Grant with Admin Option

I have create a role TD_ADM and would like grant the object privileges such as select, insert, update etc... to TD_ADM role with admin option.
here is grant that i am trying to grant to TD_ADM.
grant select on foo.dept to td_adm with admin option;
i get the ora-00993 error missing grant keyword.
i know we can do for system grants with admin option, but can we do to object privileges?
Thanks....

With Admin option:
Only for system privileges, not object privileges.
You can use With Grant option.
For review:
[http://www.dba-oracle.com/t_with_grant_admin_privileges.htm]

Similar Messages

OID users ( EUS) problem with grant create table with admin

Hi,
We activated enterprise users in the OID.
There is a role APP_ADMIN that has the following grants:
create user
drop user
create table with admin option
this is for an application that creates BI schemas, so it needs to be able to create other users.
I have granted these to a local role, and the user has access to the local role, thanks to the OID setup.
The create and drop user work.
however, the grant create table to another user does not work.
Is there an issue with 'with admin option' grants in Enterprise user security?
Regards,
Peter

If I grant
grant create table to test_role with admin option;
it does not work
if I grant
GRANT GRANT ANY PRIVILEGE to test_role WITH ADMIN OPTION;
it does work.
The test command as user with test_role is:
grant create table to test_usr;
very strange!
If the user is a standard user and I create role test_role
and grant create table to test_role with admin option it works.
but if I convert the user to an EUS user and the same privilege is given to the role ( role is granted to a global role to an enterprise role)
it doesnt work
Edited by: Peter on Dec 7, 2012 2:36 PM

Please share the URL for downloading Weblogic 8.1 with admin server

Hi,
Could you please share the URL for downloading the weblogic 8.1 server with admin option for redhat llinux.
Also could you please me whether we can download the installation guide from some site, I want to do a silent installation of same.
Regards,
Balu.

Hello, you still seem to be pointing people to site(s) that [www.certguard.com] indicates may lead them to lose their certifiaction: viewers please also see also the route you choose ... The Route You Choose
Edited by: bigdelboy on 01-Jun-2009 08:39 (Please note this refers to a spamming post not to the original post of the thread).

Granting an admin rights to view and execute a task with user actions

I am trying to grant an admin the rights to view and execute a new task that i have created from the search results and user actions applet.
I have added an auth type to the authorization types configuration object with the following:
<AuthType name="terminateUser" extends="TaskDefinition,TaskInstance,TaskTemplate"/>
I created a new task and assigned it this auth type. I then created the new admin group and assigned the following permissions:
<Permission type='terminateUser' rights='View'/>
I then added this capability to the admin role to which the user has been assigned. This admin role also has the view user capability and has been assigned to the top level of this organization as a controlled organization.
I also added the task to the user actions configuration so that the menu item appears in the context menu and on the find users page.
The user can see all users but cannot see the new task. The only thing that is visible is the "view" menu item.
I have other users that have lots more capabilites that can execute this task with no problems. I am wondering if the view user capability is the problem or is there some other capability that anyone knows of that I must add in order to allow this admin role to view and execute this task.
Thanks,
Ruth

BTW, the answer is to restart the app server. Duh!
Ruth

with admin or with grant

How to check for the Users that have with admin or with grant privileges?
DN

With Grant --> dba_tab_privs column GRANTABLE
With Admin --> dba_sys_privs column ADMIN_OPTION

How do I resolve this error message? The iPhoto library is on a locked volume. Reopen iPhoto when you have read/write access, or reopen iPhoto with the Option key held down to choose another library.

How do I resolve this error message? The iPhoto library is on a locked volume. Reopen iPhoto when you have read/write access, or reopen iPhoto with the Option key held down to choose another library.

Hi j,
I don't know if this will work, but I'd try logging in to an admin account, going to your main library (not user library), opening it, opening Application Support, selecting iPhoto, hold down the command key and press i, click on the lock in the lower left, entering the password and making sure you have Read & Write privileges for System and Admin.

Firefox won't open links from Outlook when FF is started with admin privileges

OS: Windows 7 64 bit
I usually start Firefox from a toolbar (PowerPro) which runs with admin privileges. Thus Firefox starts with admin privileges too. Under this condition links in Outlook won't open in Firefox.
But if I start Firefox with normal privileges the links in Outlook works as expected.

Under Tools > Options > Advanced look to see if the "check if Firefox is default browser on startup" Check this and then restart FF. If it isn't the default it should ask if you want to make it the default. Choose yes and it should open when clicking links again.

