How to restrict grant connect through with Data Vault

I need to restrict the ability to grant proxy privileges in the database. This is the statement: alter user USER_A grant connect through USER_B;
I tried creating this rule that looks at the sql text for %CONNECT THROUGH% in the statement and then added it to the "Can Maintain Own Account" Rule Set which is attached to the Alter System command but it doesn't appear to be working. How can I get this working? Is my rule that I created correct. Ultimately what I want to do is allow proxies to be created for most users but just restrict only certain special users.
BEGIN
dbms_macadm.delete_rule(rule_name => 'NO_PROXY_PRIVILEGES');
DBMS_MACADM.CREATE_RULE(rule_name => 'NO_PROXY_PRIVILEGES',
rule_expr => 'INSTR(UPPER(DVSYS.DV_SQL_TEXT),''%CONNECT THROUGH%'') = 0');
END;I am running Oracle 11.2.0.2 Enterprise on Windows Server 2008R2
Thank you.

You may get a better answer in the security forum:
Security
That being said - there are authorization checks that you can create for SE16.
Create an authorization field via SU20.  Create the object via SU21. 
Create a role.  Add transaction SE16 to the role.  Create a profile.  Activity would be display.  And then you can add the objects that you created.
Again you may get a better answer from someone who does security everyday.  I'd suggest posting in the security forum.
Michelle

Similar Messages

  • How to create dynamic connection string with variables using ssis.

    Hello,
    Can anyone let me know on how to create dynamic connection string with variables using ssis?
    Any help would be appreciated.

    Hi vinay9738,
    According to your description, you want to connect multiple database from multiple servers using dynamic connection.
    If in this case, we can create a Table in our local database (whatever DB we want) and load all the connection strings.  We can use Execute SQL Task to query all the connection strings and store the result-set in a variable of object type in SSIS package.
    Then use ForEach Loop container to shred the content of the object variable and iterate through each of the connection strings. And then Place an Execute SQL task inside ForEach Loop container with the SQL statements we have to run in all the DB instances. 
    For more details, please refer to the following blog:
    http://sql-developers.blogspot.kr/2010/07/dynamic-database-connection-using-ssis.html
    If there are any other questions, please feel free to let me know.
    Regards,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • How to declare a bind variable with 'date' data type in command prompt?

    how to declare a bind variable with 'date' data type in command prompt?
    sql>variable q date;
    when i execute it show list of datatypes

    Hi,
    As Lokanath said, there are no DATE bind variables.
    You can use a VARCHAR2 bind variable, and convert it to a DATE in your SQL statment.
    If you're using SQL*Plus, consider a substitution variable. It won't be as efficient as a bind variable, but it will be as convenient.
    For example:
    DEFINE  first_entrry_date = "DATE '2010-06-20''
    SELECT   ...
    WHERE   entry_date >= &first_entry_date
    {code}                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

  • How an applet can connect to a data base?

    how an applet can connect to a data base?

    You need to set up a policy, it's a bit convoluted, see http://developer.java.sun.com/developer/onlineTraining/Programming/BasicJava1/dba.html#applet for more.

  • How to transport/move a table with data from development to Test to Production

    Hi,
    How to transport/move a table with data from development to Test to Production..? Export-Import a Delivery Unit does only the structure and not the data
    Reg
    Sri

    Hi Sri,
    You cannot transport Data via Transport route in HANA, you can only transport code changes/Structure via DU. For Data movement, you either have a do a export/import from a flat file or replication from a Source System to HANA.
    Thanks Much,
    Abhishek

  • In power mac g5, how to take Automatic Screen Shot with Date

    in power mac g5, how to take Automatic Screen Shot with Date ?
    please help me

    If you are standing by, and activating the process by keyboard
    you could be sure to include the open Date Time menu bar
    image in a complete screenshot, using cmd shift 3. Or outline
    the area you want if not full-screen, by using cmd shift 4.
    The command button may also have an apple icon on it.
    So that's the three key shortcuts for full & partial screen.
    For a more automated method, perhaps try using software to
    run an AppleScript, like Automator. Then write a script or find
    one that you can modify to do tasks and test it.
    There may be other methods, however identifying your intent
    would be higher on the list at this time; to narrow the method.
    Good luck & happy computing!

  • Nokia 2600C2 connectivity through bluetooth/data c...

    iunderstand this modle cannot be connected via data cable. When i connect through bluetooth i get the following msg authentication failed & when i try through one touch access i get the msg bluetooth modem not installed i have installed Nokia PC suite version 7.0.8.2 & also blueSoleil 2.6.0.9 Release 070606 Stack Version 06.03.29.20061212.
    Pl tell me how to proceed from begining . My Operating sys Windows XP SPII,i have external bluetooth adaptor

    According to one of the reviews on this page yes it is possible and works with Macs and PCs.
    Works great as a Bluetooth modem with EDGE service on T-Moblie using both Macs and PCs.

