List permissions when granted by dbms_java.grant_permission

Is there a way to find out all the granted permissions which were assigned by the dbms_java.grant_permission() method?
thanks,
James.

If I recall they are in DBA_JAVA_POLICY etc. but I'm not 100% sure.

Similar Messages

Trace File / EJB / dbms_java.grant_permission

I am trying to deploy a simple Hello World EJB onto Oracle 8.1.7 using Jdeveloper 3.2.
I get the following error when deploying :
Loading EJB Jar file and Comm Stubs Jar file...
error: loadJava has failed to load some classes; Please check trace file!
*** Errors occurred while deploying the EJB to 8i JVM ***
*** Deployment completed ***
My trace file has the following in it :
*** 2001-05-03 17:33:29.531
*** SESSION ID:(14.2397) 2001-05-03 17:33:29.531
Error while creating class oracle/aurora/jndi/sess_iiop/ActivationException
ORA-29545: badly formed class: User has attempted to load a class (oracle.aurora.jndi.sess_iiop.ActivationException) into a restricted package. Permission can be granted using dbms_java.grant_permission(<user>, LoadClassInPackage...
could not find oracle/aurora/jndi/sess_iiop/ActivationException in WILLOW2K
could not find oracle/aurora/jndi/sess_iiop/ActivationException in WILLOW2K
ORA-29534: referenced object WILLOW2K.javax/naming/InitialContext could not be resolved
ORA-29545: badly formed class: at offset 128 of packagessb.ssbClient2.main expecting a class-javax.naming.NamingException but encountered a class-oracle.aurora.jndi.sess_iiop.ActivationException.
ORA-29545: badly formed class: at offset 4 of javax.naming.spi.NamingManager.createObjectFromFactories expecting a class-javax.naming.Context but encountered a class-javax.naming.Context.
at offset 4 of javax.naming.spi.NamingManager.getStateToBind expecting a class-javax.naming.Context but encountered a class-javax.naming.Context.
at offset 38 of javax.naming.spi.NamingManager.getStateToBind expecting a class-javax.naming.Context but encountered a class-javax.naming.Context.
at offset 38 of javax.naming.spi.NamingManager.getStateToBind expecting a class-javax.naming.Name but encountered a class-javax.naming.Name.
at offset 37 of javax.naming.spi.NamingManager.getURLObject expecting a class-javax.naming.Context but encountered a class-javax.naming.Context.
ORA-29534: referenced object WILLOW2K.javax/naming/spi/NamingManager could not be resolved
ORA-29534: referenced object WILLOW2K.javax/naming/spi/NamingManager could not be resolved
Error while resolving class oracle/aurora/jndi/sess_iiop/ActivationException
ORA-04043: object /889d46b7_ActivationException does not exist
I think the error stems from the line :
(oracle.aurora.jndi.sess_iiop.ActivationException) into a restricted package. Permission can be granted using dbms_java.grant_permission(<user>, LoadClassInPackage...
Doe anyone know how I can grant the user permission to the above library. How exactly is it done using Oracle 8.1.7 ?
null

did you read the install notes (install.htm) or release notes(readme.htm) files for known issues ?
see the release notes for the following :
Problems Deploying Business Components for Java Libraries in Different Schema (1095107)
Attempting to deploy a Business Components for Java library in a different schema from the JDeveloper IDE generates the following error:
Generating Jar File...done
Loading EJB Jar file and Comm Stubs Jar file...
error: loadJava has failed to load some classes; Please check trace file!
*** Errors occurred while deploying the EJB to 8i JVM ***