All navigational subheadings near top of screen in previous version of ff disappeared when installed ff4. they included Wikipidia, news(with sub-options LA times, NY times,BBC etc), YouTube, mail & others. how do i recover previous version?

all navigational subheadings near top of screen in previous version of ff disappeared when installed ff4. they included wikipedia, news(with sub-options LA times, NY times, BBC etc),YouTube, mail & others. how do i recover previous version?

You are welcome. I'm glad you got it back up.
(1) You say you did the symbolic link. I will assume this is set correctly; it's very important that it is.
(2) I don't know what you mean by "Been feeding the [email protected] for several weeks now, 700 emails each day at least." After the initial training period, SpamAssassin doesn't learn from mail it has already processed correctly. At this point, you only need to teach SpamAssassin when it is wrong. [email protected] should only be getting spam that is being passed as clean. Likewise, [email protected] should only be getting legitimate mail that is being flagged as junk. You are redirecting mail to both [email protected] and [email protected] ... right? SpamAssassin needs both.
(3) Next, as I said before, you need to implement those "Frontline spam defense for Mac OS X Server." Once you have that done and issue "postfix reload" you can look at your SMTP log in Server Admin and watch as Postfix blocks one piece of junk mail after another. It's kind of cool.
(4) Add some SARE rules:
Visit http://www.rulesemporium.com/rules.htm and download the following rules:
70sareadult.cf
70saregenlsubj0.cf
70sareheader0.cf
70sarehtml0.cf
70sareobfu0.cf
70sareoem.cf
70sarespoof.cf
70sarestocks.cf
70sareunsub.cf
72sare_redirectpost
Visit http://www.rulesemporium.com/other-rules.htm and download the following rules:
backhair.cf
bogus-virus-warnings.cf
chickenpox.cf
weeds.cf
Copy these rules to /etc/mail/spamassassin/
Then stop and restart mail services.
There are other things you can do, and you'll find differing opinions about such things. In general, I think implementing the "Frontline spam defense for Mac OS X Server" and adding the SARE rules will help a lot. Good luck!

Compiling with debug option

How to give user Compiling with debug option, i have try to by giving grant debug any procedure and debug connect session but it failed.
Any ideas?
Edited by: rootsman on Jul 15, 2010 12:00 AM

Post the error screenshot..
eg:
grant DEBUG CONNECT SESSION to username;
grant DEBUG ANY PROCEDURE to username;
Check the below explanation:
DEBUGGING:
DEBUG CONNECT SESSION
Connect the current session to a debugger that uses the Java Debug Wire Protocol (JDWP).
DEBUG ANY PROCEDURE
Debug all PL/SQL and Java code in any database object; displayinformation on all SQL statements executed by the application
Note: Granting this privilege is equivalent to granting the DEBUG object privilege on all applicable objects in the database.

Is it can grant an admin right for special application ?(No Runas as Administrator)

Dear All
Background: We have an application which run on users group in server 2000 SP4 is normal.
We want upgrade the OS to Win7 , on the Win7 the application can not launch on normal users group.
I was try the properties of compatibility to server 2000 and choose "Run this program as an administrator" and edit the regedit key permission , both of all is not work on my case.
It is ok right-click the application and runas as administrator, but on the other hand I find runas administrator has some other error with the application.
May I know is it has a method can grant the admin right to special user when running special application ?
Regards All

Hi,
What application can not run in Windows 7? I think there is a application compatibility issue, so please attempt to run Program Compability troubleshooter.
Also, you said you got some error while you ran as administrator with runas command. And what are the errors?
RUNAS /user:<Username> Program
Based on my knowledge, we cannot grant the special user with admin right unless you add this special user to Administrators group. When a special user is running a application requiring administrator permission, it will prompt to input administrator username
and password.
Andy Altmann
TechNet Community Support

ORA-39700: database must be opened with UPGRADE option

Dear buddies,
I just opened my database : startup upgrade and it started up.
But couldn't perform a backup.
Should I be running pupbld?
Could this problem be due to some opatch?
Here is a part of my alert log:
Thread 1 opened at log sequence 1050
Current log# 3 seq# 1050 mem# 0: D:\ORACLE\DATA\MIG\LOG_03.DBF
Successful open of redo thread 1
Wed Aug 11 13:35:15 2010
MTTR advisory is disabled because either FAST_START_IO_TARGET or LOG_CHECKPOINT_INTERVAL is set
Wed Aug 11 13:35:15 2010
SMON: enabling cache recovery
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\udump\mig_ora_1564.trc:
ORA-00704: bootstrap process failure
ORA-39700: database must be opened with UPGRADE option
Wed Aug 11 13:35:16 2010
Error 704 happened during db open, shutting down database
USER: terminating instance due to error 704
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_pmon_3088.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_reco_1868.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_psp0_2624.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_mman_3312.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_dbw0_2304.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_lgwr_552.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:16 2010
Errors in file d:\oracle\admin\mig\bdump\mig_ckpt_2300.trc:
ORA-00704: bootstrap process failure
Wed Aug 11 13:35:17 2010
Errors in file d:\oracle\admin\mig\bdump\mig_smon_2136.trc:
ORA-00704: bootstrap process failure
Instance terminated by USER, pid = 1564
ORA-1092 signalled during: ALTER DATABASE OPEN...
Please comment.
Thanks.
Nith