  • How many clients can connect through cisco AP 1310 in wireless network ?

    I had setup wireless network with
    wlc4402,cisco AP 1310.1131 and 1242 and Cisco acs 4.1.My problem is only 30 clients connect through Cisco AP 1310 at a time.I can not connect more than 30 clients at a time.What is the issue in wireless network?please reply .
    Thanks and regards
    By
    D.Anbudurai

    WIRELESS > 802.11 > RRM
    How can do that setting ? Can you reply with
    some brief steps? And also I want to know how
    many clients can connect in wireless network at
    a time exactly through cisco aps?
    Thanks and regards
    d.anbudurai

  • Xcelsius connectivity through XML data button

    While using XML data button, In URL Box we need an script.that will return the correctly formatted XML data source How can we do the coding of that script  and How to do its Local Hosting?
    Is there any other method or application that can be provided in the URL box so that it also returns the correctly formatted XML data source? are there some demos of it?//

    Yes, Data connection works. I can connect to Xcel, Access, xml data.
    In fact What I am trying is to do is thi:
    1 - From a user interface with some select dn list box
    2 - Use adodb connection to pull data from an access database with the selected info in the UI
    3 - format selected data as xml and load xml data into xcelsius- Run Time.
    That is quite simple with xml button but otherwise it seems difficult. I have tried different things but how to trigger the script is the problem
    Any idea?
    Thank U in advance

  • How to restrict employees from accessing managers data using custom security profile

    Hi,
    I am using custom security profile for restricting the employees from accessing supervisors details(PG.SEGMENT2=4). I have written the custom code as below :
    Responsibility :US Super HRMS Manager
    ASSIGNMENT.PERSON_ID
    IN
    (SELECT PAF.PERSON_ID FROM PER_ALL_PEOPLE_F PAF,
    PER_ALL_ASSIGNMENTS_F PF,
    PAY_PEOPLE_GROUPS PG,
    PER_PERSON_TYPE_USAGES_F PPU,
    FND_USER FNU
    WHERE PAF.PERSON_ID=PF.PERSON_ID
    AND :EFFECTIVE_DATE BETWEEN PAF.EFFECTIVE_START_DATE
    AND PAF.EFFECTIVE_END_DATE
    AND PF.PEOPLE_GROUP_ID=PG.PEOPLE_GROUP_ID
    AND :EFFECTIVE_DATE BETWEEN PF.EFFECTIVE_START_DATE AND PF.EFFECTIVE_END_DATE
    AND PPU.PERSON_ID=PAF.PERSON_ID
    AND PPU.PERSON_ID=PF.PERSON_ID
    AND :EFFECTIVE_DATE BETWEEN PPU.EFFECTIVE_START_daTE AND PPU.EFFECTIVE_END_DATE
    AND PAF.PERSON_ID=FNU.EMPLOYEE_ID
    AND PAF.PERSON_TYPE_ID =2
    AND PPU.PERSON_TYPE_ID
    IN(2,62)
    and PAF.person_id = FND_PROFILE.value('user_id')
    AND PG.SEGMENT2=8)
    and using "restrict the people visible to each other using this profile".
    I have assigned the security profile to HR user responsibility
    But when I query the supervisor name in HR User responsibility , it is not restricting me from viewing supervisor details.
    When I query for first time, its restricting me to view others details, but when I close that click on torch button and try searching, its allowing me to access manages details.
    Can any one please let me know what setups need to be done for restricting employees from viewing supervisors data.
    I have gone through the document "Understanding and Using HRMS Security in Oracle HRMS" but didn't got any idea.
    Please suggest.
    Thanks & Regards,
    Anusha.

    Hi All ,
    i solved the problem by using event 01 of header view and using the table "Extract" .
    Regards,
    Neha

  • Grant role DBA with Database Vault

    Hi all,
    I need help granting the role DBA to a user with Database Vault option installed. I created a user account and I need that this user be able to do all the things that a regular DBA role can do. I can't find a way to do this in Database Vault... any help will be appreciated.
    Thanks!

    Sysdba can issue powerful statements such as create user, drop user, alter user, create profile .. and so on... can be done only if it is allowed so by modifying the Can maintain accounts/profiles rule set.
    You can also login with dvsys account but that account is locked after installation. So unlock it with
    alter user username account unlock; command. And be aware that ANY system privileges are blocked in protected schemas. You can try to grant the following roles in DB Vault := DV_OWNER, DV_REALM_OWNER, DV_REALM_RESOURCE, DV_ADMIN, DV_PUBLIC, DV_ACCTMGR, DV_SECANALYST
    Following can help you
    SELECT TABLE_NAME, OWNER, PRIVILEGE FROM DBA_TAB_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
    SELECT PRIVILEGE FROM DBA_SYS_PRIVS WHERE GRANTEE = 'DV_ACCTMGR';
    Regards
    Karan

  • How do I resolve connection error with Java API listener?

