Grant access to SYS.V$TEMP_SPACE_HEADER view - how to?
Hi,
I created a user. I am trying to give select access on some of the System tables and views to this user to retrieve some information about the database.
When I try
grant select on sys.v$temp_space_header to usr1;
I am getting the following error
grant select on sys.v$temp_space_header to usr1
ERROR at line 1:
ORA-02030: can only select from fixed tables/views
I am getting the same error when I try to give select access to SYS.V$TEMPSTAT view also.
Does anyone know why this error is coming? Please let me know how I can grant select access to the user for these views.
Hi,
This two views are synonyms.
SQL> grant select on sys.V$TEMPSTAT to scott;
grant select on sys.V$TEMPSTAT to scott
ERREUR Ã la ligne 1 :
ORA-02030: une sélection n'est autorisée que depuis des tables fixes/vues
SQL> grant select on sys.V$TEMP_SPACE_HEADER to scott;
grant select on sys.V$TEMP_SPACE_HEADER to scott
ERREUR Ã la ligne 1 :
ORA-02030: une sélection n'est autorisée que depuis des tables fixes/vues
SQL> select synonym_name,table_name
2 from dba_synonyms
3 where synonym_name in ('V$TEMP_SPACE_HEADER','V$TEMPSTAT');
SYNONYM_NAME TABLE_NAME
V$TEMPSTAT V_$TEMPSTAT
V$TEMP_SPACE_HEADER V_$TEMP_SPACE_HEADER
SQL> grant select on sys.V_$TEMPSTAT to scott;
Autorisation de privilèges (GRANT) acceptée.
SQL> grant select on sys.V_$TEMP_SPACE_HEADER to scott;
Autorisation de privilèges (GRANT) acceptée.
Nicolas.
Similar Messages
-
hi
i have an user with objects, tables, views and procedures but it doesn't´t have dba privileges... how can i grant access to all the user to these objects? (with the sys or system user).
thanks for your help.
alexHello,
Every user in database has its objects and DBA privileges are not for everyone.
how can i grant access to all the user to these objects? (with the sys or system user)<<<<<<Can explain these lines ?? What's your requirment ?? Please state clearly...
As far as i got your problem, you require that all other users of databse should be able to access the objects of user (lets say A) which you specified in first line.
For this purpose create public synonyms for all objects of user A and grant. So, everyone can use the objects of "A's" schema.
Please update..... if you got the point or not... -
Grant Access on .sys owned objects...?
For example purposes, say I need to grant 'Select' to DBA_Users to a role, how is this possible? I'm looking to grant this explicitly and not thru select any dictionary.
Do I need to run the grant statement from the SYS ID? As I have the grant any priv and any obj priv, it seems that will not suffice....
Thanks!One way to do this is to create a stored procedure owned by a privileged user which has the right to grant the needed privilege. You only need to grant EXECUTE privilege on this procedure to the admin team.
In this example, owner is OPS$ORACLE and admin. user is NEW.
The procedure should make some additional checks according to your security rules.
SQL> show user
USER is "SYS"
SQL> grant select on dba_users to ops$oracle with grant option;
Grant succeeded.
SQL> connect /
Connected.
SQL> show user
USER is "OPS$ORACLE"
SQL> create or replace procedure gs (guser in varchar2)
2 as
3 begin
4 execute immediate 'grant select on sys.dba_users to ' || guser;
5 end;
6 /
Procedure created.
SQL> show errors
No errors.
SQL>
SQL> drop user new;
User dropped.
SQL> drop user old;
User dropped.
SQL> create user old identified by old;
User created.
SQL> grant connect to old;
Grant succeeded.
SQL> create user new identified by new;
User created.
SQL> grant connect to new;
Grant succeeded.
SQL> grant execute on gs to new;
Grant succeeded.
SQL>
SQL> connect new/new
Connected.
SQL> exec ops$oracle.gs('OLD');
PL/SQL procedure successfully completed.
SQL>
SQL> connect old/old
Connected.
SQL> select count(*) from dba_users;
COUNT(*)
33Edited by: P. Forstmann on May 27, 2009 10:21 PM -
Grant access to all the views created in user schema to another schema
How to grant access for all the views created in own HAGGIS schema to comqdhb schema on the HAGGIS database.
Oracle Grant Privileges
===============
Object privileges assign the right to perform a particular operation on a specific object
I read that we can use select 'grant select on' ||view_name||'HAGGIS' user_views where owner='COMQDHB'
Is this right
Oracle System Privileges
===============
System privileges should be used in only cases where security isnt important,because a single grant statement could remove all security from the table
Role based security
============
Role security allows you to gather related grants into a collection-since the role is a predefined collection of privileges that are grouped together.privileges are easier to assign to users.
