Granting object privileges to remote users.

Hello,
Here's the situation:
I have 2 databases located on 2 different servers both running Win2k3. In the first database the main schema is M1 and it has to read objects on the another schema M2, located on the second database.
I created a database link on the first database, to point to the second database
create database link connect2M2db connect to M2 identified by M2 using 'connect2M2db'Now I would like to grant object privileges(insert,update,delete) to M1 on M2' objects. Can anyone tell me how to do that?
Thanks in advance.

I didn't put the whole thing, (my bad) but your reply was helpful. As I said before, I have 2 dbs, on 2 differents servers. I created the dblink on the first server. I also created synonyms on the first server using the following syntax:
"create or replace synonym syn_name for user2.table" which from the link you provided me, is wrong as I didn't append the dblink name.
After that, I would like to grant object privileges to user1, by executing the command from server2. For doing that, is the following syntax correct: "grant select on table_name to user1". My issue is that user1 does not exist on server2. Should I rather use the following: "grant select on table_name@dblink to user1"?

Similar Messages

Which view I can query to get the granted objects privilege to a user?

Hi all,
which view I can query to get the granted objects privilege to a user?
for example:
grant execute on accounting.get_name to scott;
Which view has above object granted information?
Thanks

SQL> select * FROM all_tab_privs where grantor = upper('accounting');
no rows selected

Export object privileges to another user

dear,
i want to export thr object privilege to another user on oracle 10g. how can do it? i try to export the user/scheam than immport to another user but still no work..
Regards

I guess he want user B to have same object privileges as user A
If this is the case, it depends on what object privileges user A has.
You can find that out from user_tab_privs after logon as user A.
If the GRANTABLE = 'NO' you have to logon as each schema holder to grant the privs.

How to view object privileges of a user in Oracle10g?

I try to view the object privileges of a user through the table user_object_privs but it didn't work. I didn't get the correct name of the table or there were some problem with my Oracle. Please help me. Thanks a lot.

Thanks, that link helped me out. I was looking for this:
SELECT OWNER, TABLE_NAME, GRANTEE, PRIVILEGE FROM DBA_TAB_PRIVS WHERE GRANTEE='<put name here>';

Grant Object Privileges Page

I am running version 3.0.6.6.5 on Solaris 2.6 and using Netscape Navigator 4.51.
On the Grant Object Privileges Page for a database object, the "Add to List" button is in an odd spot (crosses over a border) and does not work unless you click it on the left 1/3 of the button. This is not a problem when using IE 5.
Is this a known bug?
Fran Bailey
EDS - Meredith Account

i logged in as User1 and wrote:
desc dbms_lock
and nothing happened, then i disconnected and connected to db1 as User1 and retry and it was all the same (didn't assign the privilege). then i shut down sql plus and started it again as sys and when ran EXECUTE ON DBMS_LOCK the message is shown:
SP2-0103: Nothing in SQL buffer to run
then i logged in as User1 and repeat the EXECUTE ON DBMS_LOCK command, the same error message is thrown. same happened when tried with desc dbms_lock.
am i doing something wrong or what?

Granting table privileges on another users tables

Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
Any ideas what I'm doing wrong here?

Ok... well...
The 'with grant' option doesn't appear to be the issue.
The user attempting to perform the grants:
i.e. GRANT SELECT ON user_2.table_1 TO view_role
has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
i.e.
l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
EXECUTE IMMEDIATE l_sql;
And - it's this that's giving me the insufficient privileges...
I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
I'm at a loss.

What is the system privilege required to grant "Analytic Privilege" to a user

Hi SCN,
I have the user with following privileges:
SYSTEM Privileges: CATALOG READ,CREATE STRUCTURED PRIVILEGE,DATA ADMIN,STRUCTUREDPRIVILEGE ADMIN,USER ADMIN
PACKAGE Privileges: SECURITY
OBJECT Privileges: _SYS_BI,_SYS_BIC and REPOSITORY_TEST
Am able to create a AP, but not able to assign to a user. Checked different threads and documents, Am able to add with "SYSTEM" user but not with the generic user i have
I can't do tracing as it is disabled in the client system
Am i missing something here? Can someone help me please?
Regards,
Krishna Tangudu

Thank you so much Raj.
I was expecting this kind of privilege under SYSTEM PRIVILEGE.
So other privileges which i mentioned are fine right?
Regards,
Krishna Tangudu

