How to grant access to?????

User needs read access to triggers, procedures, function and MV's on all schema.
Which system privileges I have to grant?

If we're limiting ourselves to SQL*Plus, then access to the appropriate DBA_ tables, like DBA_SOURCE, should be sufficient. I assume that Amiel made a typo when he referred to the ALL_ tables-- every user has access to the ALL_SOURCE table by default, the rows that are returned from that view depend on the privileges the user has to execute that particular piece of code. The DBA_SOURCE table, on the other hand, has the source for all the PL/SQL in the database, so users with access to DBA_SOURCE can see the source code for any procedure/ package/ function in the database.
SCOTT @ jcave102 Local> conn / as sysdba
Connected.
SYS @ jcave102 Local> create user sam identified by sam;
User created.
Elapsed: 00:00:00.29
SYS @ jcave102 Local> grant create session to sam;
Grant succeeded.
Elapsed: 00:00:00.06
SYS @ jcave102 Local> grant select on sys.dba_source to sam;
Grant succeeded.
Elapsed: 00:00:00.18
SYS @ jcave102 Local> conn sam/sam
Connected.
SAM @ jcave102  > ed
Wrote file afiedt.buf
  1  select text
  2  from dba_source
  3  where owner = 'SCOTT'
  4  and name = 'GET_NUM_TBL'
  5* order by line
SAM @ jcave102  > /
TEXT
function get_num_tbl
  return num_tbl
is
  l_nums num_tbl;
begin
  l_nums := num_tbl();
  l_nums.extend;
  l_nums(1) := 1;
  return l_nums;
end;
10 rows selected.
Elapsed: 00:00:00.06Justin

Similar Messages

  • How to grant access to sharepoint for the user from different Domain

    Hi All
        I need to grant access to user from different domain. 
        Where I can able to view the users in people picker (different domain).
    Thanks in Advance.
    Raj

     Hi
    Trevor Seward
    Sorry to disturb
    you again.
      I am trying to restrict user from search from other domain, say we have domain A and Domain B, where I am trying to restrict all the user from domain B (Search users)for a site collection. I have found couple of stsadmin command to do so. but none
    of them works. Below are the commands I have tried
    STSADM.exe -o setproperty -pn peoplepicker-searchadforests -pv "domain:<Name>.domain" -url "http://Site URL"
    stsadm -o setproperty -pn peoplepicker-searchadcustomquery -pv “(canonicalName=<Name>.domain*)” -url "Site URL"
    we have two way trust.
    Can you suggest any solution.
    Thanks 
    Raj

  • How to grant access to all workbooks to a particular responsibility?

    Hi,
    I am new to Discoverer. i have installed OAS 10.1.2.3 and I have done EUL_SET up on my E-Business Suite R12 and now 'SYSADMIN' owns all the workbook under "System Administrator" responsibility. Now users want to see all workbooks.
    I need to provide access. how can I do that?
    Ram

    Hi,
    You need to connect as SYSADMIN using Discoverer Desktop or Plus. (You may need to grant more privileges to SYSADMIN to do this). Then under workbook management go to workbook sharing and select the user -> workbook tab. You will then be able to select the responsibility and share some or all of your workborks with that responsibility.
    Rod West

  • How to grant access to view linked in another DB

    Hello,
    I have two DBs. "DatabaseA" and "DatabaseB". I have table "tableA" in databaseA and I have created view in "ViewB" which contains simple SQL query "select * from DatabaseA.dbo.tableA".
    Rigth now I want to get user access to view "viewB" without possibility to see original databaseA tableA

