GRANT rights to a schema?
If someone could help me out with this, I'd really appreciate your help. We have a rogue programmer who can't seem to stop writing UPDATE queries against our production instance. :)
We are using Oracle Applications, FYI. We've set up a developer with his own login with basically read-only access to the entire database. Is there any way we can give him write and create access to just a particular schema? He'll need access to update and create tables in our CUSTOM schema, but all other schemas need to be read-only.
I'm farily new to Oracle, so if you could explain this like you would to a four year old, I'd sure appreciate it. :)
Thanks so much!
Steve
Yes, you can grant privs in modular way, or you create a Role and grant required privs to the Role and grant that role who ever needs in the development team this way you need not have to redo the grants everytime a new developer joins.
Refer to creating and using Roles in Oracle Documentation Guide on OTN.
Similar Messages
-
Grant Rights to Start, stop, view Oracel-Jobs inother roles
Hi,
i need a little help.
how can i grant rights to my jobs, that the users of other roles can start, stop and view my jobs?
Thanks
Greetings
JohnNot easily. You would have to give grants on DBA_JOBS, dbms_job to the other user, and give execute on what the job is running to the other user as well.
Then the other user would need to change the ????_USER column of the job, know either the job number of the WHAT, e.g.
update dba_jobs set log_user = 'OTHER_USER', priv_user = 'OTHER_USER', schema_user = 'OTHER_USER'
where job=42; -- OR where WHAT like '%sp_insert_into_tab1%' ;
Then not forget to set it back to the original owner. -
Grant Permission base on Scheme ?
Is there any way to grant permission base on scheme ??
e.g.
I want to allow user to select all table in another scheme. Beside grant permission for each table one by one, is there any way to do this ??There is no single privilege grant for this-- you'll have to grant privileges on individual objects. Of course, you can script these grants using a few lines of PL/SQL, i.e.
DECLARE
sqlStmt VARCHAR2(1000);
BEGIN
FOR x IN (SELECT * FROM user_tables)
LOOP
sqlStmt := 'GRANT SELECT ON ' || x.table_name ||
' TO <<another user>>';
EXECUTE IMMEDIATE sqlStmt;
END LOOP;
END;Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC -
Grant read only-rights to own schema
Hallo,
i have a schema (and i am the owner) of schema bbi. Now I wanna give to me read-only- rights. Is this possible? What ist the sql-query to give this rights to bbi? Which rights do I have as the owner of a schema? Which tables are nessasary?
Hope I do not mix anything!!
Thanks, KatrinOne possible way would be to put your table into an
read-only tablespace, but then no one could update
it.Although the owner can still drop tables in a read-only tablespace (since that only involves updating entries in the data dictionary).
I'd second Andrew's question about why you'd want to do this. Normally, you would have one user that owned all the objects and grant many other users read-only access to that schema.
Justin -
Creating functions/granting rights
I have procedures, funtions and triggers written(from back in college) and I am now playing with the DBA type stuff. I created a user, assigned him to the users role. The users role has create session and create table priviledges. So I created tables and populated them. I am now trying to create the functions. I granted the user create procedure and create trigger rights, but create function gives an error. missing or invalid priviledge.
Message was edited by:
jamesHcreate function gives an error. missing or invalid priviledgeThere isn't such a privilege. CREATE PROCEDURE allows the user to create functions as well.
Oracle documentation about CREATE FUNCTION sql command :
To create a function in your own schema, you must have the CREATE PROCEDURE system privilege. -
Grant access to specfic schema
Is there any way that these permissions could be created without the ANY clause?
CREATE ANY CONTEXT
DROP ANY CONTEXT
EXECUTE ANY PROCEDURE
EXECUTE ANY TYPE
I got access to only one schema ..Client side DBA are not permitting access to "ANY" clause but they are ready to grant access like create context, drop context etc ..Is there any access like CREATE CONTEXT, DROP CONTEXT,EXECUTE PROCEDURE,EXECUTE TYPE for to give access to one user alone..etc ???