[http://www.dba-oracle.com/art_builder_grant_sec.htm]
can we grant select update to all the views at a time to the other schema.
Are there any other ways to secure the data other than creating users and assigning roles.
Thank you
Edited by: Trooper on Dec 23, 2008 9:24 AMI think what was suggested was that you use SQL to generate the grants on each and every view, that is, you use SQL to generate SQL where the SQL being generated is "grant select on view_name to role'"
If you users to connect to Oracle you have to create usernames for them though if the users only connect via an application the application might run just as one user and access to the application is controled via application security. The control on the application can be via Directory Services such as OID or MS Active Directory. User access to Oracle can also be controlled via OID.
To connect to Oracle you can use OS authenication (not recommended), usernames with passwords, or via Advanced Security Option which supports single sign-on products like Kebros or Oracle Internet Directory etc....
Example using SQL to generate SQL
How do I find out which users have the rights, or privileges, to access a given object ?
http://www.jlcomp.demon.co.uk/faq/privileges.html
HTH -- Mark D Powell -- -
How to grant access to?????
User needs read access to triggers, procedures, function and MV's on all schema.
Which system privileges I have to grant?If we're limiting ourselves to SQL*Plus, then access to the appropriate DBA_ tables, like DBA_SOURCE, should be sufficient. I assume that Amiel made a typo when he referred to the ALL_ tables-- every user has access to the ALL_SOURCE table by default, the rows that are returned from that view depend on the privileges the user has to execute that particular piece of code. The DBA_SOURCE table, on the other hand, has the source for all the PL/SQL in the database, so users with access to DBA_SOURCE can see the source code for any procedure/ package/ function in the database.
SCOTT @ jcave102 Local> conn / as sysdba
Connected.
SYS @ jcave102 Local> create user sam identified by sam;
User created.
Elapsed: 00:00:00.29
SYS @ jcave102 Local> grant create session to sam;
Grant succeeded.
Elapsed: 00:00:00.06
SYS @ jcave102 Local> grant select on sys.dba_source to sam;
Grant succeeded.
Elapsed: 00:00:00.18
SYS @ jcave102 Local> conn sam/sam
Connected.
SAM @ jcave102 > ed
Wrote file afiedt.buf
1 select text
2 from dba_source
3 where owner = 'SCOTT'
4 and name = 'GET_NUM_TBL'
5* order by line
SAM @ jcave102 > /
TEXT
function get_num_tbl
return num_tbl
is
l_nums num_tbl;
begin
l_nums := num_tbl();
l_nums.extend;
l_nums(1) := 1;
return l_nums;
end;
10 rows selected.
Elapsed: 00:00:00.06Justin -
I downloaded 11.1 but now can't access the store, can only view my library. I've reinstalled but still get a blank, white screen when I try to go to the itunes store. How can I get to the store for purchases?
In iTunes prefs>Store - is the Store check box unchecked?
Did you repair pemissions with Disk Utility?
MJ -
One of my 2 address books can no longer be viewed, how do I access it?
''locking this thread as duplicate, please continue at [https://support.mozilla.org/en-US/questions/1051908 /questions/1051908]''
one of my 2 address books can no longer be viewed, how do I access it? It disappeared within the last few days. I can still find addresses that are in the 2nd address book, but I cannot view it, so only 1/8 of my addresses are now viewable. How do I access the 2nd address book?Hi ronc2, there isn't a specific setting for this. Firefox's built-in JavaScript settings allow you to control several aspects of scripts*, but unfortunately not this one.
I previously tried to find some other options for individually turning off this event, but I couldn't find a way. Someone might be able to create an add-on to solve this problem, but it will take someone cleverer than I.
Extensions that disable scripts on a site-specific basis:
* If you regularly visit some sites which do this, you can block JavaScript on that specific site using the YesScript extension. Unfortunately, other script-based functionality will be blocked as well.
* YesScript does not preemptively block scripts on every site. If you have to visit a lot of random sites and want to take a paranoid approach of having scripting blocked until you see as much of the site as you can see without running scripts, then the NoScript extension would be for you. But even then it's "all or nothing".