    Rigth now I want to get user access to view "viewB" without possibility to see original databaseA tableA
    If you really have to stick to views, one option is to enable
    database-ownership-chains between those 2 databases.
    Be careful to only enable those 2 databases via
    ALTER DATABASE [DB1]
    SET DB_CHAINING ON
    ALTER DATABASE [DB2]
    SET DB_CHAINING ON
    Then they have to be owned by the same Server Principal/Login (preferably
    not a sysadmin, but that's yet another discussion)
    You can read more about such ownership-chains here:
    http://technet.microsoft.com/en-us/library/ms188676%28v=sql.105%29.aspx
    You then have to be very careful with ALL Objects in Database 1 and 2 - because the chain will work for all of them - as long as they share a common owner. You would have to make sure that only that table (schema) is owned by the same owner.
    And if DDL-permissions come into play, this becomes almost impossible to secure..
    So If you do not fully understand the risks involved by this, I would advise against such a setup and refer to other options.
    One better option even with Views:
    Even with views you can select from a function. And functions can be signed with a certificate.
    So a much more secure option is to go for Certificate Mapped Logins, working for only specific objects that you sign.
    http://msdn.microsoft.com/en-us/library/ms173463.aspx
    I can't find a complete article on that this moment, but I'm sure you can find it.
    Andreas Wolter
    Microsoft Certified Master SQL Server 2008
    Microsoft Certified Solutions Master SQL Data Platform, SQL Server 2012
    Blog: www.insidesql.org/blogs/andreaswolter
    Web: www.andreas-wolter.com |
    www.SarpedonQualityLab.com

  • How to grant access to a Oracle Report  Program

    Hi hussein,
    I am checking/debugging our clients registered customized report program setup.
    I want to grant the program to my ID so I can test print and see its output.
    The steps I followed are the ff:
    A.
    System Administrator resp: Concurrent Program > Executable :
    Executable : CEC2CREC
    Application : ABC Customizations
    Execution Method : Oracle Reports
    Execution File Name: CEC2CREC
    B.
    System Administrator resp: Concurrent Program > Define :
    Program : Bank Reconciliation Report ( 2 Column )
    Short Name : CEC2CREC
    Application : ABC Customizations
    Executsble Method : Oracle Reports
    Executable Name : CEC2CREC
    I want to grant this program "Bank Reconciliation Report ( 2 Column )" to my USERID.
    I followed these steps:
    - Login to System Administrator responsibility
    - Navigate to Security > Responsibility > Define
    - Query the "ABC Customization" responsibility
    But I can not find any "ABC Customization" responsibility
    Is there other way to test run the program?
    Thanks a lot
    Edited by: yxes2009 on Sep 14, 2009 3:23 AM

    Hi,
    System Administrator resp: Concurrent Program > Executable :
    Executable : CEC2CRECApplication : ABC Customizations
    But I can not find any "ABC Customization" responsibility According to the above, "ABC Customizations" is an executable file (concurrent program) and not a responsibility. From (Security > Responsibility > Define), query the responsibility which is assigned to the user, and check the "Request Group" which is attached to this responsibility, then navigate to (Security > Responsibility > Request) and add "ABC Customization" request to the request group.
    Regards,
    Hussein

  • Grant access to all the views created in user schema to another schema

    How to grant access for all the views created in own HAGGIS schema to comqdhb schema on the HAGGIS database.
    Oracle Grant Privileges
    ===============
    Object privileges assign the right to perform a particular operation on a specific object
    I read that we can use select 'grant select on' ||view_name||'HAGGIS' user_views where owner='COMQDHB'
    Is this right
    Oracle System Privileges
    ===============
    System privileges should be used in only cases where security isnt important,because a single grant statement could remove all security from the table
    Role based security
    ============
    Role security allows you to gather related grants into a collection-since the role is a predefined collection of privileges that are grouped together.privileges are easier to assign to users.
    [http://www.dba-oracle.com/art_builder_grant_sec.htm]
    can we grant select update to all the views at a time to the other schema.
    Are there any other ways to secure the data other than creating users and assigning roles.
    Thank you
    Edited by: Trooper on Dec 23, 2008 9:24 AM

