Granting only select command on view to another db user

Hi Expers,
i have table in xxx schema
desc dept
deptnumber number,
name varchar2(10)
i created view as
create view inser as select * dept;
view created.
using this view i can inserting values into dept table also.
i need to give only select access to yyyy user/schema......
can any tell me how to create role for the above scenario....
Thanks.....

SQL> show user
USER is "DCA"
SQL> create table test123(c1 number);
Table created.
SQL> grant select on test123 to etlaudit;
Grant succeeded.
SQL> conn
Enter user-name: etlaudit@xxxxxxx
Enter password:
Connected.
SQL> select * from dca.test123;
no rows selected
SQL> insert into dca.test123 values(1);
insert into dca.test123 values(1)
ERROR at line 1:
ORA-01031: insufficient privilegesIn the same way you can grant privileges to view also.

Similar Messages

ORA-01720 while trying to grant select on a view

Hi Friends,
Iam getting the following error while trying to grant select privilege for the view to SchemaB, i have the view in schemaA.
I have used the tables from both the schema for creating the view and iam getting the error on showing a particular table
ORA-01720: grant option does not exist for 'schemaB.Product'.
I have looked into so many forums but i couldn't find the answer for my question.
I must have to create the view in the Schema A only(strictly), as i seen in some forums stated that while creating the view in the other schema and granting the select privilege will solve the problem.But it was an exception to me ...
Tell me something how can i proceed in this .....

grant select on t1 to seconduser with admin optionNo. WITH ADMIN OPTION applies to system privileges only. Object privileges need the WITH GRANT OPTION ...
SQL> grant select on joe_soap.some_table to apc with admin option
2 /
grant select on joe_soap.some_table to apc with admin option
ERROR at line 1:
ORA-00993: missing GRANT keyword
SQL> grant select any table to apc with admin option
2 /
Grant succeeded.
SQL> grant select on joe_soap.some_table to apc with grant option
2 /
Grant succeeded.
SQL> Cheers, APC

Grant access to all the views created in user schema to another schema

How to grant access for all the views created in own HAGGIS schema to comqdhb schema on the HAGGIS database.
Oracle Grant Privileges
===============
Object privileges assign the right to perform a particular operation on a specific object
I read that we can use select 'grant select on' ||view_name||'HAGGIS' user_views where owner='COMQDHB'
Is this right
Oracle System Privileges
===============
System privileges should be used in only cases where security isnt important,because a single grant statement could remove all security from the table
Role based security
============
Role security allows you to gather related grants into a collection-since the role is a predefined collection of privileges that are grouped together.privileges are easier to assign to users.
[http://www.dba-oracle.com/art_builder_grant_sec.htm]
can we grant select update to all the views at a time to the other schema.
Are there any other ways to secure the data other than creating users and assigning roles.
Thank you
Edited by: Trooper on Dec 23, 2008 9:24 AM

I think what was suggested was that you use SQL to generate the grants on each and every view, that is, you use SQL to generate SQL where the SQL being generated is "grant select on view_name to role'"
If you users to connect to Oracle you have to create usernames for them though if the users only connect via an application the application might run just as one user and access to the application is controled via application security. The control on the application can be via Directory Services such as OID or MS Active Directory. User access to Oracle can also be controlled via OID.
To connect to Oracle you can use OS authenication (not recommended), usernames with passwords, or via Advanced Security Option which supports single sign-on products like Kebros or Oracle Internet Directory etc....
Example using SQL to generate SQL
How do I find out which users have the rights, or privileges, to access a given object ?
http://www.jlcomp.demon.co.uk/faq/privileges.html
HTH -- Mark D Powell --

Granting SELECT on dictionary views ... (?)