    I have created a listener using the new Java API (see How do I implement a listener using new MDM Java API? for background). When I run it, I get this error message
    Mar 19, 2008 3:57:58 PM com.sap.mdm.internal.net.ConnectionImpl finalize
    INFO: Disconnect was not called. Cleaning up connection in finalize.
    This message is triggered whenever I generate a data event that I would otherwise expect to be captured and handled by the listener. I have tried a number of things, including setting the connection to NO_TIMEOUT and trying SimpleConnection versus ConnectionPool, but always with the same result.
    Here is some sample code for the listener:
    public class DataListenerImpl implements DataListener {
         public void recordAdded(RecordEvent evt) {          
              System.out.println("===> Record Added Event");
              System.out.println(evt.getServerName());
         public void recordCheckedIn(RecordEvent evt) {
              System.out.println("===> Record Checked In Event");
              System.out.println(evt.getServerName());          
         public void recordCheckedOut(RecordEvent evt) {
              System.out.println("===> Record Checked Out Event");
              System.out.println(evt.getServerName());               
         public void recordModified(RecordEvent evt) {
              System.out.println("===> Record Modified Event");
              System.out.println(evt.getServerName());
    And here is the code for the Event Dispatcher:
    public void execute(Repository repository) {
         DataListener listener = new DataListenerImpl();
         try {
              EventDispatcherManager edm = EventDispatcherManager.getInstance();
              EventDispatcher ed = edm.getEventDispatcher(repository.getServer().getName());
              ed.addListener(listener);
              ed.registerDataNotifications(SystemProperties.getUserName(), SystemProperties.getPassword(),
                        repository.getIdentifier(), repository.getLoginRegion());
              ed.registerRepositoryNotifications(SystemProperties.getUserName(), SystemProperties.getPassword(),
                        repository.getIdentifier());
              ed.registerGlobalNotifications();
              while (true) {
                   Thread.yield();
                   try {
                        Thread.sleep(1500);
                   } catch (InterruptedException ex) {
                        System.out.println("Interrupted Exception: " + ex.getMessage());
         } catch (ConnectionException e) {
              e.printStackTrace();
         } catch (CommandException e) {
              e.printStackTrace();
    Has anyone else encountered this message? Could it be related to a TCP configuration on the server? Or is this a bug in the Java API?
    As I mentioned in the forum posting linked to above, I have not encountered this problem with the MDM4J API.
    Any help is greatly appreciated.

    I resolved it. We are switching over to SP6, Patch 1 and the listener code works fine with this version of the Java API.
    Just one thing to note, though: make sure that you register data notifications through MetadataManager in your initialization code:
    metadataManager.registerDataNotifications(userSessionContext, repositoryPassword);
    For information on the changes to the SP6 Java API, especially with regard to connecting to MDM with the UserSessionContext, please review Richard LeBlanc's [presentation|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/20073a91-3e8b-2a10-52ae-e1b4a10add1c].

  • How to debug DAQ VIs (problem with data)

    I am trying to debug (and understand) the attached VI.  I’m not asking anyone to analyze/debug it, since it is far more than an example; I am new to these forums and feel like asking such a thing would be inappropriate.
    I would like advice on how to debug it.  I am also going to describe my problem to see if the cause may be obvious to someone.
    The outputs of the "Angle Calc" sub-vi are fed into a state machine.  The state machine actuates outputs to move a motor and measures changing angles.  It first moves up/down, then left/right.  The attached VI is called by a top-level VI and the front panel is not usually open.  For some reason, when the front panel is opened, it behaves differently when it is called.  The behavior only changes for the right/left movements.
    Here's where I'm hoping someone can point out some better debugging methods for me.
    I have been using the Express Write to LVM File VI and the Convert to Dynamic Data function to write acquired data to text files for analysis after the acquisition has completed.  Are there better methods recommended for doing this?  I wish I could run through the code while recording the execution and then step through a playback of it!
     As for the specific problem I am having...
    In the "Right Find Stall" case, the signal wired from the "Angle Calc" VI (array size 100) is connected to a Max/Min Array function.  When I log the data coming from the Min/Max function, I see an alternation between valid data and 0 (i.e. 12.2, 0, 13.3, 0, 14.0, 0, 14.5, 0...).  When I log the data being fed into the Min/Max function I do not see 0s. 
    A guess of mine is that the array is empty and therefore no data is logged but Min/Max returns a 0 (not sure why this would happen).  I also have no idea why this would ALWAYS happen with the front panel opened.  I have seen the effect with the front panel closed, but never to the same degree; usually just a seemingly random zero or two but not a pattern of every other point...
    Thanks all,
    Dave
    Attachments:
    Functional_Test.vi ‏2710 KB