    I think what was suggested was that you use SQL to generate the grants on each and every view, that is, you use SQL to generate SQL where the SQL being generated is "grant select on view_name to role'"
    If you users to connect to Oracle you have to create usernames for them though if the users only connect via an application the application might run just as one user and access to the application is controled via application security. The control on the application can be via Directory Services such as OID or MS Active Directory. User access to Oracle can also be controlled via OID.
    To connect to Oracle you can use OS authenication (not recommended), usernames with passwords, or via Advanced Security Option which supports single sign-on products like Kebros or Oracle Internet Directory etc....
    Example using SQL to generate SQL
    How do I find out which users have the rights, or privileges, to access a given object ?
    http://www.jlcomp.demon.co.uk/faq/privileges.html
    HTH -- Mark D Powell --

  • Grant access to package in schema2 from schema1- how? Or...

    Hi
    I am trying to test utPLSQL. utPLSQl is installed in schema1@instance1 and the package that I need to test is located in schema2@instance1.
    How can I access package to be tested present in schema2 from schema1? The package has a number of procedures accessing many tables etc.
    GRANT EXECUTE ON SCHEMA.PACKAGE TO USER
    Will this be enough?

    If the schema2.package_name has been successfully compiled using defining user authorization (default) and not current user authorization then yes all any other username requires to use the package and perform any DML activity defined in the package is an "execute" grant on the package.
    In the case of current user authorization then the executing user would also need DML grants on the referenced objects.
    HTH -- Mark D Powell --

  • How toplink grant permission for direct field access

    I know already know that if I need to direct access private or protected field of an instance I must grant supressAccessChecks to ReflectPermission class using policytool or edit java.policy file directly ...
    but how Toplink grant this permission to ReflectPermission class since my java.policy file remain the original.
    Kowit Laison

    In my own experiences, the first release of JDK 1.2 had problems with reflection accessing private attributes. As you mentioned, you had to have a policy file that allowed TopLink access to reflectively access private attributes.
    Since subsequent releases (1.2.x, 1.3, 1.4, etc), it always has "just worked". I.e., it seems to be default behavior of JVM's that you can acess private attributes through reflection. Sometimes some app servers come with startup scripts that have policies that change this default behavior and you have to override it, but in general, a vanilla JVM simply will allow private attribute access through reflection.
    - Don

  • How am I to be able a user to grant access only to see a procedure / function without execute,compile,edit and drop?

    how am I to be able a user to grant access only to see a procedure / function without execute,compile,edit and drop?

    Sorry GregV but thank you, are you sure you can only be done by setting a PC? Can not by giving them certain privileges of a PC?
    PL \ SQL that we use a portable version.
    So actually like this, user A is only used by the X, user A wants to provide read-only access to user B is only used by Y (another PC) to the procedures / functions held user A. How do you?

  • How to grant anonymous access on sharepoint document library/list only not for web application

    Hello
    How to grant anonymous access on sharepoint document library/list only not for web application.I have claim based sharepoint site and has to be but i want to grant access on document library/list only.Is this possible?
    Thanks
    Rajesh Kumar "Changing the Face" can change nothing.But "Facing the Change" can change everything.

    As i am using following code
    SPSite site = SPContext.Current.Site;
                SPWeb web = SPContext.Current.Web;
                SPSecurity.RunWithElevatedPrivileges(delegate()
                    using (SPSite ospSite = new SPSite(site.ID))
                        using (SPWeb webs = ospSite.OpenWeb(web.ID))
                            // Enable anonymous access on web application
                            webs.AllowUnsafeUpdates = true;
                            SPUrlZone urlZone = SPUrlZone.Default;
                            SPWebApplication specifiedWebApplication = ospSite.WebApplication;
                            SPIisSettings iisSettings = specifiedWebApplication.IisSettings[urlZone];
                            //iisSettings.AuthenticationMode = AuthenticationMode.Windows;
                            iisSettings.AllowAnonymous = true;                       
                            specifiedWebApplication.Update();
                            // Get document library collection here and fetch all the document urls
                            SPDocumentLibrary docLib = (SPDocumentLibrary)web.Lists["Documents"];
                            if (docLib != null)
                                docLib.BreakRoleInheritance(true, false);
                                docLib.AllowEveryoneViewItems = true;
                                docLib.AnonymousPermMask64 = SPBasePermissions.ViewPages | SPBasePermissions.OpenItems | SPBasePermissions.ViewVersions
                                    | SPBasePermissions.Open | SPBasePermissions.UseClientIntegration | SPBasePermissions.ViewFormPages | SPBasePermissions.ViewListItems;
                                //docLib.AnonymousPermMask64 = SPBasePermissions.EmptyMask;
                                docLib.Update();
    Should working but getting access denied......i am totally stuck at this point.
    Rajesh Kumar "Changing the Face" can change nothing.But "Facing the Change" can change everything.