I just opened my database : startup upgrade and it started up.
But couldn't perform a backup.As you said you have started the DB in upgrade mode and trying to take the backup of database. I think you can't take the backup of DB in upgrade mode.Please shut it down first and start up it in normal mode and do the backup.
Which backup strategy you are following?
What you exactly want to do upgrade the database or trying to take a bcakup?

Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

Hello,
I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
up. But this is not happening for office 2013 apps(basically word, excel and powerpoint).
This is happening for all Add-Ins installed under HKLM.
How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
a pop-up box?
Regards, Sayan

Hi,
The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
the Group Policy option: List of managed add-ins in the Office Group Policy template.
Word for example, the policy is under:
User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
To enable this policy setting, provide the following information for each add-in:
In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
In "Value," specify the value as follows:
To specify that an add-in is always enabled, type 1.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

Problem crating text index with PREFIX_INDEX option

I am trying to create a text index with prefixes option for use in wildcard search scenarios.
Here is the code I use:
connect CTXSYS/*******
BEGIN
ctx_ddl.create_preference('wildcard_pref', 'BASIC_WORDLIST');
ctx_ddl.set_attribute('wildcard_pref','PREFIX_INDEX','TRUE');
ctx_ddl.set_attribute('wildcard_pref','PREFIX_MIN_LENGTH',3);
ctx_ddl.set_attribute('wildcard_pref','PREFIX_MAX_LENGTH',8);
ctx_ddl.set_attribute('wildcard_pref','SUBSTRING_INDEX','YES');
END;
And preference is created
SELECT PRE_OWNER, PRE_NAME FROM CTXSYS.CTX_PREFERENCES;
PRE_OWNER PRE_NAME
CTXSYS WILDCARD_PREF
CTXSYS DEFAULT_STORAGE
CTXSYS DEFAULT_CLASSIFIER
Now when I log as one of the database users and try to create the index,
I got this:
create index wildcard_idx on MY_Table(Name)
indextype is ctxsys.context
parameters ('WORDLIST wildcard_pref') ;
create index wildcard_idx on MY_Table(Name)
ERROR at line 1:
ORA-29855: error occurred in the execution of ODCIINDEXCREATE routine
ORA-20000: Oracle Text error:
DRG-10700: preference does not exist: wildcard_pref
ORA-06512: at "CTXSYS.DRUE", line 160
ORA-06512: at "CTXSYS.TEXTINDEXMETHODS", line 364
What I am doing wrong ? Keep in mind that I was able to create a text index without the prefixes, but a lot of the searches will be based on patial word search.
Eventualy I would also like to make those indexes be tansactional and work as a datastore (multiple column search)
Thanks.
Stefan

Problem solved.
Atrributes and preferences had to be created by the same user creating the index.
Log as sysdba and
GRANT EXECUTE ON CTX_DDL TO <user_that_creates_index>
And it works.
Message was edited by:
Stef4o

When I attempt to send a text from the new iPad, a dialog box appears with the option to either sign in with Apple ID Password or Create New Account. I try signing in using my Apple ID password but IMessage informs me that email address cannot be verified

When I attempt to send a text from the new iPad, a dialog box appears with the option to either sign in with Apple ID Password or Create New Account. I try signing in using my Apple ID password but IMessage informs me that email address cannot be verified because it is already in use ??? What am I doing wrong?

settings -> iTunes & App Store
click on apple ID listed there
select Sign Out
sign in with the proper account
from then on, when the store ask for your password it should be with the correct ID

Error when creating index with parallel option on very large table

I am getting a
"7:15:52 AM ORA-00600: internal error code, arguments: [kxfqupp_bad_cvl], [7940], [6], [0], [], [], [], []"
error when creating an index with parallel option. Which is strange because this has not been a problem until now. We just hit 60 million rows in a 45 column table, and I wonder if we've hit a bug.
Version 10.2.0.4
O/S Linux
As a test I removed the parallel option and several of the indexes were created with no problem, but many still threw the same error... Strange. Do I need a patch update of some kind?

This is most certainly a bug.
From metalink it looks like bug 4695511 - fixed in 10.2.0.4.1

Grant with Admin Option

Similar Messages

Maybe you are looking for