Advice me on this !!
Regards
dkoraclePl post details of OS and database versions.
Have you read the documentation ?
http://download.oracle.com/docs/cd/E11882_01/server.112/e26088/statements_5002.htm#i2060927
http://download.oracle.com/docs/cd/E11882_01/server.112/e26088/statements_8008.htm#i2099532
If so, what have you found ?
If not, I think it is time to read up !
Srini -
Granting Pvivileges on a schema
grant all on schema schemaname to user
when i execute this command missing keyword error is shown..how can i resolve??Thats qustion pertaining to database section as it your first post so i am answering you becareful next time
SQL>
SQL> sho user
USER is "SYSTEM"
SQL> select * from system_privilege_map
2 where name like '%PRIV%';
PRIVILEGE NAME PROPERTY
-167 GRANT ANY PRIVILEGE 0
-244 GRANT ANY OBJECT PRIVILEGE 0
SQL>
SQL> -- Create a new user with just create session (to log on) and grant
SQL> -- any privilege to, well grant all privileges.
SQL> create user emil identified by emil;
User created.
SQL> grant create session, grant any privilege to emil;
Grant succeeded. -
Is XS Project right for Database Schema and tables
Hi Friends
1.As per OpenSAP video it is suggesting to use XS Project for Database objects.
In my case I am planning to do AO Reporting and not creating any UI , is XS project still the right project type.
There is an option for General ->Project - would that be the right one.
2. Also in my UI I am not able to see the Prefrences->SAP Hana Development ->Repository Access to set the regit.exe. I did see couple of post mentioned about it but the response was not very clear , hence asking the question again.
regards
PoonamHi Poonam,
Poonam Hemrajani wrote:
1.As per OpenSAP video it is suggesting to use XS Project for Database objects.
In my case I am planning to do AO Reporting and not creating any UI , is XS project still the right project type.
There is an option for General ->Project - would that be the right one.
Project is used to group all the required development artifacts and the libraries required for them. So based on your requirement you can choose. I think "General" project would suffice your requirement if it is only to create schemas and tables.
But on the other hand if you choose to build an application using XS related libraries you can either choose to import those libraries later or create using a XS project now.
Will wait along with you to see Thomas Jung comments on this.
Poonam Hemrajani wrote:
2. Also in my UI I am not able to see the Prefrences->SAP Hana Development ->Repository Access to set the regit.exe. I did see couple of post mentioned about it but the response was not very clear , hence asking the question again.
Firstly from SP7, it is not required to setup regi.exe file. This file resides in hdbclient folder. So you need to check where you have installed hdbclient to see if you have that regi.exe file and configure it accordingly in the Path ( Preferences --> SAP HANA Development --> Repository Access ) you mentioned.
Regards,
Krishna Tangudu -
Required Rights for DB Scheme (Generateable from SQL-File?)
Hi there,
i have a question concerning db-scheme-rights.
is it in any way possible to find out which rights are required
to run an sql-script as expected?
does anyone have an idea??
thanks and regards,
marcoBefore it is run or after it is run by looking at the error messages?
In what version?
And do you mean "schema" rather than "scheme"? -
Find user rights related to schema
hi every body
i am stucked in a problem.
i have an oracle 9i database release2 on windows server 2003.
there is schema IINVENTORY and there is 96 tables in this schema. there are many roles creted in this database.
how i can find which roles are created for this schema.
there are plenty of users created in this database. now i want to find which users are assigned which roles
regarding this schema INVENTORY.
i also search the forums, google, tables like privs but i could not find my results.
plz help me.
thanks in advance.
rehan fsd pakistanUse this script to find out the roles assigned to tables of schema
SELECT *
FROM role_tab_privs
WHERE table_name IN (SELECT table_name
FROM all_tables
WHERE owner = 'SCHEMA_NAME')- - - - - - - - - - - - - - - - - - - - -
Kamran Agayev A. (10g OCP)
http://kamranagayev.wordpress.com -
I created multiply users on my Time Capule configuration.
today if user1 copy a file , only him can see it.
can we change it and modify the rights to allow user 2 to view the user1 files ?http://www.macobserver.com/tmo/article/airport_utility_setting_wireless_time_lim its
http://www.macworld.com/article/1161672/limit_internet_access.html
Look for posts under More Like This
Bob Timmons has done lots of posts about issues with setting up Time Restrictions but it is much easier for you to start with the general references above.. and then post a screen shot if you actually run into issues.
