

Java applet coonectivity to ms access

Hi friend i'm new to sun forums. Java applet troubling me a lot while i try to coonect it with ms access. the code of the program is as follows:-
Ao.java
import java.sql.*;
import java.io.*;
import java.awt.*;
import java.awt.event.*;
import java.applet.*;
<applet code="Ao" width=250 height=200>
</applet>
public class Ao extends Applet implements ActionListener,ItemListener
String msg="";
Button view,delete,create,edit,reapp,exit;
TextField M_head;
int x,i,ans=0,flag;
public void init()
setLayout(new FlowLayout(FlowLayout.CENTER,50,3));
view = new Button("view");
delete = new Button("delete");
create = new Button("create");
edit = new Button("edit");
reapp = new Button("reapp");
exit= new Button("exit");
M_head = new TextField(15);
add(view);
add(delete);
add(create);
System.out.println("");
add(edit);
add(reapp);
add(exit);
System.out.println("");
add(M_head);
view.addActionListener(this);
delete.addActionListener(this);
create.addActionListener(this);
edit.addActionListener(this);
reapp.addActionListener(this);
exit.addActionListener(this);
M_head.addActionListener(this);
public void actionPerformed(ActionEvent ae)
String str=ae.getActionCommand();
if(str.equals("view"))
{msg ="1";}
if(str.equals("delete"))
{msg ="2";}
if(str.equals("create"))
{msg ="3";}
if(str.equals("edit"))
{msg ="4";}
if(str.equals("reapp"))
{msg ="5";}
if(str.equals("exit"))
{msg ="6";}
if(msg=="3")
try{
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
String filename = "D:/budget/mbdTest1.mdb";
String database = "jdbc:odbc:Driver={Microsoft Access Driver (*.mbd)};DBQ=";
database+=filename.trim();
String head = M_head.getText();
String head1 = head.trim();
Connection con = DriverManager.getConnection(database ,"","");
Statement doo = con.createStatement();
String vi ="create table "+head1+" (Reapporder integer, Amount integer)";
doo.execute(vi);
catch(Exception err)
System.out.println("Error :"+err);
public void itemStateChanged(ItemEvent ie)
repaint();
public void paint(Graphics g)
g.drawString(msg,70,200); //No use
g.drawString("ANSWER=",6,200); // No use
I run it with a ao.txt file which contain the grant permission information:-
Ao.txt
grant {
permission java.lang.RuntimePermission
"accessClassInPackage.sun.jdbc.odbc";
permission java.util.PropertyPermission
"file.encoding", "read";
My database is in the same directory as in my .java file with the name mbdTest1.mdb ( A system dsn)
I run it with the following command:-
appletviewer -J-Djava.security.policy=Ao.txt Ao.java
applet run succesfully but when i enter some data in text box and click on create button it shows an Error java.sql.SQLException: data source name not found and no default driver specified.
help needed and thanks in advance

>
I'm unable to understand the archieve="accessdriver.jar">It is archive, archive (only one 'e'). These things need to be correct for any hope of working!
And while we are on the subject, the word is 'connect', not 'coonect'.
But anyway, what I meant by accessdriver.jar, is simply the Jar that contains the sun.jdbc.odbc.JdbcOdbcDriver ..
Oh, wait a second. I did not look at that classname closely, and did not realise it was a 'sun' class. It is more common to add a 3rd party DB driver class (AFAIU) than use a 'Sun proprietary API' class to access a DB.
>
As far as security file is concerned i will first try to run the applet so that it is able to create and query
data from my ms access database after than i can modify it.>You seem very confused about accessing the DB. Noting that your original code uses a hard coded (file based) path to the DB, I can tell you you are wasting time attempting to access it that way. That will never work when the applet is on the web, since the File path will point to a place on the end user's PC file system that does not have a DB installed! The applet will need to be redesigned.
I recommend you download and install a local server like tomcat, which can more accurately reflect a web environment. Then do all your applet testing via the local server.
1st, before you bother with the applet, you should organise how to access the DB (at least tot the point of doing a simple query) in a web page. Before going any further. This will ensure that the DB is set-up correctly and accessible to a sand-boxed applet.
Your comment about "..will first try to run the applet.. (before) ..modify it". If it is a security matter, it will need to be signed before you can even query the DB. If the applet can be sand-boxed (probably the case) then don't sign it at any time.