  • How to grant group level access to a dynamic page?

    I'm trying to write some code which grants access to a Portal group on a dynamic page.
    I've tried using the wwsec_api.set_group_acl procedure like this:
    wwsec_api.set_group_acl(
    p_group_id => 0, -- Authenticated User
    p_object_type_name => wwsec_api.PORTLET_OBJ, -- ??????
    p_owner => 'MYPROVIDER',
    p_name => 'DYNAMIC_PAGE_NAME',
    p_privilege => wwsec_api.MANAGE_PRIV
    When I execute it I get an error message:
    ORA-01722: invalid number
    What object type is a Dynamic Page? Is PORTLET_OBJ correct?
    Any suggestions are welcome!

    This worked for me:
    wwsec_api.set_group_acl(
    p_group_id => 0, -- Authenticated User
    p_object_type_name => 'DYNAMIC',
    p_owner => 'MYPROVIDER',
    p_name => 'DYNAMIC_PAGE_NAME',
    p_privilege => wwsec_api.MANAGE_PRIV
    (Found the object_type_name in the table wwsec_sys_priv$)

  • How to grant admin access to a CDOT cluster via an Active Directory group

    We have a new 4 node CDOT cluster that we are building out at this time. This is the first on our company as the rest are all running 7-mode.When I add execute the following commands on our new CDOT cluster, I am able to successfully login via putty or system manager:security login create -vserver vs1 -username DOMAIN\username -application ontapi -authmethod domain -role admin
    security login create -vserver vs1 -username DOMAIN\username -application ssh -authmethod domain -role adminHowever, I need to provision security access via AD groups as we have a ot of admins that need access. If I use the following commands to provision security, the commands are accepted by ONTAP but AD credential sets will not grant access to putty or system manager.security login create -vserver vs1 -username "DOMAIN\AD Group" -application ontapi -authmethod domain -role admin
    security login create -vserver vs1 -username "DOMAIN\AD Group" -application ssh -authmethod domain -role adminPlease provide comments if you have ideas on next steps.

    I have done it in 8.3 please see below for the steps Here are the steps to grant access after you have CIFS setup in your SVM (This portion has to be done before the below steps will allow access) my-fas8060> security login domain-tunnel create -vserver (nameofSVM) (gives SSH  login)my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application ssh -authmethod domain -role admin (gives GUI login)my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application http -authmethod domain -role admin my-fas8060> security login create -vserver (nameofSVM) -username domain\group name -application ontapi -authmethod domain -role admin

  • How to restrict access in 2008?

    How to restrict access in 2008?
    So, I would like to do the 2 following things:
    1. Grant developers access to read all Active Form Comonents
    2. Create new Form Groups
    3. Not be able to change nS Resticted AFC
    and
    1. Grant developers rights to Create Ous
    2. Add/Rmeove Members to OUs
    3. Remove rights to add/remove to/from Site Admin OU
    Any suggestions on how to do that?
    So far I tried the out of the box Capabilities and Permissions, created custome ones, but still no luck in accomplishing all 3 items.