Grant Apps Privileges to custom User

Hi, gurus,
after successfully upgrading ebs 11.5.10.2 database to 10.2.0.5, we want to create a database user that will have all APPS Schema privileges.
Please can anyone help us with all the Privileges,Roles etc that have to be granted to this User.
thanks

Thanks for the reply hsawwan,
I have granted all the roles and privileges of apps to custom user. I have also created synonyms on the following apps tables and packages in the custom schema:
sqlplus custom_schema/password
create synonym fnd_global for apps.fnd_global;
create synonym fnd_client_info for apps.fnd_client_info;
create synonym fnd_profile for apps.fnd_profile;
create synonym fnd_message for apps.fnd_message;
create synonym app_exception for apps.app_exception;
create synonym fnd_log_repository for apps.fnd_log_repository;
create synonym fnd_log for apps.fnd_log;
create synonym hr_signon for apps.hr_signon;
create synonym jg_context for apps.jg_context;
create synonym fnd_application_vl for apps.fnd_application_vl;
create synonym fnd_responsibility_vl for apps.fnd_responsibility_vl;
create synonym fnd_languages for apps.fnd_languages;
create synonym fnd_user for apps.fnd_user;
create synonym fnd_application for apps.fnd_application;
create synonym fnd_lookup_types for apps.fnd_lookup_types;
create synonym fnd_product_groups for apps.fnd_product_groups;
create synonym fnd_profile_options_vl for apps.fnd_profile_options_vl;
create synonym fnd_new_messages for apps.fnd_new_messages;
create synonym fnd_data_group_units for apps.fnd_data_group_units;
create synonym fnd_oracle_userid for apps.fnd_oracle_userid;
create synonym fnd_product_groups for apps.fnd_product_groups;
create synonym fnd_product_initialization for apps.fnd_product_initialization;
create synonym fnd_product_init_condition for apps.fnd_product_init_condition;
create synonym fnd_product_init_dependency for apps.fnd_product_init_dependency;
create synonym fnd_product_installations for apps.fnd_product_installations;
create synonym fnd_profile_options for apps.fnd_profile_options;
create synonym fnd_profile_option_values for apps.fnd_profile_option_values;
create synonym fnd_security_groups_vl for apps.fnd_security_groups_vl;
create synonym fnd_user_resp_groups for apps.fnd_user_resp_groups;
create synonym icx_parameters for apps.icx_parameters;
create synonym fnd_log_messages for apps.fnd_log_messages;
create synonym fnd_cache_versions for apps.fnd_cache_versions;
i have granted execute on APPS.FND_CORE_LOG to custom_schema
I created the procedure below with custom_schema (procedure created successfully):
CREATE OR REPLACE PROCEDURE INSERT_PEN_BALANCES_MAR11(p_payroll_date IN DATE, p_low_line_id IN NUMBER, p_high_line_id IN NUMBER) AS
CURSOR all_people IS
SELECT LINE_ID,
STAFF_ID,
EMPLOYEE_NUMBER,
FULL_NAME,
ASSIGNMENT_ID,
PAYROLL,
ORGANIZATION
FROM
APIREPORTS.ALL_PENSION_PEOPLE_INFO_MAR11
WHERE
LINE_ID BETWEEN p_low_line_id AND p_high_line_id
AND
BALANCE_LOAD_STATUS = 'NO';
CURSOR assignment_actions(l_assignment_id IN NUMBER) IS
SELECT