Explicitly installin java.policy problem

is there any one who knows how to explicitly install the java.policy. What i have been doing is set the policy of the RMI server through a file like java.policy which contains this
grant {
permission java.security.AllPermission
"*:1024-65535","connect,accept,resolve";
and run the server through a batch file where the java.policy file is loaded through the system. is there anyone who knows to load the policy in the server code itself, that is, installing it explicitly?
thanks..

Yes, this is true ...but there is a saying about hardcode ...it makes things hard to code. Hardcoding the policy file eliminates flexibility for your clients and makes things harder to deploy. It certainly breaks from the standard. I just wouldn't want the poster to think one way is just as good as the other. But you do have a choice, this is true.

SRM PO with fiscal year option.

Hi Friends,
We are in SRM 5.0, SP11, extended classic scenario, ECC back end with Funds/Grants Management active. All the PO's created at SRM sourcing will create a commitment on the Fund/Grant at ECC.
The challenge we have here is to create PO's for the next Fiscal Year in such a way that the Fund/Grant commitment happens on the next Fiscal year. For example, i have to create a PO for fiscal year 2010 now itself and the commitment on Fund/Grant should be allocated for 2010 and not 2009.
Can anyone suggest on how handle this, any BADI or Enhancement option available?
Thanks!

Hi
0P_FVAEX is personalization with 0P_KEYDT Variable again Try to Fill the Key date at the Query Properties so that it will display the correct output of report. Filling Key date is the mandatory if you use 0P_FVAEX in your query.
http://help.sap.com/saphelp_nw70/helpdata/EN/7a/8893404f673028e10000000a1550b0/frameset.htm
Hope it helps.

Why use EJB?

I am somewhat new to Enterprise Computing and I am a little unclear about these technologies.
Could someone please let me know why should we use EJB classes in web applications instead of normal classes for executing business logic?
Thanks and regards.
Soham

While I agree that most people using EJB's could have
built a better solution, I think both of the above
posters are completely wrong.
Not at all... You just don't get the point...
Most problems to which EJBs are applied are not problems to which EJBs should ever have been applied at all.
Before answering your question though, keep in mind
there are at least 3 types of EJB's, and all are
completely different. So I can only answer your
question at a high level. Here are the reasons people
might use EJB's:
And according to the specs you use them all or you don't use EJB...
They are container managed.Granted
They offer transactional awareness in your app.So can other solutions.
They are secure.Only as secure as you make them.
And you then tie yourself into a security system that may not be at all compatible with the ones you have already requiring expensive work to link several disparate systems together.
They are pooled, which makes them fast and eliminates
excessive object creation/deletion.There's many other things that are pooled.
They scale well in clustered/distributed environments
(as mentioned above).Clustered environments are indeed the only places where EJB have a definite advantage.
They abstract you from database access (yeah!).So do other technologies
They decouple you from the database so you can switch
from Oracle to MySQL with little or no impact and/or
changes to code (only driver changes).
That's exactly the same reason as above.
I've written my own abstraction layer once which worked faster and simpler than EJB.
We're now using another abstraction layer which does the same.
Use any ORM tool and you have an abstraction layer that's a lot easier to use than EJB, and a lot better performant.
I could go on and on, but don't have time. :-)You don't have a clue you mean. You're just spouting the party line as presented by the EJB priests.

Exchange 2007 administrator password

Dear All,
Our old Admin left the company and now we are unable to login to Exchange 2007 server, We doubt that either he change the password of our exchange 2007 or he has remove exchange 2007 from domain.
We can login to our domain with the admin password but we cannot login to exchange 2007 with the same admin password.
We have 2008 OS installed on Domain and Exchange 2007.
Please help us out..
Regards,
Aamer Ali

You can change the password on the account used for Exchange administration (possibly it was his personal account) and use it for administration. If this doesn't work, you can add your account to the Exchange Organization Administrators group (in
the Users container) to grant any account admin access to the organization. This should allow you to administer things.

Where are an apps file permissions stored?

I have a LOB app that needs to access an internal network update servers Windows Share. However for that to work, the user has to first give permission via the file picker to that folder. That is inconvenient in a LOB scenario. Therefore I would like to
know if there is a way to mark certain folders accessible for an app via Group Policy or Regsistry key? Where are the apps permissions saved (and is the format open?) and could these permissions be modified by a plain old Win32 desktop app (running on an admin
account).

