Lost permissions on WWV_FLOW_FILE_OBJECTS$

We seem to have lost permissions in APEX 2.2 to some of the internal tables. As seen below we can access a table in SQL*Plus with SQL but not through a procedure.
SQL> DECLARE
2 v_NAME varchar2(90);
3 BEGIN
4
5 SELECT filename INTO v_name
6 from flows_files.WWV_FLOW_FILE_OBJECTS$ where name = 'F8817/incident2.csv';
7 dbms_output.put_line(v_name);
8 end;
9 /
incident2.csv
PL/SQL procedure successfully completed.
SQL> create or replace PROCEDURE hdl_test as
2 v_NAME varchar2(90);
3 BEGIN
4
5 SELECT name INTO v_name
6 from flows_files.WWV_FLOW_FILE_OBJECTS$ where name = 'F8817/incident2.csv';
7 dbms_output.put_line(v_name);
8 end;
9 /
Warning: Procedure created with compilation errors.
SQL> show errors
Errors for PROCEDURE HDL_TEST:
LINE/COL ERROR
5/3 PL/SQL: SQL Statement ignored
6/22 PL/SQL: ORA-00942: table or view does not exist
When I compare the object grants in our APEX instance and my fresh XE install on my laptop, there are a lot of grants in my XE instance that don't exist in APEX. Some of those grants are to the flows_* schemas. Could we have lost a bunch of grants somehow, and if so how can we get them back? Is it safe to copy the grants from EX to APEX?
Thanks,
Harry

Harry,
I conclude that you have Application Express 2.2. You either installed it fresh or upgraded from an earlier version.
You also have Application Express on your XE database.
You observe differences in privileges (those you describe as "lost") between 2.2 and some earlier version, between 2.2 and XE or between 2.2 and the same 2.2 at some earlier time, I cannot tell which you mean.
The correct configuration is that no select privileges are granted to public on wwv_flow_file_objects$. Users are to use the apex_application_files view (wwv_flow_files) while using the SQL Workshop or from developed applications in workspaces. Access through SQL*Plus is not supported.
Scott

Similar Messages

  • SunBlade 1000 crash - software lost permissions

    Our SUN Blade 1000 crashed and the drives were put in our backup system.
    Now the permissions on some directories are off ( getting Permission denied on some directories ).
    Did a 'mount -p' to look at the mounted disks and found that all the disks are in a panic state(?), listed
    as onerror=panic. Is the only fix reloading the OS again with all the patches of is there another way to
    fix this problem.
    -Cyro

    If you registered the software, your serial number should be listed in your account at Adobe.com.

  • Accessing wwv_flow_files changed after upgrading from 2.0 to 2.2

    We have recently moved to 2.2 After the move uploading files, under some circumstances, failed.
    Further investigation found that the upload was working fine, accessing wwv_flow_files table had changed in some way.
    From the SQL Workshop we could see the files which had been uploaded. From SQL*Plus we couldn't see the same files.
    I have read Re: Lost permissions on WWV_FLOW_FILE_OBJECTS$ and see at the end it says that access to wwv_flow_files is not supported from SQL*Plus. That's fine.
    The problem we have is that the same limit seems to apply to functions called from within an APEX application. We have a function that at one point issues the following SQL -
    SELECT blob_content
    INTO l_blob
    FROM wwv_flow_files
    WHERE name = p_file_name;
    (The function goes on to extract rows from the uploaded file to be uploaded into a table).
    This function was not able to find the row which we knew was in the table.
    Drilling down wwv_flow_files is a view of wwv_flow_file_objects$ with the following condition 'where security_group_id = wwv_flow.get_sgid'
    By changing the original SQL to
    SELECT blob_content
    INTO l_blob
    FROM WWV_FLOW_FILE_OBJECTS$
    WHERE name = p_file_name
    AND created_by = 'HTMLDB_PUBLIC_USER';
    we get what we want.
    My question is .. as the function is called from with an APEX application, why is the where clause preventing it from accessing the data we need.

    Thanks for the details, it's making more sense to me.
    The function extracts the rows from the uploaded file and displays them in a textarea.When you say "and displays them in a textarea" it sounds like something that happens during page rendering. But I think maybe your page selects the rows in an after-submit process and puts some content into a textarea item for display during the next page "show". Tell me if I'm on the right track. In 2.2, there's a bug that prevents queries from seeing the just-uploaded "files" or rows until after computations have fired. You need to move any code that selects those rows to a process "after computations and validations" (you could run it as a validation if you really needed to). Let me know if you think this explains what you're seeing. This is fixed, by the way, in 3.0.
    The created_by = 'HTMLDB_PUBLIC_USER' clause is required as the >>WWV_FLOW_FILE_OBJECTS$ table also contains objects created by other users, for >>example ADMIN (eg APP imports etc)But your predicate specifies "where name=" and name has a unique constraint so you'll get the row you want without specifying created_by.
    Scott

  • Admin Accnt Lacks Full Permissions

    In the past week my Admin acount has lost permissions in a few operations. I must mention that I have 2 admin accounts, the account created during installation process and an admin account created with the first account (this is the one I am having trouble with). I use CS3 Bridge and I can't delete files from within this application (a message telling me I do not have sufficient permissions) and the other problem is that I cannot install software (same message)
    Anyone have any ideas ??
    Thanks

