Grant specific column level privilege

without vpd how i will grant specific column level privilege to a particular user.

grant update(id) on a to scott;
it is working fine.
anybody can gv othr suggestn

Similar Messages

Can I grant some columns update privilege to a user ?

There are ten columns in a table, and I want to grant some columns not all table update privilege to a user, can I do it without use a view?

grant update (column_name) on table_name to user_name;Nicolas.

Column Level Privileges on Table

i want to give the user right to just select the one column of the table, even not view other table fields.

A quick glance at the documentation would have quickly resolved this for you.
"You can specify columns only when granting the INSERT, REFERENCES, or UPDATE privilege. If you do not list columns, then the grantee has the specified privilege on all columns in the table or view." (my emphasis)
If you are on 10gR2 you do have the option of implementing column-oriented Row Level Security but that is a big thing to undertake. Find out more.
Cheers, APC

Grant select privilege to specific columns on a table to user in Oracle 9i

Can anyone tell me how to grant select privilege to a user for specific columns in a table?
I have tried the following statement
GRANT SELECT (EMP_ID) ON EMP TO USER1
But it's not working and I am getting this error "Missing ON Keyword".
Please anyone tell me how to grant select privilege for specific columns.
Edited by: 899045 on Nov 24, 2011 7:03 AM

899045 wrote:
Can anyone tell me how to grant select privilege to a user for specific columns in a table?
I have tried the following statement
GRANT SELECT (EMP_ID) ON EMP TO USER1
But it's not working and I am getting this error "Missing ON Keyword".
Please anyone tell me how to grant select privilege for specific columns.
Edited by: 899045 on Nov 24, 2011 7:03 AMFrom the 9.2 SQL Reference manual, found at tahiti.oracle.com (http://docs.oracle.com/cd/B10501_01/server.920/a96540/statements_912a.htm#2062456)
*"You can specify columns only when granting the INSERT, REFERENCES, or UPDATE privilege. "*

Hide specification column in result recording at plant level

Hi,
There is an requirement to hide specification column in result recording screen at plant level.
By table control we can hide the specification column but the setting is at user level or client level.
Is there any standard procedure to hide specification column at plant level.
Regards
Amol

Dear Amol,
Try this if works for you.
1.     Go to QA32
2.     Select an inspection lot
3.     Click on results
4.     Here you will get the specification column along with RR column
5.     Reduce the width of specification column just like we do in Microsoft excel by dragging it from right to left until it disappears
6.     At the right hand side you find a small table like symbol. When you move your mouse pointer towards it, it reflects as Configuration.
7.     Click it
8.     Give suitable name to variant and save
This is user ID specific.
Best Regards,
Anand Rao

VPD Update policy at column level

Hi,
I have a table abc and I have applied a policy for update. Now the user who has no access is unable to update the table abc. Can I just restrict the user from updating a specific column ( user_id column in the table abc), rather than restricting the user from updating all columns?
Thanks.

hi,
You can use sec_relevant_cols parameter of the DBMS_RLS.ADD_POLICY procedure
begin
dbms_rls.add_policy (
object_schema => 'SCOTT',
object_name => 'EMP',
policy_name => 'VPD_TEST_POLICY',
function_schema => 'SCOTT',
policy_function => 'TEST_VPD',
statement_types => 'select, insert, update, delete',
sec_relevant_cols => 'sal,comm');
end;
you can see this doc
http://www.in-oracle.com/Oracle-DBA/DBA-I/vpd-virtual-private-database.php
or
You can also use views to enforce column-level security, showing only which columns in a table may be updated. For example, assume that you must design roles based a table where only managers may view or update the salary column of the employee table (column restriction).
1 - You can grant the end-user access to only those columns you wish to update:
grant update (col1, col2) on mytab to fred;
2 - You might create a view with only those columns that you want to allow updates, the table appears to the end-user as-if it contains only those columns. By granting access only to that view (and not the base table), you can effectively implement column-level security and restrict which columns in a table may be changed.
regards,
Edited by: dataseven on 04.Eki.2012 23:22

Difference between system level privilege and object level privilege

hi
i just want to know the difference between system level privileges and object level privilege.
please correct me if i am wrong
with system level privilege user can create objects such as creating tables,view,synonyms etc
where as in object privilege we can only manipulate operations on object i.e perform dml not ddl
please help

Hi,
810345 wrote:
hi
i just want to know the difference between system level privileges and object level privilege.
please correct me if i am wrong
with system level privilege user can create objects such as creating tables,view,synonyms etc
where as in object privilege we can only manipulate operations on object i.e perform dml not ddl There are some system privileges that only concern manipulating objects: SELECT ANY TABLE, for example.
The main difference is that the system-level privileges tend to cover all objects of a certain type, including objects that haven't been created yet.
Object-level privileges usually apply only to one specifi object, such as one particular table, and are lost if the object is dropped. (For example, if I create a table called table_x, give you SELECT pivileges on it, then you can query my table. But if I then drop table_x and re-create it, you will not be able to see it unless I grant the privilege again.)

