How to create a read only access for database

I am developer but willing to lear some of the dba tasks. I would like to know the steps that i need to take to creat a read only access database that is going to be used for the report development.
I really appreciate if you tell me all the steps I need to create that. I have a full right to do this in the develpment database. thanks

thank you for your reply but it does not tell me how i can set up a read only access acccount for the user. Do i need to create a role and assign the role to the users?

Similar Messages

How to configure Mailbox Read-Only access for Mailbox's owner on Exchange Server 2010?

I have to configure the Exchange Server 2010's mailbox to only grant Read-Only Access on the mailbox's owners. So they can only allowed to read their messages and cannot modify or remove them. Are there any references or methods to do?

Hi,alexchy8
We can make use of 2 PowerShell commands to achieve this goal.
Add-MailboxPermission and Add-MailboxFolderPermission.
Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
You can read the following article as reference:
http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards.

How to create mandatory (read-only) profile for Terminal Services user (HP Thin Client) on Server2003... aaarrgghhh!

I've been tearing my hair out for a couple of days now...
I'm trying to create a mandatory profile for users logging in from hp thin clients on a 2003 server at a school.
I've set up a prototype user, then copied the proto user's NTUSER.DAT to NTUSER.MAN and renamed
NTUSER.DAT to NTUSER.DAT_unused.
At that point, logging in as the prototype user looks ok. It was my understanding that renaming NTUSER.DAT to NTUSER.MAN would make it a mandatory profile, and the user (in this case the proto user) would be unable to change it. However, in this
case the user can still modify the desktop and those modifications are preserved across logins. The NTUSER.MAN file is being updated, judging by the timestamp changes.
What am I missing?
I've tried putting the NTUSER.MAN in the user's dir on the server
(C:\Documents and Settings\ProtoUser),
in the DefaultUser, and in AllUsers.
Right now I'm getting a default, unmodifiable profile which I have no idea where it comes from.
In case it matters, the original user and directory tree from which the NTUSER.MAN I'm trying to use has been deleted, but I wouldn't think that should matter.
For example, I have the option to not show the security tab set in the group policy, but it is showing up.
The Start menu is showing as the classic start menu, and I had it set for the "new" (2 column) one.
I've got hide network places on the desktop set, but it's showing up.
Is there a way to tell where a profile is coming from?
I'm pretty confused at this point; any clarifications / tips would be much appreciated.
Related questions:
If both an NTUSER.DAT and an NTUSER.MAN exist, which is used?
If no profile is found for a user in the normal place, what happens?

Hi,
Thank you for posting in Windows Server Forum.
A mandatory user profile is a special type of pre-configured roaming user profile that administrators can use to specify settings for users. With mandatory user profiles, a user can modify his or her desktop, but the changes are not saved when the user
logs off. The next time the user logs on, the mandatory user profile created by the administrator is downloaded. There are two types of mandatory profiles: normal mandatory profiles and super-mandatory profiles.
User profiles become mandatory profiles when the administrator renames the NTuser.dat file (the registry hive) on the server to NTuser.man. The .man extension causes the user profile to be a read-only profile.
User profiles become super-mandatory when the folder name of the profile path ends in .man; for example, \\server\share\mandatoryprofile.man\.
More information:
Mandatory User Profiles
http://msdn.microsoft.com/en-us/library/windows/desktop/bb776895(v=vs.85).aspx
Using User Profiles in Windows Server 2003
http://technet.microsoft.com/en-us/library/cc776120(v=ws.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki

How enable read only access for ACS server itself

Hi,
We would like to know whether its possible to create a read only access to the ACS server. Currenlty ACS server has a generic login with full admin rights.
We need to create a login to couple of users to log into ACS to check the "Report and Activity" tab. Access to all other tabs should be disabled.
We are using ACS4.0 verison. Please let me know whether its possible.
Thanks
Nachi

Hi,alexchy8
We can make use of 2 PowerShell commands to achieve this goal.
Add-MailboxPermission and Add-MailboxFolderPermission.
Execute the Add-MailboxPermission command to delegate the read permission at mailbox level.
Execute the Add-MailboxFolderPermission command to delegate the required permissions on specific folders inside the mailbox.
You can read the following article as reference:
http://www.exchangedictionary.com/articles/assign-read-only-mailbox-permission-on-exchange-2010-2013-powershell
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety,
or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards.