Dbms_java.grant_permission() help

Hi,
As system I have execute the dbms_java.grant_permission('SCOTT','java.io.FilePermission','/tmp/ls.txt','read,write,execute') which went through fine.
In the java procedure I am trying to access the /tmp/ls.txt file. When I execute the procedure I am getting the following error.
java.security.AccessControlException: the Permission (java.io.FilePermission
<<ALL FILES>> execute) has not been granted by dbms_java.grant_permission to
SchemaProtectionDomain(SCOTT|PolicyTableProxy(SCOTT))
at java.security.AccessControlContext.checkPermission(AccessControlContext.java)
at java.security.AccessController.checkPermission(AccessController.java)
at java.lang.SecurityManager.checkPermission(SecurityManager.java)
at
oracle.aurora.rdbms.SecurityManagerImpl.checkPermission(SecurityManagerImpl.java
at java.lang.SecurityManager.checkExec(SecurityManager.java)
at java.lang.Runtime.exec(Runtime.java)
at java.lang.Runtime.exec(Runtime.java)
at java.lang.Runtime.exec(Runtime.java)
at lastGenTrigger.afterUpdate(lastGenTrigger.java:21)
Any help ???
Thanx in advance
Guru

Ensure user scott has reconnected to the database after the permission has been granted.
null

Java.lang.SecurityException when granting java permission

DB version 11.1.07
We used this command to grant the following permission in development and stage environment with no problems.
exec dbms_java.grant_permission( 'SCHEMA', 'SYS:java.lang.RuntimePermission', 'getClassLoader', '' );
When the same command is run in production, it results in this.
ERROR at line 1:
ORA-29532: Java call terminated by uncaught Java exception:
java.lang.SecurityException: policy table update
SYS:java.lang.RuntimePermission, getClassLoader
ORA-06512: at "SYS.DBMS_JAVA", line 787
ORA-06512: at line 1
These commands were executed as SYS user in all environments. Any ideas what could be causing this?
Thanks.
Usman

Either you are only using a security manager in production or there is a difference in the permissions granted by the security domains (for example, .policy files).

"dbms_java.grant_permission" procedure

Dear sir,
i am using standalone oc4j and my url come like 'http://localhost:8888/mapviewer/
in my machine where i am running the mapviewer. but my oracle database is on another machine and i am following two procedures to grant permissions
call dbms_java.grant_permission('CPU','SYS:java.net.SocketPermission','http://localhost:8888
','resolve');
call dbms_java.grant_permission('MDSYS','SYS:java.net.SocketPermission','http://localhost:8888
','resolve');
but when i am trying to do this following query from CPU user
giving following error
SQL> select sdo_mvclient.getdatasources() datasources from dual;
select sdo_mvclient.getdatasources() datasources from dual
ERROR at line 1:
ORA-29532: Java call terminated by uncaught Java exception:
java.lang.NullPointerException
please any one tell me how can i solve this problem
Thanks
Kabeer

Hi Kabeer,
This is not permission issue problem, because you receive NULL pointer exception. If, database user doesn't have access to the network java.security.AccessControlException is thrown.
I think, that you have not executed:
call sdo_mvclient.createmapviewerclient(
'http://www.mycorp.com:8888/mapviewer/omserver') ;
in the database session, before using PL/SQL MapViewer API. And, if you really have not executed this, then you will receive null pointer exception, because there is no information about remote MapViewer service in the database session.
You should follow the steps described in Section 6.2 of MapViewer 11EA1 User Guide. 6.2.1 - network access, 6.2.2 - MapViewer handle declaration (session scope).
I have deployed mvclient.jar and successfully using remote MapViewer service. Database and Mapviewer are on the different machines and network.
So, I think your problem is, that you have not declared address of remote MapViewer server in the session. According to documentation it should be declared for each session.
Regards,
Andrejus

Dbms_java.grant_permission not working

Hi,
Actually using code from Asktom,i have written java program which is getting list of file and inserting them in database table but then i need to give rights using
execute dbms_java.grant_permission( 'PDMAIN', 'SYS:java.io.FilePermission', '\\lu1dpc21\cdrv','read');
But problem when i am executing it in procedure its not working ,i need to execute it from sql*plus,so is it limitation or i am not doing anything wrong.
Regards,
Sandeep