How to apply 'disableColumnReordering="true"' at column level.

Hi Experts,
I am using jdev 11.1.1.5.0.
I have a requirement, not to move(drag) the column within a table. I got succeeded to apply this on table level so that all columns are fixed, but not able to fix it at column level.
So, is there any way or a property to fix this at column level.?
Please help out me.
Thanks & Regards,
Bittu..!

Hi
You can use at column level frozen="true" but this will not disable reordering. This specifies whether the column is frozen. In the table columns until the frozen column are locked with the header and not scrolled with the rest of the columns. Frozen attribute is honored only on the top level column,since it is not possible to freeze a child column by itself without its parent being frozen
See if this helps to your requirements.
Reference: http://jdevadf.oracle.com/adf-richclient-demo/docs/tagdoc/af_column.html
Nikolay

Get column value for specific columns

I want to change the default behavior of a IKM. In a specific step, I need to call a PLSQL procedure inside the loop below, and that procedure will substitute the insert clause. The procedure uses only some attributes, and I need to check the name of each one when I use the getColList method.
     for aRecord in myCursor loop
          insert into      <%=snpRef.getTable("L","TARG_NAME","A")%>
               <%=snpRef.getColList("", "[COL_NAME]", ",\n\t\t\t", "", "((INS AND (NOT TRG)) AND REW)")%>
               <%=snpRef.getColList(",", "[COL_NAME]", ",\n\t\t\t", "", "((INS AND TRG) AND REW)")%>
          values
               <%=snpRef.getColList("", "aRecord.[COL_NAME]", ", \n\t\t\t", "", "((INS AND (NOT TRG)) AND REW)")%>
               <%=snpRef.getColList(",", "aRecord.[COL_NAME]", ", \n\t\t\t", "", "((INS AND TRG) AND REW)")%>
     end loop;
For example, to call the procedure I do that: schema.proc_1(col1, col2, col3). However, I have more than 3 columns, and I need to restrict them when I use the getColList method. I would like to know if there is a way to get only specific columns, giving these names. I pass the name of the column, and the method should return its value. Can I use the getColList to do that? Is there any other way to do that?

Hi Luciene,
You can use the UD flags to do this. If you click on one of your mappings in the Diagram tab of your interface you will notice several UD flags (UD1 to UD5) you can use those to flag the columns you want to use in proc_1.
To summarize:
- at the interface level flag the columns you want to use in your PL/SQL code -> check UD1 for all of them
- modify your IKM code:
<%=odiRef.getColList(",", "COL_NAME", ",\n\t\t\t", "", "((INS AND TRG) AND REW AND UD1)")%> <- retrieve columns flagged with insert, not read only, mapped on target and with UD1 flagged. The "AND UD1" part can be used in other getColList.
Hope this helps.
Thanks,
Julien

Row and Column Level Select Permission

Hello Friends,
I am using Oracle Oracle9i Enterprise Edition Release 9.2.0.1.0 and Windows XP. I have two questions. How to set :
1. Row Level Select Permission?
2.Column Level Select Permission?
1. I have a table having 100 records in it. I don’t want to allow all the user to see them; means, if user1, user2 and user3 are going to select * from mytable then only they can get all the rows; while other users (including sys) should not able to get all rows, they should be capable of from 11th record.
Though it can be managed by using another table, but I am just finding the other solution.
2. Likewise, if I don’t want to allow to fetch all the columns; suppose column4 is having confidential info and only be visible by user1,user2 and user3 only, not by any othr user; what should I do?
Please guide and help me.
Regards

You would need to use Virtual Private Database (VPD)/ row level security (RLS) to apply row-level security policies to the table. The DBMS_RLS package is used for this
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/d_rls.htm#sthref6168
Unfortunately, column-level security wasn't available in 9.2. You would need to upgrade to Oracle 10g to get that functionality. Before that, you would have to create views that selected appropriate subsets of columns and grant permissions on those views to different users.
Justin

Column level security

Hi,
While changing PROJECT_INACCESSIBLE_COLUMN_AS_NULL to YES in NQSConfig file to implement the column level security, we get an error saying 'A general error has occurred. [nQSError: 46036] Internal Assertion: Condition m_CountFields == static_cast<int32>(m_ColumnNameVector.size()), file .\Src\SQCSCacheStorageListStream.cpp, line 221. (HY000)' while running the reports.
Can anyone help in resolving the same.
Thanks in Advance,
Durgeswari.

