How to assign read only access for a database to a single user?

Hi All,
I have created a login for one of the user , and i used deny view to deny that user access to any of the databases to be shown.Now, he cannot see any databases in the explorer window.
My question is now i want to give this user permission ( read-only) to a single database. How can i do that? I have googled around and found some solutions but nothing is working.
Can someone please help me with any suggestions.
Thanks a lot for your time and suggestions in advance.
Thanks

Hi Bhanu,
Thanks for your reply, I am not sure i got it. I have a user created with the name of 'msam_test' and if i login into management studio with this userid and password i dont see any databases showing up because i used the DENY View command to hide which is
working fine.Now i just want to see only 1 database named 'suresh3_test' with a read only access to this database.
I tried using your code in the below way
USE [suresh3_test]
CREATE USER [<msam_test>] FOR LOGIN [<msam_test>] WITH DEFAULT_SCHEMA=[dbo]
exec SP_ADDROLEMEMBER 'DB_DATAREADER','<msam_test>'
But i receive an error saying
Msg 15007, Level 16, State 1, Line 3
'<msam_test>' is not a valid login or you do not have permission.
Msg 15410, Level 11, State 1, Procedure sp_addrolemember, Line 75
User or role '<msam_test>' does not exist in this database.
Can you please help me on this.
Thanks

Similar Messages

Read only access for a Database!

Hi All,
I need to create a user for my database who can have readonly access to the database and can work as *"Read Only Apps".*
Senario:-* I want to give access to development team through TOAD/ SQL* but that user can not delete/update any thing from apps schema.
Thanks,
Anchorage

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

Read only access on abc scheema to all other users

i want to give read only access on abc scheema to all other users. which command will be used.

Hi
Create a role first
CREATE ROLE ABC_SELECTONLY_ROLE IDENTIFIED BY anypassword;
Assign SELECT permissions to that role.
spool c:\grantprivs.lst
SELECT 'GRANT SELECT ON ABC.'||OBJECT_NAME||' TO ABC_SELECTONLY_ROLE;'
FROM DBA_OBJECTS
WHERE OWNER LIKE 'ABC'
AND OBJECT_TYPE IN ('TABLE', 'VIEW');
spool off
@c:\grantprivs.lst
Attach role to users (EXCLUDE USERS AS YOU LIKE. In this example we have excluded SYS, SYSTEM etc)
spool c:\attachrole.lst
SELECT 'GRANT ABC_SELECTONLY_ROLE TO '||USERNAME||';'
FROM DBA_USERS
WHERE USERNAME NOT IN ('SYS','SYSTEM',DBSNMP','SYSMAN');
spool off
@c:\attachrole.lst
You may wish to create private synonyms for the users.
CREATE SYNONYM USER1.TABLENAME FOR ABC.TABLENAME;
Regards
Adnan

How to create a read only access for database

I am developer but willing to lear some of the dba tasks. I would like to know the steps that i need to take to creat a read only access database that is going to be used for the report development.
I really appreciate if you tell me all the steps I need to create that. I have a full right to do this in the develpment database. thanks

thank you for your reply but it does not tell me how i can set up a read only access acccount for the user. Do i need to create a role and assign the role to the users?

How to configure Mailbox Read-Only access for Mailbox's owner on Exchange Server 2010?

I have to configure the Exchange Server 2010's mailbox to only grant Read-Only Access on the mailbox's owners. So they can only allowed to read their messages and cannot modify or remove them. Are there any references or methods to do?

Hi,alexchy8
We can make use of 2 PowerShell commands to achieve this goal.
Add-MailboxPermission and Add-MailboxFolderPermission.
Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
You can read the following article as reference:
http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards.

How enable read only access for ACS server itself

Hi,
We would like to know whether its possible to create a read only access to the ACS server. Currenlty ACS server has a generic login with full admin rights.
We need to create a login to couple of users to log into ACS to check the "Report and Activity" tab. Access to all other tabs should be disabled.
We are using ACS4.0 verison. Please let me know whether its possible.
Thanks
Nachi

Hi,alexchy8
We can make use of 2 PowerShell commands to achieve this goal.
Add-MailboxPermission and Add-MailboxFolderPermission.
Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
You can read the following article as reference:
http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards.

How to create a user with read only access for ESB / BPEL Console

I need to create a user with read only access to ESB Console & BPEL Console. I have created a user
(esbreadonly) and assigned ascontrol_monitor role but user is still able to
delete services from ESB systems (such as DefaultSystem). Is there any way to
create a user that has strickly read only access to ESB Console & BPEL
Console
Thanks
Dinesh Patel

Check out this post.. I'm in the process of testing.
http://chintanblog.blogspot.com/2007/12/i-saw-numerous-people-asking-about-bpel_290.html

Read only access for objects in application designer

I want to apply read only access to all the objects in application designer. I would like to know how we can do this.
Jayaprakash Tedla

Jayaprakash,
On 8.48 :
1. Create a PERMISSION LIST
1.1 leave empty the navigator homepage
1.2 leave unchecked Can Start Application Server? and Allow Password to be Emailed?
1.3 On Pages tab, leave it empty
1.4 On PeopleTools tab, check Application Designer Access, then click on Definition Permissions, Tools Permissions Miscellaneous and Permissions, and put there the rights as well as you want. You can put Read Only on all component in one shot by clicking on the button, or one by one by choosing in the listbox for each type of components.
1.5 leave all other tab blank
2. Create a ROLE, and add the permission list created on step 1.
3. Create the user, and give the role created on step 2.
4. Open Application Designer, connect there with the new user, and enjoy on read-only access.
Hope this help,
Nicolas.

