Grant Object Privileges Page

I am running version 3.0.6.6.5 on Solaris 2.6 and using Netscape Navigator 4.51.
On the Grant Object Privileges Page for a database object, the "Add to List" button is in an odd spot (crosses over a border) and does not work unless you click it on the left 1/3 of the button. This is not a problem when using IE 5.
Is this a known bug?
Fran Bailey
EDS - Meredith Account

i logged in as User1 and wrote:
desc dbms_lock
and nothing happened, then i disconnected and connected to db1 as User1 and retry and it was all the same (didn't assign the privilege). then i shut down sql plus and started it again as sys and when ran EXECUTE ON DBMS_LOCK the message is shown:
SP2-0103: Nothing in SQL buffer to run
then i logged in as User1 and repeat the EXECUTE ON DBMS_LOCK command, the same error message is thrown. same happened when tried with desc dbms_lock.
am i doing something wrong or what?

Similar Messages

Granting object privileges to remote users.

Hello,
Here's the situation:
I have 2 databases located on 2 different servers both running Win2k3. In the first database the main schema is M1 and it has to read objects on the another schema M2, located on the second database.
I created a database link on the first database, to point to the second database
create database link connect2M2db connect to M2 identified by M2 using 'connect2M2db'Now I would like to grant object privileges(insert,update,delete) to M1 on M2' objects. Can anyone tell me how to do that?
Thanks in advance.

I didn't put the whole thing, (my bad) but your reply was helpful. As I said before, I have 2 dbs, on 2 differents servers. I created the dblink on the first server. I also created synonyms on the first server using the following syntax:
"create or replace synonym syn_name for user2.table" which from the link you provided me, is wrong as I didn't append the dblink name.
After that, I would like to grant object privileges to user1, by executing the command from server2. For doing that, is the following syntax correct: "grant select on table_name to user1". My issue is that user1 does not exist on server2. Should I rather use the following: "grant select on table_name@dblink to user1"?

Which view I can query to get the granted objects privilege to a user?

Hi all,
which view I can query to get the granted objects privilege to a user?
for example:
grant execute on accounting.get_name to scott;
Which view has above object granted information?
Thanks

SQL> select * FROM all_tab_privs where grantor = upper('accounting');
no rows selected

Grant any privilege, privilege

About 4 weeks ago i got some much appreciated assistance in setting up my environment so that a user could grant object privileges on objects in another user's schema. This solution required a function to be built in the schema which owned objects.
I just found the 'GRANT ANY PRIVILEGE' privilege. Anyone know when this came about (we're using 10g) and if there's any problem to granting this?
We have the init param 07_DICTIONARY_ACCESSIBILITY set to False. Will we be able to keep people of the SYS schema?
-cf

Let me specify, I was referring to the GRANT ANY OBJECT PRIVILEGE above, although I do see the GRANT ANY PRIVILEGE out there as well.
-cf

Object Privilege

Dear All,
I'm having one problem in my database. I'm having two database one is testdb1 and another is proddb1 running in two different server. I've done the followings-
1. I've created a dblink from testdb1 to proddb1 database using two different schema (test1 to prod1).
2. Now through dblink test1 schema of testdb database can access all objects available in prod1 schema of proddb1 database.
Now I want to give object privileges on some selected objects of prod1 schema to test1 schema. How to do it?
Can any Guru provide me this solution?

Hi,
Come you said that you have created a DataBase link...asking to provide commands... !!
Any How..
Follow the Steps:-
1 > Create a Required User in Prod (assign the default tablespaces etc.,).
2 > Grant the Necessary Privilges
3 > Grant the Object Privilges as per your Requirements, as you said that you want to Restrict to some Objects only.
4 > Test it with that Create User Whether you can Access the Objects with Respective Privi's are working fine or not
5 > Then Create a DataBase Link From Test DB to Prod with that Created User.
Bingo.. !!
Now, Test the User Over DB Link... Any thing else Requried..
Now, I don't have DB on My System to show the Demo... :-(
Reference for Creating User and DB Links .. !!
http://www.dba-oracle.com/concepts/create_users.htm
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/ds_admin.htm#sthref4108
- Pavan Kumar N

Granting table privileges on another users tables

Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
Any ideas what I'm doing wrong here?

Ok... well...
The 'with grant' option doesn't appear to be the issue.
The user attempting to perform the grants:
i.e. GRANT SELECT ON user_2.table_1 TO view_role
has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
i.e.
l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
EXECUTE IMMEDIATE l_sql;
And - it's this that's giving me the insufficient privileges...
I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
I'm at a loss.