How to create a user with read only access for ESB / BPEL Console

I need to create a user with read only access to ESB Console & BPEL Console. I have created a user
(esbreadonly) and assigned ascontrol_monitor role but user is still able to
delete services from ESB systems (such as DefaultSystem). Is there any way to
create a user that has strickly read only access to ESB Console & BPEL
Console
Thanks
Dinesh Patel

Check out this post.. I'm in the process of testing.
http://chintanblog.blogspot.com/2007/12/i-saw-numerous-people-asking-about-bpel_290.html

How to assign read only access for a database to a single user?

Hi All,
I have created a login for one of the user , and i used deny view to deny that user access to any of the databases to be shown.Now, he cannot see any databases in the explorer window.
My question is now i want to give this user permission ( read-only) to a single database. How can i do that? I have googled around and found some solutions but nothing is working.
Can someone please help me with any suggestions.
Thanks a lot for your time and suggestions in advance.
Thanks

Hi Bhanu,
Thanks for your reply, I am not sure i got it. I have a user created with the name of 'msam_test' and if i login into management studio with this userid and password i dont see any databases showing up because i used the DENY View command to hide which is
working fine.Now i just want to see only 1 database named 'suresh3_test' with a read only access to this database.
I tried using your code in the below way
USE [suresh3_test]
CREATE USER [<msam_test>] FOR LOGIN [<msam_test>] WITH DEFAULT_SCHEMA=[dbo]
exec SP_ADDROLEMEMBER 'DB_DATAREADER','<msam_test>'
But i receive an error saying
Msg 15007, Level 16, State 1, Line 3
'<msam_test>' is not a valid login or you do not have permission.
Msg 15410, Level 11, State 1, Procedure sp_addrolemember, Line 75
User or role '<msam_test>' does not exist in this database.
Can you please help me on this.
Thanks

Read only access for objects in application designer

I want to apply read only access to all the objects in application designer. I would like to know how we can do this.
Jayaprakash Tedla

Jayaprakash,
On 8.48 :
1. Create a PERMISSION LIST
1.1 leave empty the navigator homepage
1.2 leave unchecked Can Start Application Server? and Allow Password to be Emailed?
1.3 On Pages tab, leave it empty
1.4 On PeopleTools tab, check Application Designer Access, then click on Definition Permissions, Tools Permissions Miscellaneous and Permissions, and put there the rights as well as you want. You can put Read Only on all component in one shot by clicking on the button, or one by one by choosing in the listbox for each type of components.
1.5 leave all other tab blank
2. Create a ROLE, and add the permission list created on step 1.
3. Create the user, and give the role created on step 2.
4. Open Application Designer, connect there with the new user, and enjoy on read-only access.
Hope this help,
Nicolas.

Read only access for bpel console in SOA Suite 10.1.3.5.1(weblogic)

Hi
For SOA Suite 10.1.3.5.1 on weblogic, Is there any way to restrict certain users to some pages in bpel console.. e.g. read only access to bpel console.
I have found articles on web regarding this but they all are for SOA Suite 10.1.3.3 (and 3.4) on Oracle app server. Article provides a hack by using servlet filters.
How to do a similar thing in SOA Suite 10.1.3.5.1 on weblogic ?
Can somebody provide step by step instructions?
Thanks

Hi James,
I have already seen this link and several refined versions of it but it wont work for weblogic. For example
There is no j2ee/oc4j_soa/applications/orabpel/console directory (i looked into home directory as well but could not found orabpel/console dir).
So question is where to put filter class and how to make changes in web.xml as this file is not present in j2ee/oc4j_soa/applications/orabpel/console/WEB-INF/
I checked deployments in weblogic admin console and seems BPELConsole is deployed as a module under BPELPM ear.
Any idea?
Thanks.