Hi there,
please try to find out, what I am doing wrong below:
1. I connect as sys:
connect sys as sysdba
2. Create a role. Just to point out the problem, it will have just CREATE SESSION, CREATE PROCEDURE
create role tr not identified;
grant create session to tr;
grant create procedure to tr;
3. Now the problem: I want the role (users with that role) to have SELECT privilege, just on one dict-view, that is v$session:
My first attempt is denied:
grant select on v$session to tr;
grant select on v$session to tr
FEHLER in Zeile 1:
ORA-02030: can only select from fixed tables/views
Now this in itself is wierd. I read v$-objects are synonyms to v_$-objects. Is that right? What is the problem here? See, what happens next...
4. grant select on v_$session to tr;
That works!
5. create user tu identified by tu;
grant tr to tu;
That works!
6. Now connect as tu/tu
sql*plus Test: select count(*) from v$session;
COUNT(*)
46
works!
7. Now: create a simple stored function to perform the same as my query:
create or replace function testf
return number
is
res number;
begin
select count(*) into res from v$session;
return res;
end;
This is refused with ORA-00942: Table or view does not exist !!!
Simple query on v$session works, but its usage inside a stored function is not allowed??? Please explain!!!
Pointing out to the explanation in the documentation (just one link) would suffice. I just have not found an explanation for this behaviour!
Many thanks in advance!
Xenofon

Ok, It seems this GRANT, even though it is an object privilege it is handled like of those privileges, which can be granted only directly to a user and not to a role;
But on the other hand, the reaction is not the system:
When you try to grant UNLIMITED tablespace to a role you get a definitive error message: ORA-01931.
You don't get this error when granting SELECT on V_$SESSION to a role...
It's getting more and more wierd...
(Does anyone know a complete list of privs which can only be granted directly to a user? I thought it's only UNLIMITED TABLESPACE)

View only selected calendars on the iPhone

How are specific calendars turned off on the iPhone. It seems that the default is that all calendars are visible. On the Mac it is possible to turn on selected calendars for viewing. Is there a similar function on the iPhone? thanks.

I am having the same problem but the replies don't answer the question. Let me try an explain in a different way.
I have five calenders on my iPhone: Bills, Personal, Work, Dr., and Auto. If I select "All" in the Calendars screen in the Calendars app, the calendar shows all five of my calenders. Occasionally I only want to show four of the five calenders, for example I do not want to show the "Work" calendar, but I want to show the other five. I still want to sync all of the calendars all of the time, I just want to select which one of the five I show did show.

HOW TO GET THE SELECTED VALUE IN A ROW FROM ONE VIEW TO ANOTHER VIEW?

hi all,
I have a small issue.
i have created two views.In the table of the first view i'm selecting a row and pressing the button it will move to next view.
i am adding some fields manually in the table of the second view and pressing the save button.Here all the values should get updated corresponding to the field which i have selected in the first view.
I want to know how to get the particular field in the selected row from one view to another view.
Kindly help me.

Hi,
Any data sharing accross views can be achiveved by defining CONTEXT data in COMPONENT CONTROLLER and mapping it to the CONTEXT of all the views. Follow the below steps.
1. Define a CONTEXT NODE in component controller
2. Define same CONTEXT NODE in all the views where this has to be accessed & changed.
3. Go to CONTEXT NODE of each view, right click on the node and choose DEFINE MAPPING.
This is how you map CONTEXT NODE and same can be accessed/changed from any VIEW or even from COMPONENT CONTROLLER. Any change happens at one VIEW will be automatically available in others.
Check the below link for more info regarding same.
[http://help.sap.com/saphelp_nw04s/helpdata/EN/48/444941db42f423e10000000a155106/content.htm]
Regards,
Manne.

In photoshop elements 12 i try to select multiple people to view in organize but can only select one

in photoshop elements 12 i try to select multiple people to view in organize but can only select one person at a time. if I try to select two or more people to see their pictures, I get nothing. I try to use CTL-click, but that does not work

Hi,
Try switching to Media view and then go to Find -> By Details.
Set the field to People and select the persons name.
You add further people by clicking on the + sign
The two options above the search criteria allow you to select all photos containing at least one or only ones with all of your selections.
The search can be saved in case you want to repeat it a later time.
Hope that helps
Brian

Granting select on X$ views?

Hi,
Is it possible to select from X$ views from users other than sys? Is it not possible to grant privileges on these structures/views?
Cheers,
Warren

What you would need to do: create a view on the X$ view and grant select on the view. See Steve Adams' create_xviews.sql script for an example.

Cisco Mediasense API user to view only selected recordings/extensions

Dear Experts,
Is it possible with Cisco MediaSense 10.5 to limit users to view only selected Phones/extensions recordings ?
For eg: A department manager must only view their department members. They must only be able to listen to the recordings from their department members. Is this possible ?
If yes, what is the configuration required ?
Regards
Bejoy Thomas

Hi Bejoy,
It is not possible in MediaSense natively to do this right now. You can get a Partner Add-on to enforce the demarkations. Both Calabrio and NICE offer a Search and Play add-on that can do this.
HTH
Manish

Unable to remove a host from VMM - Error (2606) Unable to perform the job because one or more of the selected objects are locked by another job.