Hi Phil,
The Publishing Windows Store apps forum is for help with publishing your app to the Windows Store.
For help with enterprise configuration and deployment please post in the Windows 8.1 IT Pro forums on TechNet. For help with desktop development questions please post in the Windows Desktop Development forums.
Windows Store apps use the standard Windows security system with permissions are controlled by ACLs on the file objects. Breaking the app out of its app container by granting it access to new locations is not recommended or supported and may reduce
the security of the system.
The right way for an enterprise app to break out of the app container is to write a
Brokered Windows Runtime Components for side-loaded Windows Store apps . This will allow the Windows Runtime app to call a component outside of its app container which can then call desktop API on the Runtime app's behalf.
Your app could hand the data files to the brokered Windows Runtime Component which could then drop it on the share. This wouldn't require either user interaction or reducing the security on the share.

How to alter tablespace add in pdb from cdb root

Hi Experts,
Is there a way to run the "alter tablespace xx add tempfile ..." command in root cdb while the tablespace xx belongs to a pdb. Is it possible to do it without login or change session to pdb? Thanks.

Krishna-Oracle wrote:
You have to login into particular PDB using alter session set container command and then make changes.
You are confusing logging to PDB with setting PDB as current container. These are two completely different actions. Create common user:
SQL> connect /@sol12 as sysdba
Connected.
SQL> create user c##ommon identified by common container = all;
User created.
SQL> grant create session to c##ommon container = all;
Grant succeeded.
SQL> grant set container to c##ommon container = all;
Grant succeeded.
Create after login trigger for the common user in a PDB:
SQL> connect /@pdb1sol12 as sysdba
Connected.
SQL> create or replace
2    trigger c##ommon_logon_trigger
3      after logon
4      on c##ommon.schema
5      begin
6          raise_application_error(-20500,'You are not allowed logging to this PDB.');
7 end;
8 /
Trigger created.
SQL>
Now I will login as c##ommon to CDB and with set container to PDB:
SQL> connect c##ommon@sol12
Enter password: ******
Connected.
SQL> alter session set container = pdb1sol12;
Session altered.
SQL>
As you can see, AFTER LOGON trigger wasn't executed. And now I will try logging to PDB:
SQL> connect c##ommon@pdb1sol12
Enter password: ******
ERROR:
ORA-00604: error occurred at recursive SQL level 1
ORA-20500: You are not allowed logging to this PDB.
ORA-06512: at line 2
Warning: You are no longer connected to ORACLE.
SQL>
Now you see SET CONTAINER != LOGIN.
SY.

Asset Retirement Refunding Consumed Budget.

We run SAP with Funds and Grants Management for Grantee active.
The system was set up to consume budget at asset acquisition.
We have some assets which have been sold off or scrapped, when we try to recognize these on the system via ABAVN for instance, we realized that SAP is crediting back the budget in funds management ( into asset acquisition commitment item) and grants management (into asset sponsored class/sponsored program) with the value at which asset was purchased.
I would appreciate advise on how to resolve this issue.

Thanks Ming and Shyam,
Your suggestion works perfectly for the Funds Management Module, but it is still crediting the Grants Management module with the acquisition value when asset disposal is posted. The only option I have now is to go to GM_UPD_SETTINGS and manually set the asset acquisition GL account range to post statistically when the asset sale/scrapping is being done.
I feel this is not proper and there must be a way around this. I would appreciate more help please.

3rd request for some wonderful persons help!

I'm trying to connect across a network with RMI and I get the error:
"Connection refused to host 138.79.115.36; nexted exception is: java.net.ConnectException: Connection refused: connect."
138.79.115.36 is the machine my client is on
138.79.115.30 is the server machine
I have one jar file which I've unzipped on both machines. It contains the following folder structures
../kye/db/
../kye/clientGUI
../examples/classServer
the db folder has all the files for running the RMI server
the clientGUI has all the client GUI files.
the examples/classServer is the webserver that it is suggested to download in the RMI tutorial
I tried to follow the sun tutorial but I only have one jar file so it's a bit modified. And I know somethings are unecesarily duplicated. Maybe this is part of the problem. Not sure.
Everything is unzipped in d:\public (which is shared) on the server and I use the following commands to start everything running.
Start the webserver
d:\public>start java examples.classServer.ClassFileServer 2222 /public
Start the server
start java -Djava.rmi.server.codebase=http://138.79.115.30:2222/ kye.db.DataServerGUI
Then on the client machine
java kye.clientGUI.ApplicationRunner
When the client opens it asks for the servers ip address, I enter it and when connecting get the above error. I have a policy file which is specified in both the client and the server. It contains this:
grant
permission java.security.AllPermission;
permission java.net.SocketPermission
"*:1024-65535", "connect, resolve";
What do I have to change or fix to get this running?
I'm happy to send out copies of the .jar file to anyone who needs more information.
I appreciate any help and I'm pretty desperate
Thanks
Kylie