And your Oracle version is? Please paste your output of the below steps -
Connected to Oracle Database 10g Enterprise Edition Release 10.2.0.3.0
Connected as hr
SQL> SET SERVEROUTPUT ON SIZE 1000000
SQL> CALL DBMS_JAVA.SET_OUTPUT(1000000);
Method called
SQL> call dbms_java.grant_permission('HR', 'java.io.FilePermission', '/tmp', 'read,write');
Method called
SQL> begin
2 dbms_java.grant_permission('HR', 'java.io.FilePermission', '/tmp', 'read,write');
3 end;
4 /
PL/SQL procedure successfully completed
SQL> select type_name from user_java_policy where name = '/tmp' ;
TYPE_NAME
java.io.FilePermission
Best regards.

Dbms_java.grant_permission in Microsoft Windows

Hi,
I have tried so many many times to get this working but have failed. When I ran the following statement, it did return 10 rows (10 files in the path in operating system). However, all rows showed null values with no data at all. I think this is something to deal with Windows. I cannot find any help on the Web. Here is the package that I got:
http://sql-plsql-de.blogspot.com/2008/09/ein-einfacher-ansatz-dateien-eines.html?lang=en
<pre>
begin
dbms_java.grant_permission(
'XXX_MGR',
'SYS:java.io.FilePermission',
'F:\xxx_jobs\uploads\images\birth',
'read');
end;
select e.file_name, e.is_dir, e.file_size
from table(file_pkg.get_file_list(file_pkg.get_file('F:\xxx_jobs\uploads\images\birth'))) e
</pre>

grant read permission to the directory and the files in it by using F:\xxx_jobs\uploads\images\birth\-. F:\xxx_jobs\uploads\images\birth\* is also an alternative.thanks to Carsten Czarski page for highlighting this.

Why would an error pop up saying the installer is damaged. The Installer can't open the package. There may be a problem with file ownership or permissions. when trying to install java 7?

why would an error pop up saying the installer is damaged. The Installer can’t open the package. There may be a problem with file ownership or permissions. when trying to install java 7?

Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Select
/var/log ▹ install.log
from the hierarchical list on the left. If you don't see that list, select
View ▹ Show Log List
from the menu bar. Then select the messages from the last installation or update attempt, starting from the time when you initiated it. If you're not sure when that was, click the Clear Display button in the toolbar of the Console window and then try the installation again.
Copy the messages to the Clipboard by pressing the key combination command-C. Paste into a reply to this message (command-V).
If there are runs of repeated messages, post only one example of each. Don’t post many repetitions of the same message.
When posting a log extract, be selective. Don't post more than is requested.
Please do not indiscriminately dump thousands of lines from the log into this discussion.
Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.

DBMS_JAVA.GRANT_PERMISSION RESULTS IN ORA-03113

I've successfully created and deployed a java procedure that compresses files for use as email attachements. Upon executing the procedure I get a trace file telling me to grant java.io.FilePermission to the user. I attempted the call (connected as sys (sysdba)):
exec dbms_java.grant_permission('VEHICLE','SYS:java.io.FilePermission','f:\oracle\soe_data\*', 'read, write');
which resulted in:
ERROR at line 1:
ORA-03113: end-of-file on communication channel
and a core dump with:
ORA-07445: exception encountered: core dump [ACCESS_VIOLATION] [unable_to_trans_pc] [PC:0x377E21D] [ADDR:0x24] [UNABLE_TO_READ] []
I opened up an SR on metalink and have not gotten a response.
I checked the Java install with "desc DBMS_JAVA" and got no errors. I also tried several variations to the path syntax, escaping the backslash, with/without the *, to just the directory, to an explicit filename, etc.
Oracle information is as follows:
Oracle Database 10g Enterprise Edition Release 10.1.0.5.0 - Production
With the Partitioning, OLAP and Data Mining options
Windows XP Version V5.1 Service Pack 2
CPU : 1 - type 586
Thanks in advance