It is far from safe and secure btw.. smart kids can easily figure ways around it depending on their ages. -
RBAC: grant rights to update distribution point
Hi,
I have created a specific group which has all rights to manage specific items within SCCM 2012 console.
Everything works fine BUT the distribution of packages to the distribution point, this is empty when distributing the packge.
Rights on Distribution point are: Read, Copy to Distribution Point.
Please advise.
J.
Jan Hoedt"Site: Read" is most likely missing.
Torsten Meringer | http://www.mssccmfaq.de -
Grant rights to change the query only to its owner
Hello everybody,
is there a way to allow only the user who created a query to make changes on it?
thanks
MarcoGranting authorizations for working with query components depending on the component creator is possible with the authorization object S_RS_COMP1 You can either grant those authorizations for a team or grant authorizations for self-created queries with low maintenance effort by entering a variable ($USER).
Check the HOw to paper How to
grant authorizations for query components by creator
https://websmp109.sap-ag.de/~sapidp/002006825000000015622004E.gif
Jaya
Message was edited by: Jaya Mogali -
hi i have create a function in sys user and
i want to give permissions to execute this function from an other user.
thanks a lotGrant Execute On Function_Name To User_Name;
-
Grant details required for user and schema
Hi
I have Oracle version - 10.2.0.4.0
We have Schema A (Lot of objects exist) and User B (No objects exist - acts as application user to access objects in other schema).
I have listed below doubts.
1) I want to know the method to find the list of users have access to objects in Schema A and privileges granted for the objects in Schema A
2) I want to know the method to find the list of grants provided to the schema objects to the user Buser1368801 wrote:
Thanks ajallen.
It really helped me.
one more question. I think DBA_TAB_PRIVS gives details for tables only right.
What about other objects like procedures, views etc. Go back to the Reference Manual and re-read the description of DBA_TAB_PRIVS. Re-read the specific description of TABLE_NAME.
>
Actually I am exporting 3 schemas (A,B,C) from production and importing them to test environment (A1, B1,C1) using fromuser and touser option.
Now I have to properly remap all the privileges, grants, synonyms etc.
There are so many objects and I am wondering how to remap properly.
It may be simple, as a newbie, your direction will be more helpful
Maybe you are looking for
-
Problem in Pricing procedure logic
Hi, In pricing procedure ,our functional team requires some logic inthere procedure . 1. Thay have condition type of ZBEA and ZBEE, If ZBEE is active that time ZBEA should be inactive. For that i created a routine like below. DATA: LV_XKOMV TYPE
-
Download Problem with iPhoto 6.0.4.
New Mac user here. I have a clean install of OS X, uodated to to 10.4.8. I bought a copy of iLife 06 from Amazon.com and installed it and successfully updated the various programs....except for iPhoto. The version installed is 6.0.1. When I look for
-
Locking the volume on external speaker
My grandson is autistic and always has his ipad. He has it in airports, on airplances, in stores, etc. I know you can lock the volume on the ipad but that is only if you are using ear buds or headphones which he does not use. Does anyone know if
-
My husband got an iphone for the first time. Its an iphone5 . When he got it i signed him in under my Apple ID. Now everything I do goes to his iphone, How do I delete my account from his phone and get it under his email and password. I have tried ev
-
How can I unlock a front panel/block diagram in LabVIEW 7.1?
I inherited LabVIEW (7.1) code that when I try to edit, I am not allowed. I can access and used Functions and Controls, but I cannot connect or delete them back. The mouse indicator is a hand all the time. It does not change to cross hair or wiring