Read only access for bpel console in SOA Suite 10.1.3.5.1(weblogic)

Hi
For SOA Suite 10.1.3.5.1 on weblogic, Is there any way to restrict certain users to some pages in bpel console.. e.g. read only access to bpel console.
I have found articles on web regarding this but they all are for SOA Suite 10.1.3.3 (and 3.4) on Oracle app server. Article provides a hack by using servlet filters.
How to do a similar thing in SOA Suite 10.1.3.5.1 on weblogic ?
Can somebody provide step by step instructions?
Thanks

Hi James,
I have already seen this link and several refined versions of it but it wont work for weblogic. For example
There is no j2ee/oc4j_soa/applications/orabpel/console directory (i looked into home directory as well but could not found orabpel/console dir).
So question is where to put filter class and how to make changes in web.xml as this file is not present in j2ee/oc4j_soa/applications/orabpel/console/WEB-INF/
I checked deployments in weblogic admin console and seems BPELConsole is deployed as a module under BPELPM ear.
Any idea?
Thanks.

XCM(Extended Configuration Management) Read Only Access for Webshop

Hi,
We dont hav e XCM admin access in our project.We need to have just the view(read only) access.This will help us immensly during any troubleshooting. Plus we will save a lot of time while troubleshooting if the view access is avaialable to us. In case of any issues in the XCM setting, we can easily pin point the issue and ask the ERP team to change it. In absence of it we can only speculate what could have gone wrong on the XCM side. Is there any role in XCM so that we can get just read only access.
Regards

Hi,
The below note will help you.
Note 1014383 - Read only user in the XCM and Administration area of ISA
Regards,
Shanto Aloor

User in hr can able to create records in PA30.But will give read only access for all infotypes

Hi Team,
I have created one test role in HR. It will give Read access to all info types.
But user can able to create Info type records in PA30. Please find the P_ORGIN values below.
Authorization level            R
Infotype                       *
Personnel Area                 US
Employee Group                 1
Employee Subgroup              U*
Subtype                        *
Organizational Key             *
OOAC values.
AUTSW ADAYS       15
AUTSW APPRO 0
AUTSW DFCON 4
AUTSW INCON 0
AUTSW NNCON 0
AUTSW NNNNN 0
AUTSW ORGIN 1
AUTSW ORGPD 4
AUTSW ORGXX 0
AUTSW PERNR 1
AUTSW XXCON 0
Note : user does not have access to any structural profile.
I suspect is this bcz, if any user has proper 0105 and 0001 in HR master data can able to create records.Bcz user will be assigned to default sap structural profile "ALL" in OOSB ?
I can see user was not assigned to "ALL" profile in OOSB or in T77UA. and user cant able to write or change infotype data in pa30.
Please suggest how the user can able to create inftotype records in PA30.(Info :0002 for example)
Appreciate Quick response.
Regards,
Venu.

Sorry did not get the below comment.
"The maintain flag in the structural profile does not relate to any maintenance authorization in PA. It only affects the OM objects authorized by the structural profile. For example the user may be able to delimit a position. It will never grant any write authorization for any PA infotype "
Do you mean , suppose if we give Org unit and evaluation path like attached screen ,user will get access to only the ORG UNIT as its object type (can able to perform activities as mentioned in the role PLOG ) but cant perform any activity like address infotype change on the person (P) (as mentioned in P_ORGIN) who comes under the org unit mentioned in Structural profile ?
My understanding is that i believe user total auth is an intersection of general +structural authorization.lets take HR admin wanted to change 0002 data   for some imps in org.We need to give access to that particular org to which the emps belongs to (through structural auth) and SHOULD CHECK the maintenance box in strucural auth and will access change access via role.
And user cant able to edit his own data.
Please find the Screens as requested. Please let me know if my understanding is correct or not ?
Regards,
venu.