I finally got this resolved. Apparently the catpatch.sql script did not run during the last upgrade causing a version mis-match

Dbms_java.grant_permission fails during the subsequent executions

Always first call succeeds for the following lines in a procedure.
dbms_java.grant_permission('MDSYS','SYS:java.io.FilePermission','D:\temp\test.dat,'read' );
dbms_java.grant_permission('SCOTT,'SYS:java.io.FilePermission','D:\temp\test.dat,'read' );
Any subsequent call does not return error message. But the other parts of the code fails to recognize the file permission and results in error.
Workaround is to run the grant_permission for a set for files separately, then the other parts of the code recognize the file permissions.
Any ideas? Thanks.

Thanks for your attention.
1. Here is the code
-- Import the image.
PROCEDURE Import_Raster (pi_grant_schema varchar2, pi_utldirname varchar2, pi_filename varchar2, pi_georid number)
IS
     -- PRAGMA AUTONOMOUS_TRANSACTION;
     geor SDO_GEORASTER;
     l_filepathname varchar2(255);
     l_privilege varchar2(50) := 'read';
BEGIN
     l_filepathname:= pi_utldirname||'\'||pi_filename;
     dbms_java.grant_permission('MDSYS','SYS:java.io.FilePermission',l_filepathname, l_privilege );
     dbms_java.grant_permission(pi_grant_schema,'SYS:java.io.FilePermission',l_filepathname, l_privilege );
     delete from georaster_table where georid = pi_georid;
     insert into georaster_table (georid,georaster)
          values( pi_georid, sdo_geor.init('RDT_GEOR', pi_georid) );
     select georaster into geor from georaster_table where georid = pi_georid for update;
     sdo_geor.importFrom(geor, '', 'TIFF', 'file',l_filepathname);
     update georaster_table set georaster = geor where georid = pi_georid;
     dbms_java.revoke_permission('MDSYS','SYS:java.io.FilePermission',l_filepathname, l_privilege );
     dbms_java.revoke_permission(pi_grant_schema,'SYS:java.io.FilePermission',l_filepathname, l_privilege );
END;
2. I could reproduce the error if repeated call the procedure with different file name as below.
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m25l_2_a.tif','read' );
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m25l_2_b.tif','read' );
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m26d_2.tif','read' );
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m26e_2.tif','read' );
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m26f_3.tif','read' );
call dbms_java.grant_permission('SCOTT','SYS:java.io.FilePermission','e:\temp\m26g_1.tif','read' );
3. Workaround: I am exiting the session after each command.
Thanks.

How to use dbms_java.grant_permission

i am trying to execute the following statements in oracle9i, i got an error
SQL> call dbms_java.grant_permission('scott','java.io.FilePermission',
2 'C:\framework\Shell Scripts\testscripts\*',
3 'execute');
call dbms_java.grant_permission('scott','java.io.FilePermission',
ERROR at line 1:
ORA-29532: Java call terminated by uncaught Java exception:
oracle.aurora.vm.IdNotFoundException: scott is not a user or role

Are you granting this from sys user? does 'scott' schema really exists in your database?

All-permissions not granted to JMS Threads

Hello,
I have a client/server app that I am deploying through webstart with All-Permissions requested.
The client subscribes to JMS topics on a weblogic 6.1 server and hence has both the application jar and the weblogic.jar in the jnlp resources section (both signed by the same certificate).
When the app runs, most things run OK, and have full access to the system, but when a JMS message is received a security exception is thrown (SerializablePermission / enableSubstitution). I put in some debug and sure enough the AllPermissions permission is granted for the main app, but throws an exception from within the onMessage callback.
I am guessing that this has something to do with the fact that the onMessage callback is called by a daemon thread that is constructed from within the weblogic.jar (one of the the kernel ExecuteThreads), and that this thread is for some reason being assigned different permissions.
Has anyone ever come across this before, and do they know of any solutions or workarounds? Any help would be greatly appreciated as this is pretty urgent.
Thanks in advance!