Creating a 'read-only' group for Worklist app

Hi,
Is there a simply way of creating a group with 'read-only' access to the Worklist ? e.g. through a combination of BPM roles ?
I want to be able to create a class of user who can view the details of Worklist items but have absolutely no other rights (skip, retry, assign etc).
Regards
Bob

One simple way to achive this task is by using FYI pattern.
Remove the actions from taskconfigvariablename.xml (for ex accept and reject).
in case you are already using any pattern in your project, FYI pattern should extend that already created pattern.
Regards
Sudhir

XCM(Extended Configuration Management) Read Only Access for Webshop

Hi,
We dont hav e XCM admin access in our project.We need to have just the view(read only) access.This will help us immensly during any troubleshooting. Plus we will save a lot of time while troubleshooting if the view access is avaialable to us. In case of any issues in the XCM setting, we can easily pin point the issue and ask the ERP team to change it. In absence of it we can only speculate what could have gone wrong on the XCM side. Is there any role in XCM so that we can get just read only access.
Regards

Hi,
The below note will help you.
Note 1014383 - Read only user in the XCM and Administration area of ISA
Regards,
Shanto Aloor

Read Only access for a Maintenance view

Hi All,
I have a requirement like this.
There is a Z Maintenance View (namely ZVHR_GRD_TARGET), for this i have to maintain the status as Read Only, and have to create a transaction code for this view with only SE16 access.
I am doing like this.
In the Z view, in the tab "Maint. Status", i have selected the radio button "Read Only" and saved it.
I have created a transaction code for this view with SE16 access with the inputs
Transaction                                                           SE16
Selected the check box "Skip Intial Screen"
Selected the check box for GUI status
Name of the Screenfield                                          DATABROWSE-TABLENAME
value                                                                      ZVHR_GRD_TARGET (i.e, view name)
But the transaction code is not executing.
So can any help me out in the requirement
Regards
Srinivas Kodukula

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

Read only access for a Database!

Hi All,
I need to create a user for my database who can have readonly access to the database and can work as *"Read Only Apps".*
Senario:-* I want to give access to development team through TOAD/ SQL* but that user can not delete/update any thing from apps schema.
Thanks,
Anchorage

Anchorage,
Please refer to the following link:
Read Only Schema in Oracle APPS 11i
http://oracle.anilpassi.com/read-only-schema-in-oracle-apps-11i.html
You may also search this forum as the same topic was discussed here many times before.

How to set the read only property for dynamic ALV column

Hi All,
I have built one dynamiv ALV and I have one name column inside that ALV for which I have to set read only property based on two column fields that exist in the same ALV,say IS_SP and IS_CORP of type boolean.
If any one of the flag is 'X',i have to make that name column as display only and
If both flag are not set,it should be displayed as ediatable column.
I have written one method as INIT_ALV which gets called when ALV is loaded.
Code is as follows:
lr_column_settings ?= wd_this->alv_all_roles.
lt_columns = lr_column_settings->get_columns( ).
LOOP AT lt_columns INTO ls_column.
CASE ls_column-id.
   WHEN <NAMECOLUMN>. "name column which should be editable/display
Create Input Field
        CREATE OBJECT lr_uie_input_field_ro
          EXPORTING
            value_fieldname = ls_column-id.
     ls_column-r_column->set_cell_editor( lr_uie_input_field_ro ).
    After this,I have to set the read only property based on IS_SP and IS_CORP values,
          CALL METHOD lr_uie_input_field_ro->set_read_only_fieldname
          EXPORTING
            *value = 'IS_SP' or 'IS_CORP'
ENDLOOP.
I dont want to use cell variants also.
Help me to achieve this.
Thanks and Regards,
Divya

Divya - I have done it in the past following these documents. Please read it and try it it will work.
Please read it in the following order since both are a continuation documents for the same purpose (it also contains how to change colors of row dynamically but I didnt do that part I just did the read_only part as your requirement)
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0625002-596c-2b10-46af-91cb31b71393
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0155eb5-b6ce-2b10-3195-d9704982d69b?quicklink=index&overridelayout=true
thanks!
Jason PV

Want to create a Read Only user for a given app owner user

Hi Folks,
We have an application owner schema, lets call it OWNER, which has different objects living under it.
Now, for certain reasons, the app group wants a read only user which should be able to view objects living only in OWNER. It would only be able to read things, and have no create or alter types of priv to be able to change anything.
The first idea was to create a new user (e.g. RO) and give this explicit grants (select only) for all objects in OWNER. Though this works, is a maintenance havoc, since everytime there is a new object in OWNER, you have to remember to give explicit grants to all RO (or RW ) kind of users.
What i am looking forward to is, some sort of privilege or role concept that apply on the user level, and not on object level. something that allows me to say, all objects of this schema (e.g. OWNER) are visible to user RO. Other restrictions on RO would control read or write behaviour.
Does this thing exist ? please point me to the documentation/example..
regards
raghav..