A.ASSIGNMENT_ACTION_ID, B.PAYROLL_ACTION_ID, B.ACTION_TYPE, B.EFFECTIVE_DATE, B.PAYROLL_ID
FROM
APPS.PAY_ASSIGNMENT_ACTIONS A,
APPS.PAY_PAYROLL_ACTIONS B
WHERE
A.PAYROLL_ACTION_ID = B.PAYROLL_ACTION_ID
AND
A.ASSIGNMENT_ID = l_assignment_id
AND
B.EFFECTIVE_DATE BETWEEN TRUNC(p_payroll_date, 'MONTH') AND p_payroll_date
--B.EFFECTIVE_DATE = p_payroll_date
AND
B.ACTION_TYPE IN ('R','Q')
-- AND
-- B.ACTION_STATUS = 'C'
AND
A.ACTION_STATUS = 'C';
CURSOR balance_ids(l_assignment_action_id IN NUMBER) IS
SELECT
A.BALANCE_NAME_AND_SUFFIX,
A.DEFINED_BALANCE_ID,
A.BALANCE_DIMENSION_ID
FROM
APPS.PAY_BALANCES_V A,
APPS.PAY_BALANCE_DIMENSIONS B
WHERE
A.BALANCE_DIMENSION_ID=B.BALANCE_DIMENSION_ID
AND
B.DATABASE_ITEM_SUFFIX IN ('_ASG_ITD','_ASG_RUN','_ASG_YTD')
AND A.ASSIGNMENT_ACTION_ID = l_assignment_action_id;
--AND A.BALANCE_NAME_AND_SUFFIX IN ('GOG Net Salary_ASG_RUN','Total Earnings_ASG_RUN');
-- Variable to hold the calculated value
balance_value NUMBER;
-- Counter to commit after a fixed number of records
p_counter INTEGER := 0;
-- Local Variable to hold the status of each insert
l_status VARCHAR2(30);
BEGIN
-- Initialize the environment
--BEGIN
--APPS.fnd_global.apps_initialize(2352,50001,800);
--END;
FOR i IN all_people
LOOP
p_counter := p_counter + 1;
FOR j IN assignment_actions(i.ASSIGNMENT_ID)
LOOP
FOR k IN balance_ids(j.ASSIGNMENT_ACTION_ID)
LOOP
BEGIN
-- Retrieve the value of the balance
balance_value := NULL;
l_status := 'INSERT SUCCESSFUL';
balance_value := apps.pay_balance_pkg.get_value(k.DEFINED_BALANCE_ID, j.ASSIGNMENT_ACTION_ID);
BEGIN
INSERT INTO APIREPORTS.ALL_PENSION_LATEST_BAL_MAR11
(STAFF_ID,
FULL_NAME,
ASSIGNMENT_ID,
EMPLOYEE_NUMBER,
BALANCE_NAME_AND_SUFFIX,
AMOUNT,
PAYROLL,
PAYROLL_ID,
PAY_PERIOD,
ORGANIZATION,
ASSIGNMENT_ACTION_ID,
PAYROLL_ACTION_ID,
PAYROLL_ACTION_TYPE,
CREATION_DATE
VALUES
(i.STAFF_ID,
i.FULL_NAME,
i.ASSIGNMENT_ID,
i.EMPLOYEE_NUMBER,
k.BALANCE_NAME_AND_SUFFIX,
balance_value,
i.PAYROLL,
j.PAYROLL_ID,
j.EFFECTIVE_DATE,
i.ORGANIZATION,
j.ASSIGNMENT_ACTION_ID,
j.PAYROLL_ACTION_ID,
j.ACTION_TYPE,
SYSDATE
EXCEPTION WHEN OTHERS THEN
l_status := 'ERROR WITH INSERT';
END;
END;
END LOOP;
END LOOP;
IF (l_status = 'INSERT SUCCESSFUL') THEN
UPDATE APIREPORTS.ALL_PENSION_PEOPLE_INFO_MAR11
SET
BALANCE_LOAD_STATUS = 'YES'
WHERE
LINE_ID = i.LINE_ID;
END IF;
IF (p_counter = 10) THEN
COMMIT;
p_counter := 0;
END IF;
END LOOP;
COMMIT;
END INSERT_PEN_BALANCES_MAR11;
procedure created successfully.
Now when i execute the procedure i get the following error:
EXEC INSERT_PEN_BALANCES_MAR11('31-DEC-2010',1,1930);
ERROR at line 1:
ORA-00942: table or view does not exist
ORA-06512: at APPS.FND_CORE_LOG line 25
ORA-06512: at APPS.FND_CORE_LOG line 432
ORA-06512: at "APPS.FND_PROFILE", line 110
ORA-06512: at "APPS.PAY_MONITOR_BALANCE_RETRIEVAL", line 35
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 4426
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5403
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5265
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5250
ORA-06512: at "ADARI.INSERT_PEN_BALANCES_MAR11", line 71
Please help me out.
Thanks.