The all-permissions is granted only to the code loaded by the JNLPClassLoader.
In this case, is another ClassLoader (an RMIClassLoader?) used to load code invoked by RMI calls ?
/Dietz

HT201272 How do I get albums and songs I have purchased back on my devices? They show up in my purchased list but when I click on them a little circle shows up with an x in it and it won't let me do anything with it. Any guidance would be greatly apprecia

How do I get albums and songs I have purchased back on my devices? They show up in my purchased list but when I click on them a little circle shows up with an x in it and it won't let me do anything with it. Any guidance would be greatly appreciated.

The Get Info. fields show up gray if the files is locked and iTunes knows it can't edit the file. Make sure the files are not marked as read only and, if necessary grant both your account and system full access to all files and subfolders of your media folder.
You can set Part of a Compilation for multiple tracks from the Options tab of Get Info.
See Grouping tracks into albums for tips on getting iTunes organized.
tt2

To Know the Risk with dbms_java.grant_permission

Hi Everyone,
I am Using dbms_java.grant_permission to give the grant for java execution.
begin dbms_java.grant_permission('****','java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','connect'); end;
begin dbms_java.grant_permission('SYS','SYS:java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission','*','connect,resolve'); end;
begin dbms_java.grant_permission( '****', 'SYS:java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
begin dbms_java.grant_permission( '****', 'java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
begin dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write'); end;
begin dbms_java.grant_permission('****', 'java.io.FilePermission','*','read,write'); end;
begin dbms_java.grant_permission('****','java.util.PropertyPermission', '*','read,write');
call dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write');
is there any security related problem if i am giving above grant in my DBMS.
Please give me your valuable opinion on this.
Thanks in Advance.

Hi Everyone,
I am Using dbms_java.grant_permission to give the grant for java execution.
begin dbms_java.grant_permission('****','java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission', '***.****.co.in','connect'); end;
begin dbms_java.grant_permission('SYS','SYS:java.net.SocketPermission','***.****.co.in','connect,resolve'); end;
begin dbms_java.grant_permission('****','java.net.SocketPermission','*','connect,resolve'); end;
begin dbms_java.grant_permission( '****', 'SYS:java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
begin dbms_java.grant_permission( '****', 'java.util.PropertyPermission','java.security.egd', 'read,write' ); end;
begin dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write'); end;
begin dbms_java.grant_permission('****', 'java.io.FilePermission','*','read,write'); end;
begin dbms_java.grant_permission('****','java.util.PropertyPermission', '*','read,write');
call dbms_java.grant_permission('****', 'java.util.PropertyPermission','*','read,write');
is there any security related problem if i am giving above grant in my DBMS.
Please give me your valuable opinion on this.
Thanks in Advance.

How to pass credentials/saml token access sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication

How to pass credentials/saml token exchange to the sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication
Identity provider here is Oracle identity provider
harika kakkireni

Hi,
The following materials for your reference:
Consuming List.asmx on a claims based sharepoint site
http://social.technet.microsoft.com/Forums/sharepoint/en-US/f965c1ee-4017-4066-ad0f-a4f56cd0e8da/consuming-listasmx-on-a-claims-based-sharepoint-site?forum=sharepointcustomizationprevious
Sharepoint Claims based authentication and Single Sign on
http://social.technet.microsoft.com/Forums/sharepoint/en-US/2dfc1fdc-abc0-4fad-a414-302f52c1178b/sharepoint-claims-based-authentication-and-single-sign-on?forum=sharepointadminprevious
Sharepoint Claim Based Authentication Web Service issuehttp://social.msdn.microsoft.com/Forums/office/en-US/dd4cc581-863c-439f-938f-948809dd18db/sharepoint-claim-based-authentication-web-service-issue?forum=sharepointgeneralprevious
Best Regards
Dennis Guo
TechNet Community Support

List permissions when granted by dbms_java.grant_permission

Similar Messages

Maybe you are looking for