How to "revoke" privilege with dbms_xdb.changeprivileges

Dear All!
How to "revoke" privilege granted with the following code
DECLARE
r pls_integer;
priv xmltype;
priv_data varchar2(2000);
BEGIN
priv_data :=
'<ace
xmlns="http://xmlns.oracle.com/xdb/acl.xsd"
xmlns:dav="DAV:"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://xmlns.oracle.com/xdb/acl.xsd
http://xmlns.oracle.com/xdb/acl.xsd
DAV:http://xmlns.oracle.com/xdb/dav.xsd">
<principal>DVLP</principal> <grant>true</grant>
<privilege><all/></privilege>
</ace>';
priv := xmltype.createxml(priv_data);
r := dbms_xdb.changeprivileges('/xdbconfig.xml', priv);
END;
This code is generated by Enterprise Manager
I guessed that it is necessary to replace grant with deny
But there is not schema defenition for deny is parent 'ace'
Thank you in advance for help
Regards
Artem

Dear Mark!
Thank you for you reply
I'll try and let you know about results
Note that This code was generated by Enterprise Manager
and it seems that it generates the same code when you try
to grant and revoke privilege!
Regards
Artem

Similar Messages

How to revoke the alter privilege.

I'm wondering how to revoke the alter privilege for the owner of a table.
Any ideas?
Thanks
Todd

nop, owner is the boss, this is DAC. If you don't trust the user, you don't need to give user connect to the schema.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Todd Thompson ([email protected]):
I'm wondering how to revoke the alter privilege for the owner of a table.
Any ideas?
Thanks
Todd<HR></BLOCKQUOTE>
null

How to revoke all privileges?

hi all. How to revoke all privileges from user? B-)

For object privileges run :
SELECT 'revoke ' || PRIVILEGE || ' on ' || table_name || ' from ' || grantee
|| ';\'
FROM dba_tab_privs
WHERE grantee = 'USERNAME'
For system privileges run:
SELECT 'revoke ' || PRIVILEGE || ' from ' || grantee || ';\'
FROM dba_sys_privs
WHERE grantee = 'USERNAME'
Then run both results in Sql*Plus

How to Assign Privilege Levels with CiscoSecure ACS TACACS+

how to assign privilege level to a user in secure ACS TACACS+ user exist in external database
Regards,
Bilal

Hi Bilal,
Bring users/groups in at level 15
    1. Go to user or group setup in ACS
    2. Drop down to "TACACS+ Settings"
    3. Place a check in "Shell (Exec)"
    4. Place a check in "Privilege level" and enter "15" in the adjacent field
Regards,
~JG
Do rate helpful posts

Oracle users and revoking privileges

Hello,
To test out some error conditions in an application, I'd like to temporarily revoke a privilege on a table from a database user.
I am trying to do that, logged into SQL*Plus as "sys" or "system", and running the command:
REVOKE UPDATE ON USERX.TABLE_A FROM USERX;
However, this is failing with the following message:
ORA-01927: cannot REVOKE privileges you did not grant
I've also tried logging into my server as oracle, typing "sqlplus /nolog" at the command line, then "connect internal as sysdba;" from the SQL*Plus prompt, and then running the REVOKE command, but that results in the same error message.
So basically my question is: if neither the "sys" nor the "system" user is able to revoke the privilege from the "userx" user (because they did not specifically grant it), how would I determine which oracle user would be able to do this? Or how else would I go about revoking the privilege?
I'm running Oracle8i Enterprise Edition Release 8.1.6.1.0 on Linux.
Thanks for your help with this. I am not very familiar with Oracle DBA concepts.

Hello,
I am fully agree with Eric....Yes! a User created a table means...the User is OWNER of the table....and that means......the User is by default having the privilege of DML operations...i belive...OK
And the privilege which you have not granted...then how could you revoke them...Whether it may b e SYS or SYSTEM or for that matter any User a/c.
If you really want to restrict the restrict option on table owned by your User, then i can suggest to put a Schema Level Trigger on DML action. This will be fired when update in invoked on table by the user and there you can have your STOP mechanism.....BUT..this is not really suggested.
Regards,
Kamesh Rastogi
Oracle - DBA

How to revoke call dbms

How to revoke a privilege given with the following statement?
call dbms_java.grant_permission('myschema','java.net.SocketPermission' ,'10.10.16.16' , 'connect,resolve');
Thanks

Wrong guess but did you check revoke_permission procedure in dbms_java.