Set the value to ' * ' to grant administrative privileges to all users.

Everytime I run autoconfig, this set up is done automatically in workflow adminsitrator.
A * comes in the Workflow Configuration --> Workflow System Administrator
How to change this in xml file so that * doesn't come up and only sysadmin is given this privilege on administration.
EBS 11.5.10.2
Db 11.2.0.2

Vicky1 wrote:
Everytime I run autoconfig, this set up is done automatically in workflow adminsitrator.
A * comes in the Workflow Configuration --> Workflow System Administrator
How to change this in xml file so that * doesn't come up and only sysadmin is given this privilege on administration.
EBS 11.5.10.2
Db 11.2.0.2I do not think you can set the workflow administrator via the application context file and you can only do by following the steps in (How To Reset The Workflow Administrator [ID 413711.1]).
Thanks,
Hussein

Grant select privilege to specific columns on a table to user in Oracle 9i

Can anyone tell me how to grant select privilege to a user for specific columns in a table?
I have tried the following statement
GRANT SELECT (EMP_ID) ON EMP TO USER1
But it's not working and I am getting this error "Missing ON Keyword".
Please anyone tell me how to grant select privilege for specific columns.
Edited by: 899045 on Nov 24, 2011 7:03 AM

899045 wrote:
Can anyone tell me how to grant select privilege to a user for specific columns in a table?
I have tried the following statement
GRANT SELECT (EMP_ID) ON EMP TO USER1
But it's not working and I am getting this error "Missing ON Keyword".
Please anyone tell me how to grant select privilege for specific columns.
Edited by: 899045 on Nov 24, 2011 7:03 AMFrom the 9.2 SQL Reference manual, found at tahiti.oracle.com (http://docs.oracle.com/cd/B10501_01/server.920/a96540/statements_912a.htm#2062456)
*"You can specify columns only when granting the INSERT, REFERENCES, or UPDATE privilege. "*

Grant Administrator privileges to users

Post Author: mwong
CA Forum: crystalreports.com
Problem Description:
I need to grant Administrator privileges to one of my users. How do I do that? He needs to upload the reports and invite the users to view them.

Post Author: mwong
CA Forum: crystalreports.com
HiAs of Dec 16, 2007, administrator can now grant administrator privileges to other users.We have added a new Administrators group in the users tab. There are 3 scenarios for adding users to the Administrators group:Scenario 1: New user - If the user does not currently exist within
your crystalreports.com account, you can add the new Administrator by clicking
the Administrator user group on the Users tab
and then clicking Add User.
Scenario 2: Existing user added before December 15, 2007 - If the
user is already in your crystalreports.com account and was added before December
15, 2007, send an email to crystalreports.com Support at [email protected]
with the user's email address. Support will notify you when the user is ready to
be upgraded to Administrator status. Once you receive approval, you can then add
the user to the Administrator user group on the
Users tab.
Scenario 3: Existing user added after December 15, 2007 - If the
user is already in your crystalreports.com account and was added after December
15, 2007, as a Member, you can add the new Administrator by
clicking on the Administrator user group on the
Users tab and then clicking Add User. If the
user was added after Dec. 15, 2007 as a Guest, you must follow
the instruction in Scenario 2. After completing either of the three scenario
above, the new Administrator user will now have full rights to add users, upload
or publish reports, and manage your crystalreports.com account. thanks!Michelle Certain criteria must be met for an account to become an Administrator.See ALSO: http://technicalsupport.businessobjects.com/cs/forums/thread/14541.aspx

What is the user to log in , so that i can assign privileges to a user

Hi ,
Right now i cant execute procedure from my account called as 'ravi' as it says that i dont have enough privilges
When i tried to use Grant option to assign privileges from user ravi , it says that i cant assign privileges to user from the same accont .
please tell me
What is the user , i should log in , so that i can assign all the privileges to my user account called as 'ravi'
Thanks in advance .

Whoever owns the procedure should normally grant execute permission on it to other accounts or roles.
Who Can Grant Object Privileges?
It's also possible for an account with GRANT ANY OBJECT PRIVILEGE (typically a database administrator, not necessarily SYSTEM) to grant permissions on database objects such as procedures that it does not itself own.

Get an error when grant execute on dbms_lock to user?

Hi all,
i have to grant several privileges/roles to user X, it works fine if only one privilege/role is granted one time, but an error raised when i put them together in one grant command, does anyone have any ideas regarding this? thanks in advance.
sqlplus sys/*****@*** as sysdba
SQL> grant execute on dbms_lock to X;
Grant succeeded.
SQL> grant resource to X;
Grant succeeded.
SQL> grant execute on dbms_lock,resource to X;
grant execute on dbms_lock,resource to X
ERROR at line 1:
ORA-00905: missing keyword
SQL> grant resource,execute on dbms_lock to X;
grant resource,execute on dbms_lock to X
ERROR at line 1:
ORA-01953: command no longer valid, see ALTER USER

>
SQL> grant execute on dbms_lock,resource to X;
grant execute on dbms_lock,resource to X
ERROR at line 1:
ORA-00905: missing keyword
SQL> grant resource,execute on dbms_lock to X;
grant resource,execute on dbms_lock to X
ERROR at line 1:
ORA-01953: command no longer valid, see ALTER USER
>
It will help to read the documentation on grant statement.
You can't grant privileges on two different objects or roles in one statement. However you can grant two or more privileges on same object in one statement.
SQL> grant select,update on emp to X;