JMS grant queue privileges problem

I have two test users set up in different schemas. They each have their own identical queue tables and queues in their own schemas.
One of the users cannot seem to grant queue privileges to the main schema owner. The error is as follows:
Eception: oracle.jms.AQjmsException: JMS-122: Internal error payload object type must be specified
at oracle.jms.AQjmsDestinatio.grantQueuePrivilege(AQjmsDestination.java:406)
at src.AQSetup.jmsInitializeQueue(AQSetup.java:246)
the offending code is as follows:
cq_conn = AQjmsQueueConnectionFactory.createQueueConnection(p_conn);
// create queue session
commQSession = cq_conn.createQueueSession(true, Session.AUTO_ACKNOWLEDGE);
// AUTO_ACKNOWLEDGE
try
cQTable = ((AQjmsSession)commQSession).getQueueTable(userID, QueueTableName);
catch (AQjmsException e)
cQTable = createJMSQueueTable(commQSession, userID, QueueTableName);
try
cQueue = ((AQjmsSession)commQSession).getQueue(userID, QueueName);
catch (AQjmsException e)
cQueue = createJMSQueue(commQSession, cQTable, QueueName);
((AQjmsDestination)cQueue).grantQueuePrivilege(commQSession, "ENQUEUE", "icowner",false);
with the error coming from the last line and the referenced table and queue definition code as folows:
private AQQueueTable createJMSQueueTable(QueueSession q_sess, String userID, String q_tableName) {
try {
AQQueueTableProperty qtable_prop = null;
AQQueueTable cq_table = null;
// Create an AQQueueTableProperty object (payload type - BYTES):
qtable_prop = new AQQueueTableProperty("SYS.AQ$_JMS_TEXT_MESSAGE");
// Create a queue table called command_table in user schema:
cq_table = ((AQjmsSession)q_sess).createQueueTable(userID, q_tableName, qtable_prop);
return cq_table;
} catch (Exception ex) {
return null;
private Queue createJMSQueue(QueueSession q_sess, AQQueueTable q_table, String q_name) {
try {
AQjmsDestinationProperty dest_prop = null;
Queue lq_queue = null;
dest_prop = new AQjmsDestinationProperty();
// create a queue
lq_queue = ((AQjmsSession)q_sess).createQueue(q_table, q_name, dest_prop);
return lq_queue;
} catch (Exception ex) {
return null;
both users seem to have the same privileges.
Can you tell me if it is an error in my code and what that is?
- Ken
null

Might be a bug.
Do you get the error when
createQueue is followed by grantQueuePrivilege OT
getQueue is followed by grantQueuePrivilege.
null

Grant sequence privilege issue

Hi,
OS is windows server 2008
Database oracle 11g r2
i have created a schema with name SME having DBA privilege from SME i have created another user SME_USER using the same tablespace of SME with limited privileges. The sequence was created in SME user. I am accessing the tables from SME schema. I have given insert privilege to one of the table in SME to SME_USER,but while insertiing we are using the sequnece with name IPSRNO from SME schema. Now when i tried to insert value inot the table from SME_USER its giving me the output "Sequence does not exist". I have given the grant select privilege for sequence IPSRNO.
Please guide me on this issue.
Regards,
Bobby

See Using Synonyms in DML Statements in the DBA guide
http://docs.oracle.com/cd/B28359_01/server.111/b28310/views003.htm
>
You can successfully use any private synonym contained in your schema or any public synonym, assuming that you have the necessary privileges to access the underlying object, either explicitly, from an enabled role, or from PUBLIC. You can also reference any private synonym contained in another schema if you have been granted the necessary object privileges for the underlying object.
You can reference another user's synonym using only the object privileges that you have been granted. For example, if you have only the SELECT privilege on the jward.emp table, and the synonym jward.employee is created for jward.emp, you can query the jward.employee synonym, but you cannot insert rows using the jward.employee synonym.
A synonym can be referenced in a DML statement the same way that the underlying object of the synonym can be referenced. For example, if a synonym named employee refers to a table or view, then the following statement is valid:
INSERT INTO employee (empno, ename, job)
VALUES (emp_sequence.NEXTVAL, 'SMITH', 'CLERK');
If the synonym named fire_emp refers to a standalone procedure or package procedure, then you could execute it with the command
EXECUTE Fire_emp(7344);

How to grant view privilege for Instant Portal to public users?

How to grant view privilege for Instant Portal to public users?

Oracle Instant Portal was designed to offer secure access to company and departmental information, and it isn't currently possible to make instant portal pages public.

Roles/System privileges/Object privileges

Oracle 10g. we created a role and assigned this role to the user. We also assigned some system privileges and Object privileges directly to the same user. Now the company's new policy is that the user's permissions have to be assigned only via role. system privileges and Object privileges cannot be assigned directly to the user. So I have to alter the role. The steps are:
1. grant system privileges and Object privileges to role. (this will be executed as a script)
These privileges were directly assigned to the user.
2. revoke all privileges which were directly assigned to the user.
Do I miss anything?
Please advise.
Thanks
S.

Object privileges cannot be assigned directly to the user.Privileges acquired via ROLE do not apply within PL/SQL procedures.
You may face some coding challenges in the future due to this policy.