''* These include: JavaScript enabled yes/no, override right-click menu yes/no, change order of windows yes/no, move and resize windows yes/no, close windows yes/no, specific features of pop-up windows, change images yes/no, detect copy/cut/paste and modify selection yes/no.'' -
How do I access a rented film to view it via iTunes? I have had my account deducted for this film but cannot see how I get to it; Help!
Hello, jaimie299.
Thank you for visiting Apple Support Communities.
If the movie rental has completely downloaded, this movie should be located in your movie library under rental. Below, I have included a couple articles on how to check for interrupted downloads and movie rentals. I have also included and article that will allow you to report a problem with your purchase if you are still unable to watch the movie.
iTunes: How to resume interrupted iTunes Store downloads
http://support.apple.com/kb/ht1725
iTunes 11 for Windows: Rent movies from the iTunes Store
http://support.apple.com/kb/PH12499
How to report an issue with your iTunes Store, App Store, Mac App Store, or iBooks Store purchase
http://support.apple.com/kb/ht1933
Cheers,
Jason H. -
How to grant access to sharepoint for the user from different Domain
Hi All
I need to grant access to user from different domain.
Where I can able to view the users in people picker (different domain).
Thanks in Advance.
RajHi
Trevor Seward
Sorry to disturb
you again.
I am trying to restrict user from search from other domain, say we have domain A and Domain B, where I am trying to restrict all the user from domain B (Search users)for a site collection. I have found couple of stsadmin command to do so. but none
of them works. Below are the commands I have tried
STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv "domain:<Name>.domain" -url "http://Site URL"
stsadm -o setproperty -pn peoplepicker-searchadcustomquery -pv “(canonicalName=<Name>.domain*)” -url "Site URL"
we have two way trust.
Can you suggest any solution.
Thanks
Raj -
Hi,
I would like to know the appropriate and easy way of granting access (SELECT,INSERT,UPDATE..Etc) on newly created object (VIEWS/SYNONYMS) to all users at one go.
I have created a public synonym so that I can grant the access on synonym.
Appreciate any suggestions.
ThanksYou will need a script or package to do this.
e.g something like :-
spool grant_select_to_all.sql
select 'grant select on '||object_name||' to select_role;'
from user_objects where object_type in('VIEW','TABLE');
spool off;
@grant_select_to_all.sql -
how am I to be able a user to grant access only to see a procedure / function without execute,compile,edit and drop?
Sorry GregV but thank you, are you sure you can only be done by setting a PC? Can not by giving them certain privileges of a PC?
PL \ SQL that we use a portable version.
So actually like this, user A is only used by the X, user A wants to provide read-only access to user B is only used by Y (another PC) to the procedures / functions held user A. How do you? -
With out loosing view grant access, i can modify the existing vi
I am using oracle 11g.
I would like to add few more where condition in my oracle view ,Which has grant permission by different user.
There is anyway with out loosing view grant access, i can modify the existing view.
Existing view
create view abc
as
select * from tab1
where rownum =1 .
Grant select on abc to read_ro;
Modifying view
There is anyway with out loosing view grant access, i can modify the existing view?
add few more where condition in my oracle view ,Which has grant permission by different user
please advise.create or replace view...
SQL> create or replace view y as select object_name from user_objects;
View created.
SQL> grant select on y to ads;
Grant succeeded.
SQL> select * from user_tab_privs where table_name='Y';
GRANTEE OWNER
TABLE_NAME GRANTOR
PRIVILEGE GRA HIE
ADS BONTRAB1
Y BONTRAB1
SELECT NO NO
SQL> create or replace view y as select object_name,created from user_objects;
View created.
SQL> select * from user_tab_privs where table_name='Y';
GRANTEE OWNER
TABLE_NAME GRANTOR
PRIVILEGE GRA HIE
ADS BONTRAB1
Y BONTRAB1
SELECT NO NO
SQL> desc y
Name Null? Type
OBJECT_NAME VARCHAR2(128)
CREATED DATE -
How to access a Java class from view controller?
Hi All,
I have created a Test.java class file from Navigator view under
Src --> Packages --> com.sap.MyProject.
When I try to access the Test class from view controller,
I getting this error "Test cannot be resolved or is not a type".
How do I fix this?
Thanks
SundarHi,
I have created a Test.java class file from Navigator view under
Src --> Packages --> com.sap.MyProject.
After this you can goto the context of your View and define the VA goto the type of VA and click on the right side button and go to java native type and type your java file name click you name .
that means the jave file s assigned to VA.
U can utilize thrut that VA.
Thanks,
Lohi. -
Grant access to create/alter/drop/ to tables, view, index
Using (Transact-sql) SQL query analyser 8.00.2039
Objective: To delete/drop the schema on every run of database setup (i mean drop the schema and build it on every run).