How to revoke fulfilled license upon refund request.

Hi,
I am strugling with revoking fulfilled licenses when customer request for refund. I deleted respective license from Admin Console but it just restrict them not to download further on any device. But they are still able to use the book if already downloaded/fulfilled.
Any suggestion to tackle this will be much appreciated.

How to revoke returnable license already on a user's device? If I delete license from Admin Console, user still able to read already fulfilled e-book. The only thing for revocation working for us when customer itself return e-book. Please let me know if any other way to revoke already fulfilled license?

How to run etherape with ordinary user?

hi
when run etherape show this massege:
No capture device found or insufficient privileges.
Only file replay will be available.
EtherApe must be run with administrative privileges (e.g. root) to enable live capture.
Pcap error: no suitable device found
i create group etherape with this ownership
┌─[root@mymind] - [/etc] - [Sat Feb 04, 12:02]
└─[$] <> groupadd etherape
┌─[root@mymind] - [/etc] - [Sat Feb 04, 12:02]
└─[$] <> chgrp etherape /usr/bin/etherape
and add my user to this groups
┌─[root@mymind] - [/etc] - [Sat Feb 04, 12:02]
└─[$] <> usermod -G root,network,http,mysql,dbus,mem,bin,daemon,gdm,audio,video,rfkill,wheel,disk,sys,etherape mostafa
how to run etherape with ordinary user(without root privilege)?
Last edited by mostafasedaghat (2012-02-03 20:37:44)

mostafasedaghat wrote:how to run etherape with ordinary user(without root privilege)?
You can't. It requires root to set network card attributes, which can only be set with administrative priviledges. But it should be no problem to start it with sudo.

How to revoke machine certificates quickly?

We are planning to start using device certificates for the first time for the following purposes:
Exchange ActiveSync certificate based authentication.
Wireless authentication for laptops that are not members of our domain.
System Center Configuration Manager Internet based clients to authenticate from the Internet through a reverse proxy to receive Windows and software updates.
Allow Chromebooks to authenticate to Cisco ASA L2TP with IPSEC VPN with device certificate instead of PSK.
If any of the devices or certificates get stolen, we would need to revoke the certificates so the devices can no longer authenticate.
I have already seen links that give steps on how to revoke the certificate on the issuing CA server, but how to you make this change happen right away? If we go through the steps to revoke the certificate, how can we make sure the devices that are
providing the certificate authentication (RADUIS server for wireless and for VPN, reverse proxy, SCCM, Exchange etc.) know the certificate is revoked and immediately stop allowing connections?

Certificate revocation is not an immediate process. At first, you need to disable computer account in Active Directory and/or edit VPN connection policies.
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell FCIV tool.

How to revoke access?

I have a problem that may be trivial, but I could not find a simple solution.
I'm using the WRT120N router.
I've granted my neighbor access to my wireless network (by pressing the magic button Wi-Fi Protected, while he tried to connect to it), to copy some files over the local network. Everything worked according to plan, but now I have a problem because I have no idea how to revoke his access to my network.
Could you help me with this - how to revoke the permission to access to the router?
Thanks in advance
M

It seems to be I was happy to fast. For some reasons "wireless mac filter" does not work on my router.
Adding any MAC address to the list of prevent pcs do just nothing - I've tried with my own MAC address and I was still able to access the network, although I belive that it should block my access. I've double checked the address with "dhcp reservation tab" and ipconfig command, so for sure it was valid
From the other hand when I selected "Permit" it blocked everything, including my PC which MAC address was on the list.
Could you tell me if this strange behaviour could be cosed by some misconfiguration in other tabs, or should I just update the software version (curently I'm using v1.0.01)?
Thanks anyway
M

How to revoke rename

I have made an Permission Bundle that has permissions Discover, GetContent and AddItem. My purpose is to give read and add rights to the user.
When I make an ACE with this Permission Bundle, the user has right to add items (documents) but he also has right to rename those items he has added.
Does anyone have suggestions how to revoke renaming?

You need to revoke the SetAttribute AccessLevel (or not grant it).

How can I print with the black and white cartridge only?

I am trying to print using the black and white cartridge only because magenta is out of ink but I'm getting the following error message in HP Photosmart C7200 series print dialog:
The printer is out of ink.
The following ink cartridges are empty: Magenta. Replace these ink cartridges to resume printing.
How can I print with the black and white cartridge only?
Mac OSX 10.7.3
HP Photosmart C7280 (7200 series)
This question was solved.
View Solution.