Grant any privilege, privilege

About 4 weeks ago i got some much appreciated assistance in setting up my environment so that a user could grant object privileges on objects in another user's schema. This solution required a function to be built in the schema which owned objects.
I just found the 'GRANT ANY PRIVILEGE' privilege. Anyone know when this came about (we're using 10g) and if there's any problem to granting this?
We have the init param 07_DICTIONARY_ACCESSIBILITY set to False. Will we be able to keep people of the SYS schema?
-cf

Let me specify, I was referring to the GRANT ANY OBJECT PRIVILEGE above, although I do see the GRANT ANY PRIVILEGE out there as well.
-cf

Object privilege question

Hi, the oracle documentation says:
A user automatically has all object privileges for schema objects contained in his or her schema. A user can grant any object privilege on any schema object he or she owns to any other user or role. A user with the GRANT ANY OBJECT PRIVILEGE can grant or revoke any specified object privilege to another user with or without the GRANT OPTION of the GRANT statement. Otherwise, the grantee can use the privilege, but cannot grant it to other users.
For example, assume user SCOTT has a table named t2:
SQL>GRANT grant any object privilege TO U1;
SQL> connect u1/u1
Connected.
SQL> GRANT select on scott.t2 \TO U2;
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'employees';
GRANTEE                        OWNER                                GRANTOR                        PRIVILEGE                            GRA
U2                             SCOTT                              SCOTT                          SELECT                                NONow this confuses me. Surely it is U1 who is the grantor, and not Scott, no??

Oracleguy,
I do got your point but I guess the right reason for this would be this only that even though the user U1 didn't have the privilege and could grant it only because of Grant Any Object priv, he is not shown as the grantor but Scott does!
[oracle@edhdr1p0-prod sqlplus]$ sqlplus / as sysdba
SQL*Plus: Release 11.2.0.1.0 Production on Thu Feb 18 09:19:39 2010
Copyright (c) 1982, 2009, Oracle. All rights reserved.
Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options
SQL> create user u1 identified by u1;
User created.
SQL> grant create session, create table to u1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> select * from tab;
no rows selected
SQL> conn scott/tiger
Connected.
SQL> create table t2( a number);
Table created.
SQL> conn / as sysdba
Connected.
SQL> grant grant any object privilege to u1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> select * from scott.t2
2 ;
select * from scott.t2
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> grant select on scott.t2 to system;
Grant succeeded.
SQL> conn / as sysdba
Connected.
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'T2';
WHERE TABLE_N 'T2'
ERROR at line 2:
ORA-00920: invalid relational operator
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
2 where table_name='T2';
GRANTEE                        OWNER
GRANTOR                        PRIVILEGE                                GRA
SYSTEM                         SCOTT
SCOTT                          SELECT                                   NO
SQL>
Now, when I explicitly give the priv to U1 and than he grants it, he is shown as the Grantee
Sorry, I didn't realize that its still Scott only which is shown at both the places.
USER is "SYS"
SQL> grant select on scott.t2 to U1;
Grant succeeded.
SQL> conn u1/u1
Connected.
SQL> grant select on scott.t2 to system;
Grant succeeded.
SQL> conn / as sysdba
Connected.
SQL> SELECT GRANTEE, OWNER, GRANTOR, PRIVILEGE, GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME = 'T2';   2
GRANTEE                        OWNER
GRANTOR                        PRIVILEGE                                GRA
SYSTEM                         SCOTT
SCOTT                          SELECT                                   NO
U1                             SCOTT
SCOTT                          SELECT                                   NO
SQL> Update:
Oracleguy,
This is what I found about this priv from docs,
http://download.oracle.com/docs/cd/E11882_01/server.112/e10592/statements_9013.htm#i2077938
GRANT ANY OBJECT PRIVILEGE
     Grant any object privilege that the object owner is permitted to grant.So I guess this should explain what is being shown in the view. Since the owner is Scott who is permitted to grant the privilege , its his name which is shown here since its his privilege which is passed to the second user. Does that sounds like a reasonable explanation?
HTH
Aman....
Edited by: Aman.... on Feb 18, 2010 9:36 AM
Edited by: Aman.... on Feb 18, 2010 11:55 AM added update

Granting object privileges to remote users.

Similar Messages

Maybe you are looking for