I am unable to remove a host from my Virtual Machine Manager 2012 R2. I receive the following error:
Error (2606)
Unable to perform the job because one or more of the selected objects are locked by another job.
Recommended Action
To find out which job is locking the object, in the Jobs view, group by Status, and find the running or canceling job for the object. When the job is complete, try again.
I have already tried running the following command in SQL Server Management Studio
SELECT * FROM [VirtualManagerDB].[dbo].[tbl_VMM_Lock] where TaskID='Task_GUID'
I received this error back:
Msg 8169, Level 16, State 2, Line 1
Conversion failed when converting from a character string to uniqueidentifier.
I have also tried rebooting both the host and the Virtual Machine Manager Server. After rebooting them both, I still receive the same error when trying to remove the host.
Here are my server details
VMM Server OS = Windows 2012 Standard
VMM Version = 2012 R2 3.2.7510.0
Host OS = Windows 2012 R2 Datacenter
Host Agent Version = 3.2.75.10.0
SQL Server OS = Windows 2012 Datacenter
SQL Version = 2012 SP 1 (11.0.3000.0)

Hi there,
How many hosts are you managing with your VMM server?
The locking job might be the background host refresher job. Did you see any jobs in the jobs view, when the host removal job failed?
If there is no active jobs in the jobs view when this host removal job fails, can you please turn on the VMM tracing, retry the host removal, and paste back the traces for the failed job (search for exception and paste the whole stack)?
Thanks!
Cheng

How to include one view into another view

Hi SDN's,
               Could any please tell me,How to include one view into another view.
In my requirment.I want to create a 'Z' view for an interface .In that view i have to take,
1) Ship-to-email adrr by
                          LIKP-KUNNR -> KNA1-ADRNR
                          KNA1-ADRNR -> ADR6-ADDRESNUMBER.
2) E-mail addr of person who created the document.i.e
    LIKP-ERNAM -> USR21-BNAME.
    USR21-ADDRESNUMBER -> ADR6-ADDRESNUMBER
    USR21-PERSNUMBER -> ADR6-PERSNUMBER.
   In both the case we have to pass ADDRESSNUMBER to ADR6 table.
If we pass these condition it fails,B'Coz at a time it passes Two ADDRESSNUMBER and a PERSNUMBER.
So i created two which fetches only the email addr of person who created the document.and another view fetches Ship-to-email addr.
Now i want to include the second view into first view . Is it possible?or please
tell me someother way to get these email addresses in a single view.

hi
as per my knowledge, nested views are not possible. However, while creating a new view, selection method will not giv u option to select the already created view(S) except the tables..i think so.
regards,
shamim

Select on a view containing a function

Hi,
I have a problem with my production user (LABO): he's trying to access a view on another schema ( METAP ). This view use a function on another schema ( APPDATA ).
The view:
CREATE OR REPLACE VIEW metap.foreg_best AS
select
TX, TN, TG, WW, WW_1, WW_2, WW_EVOL,
from
FOREG_11REGIONS
where
TIMESTAMP_BEGIN > local_time(SYSDATE)
AND CODE in(6407,6447,6476,6479,6480);
LABO has the right to see the table FOREG_11REGIONS and also the right to execute the function LOCAL_TIME. If labo tries the query, it works, if he access the view with the same query : ORA-01031: insufficient privileges .
When metap select the view, no problem, when I do( with DBA role), no problem.
I've already tried a grant execute on appdata.local_time to labo, but it doesn't change anything.
Thanks for your help.

Thank you so much Yoann !!
I have to admit I didn't had enough read what is " with grant option": I swear I'll read more about it in the next days.
Thank you for the quick answer !
Stephane.