I am absolutely disgusted by this; clearly a scam from HP to make more money by selling extra ink cartridges!! I will make sure to never buy any products from the shoddy rip off merchants at HP ever again!!
You should be ashamed!!

Open Hub: How-to doc "How to Extract data with Open Hub to a Logical File"

Hi all,
We are using open hub to download transaction files from infocubes to application server, and would like to have filename which is dynamic based period and year, i.e. period and year of the transaction data to be downloaded.
I understand we could use logical file for this purpose. However we are not sure how to have the period and year to be dynamically derived in filename.
I have read in sdn a number of posted messages on a similar topic and many have suggested a 'How-to' paper titled "How to Extract data with Open Hub to a Logical Filename". However i could not seem to be able to get document from the link given.
Just wonder if anyone has the correct or latest link to the document, or would appreciate if you could share the document with all in sdn if you have a copy.
Many thanks and best regards,
Victoria

Hi,
After creating open hub press F1 in Application server file name text box from the help window there u Click on Maintain 'Client independent file names and file paths' then u will be taken to the Implementation guide screen > click on Cross client maintanance of file name > create a logical file path by clicking on new entiries > after creating logical file path now go to Logical file name definition there give your Logical file , name , physical file (ur file name followed by month or year what ever is applicable (press f1 for more info)) , data format (ASC) , application area (BW) and logical path (choose from F4 selection which u have created first), now goto Assignment of physical path to logical path > give syntax group >physical path is the path u gave at logical file name definition.
however we have created a logical path file name to identify the file by sys date but ur requirement seems to be of dynamic date of tranaction data...may u can achieve this by creating a variable. U can see the help from F1 that would be of much help to u. All the above steps i have explained will help u create a dynamic logical file.
hope this helps u to some extent.
Regards

How to join GRPO with AP invoice thru query ?

hi all,
How to join GRPO with AP invoice in sql query ?
Jeyakanthan

Hi Jeyakanthan
Are you using query in SAP Business One or outside the system? If you select the tables in SAP Business One as OPCH and OPDN then no inner join will appear, as the links sit on the line level. You will need PCH1 and PDN1. The link can be found in both directions, but bear in mind that 1 AP Invoice could be based on more than 1 Goods Receipt PO. For this reason the best approach is to start at the AP Invoice line level and use the BaseType and BaseRef fields to view which lines were pulled from which Goods Receipt PO's.
Kind regards
Peter Juby

How do I work with FK in a data profile?

Hello People:
I am new in OWB tools and I have many doubts. Therefore, I would like to know if anyone can guide me a bit with the theme of FK and profiles.
How do I work with FK in a data profile?
If I have a table that has a FK to most of the tables, because it is like a parent table. What should I do to have that FK in the profile?
e.g.
- Table 1 FK Table 2
- Table 1 FK Table 3
- Table 1 FK Table 4
- Table 1 FK Table 5
- Table 1 FK Table 6
- Table 2 FK Table 7
- Table 2 FK Table 8
- Table 8 FK Table 9
You should have a data profile with each table or a data profile for all related tables?
If I am all in a single profile, that it would have no problem but I would only slow every time that I have to add a new table, but if I got separated, I can not use the FK? What is the solution that will give this problem?
e.g. PROFILE GENERAL
- Table 1
- Table 2
- Table 3
- Table 4
- Table 5
- Table 6
- Table 7
- Table 8
- Table 9
OR
PROFILE 1 -> - Table 1
PROFILE 2 -> - Table 2
PROFILE 3 -> - Table 3
PROFILE 4 -> - Table 4
PROFILE 5 -> - Table 5
PROFILE 6 -> - Table 6
PROFILE 7 -> - Table 7
PROFILE 8 -> - Table 8
PROFILE 9 -> - Table 9
OR
PROFILE R -> Table 1 / Table 2
PROFILE S -> Table 1 / Table 3
PROFILE T -> Table 1 / Table 4
PROFILE U -> Table 1 / Table 5
PROFILE V -> Table 1 / Table 6
PROFILE W -> Table 2 / Table 7
PROFILE X -> Table 2 / Table 8
PROFILE Z -> Table 8 / Table 9
Thank you very much for your help!
Best regard!

Any idea, please?

How to "revoke" privilege with dbms_xdb.changeprivileges

Similar Messages

Maybe you are looking for