Alter Object Privilege onm Oracle 9i

Is there a command that I can run that will update all Object Privilege's to SELECT for a role
At the moment this role has
GRANT EXECUTE ON .ACTIVE_SALES_PART_API TO SALES_ENQ
GRANT EXECUTE ON .BASE_PART_CHARACTERISTIC_API TO SALES_ENQ
GRANT EXECUTE ON .CHARACTERISTIC_API TO SALES_ENQ
GRANT EXECUTE ON .CHARACTERISTIC_TEMPLATE_API TO SALES_ENQ
GRANT EXECUTE ON .COMPANY_FINANCE_API TO SALES_ENQ
GRANT EXECUTE ON .CONFIG_CHARACTERISTIC_API TO SALES_ENQ
GRANT EXECUTE ON .CONFIG_OPTION_VALUE_API TO SALES_ENQ
GRANT EXECUTE ON .CONFIG_PART_SPEC_REV_API TO SALES_ENQ
GRANT EXECUTE ON .CUSTOMER_AGREEMENT_API TO SALES_ENQ
GRANT EXECUTE ON .CUSTOMER_INFO_ADDRESS_API TO SALES_ENQ
GRANT EXECUTE ON .CUSTOMER_INFO_API TO SALES_ENQ
GRANT EXECUTE ON .CUSTOMER_INFO_MSG_SETUP_API TO SALES_ENQ
GRANT EXECUTE ON .CUSTOMER_ORDER_PRICING_API TO SALES_ENQ
GRANT EXECUTE ON .CUST_ORD_CUSTOMER_API TO SALES_ENQ
GRANT EXECUTE ON .CUST_ORD_PRINT_CONTROL_API TO SALES_ENQ
GRANT EXECUTE ON .DOCUMENT_TEXT_API TO SALES_ENQ
GRANT EXECUTE ON .INVENTORY_PART_API TO SALES_ENQ
GRANT EXECUTE ON .INVENTORY_PART_PLANNING_API TO SALES_ENQ
GRANT EXECUTE ON .INVOICE_PROPERTY_CODE_API TO SALES_ENQ
GRANT EXECUTE ON .ISO_COUNTRY_API TO SALES_ENQ
GRANT EXECUTE ON .ISO_CURRENCY_API TO SALES_ENQ
Message was edited by:
HoLy_PiLgRiM

I like the use of dynamic sql in sqlplus for example
select 'grant select on'||TABLE_NAME||' to SALES_ENQ;' from user_tables;
This type of thing generates output that can then be run or spooled and run.
If you spool you need to set head off set feedback off set echo of set linesize (longer than select output....) set pagesize 0.....
Hope this helps.

Catalog object privilege validation failed for user.

Hi,
I'm getting following error after adding the HTML tags in dashboard 11g.
How to set the privileges?..Kindly let me know.Thank you.
Error Massage:
Catalog object privilege validation failed for user to path /users/User1/_portal/page 1.
You do not currently have sufficient privileges to save a report or dashboard page that contains HTML markup. Dashboard contains custom HTML tags as part of static text.

Hi User,
Go to Settings -> Administrators -> Manage Privileges -> 'Answers'
Here you can view - "Save Content with HTML Markup" next to it you will see 'Presentation Server Administrators'
Click it and Change for 'Everyone'
And, Save changes. Restart BI Services now you can add the contents and it will not popup any error messages.
Thank you.
Award Points and Close the Post as Answered to help others with same issue :)

GRANT (Schema Privileges) statement

Good day!
Is it possible to access a table in system/manager by granting TYRES privileges?
Grant select on EMPLOYEE_MSTR to tyres.
Tyres is another user. I wanted to access all the tables stored in SYSTEM/MANAGER when I logged in as TYRES/TYRES. I am using ORACLE 8 and I haven't use this since.
Any help is appreciated.
Thanks!

First of all: you are in the wrong forum (try the database forum).
Then: Yes this is possible, but I strongly suggest that you place specific user objects (tables, etc) in the sys tablespace, and do not access the database as system when not necessary.
cu
Andreas

Export object privileges to another user

dear,
i want to export thr object privilege to another user on oracle 10g. how can do it? i try to export the user/scheam than immport to another user but still no work..
Regards

I guess he want user B to have same object privileges as user A
If this is the case, it depends on what object privileges user A has.
You can find that out from user_tab_privs after logon as user A.
If the GRANTABLE = 'NO' you have to logon as each schema holder to grant the privs.

Granting object privs

I have an user1 with table test in his schema.
When I log in as system and try to grant user2 select on table test and am getting the following error:
SQL> grant select on user1.test to user2;
grant select on user1.test to user2
Eror at line 1:
ORA-01031: insufficient privileges
System has DBA role and system priv SYSDBA granted by default. I added GRANT ANY ROLE, GRANT ANY PRIVILEGE and am still getting the error. I can grant any privilege on the table when logged in as user1.
Thanks for any help.
Ken

Thanks for your posts. I have already posted this question twice, and had one reply, but still don't understand.
I have training cd which does that very thing in a simulation (grant select on a.table to b) while connected as sysdba.
It would be very tedious to have to log in as the user, grant system all the individual privilegs to all the objects in the other schema, then connect as sysdba and administer them. What happens when a new table in created in that schema? Same thing over again?
I guess MSSQL has made it too easy for me in the past, and I can't believe Oracle could make it this difficult.
Winford
null

Grant Object Privileges Page

Similar Messages

Maybe you are looking for