Read Only access for a Maintenance view

Hi All,
I have a requirement like this.
There is a Z Maintenance View (namely ZVHR_GRD_TARGET), for this i have to maintain the status as Read Only, and have to create a transaction code for this view with only SE16 access.
I am doing like this.
In the Z view, in the tab "Maint. Status", i have selected the radio button "Read Only" and saved it.
I have created a transaction code for this view with SE16 access with the inputs
Transaction                                                           SE16
Selected the check box "Skip Intial Screen"
Selected the check box for GUI status
Name of the Screenfield                                          DATABROWSE-TABLENAME
value                                                                      ZVHR_GRD_TARGET (i.e, view name)
But the transaction code is not executing.
So can any help me out in the requirement
Regards
Srinivas Kodukula

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

Easy read-only access for noobs

Lightroom is a great product for the photographer, but for his spouse it's not so easy. I'd like an easy way to copy an image to the clipboard or export it to iPhoto to be used in other apps like iWeb.
My photos are stored on a server. It should be easy for my wife to go through the collection in read-only mode and use photos for blogs, emails, slideshows, etc without having to learn how to sync the directory tree, export from Lightroom and manage those temporary files. Currently the best process I can find is:
Use Bridge to browse the photos since only Adobe products can see the Develop settings for the RAW images.
Select the image and right-click Open-With Camera Raw
In Camera Raw Save the file as a JPEG into a temporary folder
In Finder, find the temporary folder, open the JPEG with Preview or drag the file to iPhoto
If It's in Preview, Copy the image to the clipboard for pasting into an app like Mail or iWeb.
It seems like we could eliminate several steps here if Adobe Bridge had a convert&copyToClipboard option that would convert a RAW with Develop settings into a JPEG and then copy that JPEG into the clipboard for pasting into an application.
If anyone has a better approach, let me know.
Besides the cost overhead, it's not realistic for her to use Lightroom from her computer because Lightroom won't dynamically see folder tree changes without a Sync. Using Bridge she also loses out on virtual copies.
Thanks,
-Ryan.

Pete,
Good point... that's true. I shouldn't say there aren't any programs that support XMP... there certainly are!
I don't know, though, of any application that can read - and more importantly *use* - the XMP data that's specifically related to the Lightroom Developer metadata.
An application can say that it has read/write support for XMP (which is actually not only for LR, but also for Photoshop and even PDFs), but that doesn't mean the application has to recognize - and honor - every piece of metadata contained within that XMP file. I think a lot of the applications listed on Adobe's website only support a subset of the Lightroom metadata: EXIF, IPTC, geocoding... that kind of thing.
So it's one thing to say that an app supports XMP, and it's another to say that an application fully supports XMP. If an image editor supported every XMP tag, it could take a RAW + Lightroom XMP file, pick up where you left off in Lightroom, save its own changes back to XMP, and Lightroom would recognize the other editor's changes. I don't think even Photoshop supports XMP to that level!
I don't know of any app that will read Lightroom's Developer metadata and display the same image that you see in Lightroom, which is what the OP was asking for and what I was addressing in saying there aren't apps that support XMP.
But, you're right, I was an over-sweeping generalization. So, let me restate more accurately
The XMP data is developed by Adobe, but it's a published standard so in theory anybody who wanted to COULD read the Lightroom Developer XMP/DNG data. But nobody does.
Of course, all this is a little academic because even if an organizer (e.g. Picasa) could honor all the Lightroom metadata and display the image "correctly", it wouldn't matter. The ultimate goal of the OP is to use the image in blogs, emails, etc. which is unfortunately still going to require a JPG. Maybe one day DNG and XMP will be as widely supported as JPG (which I think is Adobe's goal)!
Thanks for keeping me honest

Server 2003: make user template with read-only access for shared folders

I have need to make a type of user (like Administrator, Power User, Mobile User, User, etc.) that has read-only acess to shared folders. So when I make a new user and assign the "read-only user" template I wish to have, the user can open files
in the shared folders on the server, but not edit, save or delete files. Other users can and should remain able to edit, save & delete.
Before I dig in, is this even possible?

You could create a Group called ReadOnly, and set that to have Read on the ACLs of the relevant files or folders.
Make that template user a member of that group.
As long as they are not also a member of another group that gives them higher permissions, this would work.
Otherwise set the ReadOnly group to deny Write, which would over ride any other permission set.
So,
Folder A
ACL:
ReadOnly : R
Users: Read/Write
If a user is a member of Users & ReadOnly, they would get read/write to Folder A. As permissions are cumulative.
If you did the following:
Folder A
ACL:
ReadOnly : R
ReadOnly: Deny Write
Users: Read/Write
The users in ReadOnly would be denied write, as it overrides the cumulative permissions.
Robert Pearman SBS MVP
itauthority.co.uk |
Title(Required)
Facebook |
Twitter |
Linked in |
Google+

Any read only access for TREXadmin?

Is there any way to set up TREXAdmin to be a read only tool?
My application group want access to it I'm not sure the request will get approved unless we can limit the power of the TREXAdmin tool. Are there any switches we can pass or script entires we can change to launch it "read only"?
TIA!!

Hi,
Regarding the TREX Admin tool ,pls see http://help.sap.com/saphelp_nw04/helpdata/en/40/26a2292bd304dae10000000a114cbd/frameset.htm
Hope this helps,
regards
CSM reddy

How to assign read only access for a database to a single user?

Similar Messages

Maybe you are looking for