    Your request #1 is not possible. In paticular, you can't create new form groups and still not be able to change all form groups. Please submit an enhancement request, asking that newScale support your desired role configuration.
    Similar problem with #2.

  • How do I access User directories after a reinstall of Windows. I have the passwords but no way to access the directories.

    I got a Windows wont start xc0000001. This means it cant be repaired (it fails). There are two drives set up as a RAID 1 pair.
    Each has a small partition (defined as the X drive) that I was able to reinstall windows 7 on. This partition was originally used for the Windows reinstall files. There was sufficient space on the X drive to reinstall Windows 7.
    However, the C: drive, where the installation was originally could not be repaired and so the small partition was used successfully.
    Here's the problem. All the files that are in the "C:\Users\username" are not accessible in  that it requires "Administrative privileges" which my new user account has. I have all
    the passwords to the each user associated with those directories and all the sub-directories, but no way to input the passwords or username and passwords to access these files. How can I access these files/directories?
    I want to copy them off the current drive (along with all the other directories like Program Files, etc.), reformat the drives (which show no errors in fdisk and other tests), reinstall Windows 7 again on C: and start to reuse the computer again.
    I can access the drives thought the CMD Prompt if I insert the Windows Disk, I cannot
    Bob G

    If you do have administrator account or an account with admin privileges you can take ownership/assign ownership of the files folders
    Learn How to Take or Assign
    Ownership of Files and Folders 
    http://technet.microsoft.com/en-us/magazine/ff404240.aspx
    File and Folder Permissions
    http://technet.microsoft.com/en-us/library/bb727008.aspx
    http://www.pcandtablet.com/windows-7-errors-and-crashes/119/i-cannot-delete-my-own-files-and-folders-it-says-either-some-program-is-using-it.html#post199
    http://social.technet.microsoft.com/Forums/windows/en-US/55e8eb6d-1d82-42c9-a7b4-59b96e3648d4/windows-7-asks-admin-grants-when-trying-to-delete-a-firefox-bookmark-folder?forum=w7itprosecurity#0895c7e2-3ee9-4be2-9b4c-b7b573df85d0

  • How to provide access to  v$tables in oracle 10g to user

    Hi,
    can any one suggest me how to provide access to v$tables in oracle 10g to user .
    its requried for auditor.
    PLease help me.
    regards

    user12009184 wrote:
    HI have to provide access to all V$ tables
    it required for configuration of new tool.
    ThanksYou can grant it the select catalog role to the user. It should provide all the required access to the general v$* & dba_* views.
    GRANT SELECT_CATALOG_ROLE TO USER;
    Let me know if this helps.
    Regards,
    Rizwan

Maybe you are looking for

  • How can I redirect my feed on MobileMe to another server?

    iTunes is currently pulling my feed from my MobileMe account: http://web.me.com/myusername/podcast.xml. I want to move the feed to another server. I understand that I can create a new feed, publish it, and then edit the old feed with the <itunes:new-

  • How can I send a group email to ensure privicy for recipients?

    I am trying to send a group email to all my address contacts that does not show any other of the group contact information on the email. Can anyone tell me how to do this effectivly. I receive loads of emails each day from corporate groups that do th

  • DB13 bakcground job - error

    Hi, I have scheduled for the update optimizer statistics immediately in DB 13 it failed with the error as "Job started                                                                  Step 001 started (program RSDBAJOB, variant &0000000000012, user n

  • Macbook to Dynex TV

    I was looking into getting a second tv to also use as an external monitor with my macbook i hooked my computer using the Dynex video adapter to my friends Dynex TV (http://www.bestbuy.com/site/olspage.jsp?skuId=9135385&type=product&id=1218054461 986)

  • Personalize Form to call anothet custom Form

    Hi, In the Invoice form(APXINWKB), when I select the matching method as Purchase Order and click Match, it opens the matching form(APXPMTCH) and I enter the PO number and click Find, it should open the customized form. I customized the form APXPMTCH.