    Angle_calc receives array controls in and passes array indicators out.  It performs a trig function and a bit of multiplication. 
    I'll check out the Write to Spreadsheet File VI, haven't used it in the past.  If it will allow me to write text out that'll be enough reason for me to stop using the Express VI.
    I've used Execution Highlighting and stepping before but with the data acquisition by the time the application makes it around to the next read the DAQ card has sampled a ton of data and the data coming in is no longer useful (a different state should be active by then).
    I do think the problem is related to the computer slowing down with the front panel open.  I've logged the 'backlog' number of the Read function and found that the number in there is greater than 0 much more often when the VI's front panel is open and that I've seen relations between the 0s that I discussed earlier and the backlog going above 0 (usually the scan after a non-0 backlog seems to be a problem).
    I need to familiarize myself with the DAQ basics, the buffer, backlog, and relation to sampling rate, etc.
    In a simple VI I just wrote, I noticed that if I increased the sampling rate high enough, data being acquired into a chart cuts-out on a regular basis; instead of a smooth line, I see small dashes or dots of data (spaces in between).  I don't understand this- I would expect data to be lost but not "no data" to be read in.  I think understanding what is happening here would be helpful.

  • How to handle multiple connection through JCO

    Hello JCo Experts,
    My requirement is as follows:
    > I need to create a Web Dynpro Java Application
    > I have multiple users (different Users on SAP System).
    > I need to execute BAPI/Module Functions through these multiple users.
    Example:
    Users: A and B
    User A has logged in from a remote location
    User B has logged in from a another remote location
    both users have logged in through SAP system Login Ids
    Two JCo Connections should be created and all the request from User A must use Connection A and request from B must use Connection B.
    > The connection should be created at first time when user login first time.
    How can I handle this scenario through JCo or other way. I have multiple BAPI/ModuelFunction which I need to execute but with User specific.
    waiting for positive response.

    Dear Shiv,
    Please need to look into [How to Configure the JCo Destination Settings|http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/3103eb90-0201-0010-71af-be6f4a6f61d1]
    http://wiki.sdn.sap.com/wiki/display/Snippets/DynamicJCOHandling-Creation,Updationetc
    Best Regards
    Arun Jaiswal

  • How to restrict mutiple user clicks with asynchrounous behavior of FLEX

    I have developed a flex application and it has a datagrid, and on double clicking on the datagrid, I am showing a popup window ( the code in the popup window has call to httpService.send(), to get the data and display). Before the popup is opened, the user is double clicking again on the datagrid, which inturn is trying to open the popup window (with a new call to web service). These calls are piling up. How can i restrict making call to httpService.send() when user double clicked for the second time on the datagrid. Since, the web service call is asynchronous by nature, I am not able to figure out a way for this. Can anyone please help.

    Hi,
    You can use bussyCursor for this and keep it busy until you don't recieve the response of any particular click.
    Like  CursorManager.setBusyCursor(); on the click of mouse.And  CursorManager.removeBusyCursor();
    after getting the response from the server.
    Also you can use Application.application.enabled = false; until you dont get response of the earlier's click.
    And then set it to true after the response.
    with Regards,
    Shardul Singh Bartwal

Maybe you are looking for

  • Using An External Hard Drive With An iBook

    I just got an external hard drive to hold my large iTunes library because it was filling up my disk completely. I don't want it to be backing up the library, I want it to be the library so that it isn't taking up space on the computer's hard drive. I

  • Don't understand the cc cleaner tool

    Good morning and happy new year. I must be the dumbest people here but I tried to follow the cc cleaner tool process explained here and I'm at a loss and stopped before making a fool of myself. I went through the process 1 and 2 ie. I have a disk rep

  • When will the  raw plug in for the nikon D610 in Cs6 on Imac be ready?

    i am owner of a nikon D610 but i can not open my nef in cs6 on imac.is adobe working on a raw plug in for the D610 on Mac and if so,when will it come out?

  • Embedding an HTML page in a Flash Movie

    I am trying to embed an HTML page in the center of a Flash movie and I was wondering if this is possible, and if so, what is the code to do so. I want it as a small box in the middle of my SWF.

  • Transportation & shipping

    Hi How do determine route in inbound delivery and how to configure it. whem i am cerating shipping cost vi01,  i cannot transfer it, it is saying "No purchase item found for shipment cost item" and purchase order is available for that vendor(service