Creating a materialized view for another user

I don't seem to find the correct setup for this....
With the user "dummy"
CREATE MATERIALIZED VIEW dummy.thetable BUILD IMMEDIATE REFRESH FORCE ON DEMAND AS select * from real.thetable;
And the materialized view is created ok.
With a DBA user:
CREATE MATERIALIZED VIEW dummy.thetable BUILD IMMEDIATE REFRESH FORCE ON DEMAND AS select * from real.thetable;
ORA-01031: insufficient privileges
I don't want to be switching back and forth from the user to create materialized views, am I missing a permission here? DBA of course has create any materialized view

From the SQL Reference Guide:
To create a materialized view in another user’s schema:
- You must have the CREATE ANY MATERIALIZED VIEW system privilege.
- The owner of the materialized view must have the CREATE TABLE system privilege. The owner must also have access to any master tables of the materialized view that the schema owner does not own (for example, if the master tables are on a remote database), and to any materialized view logs defined on those master tables, either through a SELECT object privilege on each of the tables or through the SELECT ANY TABLE system privilege.
I suspect that, if you first GRANT CREATE TABLE TO DUMMY, you will be able to create the MV.

Error while selecting from a view ORA-01031: Insufficient privileges

As DBA I have granted select privileges on a view to a user, but whenever I login as that user and try to select from the view I get the message 'ORA-01031'. When I run the query in the view as the user I do not have problem and can see the results. This view joins tables from more than one schema and does a distinct on the resultset. I am new to Oracle and would appreciate any help I can get.
Thanks

Back on this problem when I created another user with select permission on the same view and a default role that has reference on all the objects on the other schemas, I end up with the same error message. Although this time the schema owner of the view has select privileges on all the tables from other schemas referenced in the view.
Thanks

SELECT command denied

Hi guys,
We have an issue about toplink. We have two enviroments, a developer enviroment glassfish 2.1, windows xp and java 1.6. Our application have toplink essentials, JPA and some entities mapped. In developer enviroment it all works done but in test enviroment we cant execute any query! And we cant understand why, we talk with our DBA and he got all grants to user but we have allways same problem:
[#|2009-12-30T12:31:03.562-0300|WARNING|sun-appserver2.1|oracle.toplink.essentials.session.file:/opt/glassfish/domains/domain1/applications/j2ee-apps/kmonitor-EAR/KMonitor-ejb_jar/-KMonitor|_ThreadID=225;_ThreadName=p: thread-pool-1; w: 196;_RequestID=fda25a98-2c3a-43d0-ae4e-4a1c1cd3167f;|
Local Exception Stack:
Exception [TOPLINK-4002] (Oracle TopLink Essentials - 2.1 (Build b31g-fcs (10/19/2009))): oracle.toplink.essentials.exceptions.DatabaseException
Internal Exception: com.mysql.jdbc.exceptions.jdbc4.MySQLSyntaxErrorException: SELECT command denied to user 'km_dsv'@'cassini' for table 'fontestatus'
Error Code: 1142
Call: SELECT id_fontestatus, criacao, usuario_criacao, nome, alteracao, codigo, usuario_alteracao, descricao FROM kmonitor.fontestatus WHERE (id_fontestatus = ?)
bind => [1]
Query: ReadObjectQuery(com.knowtec.suiteic.kmonitor.informacao.entity.Fontestatus)
Its the first query and its executed from JPA... we use mysql database.
Here persistence.xml:
<?xml version="1.0" encoding="UTF-8"?>
<persistence version="1.0" xmlns="http://java.sun.com/xml/ns/persistence" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/persistence http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd">
<persistence-unit name="KMonitor" transaction-type="JTA">
<jta-data-source>jdbc/kmonitor</jta-data-source>
<exclude-unlisted-classes>false</exclude-unlisted-classes>
<properties/>
</persistence-unit>
<persistence-unit name="KMonitor-standalone" transaction-type="RESOURCE_LOCAL">
<non-jta-data-source>jdbc/kmonitor</non-jta-data-source>
<exclude-unlisted-classes>false</exclude-unlisted-classes>
<properties>
</properties>
</persistence-unit>
</persistence>
We use KMonitor in glassfish, stand-alone unit is not used and ignore it.
Thanks!

Hi I discovered problem. Top link doesnt have correct message for this problem!
My entity had this annotation:
@Entity
@Table(name = "fontestatus", catalog = "databasename", schema = "")
But catalog doesn´t exist in test enviroment, only development! solution is delete this:
@Entity
@Table(name = "fontestatus")

Granting only select command on view to another db user

Similar Messages

Maybe you are looking for