Thanks John,
It does seem a strange message. But the ip addressses are definitely correct that I'm entering. I wondered why the client would say that the client refused connection.
Here is the code for making the client connection:
public ServerClient(String ipAddress)throws DatabaseException{
try{
System.setProperty("java.security.policy", "access.policy");
if (System.getSecurityManager() == null) {
System.setSecurityManager(new RMISecurityManager());
db = (DataClient)Naming.lookup(ipAddress + "/kyeData");
}catch(RemoteException re){
throw new DatabaseException(re.getMessage());
}catch(Exception e){
throw new DatabaseException(e.getMessage());
Here is the code that registers the RemoteServer:
try{
System.setProperty("java.security.policy", "access.policy");
if (System.getSecurityManager() == null) {
System.setSecurityManager(new RMISecurityManager());
//ClassFileServer cfs = new ClassFileServer(2222, "suncertify.jar");
server = new DataRemoteImpl(databaseName.getText());
output.append(InetAddress.getLocalHost().toString() + "\n\n");
//start up the registry and add our object
java.rmi.registry.LocateRegistry.createRegistry(1099);
Naming.rebind("rmi://" + InetAddress.getLocalHost().toString() + "/kyeData", server);
//check to make sure it is bound????
String bindings[] = Naming.list("");
for(int a=0; a<bindings.length; a++)
output.append(bindings[a] + "\n");
Is there anything you can see that's wrong or in the wrong order? I start the registry from within the RemoteServer. I've commented out the webserver that I was trying to use to locate files. I'm not sure if that was working.
Any more ideas? I've tried it on different networks in the office, to make sure that none of our security systems were interfering and the same things occurred on all the different machines.
ta
Kylie

Permissions required to create a pluggable database

Hi
using 12.1.0.1.5 on oracle linux 6.3
I am trying to setup a new user with permissions to create pluggable databases within my CDB, i have created the user with the following
create user c##admin identified by oracle12c container=all;
grant connect, resource, dba to c##admin container=all;
grant create pluggable database to c##admin container=all;
however, when i connect as the user to the CDB and try to clone a PDB
sqlplus c##admin/oracle12c
create pluggable database pdb99 from pdb1 file_name_convert=('/vol1/u01/app/oracle/oradata/cdb1/pdb1', '/vol1/u01/app/oracle/oradata/cdb1/pdb99');
i get the following permissions error
SQL> create pluggable database pdb99 from pdb1 file_name_convert=('/vol1/u01/app/oracle/oradata/cdb1/pdb1', '/vol1/u01/app/oracle/oradata/cdb1/pdb99');
create pluggable database pdb99 from pdb1 file_name_convert=('/vol1/u01/app/oracle/oradata/cdb1/pdb1', '/vol1/u01/app/oracle/oradata/cdb1/pdb99')
ERROR at line 1:
ORA-01031: insufficient privileges
i have manually created the folder into which the new PDB datafiles will be created (/vol1/u01/app/oracle/oradata/cdb1/pdb99),
any ideas what i have done wrong?
thanks
Dave

i get the following permissions error
SQL> create pluggable database pdb99 from pdb1 file_name_convert=('/vol1/u01/app/oracle/oradata/cdb1/pdb1', '/vol1/u01/app/oracle/oradata/cdb1/pdb99');
create pluggable database pdb99 from pdb1 file_name_convert=('/vol1/u01/app/oracle/oradata/cdb1/pdb1', '/vol1/u01/app/oracle/oradata/cdb1/pdb99')
ERROR at line 1:
ORA-01031: insufficient privileges
i have manually created the folder into which the new PDB datafiles will be created (/vol1/u01/app/oracle/oradata/cdb1/pdb99),
any ideas what i have done wrong?
The user executing the statement has to have privileges to create files in that directory.
See the doc:
https://docs.oracle.com/database/121/ADMIN/cdb_plug.htm
CREATE_FILE_DEST Clause
If the PDB will use Oracle Managed Files, then the CREATE_FILE_DEST clause of the CREATE PLUGGABLE DATABASE statement specifies the default file system directory or Oracle ASM disk group for the PDB's files.
If a file system directory is specified as the default location in this clause, then the directory must exist. Also, the user who runs the CREATE PLUGGABLE DATABASE statement must have the appropriate privileges to create files in the specified directory.

FMJ2 Carryfoward of commitment containing a Grant

Similar Messages

Maybe you are looking for