CREATE OR REPLACE TRIGGER myTest.trg_mytest
AFTER DDL
ON myTest.SCHEMA
DECLARE
     lv_obj_type VARCHAR2(20) := TRIM(UPPER(ora_dict_obj_type));
     lv_evt_type VARCHAR(20)      := TRIM(UPPER(ora_sysevent));
     lv_obj_name     VARCHAR2(30) := trim(UPPER(ora_dict_obj_name));
     lv_role_name     VARCHAR2(30) := 'myTest_RO';
     lv_stmt          VARCHAR2(4000) := NULL;
     ln_job_nr     NUMBER;
BEGIN
     IF lv_evt_type != 'GRANT' --lv_obj_type <> 'OBJECT PRIVILEGE' --
     THEN
          DBMS_JOB.SUBMIT(ln_job_nr,'begin execute immediate ''grant ' || ' select on ' ||
                                   lv_obj_name || ' to ' || lv_role_name || '''; END;');
     END IF;
   INSERT INTO TB_EVT_LOG(d_date, description)
   VALUES(SYSDATE, lv_obj_name || '~~~~ created ' || lv_obj_type || '~~~~' || lv_evt_type );
   EXCEPTION
     WHEN OTHERS THEN
       RAISE;
END trg_mytest;
/This works. But, my problem is that it is not able to filter out the Grant statement itself, Its logging an entry for the grant (as a ddl operation as well).
what am I doing wrong here ?
regards
raghav..

Easy read-only access for noobs

Lightroom is a great product for the photographer, but for his spouse it's not so easy. I'd like an easy way to copy an image to the clipboard or export it to iPhoto to be used in other apps like iWeb.
My photos are stored on a server. It should be easy for my wife to go through the collection in read-only mode and use photos for blogs, emails, slideshows, etc without having to learn how to sync the directory tree, export from Lightroom and manage those temporary files. Currently the best process I can find is:
Use Bridge to browse the photos since only Adobe products can see the Develop settings for the RAW images.
Select the image and right-click Open-With Camera Raw
In Camera Raw Save the file as a JPEG into a temporary folder
In Finder, find the temporary folder, open the JPEG with Preview or drag the file to iPhoto
If It's in Preview, Copy the image to the clipboard for pasting into an app like Mail or iWeb.
It seems like we could eliminate several steps here if Adobe Bridge had a convert&copyToClipboard option that would convert a RAW with Develop settings into a JPEG and then copy that JPEG into the clipboard for pasting into an application.
If anyone has a better approach, let me know.
Besides the cost overhead, it's not realistic for her to use Lightroom from her computer because Lightroom won't dynamically see folder tree changes without a Sync. Using Bridge she also loses out on virtual copies.
Thanks,
-Ryan.

Pete,
Good point... that's true. I shouldn't say there aren't any programs that support XMP... there certainly are!
I don't know, though, of any application that can read - and more importantly *use* - the XMP data that's specifically related to the Lightroom Developer metadata.
An application can say that it has read/write support for XMP (which is actually not only for LR, but also for Photoshop and even PDFs), but that doesn't mean the application has to recognize - and honor - every piece of metadata contained within that XMP file. I think a lot of the applications listed on Adobe's website only support a subset of the Lightroom metadata: EXIF, IPTC, geocoding... that kind of thing.
So it's one thing to say that an app supports XMP, and it's another to say that an application fully supports XMP. If an image editor supported every XMP tag, it could take a RAW + Lightroom XMP file, pick up where you left off in Lightroom, save its own changes back to XMP, and Lightroom would recognize the other editor's changes. I don't think even Photoshop supports XMP to that level!
I don't know of any app that will read Lightroom's Developer metadata and display the same image that you see in Lightroom, which is what the OP was asking for and what I was addressing in saying there aren't apps that support XMP.
But, you're right, I was an over-sweeping generalization. So, let me restate more accurately
The XMP data is developed by Adobe, but it's a published standard so in theory anybody who wanted to COULD read the Lightroom Developer XMP/DNG data. But nobody does.
Of course, all this is a little academic because even if an organizer (e.g. Picasa) could honor all the Lightroom metadata and display the image "correctly", it wouldn't matter. The ultimate goal of the OP is to use the image in blogs, emails, etc. which is unfortunately still going to require a JPG. Maybe one day DNG and XMP will be as widely supported as JPG (which I think is Adobe's goal)!
Thanks for keeping me honest

How to create a read only access for database

Similar Messages

Maybe you are looking for