Don't confuse database user with application user, your
implement use specific security. You will create tables to keep
your application data dictionary. Then you can do anything you
want to. good luck.
tip Keep your application design simple as much as posible it
good for your life.

Using VPD/FGA to null specific columns for all but some users

I've been reading up on VPD and - though there a numerous examples - I'm having a tough time putting them together.
I have a table that - when most users select against - they should be getting NULL back in a specific column.
That column should only display for a select group of users as a value of other than null.
Can anyone help me out with an example of implementing this?
Any/all help is appreciated.

An extract from http://www.oracle-base.com/articles/10g/DatabaseSecurityEnhancements10g.php
CONN sys/password@db10g AS SYSDBA
GRANT EXECUTE ON dbms_rls TO scott;
CONN scott/tiger@db10g
-- Create the policy function to restrict access to SAL and COMM columns
-- if the employee is not part of the department 20.
CREATE OR REPLACE FUNCTION pf_job (oowner IN VARCHAR2, ojname IN VARCHAR2)
RETURN VARCHAR2 AS
con VARCHAR2 (200);
BEGIN
con := 'deptno = 20';
RETURN (con);
END pf_job;
-- Using the same policy function as before.
BEGIN
DBMS_RLS.ADD_POLICY (object_schema         => 'scott',
                       object_name           => 'emp',
                       policy_name           => 'sp_job',
                       function_schema       => 'scott',
                       policy_function       => 'pf_job',
                       sec_relevant_cols     => 'sal,comm',
                       sec_relevant_cols_opt => DBMS_RLS.ALL_ROWS);
END;
-- All rows are returned but the SAL and COMM values are only
-- shown for employees in department 20.
SELECT empno, ename, job, sal, comm FROM emp;
     EMPNO ENAME      JOB              SAL       COMM
      7369 SMITH      CLERK          10000
      7499 ALLEN      SALESMAN
      7521 WARD       SALESMAN
      7566 JONES      MANAGER         2975
      7654 MARTIN     SALESMAN
      7698 BLAKE      MANAGER
      7782 CLARK      MANAGER
      7788 SCOTT      ANALYST         3000
      7839 KING       PRESIDENT
      7844 TURNER     SALESMAN
      7876 ADAMS      CLERK           1100
     EMPNO ENAME      JOB              SAL       COMM
      7900 JAMES      CLERK
      7902 FORD       ANALYST         3000
      7934 MILLER     CLERK
14 rows selected.
-- Remove the policy function from the table.
BEGIN
DBMS_RLS.DROP_POLICY (object_schema     => 'scott',
                        object_name       => 'emp',
                        policy_name       => 'sp_job');
END;
/The function returns "deptno=20" so any row matching this condition will display the sal and comm value , rest will display null.
IN your case I guess you check for the user in the function who is executing the query (select user from dual), once you get the user see if this is a user who is suppose to see the columns values if yes return "1=1" otherwise return "0=1".

Check package/procedure level privileges for a user

hi gurus,
how to check the package/procedure level privileges for a user? like dba_tab_privs for tables.
for eg: grant execute on dbms_scheduler to user1.
now, i need to verify that user1 has execute privilege on dbms_scheduler or not.
what's the view for this?
thanks in advance,
charles

SQL> select privilege, count(*) from dba_tab_privs group by privilege order by 1;
PRIVILEGE                       COUNT(*)
ALTER                               19
DEBUG                              256
DELETE                              131
DEQUEUE                            3
EXECUTE                           19315
FLASHBACK                          52
INDEX                               14
INSERT                              137
MERGE VIEW                          36
ON COMMIT REFRESH                     52
QUERY REWRITE                          52
PRIVILEGE                       COUNT(*)
READ                                7
REFERENCES                          54
SELECT                                3752
UNDER                                3
UPDATE                              111
WRITE                                5
17 rows selected.DBA_TAB_PRIVS is for more than just tables.