I have done the following to accomplish the same ...
Logged in as sa ... i did the following
use master
exec sp_addlogin 'sas'
exec sp_adduser 'sas'
create database ss
use ss
exec sp_grantdbaccess 'sas', 'ss'
i am having issues with the grant command in the above version.
i want to grant create table, create index, create view, alter table, drop view, drop index, drop table to the user sas
When i ran the command
grant create table, create index, create view, alter table, drop view, drop index, drop table to sas
i got
Server: Msg 165, Level 16, State 6, Line 1
Privilege CREATE INDEX may not be granted or revoked.
Server: Msg 165, Level 16, State 1, Line 1
Privilege ALTER TABLE may not be granted or revoked.
Server: Msg 156, Level 15, State 1, Line 1
Incorrect syntax near the keyword 'delete'.
If the grant worked, i thought of creating the schema like
create schema epp authorization sas
Then for removing the schema (as there is no drop schema command for the version mentioned above)
i would have done this,
use master
exec sp_revokedbaccess 'sas'
alter database ss set single_user with rollback immediate
drop database ss
exec sp_droplogin 'sas'
I referred the online book but not of much help on this.
Is this is the correct way to drop/delete a schema on every run of database setup
pls. offer your suggestionsTerminology.
When you write “schema” I will guess that you mean ‘database ‘rather than a security schema within a database.
User.
A user is an object that belongs to a database. In your create code you added the user sas to the master database. If you want to add that user to the ss database you have to create the ss database first, then USE database ss; before you sp_adduser. If you are using SQL Server 2005 use CREATE User not sp_adduser.
To DROP a database you DROP the database. All the objects in the database including its users are dropped with it. The Logins belong to the server and they can be dropped before or after you drop the database though if you drop a Login and don’t drop a database that has that Login as a User you orphan the User. -
What is the GRANT or permission setting that allows viewing of package body
For purposes of SOX and security/audit control, we log in under our network id's in our production environment. We have sourcecode compiled into Oracle seeded schemas ( APPS ) so that scheduled jobs are able to run with submitted from the Oracle Applications environment. We don't compile code into our personal network account areas.
I know how to GRANT EXECUTE privs so that we can execute a package in another schema, but what I want to do is to be able to view the sourcecode in another schema. Compile into APPS but be able to see the package body from my network id schema account.
I can't seem to find what the correct permission is anywhere. Granted I can look at DBA_SOURCE to get to it, but I want to use a tool like SQL Developer or TOAD to look at the code in a more presentable and easier to debug manner.
Any help ?I guess you need GRANT DEBUG ON SCOTT.PKG TO U
SYS@LSC01> create or replace package scott.pk is procedure p; end pk;
2 /
Package created.
SYS@LSC01> create or replace package body scott.pk is procedure p is begin null; end; end pk;
2 /
Package body created.
SYS@LSC01> grant create session to u identified by u;
Grant succeeded.
SYS@LSC01> grant execute on scott.pk to u;
Grant succeeded.
SYS@LSC01> connect u/u
Connected.
U@LSC01> select text from all_source where name='PK';
TEXT
package pk is procedure p; end pk;
U@LSC01> connect / as sysdba
Connected.
SYS@LSC01> grant debug on scott.pk to u;
Grant succeeded.
SYS@LSC01> connect u/u
Connected.
U@LSC01> select text from all_source where name='PK';
TEXT
package pk is procedure p; end pk;
package body pk is procedure p is begin null; end; end pk;
Maybe you are looking for
-
How to use EJB in JSP...urgent!!!
hello, i am novice programmer in EJB. i am using weblogic 6.1 ... my problem is how to use EJB in jsp page. my code is as follow..but its not displaying any result. <%@ page import="javax.naming.InitialContext, javax.naming.Context, java.util.Propert
-
What is a re-entrant bean ???
-
How to install and work with oracle webcenter 11g
Hi Will please guide how to install and work on oracle webcenter11g, i am fresher in oracle that's why. so please guide me Regards Rajesh P
-
How do you look for small projects?
Hi. I'm working as a labview developer and I'm looking for small projects that can help me financially. Are there any site where I can find some work that involves labview programming? I'd like to work as a consultant for those projects and they can
-
GoPro 3+ Burst Mode ?
I have a Gopro Hero 3+ and want to make the cool shot using burst mode putting the pictures together. Is there a way to do that with FCPX? Thanks for your help.