Column level dump

Hi
Is it possible to take column level dump by exp or expdp? Can we take dump of particular column of table?

shd, Anantha is correct in that no direct method exists to take a column level dump.
Depending on why you want to extract only one or selected columns of a table you might use CTAS (Create Table as Select) to build a table with only the target columns and then export that table. The export/import utilities do support changing the table owner so the above should give you a way to get the data you want in an export providing the space exists to run the CTAS.
If database space is limited and the target table is large then another alternate might be to use SQLPlus to just query the target columns spooling the data into a file. The sqlldr utility can then be used to load the data into a table.
If you do not mind having all the table columns present but having data only in selected columns then on 10g using the traditional exp utility and a username set up to run the export the VPD feature should allow you to exact data only in certain columns with NULLs being provided for all non-desired columns. Depending on why and how often you would want to export only specific columns this might be an option.
HTH -- Mark D Powell --

How to select a specific column in a bean method?

Hey everyone,
I'm trying to select a specific column in my adf table so i can hightlight the ones i can after, with a method bean that does a match from another table. I'm using JDeveloper 12.1.2.0.0.
Here's my table at the moment (its a static list that Timo and Alejandro helped me create, thanks to them again!):
<af:table value="#{bindings.Anos1.collectionModel}" var="row"
                                                          rows="#{bindings.Anos1.rangeSize}"
                                                          emptyText="#{bindings.Anos1.viewable ? 'No data to display.' : 'Access Denied.'}"
                                                          rowBandingInterval="0" fetchSize="#{bindings.Anos1.rangeSize}"
                                                          filterModel="#{bindings.Anos1Query.queryDescriptor}"
                                                          queryListener="#{bindings.Anos1Query.processQuery}"
                                                          filterVisible="false" varStatus="vs" id="t5"
                                                          styleClass="AFStretchWidth" columnSelection="multiple"
                                                          inlineStyle="max-width:100%;" columnStretching="multiple"
                                                          columnSelectionListener="#{ControlBean.onAnoColumnSelect}"
                                                          disableColumnReordering="true"
                                                          binding="#{ControlBean.dimAnos}">
                                                    <af:column sortProperty="#{bindings.Anos1.hints.A2011.name}"
                                                               filterable="true" sortable="false"
                                                               headerText="2011"
                                                               id="c54" width="16%">
                                                        <af:outputText value="#{row.A2011}"
                                                                       shortDesc="#{bindings.Anos1.hints.A2011.tooltip}"
                                                                       id="ot54">
                                                            <af:convertNumber groupingUsed="false"
                                                                              pattern="#{bindings.Anos1.hints.A2011.format}"/>
                                                        </af:outputText>
                                                    </af:column>
                                                    <af:column sortProperty="#{bindings.Anos1.hints.A2012.name}"
                                                               filterable="true" sortable="false"
                                                               headerText="2012"
                                                               id="c55" width="16%">
                                                        <af:outputText value="#{row.A2012}"
                                                                       shortDesc="#{bindings.Anos1.hints.A2012.tooltip}"
                                                                       id="ot55">
                                                            <af:convertNumber groupingUsed="false"
                                                                              pattern="#{bindings.Anos1.hints.A2012.format}"/>
                                                        </af:outputText>
                                                    </af:column>
                                                    <af:column sortProperty="#{bindings.Anos1.hints.A2013.name}"
                                                               filterable="true" sortable="false"
                                                               headerText="2013"
                                                               id="c56" width="16%">
                                                        <af:outputText value="#{row.A2013}"
                                                                       shortDesc="#{bindings.Anos1.hints.A2013.tooltip}"
                                                                       id="ot56">
                                                            <af:convertNumber groupingUsed="false"
                                                                              pattern="#{bindings.Anos1.hints.A2013.format}"/>
                                                        </af:outputText>
                                                    </af:column>
                                                </af:table>
I've deleted some of the columns because they are all equal and by doing so, you have less problems in reading it.
In my method i have a matchEm but i'm trying to select a column by using this line:
        dimAnos.setColumnSelection("A2012");
dimAnos is the binding for my table Anos (Years in Portuguese). I even tried another values fro the columnSelection but i couldn't make it selected. Am i doing anything wrong?
Please help me or give me an idea of how can i do this.
Regards,
Frederico.

Hi Frederico,
The method setColumnSelection is meant to set whether your table supports column selection or not. It doesn't select the column. In order to select the column, you need to set the column attribute Selected to true. So I don't know if its an option for you but you can create a binding to all the columns you have in you bean, and then call the method A2012.setSelected(true), and then add a partial target to the table to re render it and show the selected column.
Hope this helps

Grant specific column level privilege

Similar Messages

Maybe you are looking for