    All admin accounts have equal power. If one is failing then you may want to copy any documents and files created under that account to /Users/Shared, delete the failed admin account using your other admin account and then recreate that account with admin privileges. You can then copy the files back to the new account. (You may have to correct permissions on the files to let the "new" admin use them.)
    Keep in mind that I haven't provided any instructions for keeping personal settings, bookmarks, etc., for that admin account but you really shouldn't be using that account for anything more than just machine administration.
    Hope this helps!
    bill

  • ITunes application could not be opened.  An unknown error occurred (13014)

    Ysterday I bought a brand spanking new Acer Aspire 7551 laptop with Windows 7 Home Premium and installed the latest version of iTunes (64 bit) on it.
    I started iTunes with great anticipation because I so looked forward to syncing my iPhone with my Very Own Laptop.
    Alas, iTunes did not start. Instead I received a message "the itunes application could not be opened. An unknown error occurred (13014)." Much Googling and reinstalling later the problem remains.
    I have already deleted the genius files and rebooted several times. All to no avail. If anyone can propose a solution, I would be most grateful. Needless to say, I'd be happy to post any further info that can help to solve this problem.

    Okay fixed my own problem. I don't know how or why, but it appears that I lost permissions for my iTunes folder in documents and settings. It took some messing with file permissions to get access to delete it, but I finally got it.
    Once it was gone, no more issue. iTunes launched, created a new iTunes folder, and good as new.

  • Mobile Accounts not copying home folders to local machine

    Having recently upgraded my MacBook to 10.5 (and having a 10.5 server) I have noticed an error with mobile accounts. My account has not synced for a couple of weeks and I have checked all the directory settings and cannot see any errors.
    I've removed all directory services and rebooted, put them back and it will create a mobile account but nothing is being copied to the local hdd. So basically it is functioning like a network account rather than a mobile one.
    This works fine on our 10.4 clients but having tried different users on my 10.5 system it does the same....creates the account, mounts the server but does nothing else.
    This means when you sync it says its complete but does nothing...its like its lost permissions to the folder on the server but that seems very odd.
    Anyone else had issues with 10.5? We have an AD server with our users and a 10.5 server with OD replicating AD and holding the home folders.

    Are you still ahving this issue?
    Would you do like geekinit in this thread and post some partial screen grabs (although is problem included Windows server Active Directory and profile Manager which I will get up to soon.)
    Unable to deploy home folder mobility settings through an Apple MDM server
    Did you create a fileshare for Local Network accounts to put their stuff
    If so where is OS X server?
    Did you tell the user in OD to use that fileshare?
    Here's a screen grab example
    Francois.

  • Bad FTP in Dreamweaver CS6

    The FTP in Dreamweaver CS6 is really bad and that's mildly said. Actually: it sucks. When will there be a solution? I am a user since the early days of Macromedia and it is never fixed. This article describes the problem perfectly: http://b.smpl.st/2012/08/dear-adobe-dreamweavers-ftp-sucks/

    What specifically have you tried to get your FTP up and running?
    I'm with Murray on this. I use DW's FTP pretty much exclusively, regularly uploading to several different servers from several different networks and I've never had an issue with the program itself. Any FTP problems I've had, aside from goofed up FTP setting caused by operator error, have come from external sources like bad routers, wonky server settings, lost permissions, insane company firewall settings, etc.
    I'm pretty sure with a little digging the folks here can help get your FTP running smoothly.

  • Removed user from group, user no longer has access to documents even though user is owner of documents

    I'm running a server 2012 std domain and I'm in the process of rebuilding our fileserver after we had some pretty serious permission issues. Bad permissions (Everyone had full access to user documents share) were migrated when we move to the new server and
    then by some strange Monday morning freak out all users lost access to their documents. I restored from backups, redirected everyone's folders back to local computer and started to reconfigure the share permissions. I moved our administration group back to
    the server after securing proper permissions for folder redirection (permissions copied from https://technet.microsoft.com/en-us/library/jj649078.aspx?f=255&MSPPError=-2147217396 table 1, only difference is instead of creating a new security group
    for redirection users, I used the everyone group) to test and everything went perfectly. The GPO created the users folders under the root and redirection was good to go. Along with that, other users cannot access other users documents anymore which was the
    intended outcome. 
    Last night I was looking at security groups and see that our administration group (back office group: accounting, HR, etc..) was a member of the domain admins. I removed them from the domain admins group and added them to the administrators group (they do
    need regular admin access) then went on like normal. This morning, all users in that group can no longer access their documents on the server. I immediately think that permissions were broken again and started to get angry, but then realize that all the files
    are still accessible on the server (no lost permissions like before) and the user is still shown as the owner with full permissions, but the files are inaccessible to those users. I re-added them to the domain admins group, logged out, logged back in and documents
    are back and accessible by the user. Remove them from the domain admins group, log out, log back in and the documents are inaccessible again. Re-add to the domain admins group and back to normal. 
    Which leads me to now. If the users are part of the domain admins group, they have access to their files. If they are removed from the domain admins group, they lose access. When they lose access, they are still the owners of the files/folders with full
    permissions, yet they can't access their documents. Also, just to add, the domain admins group has no specified permissions on the files or folders. See screenshots below..
    Here is the root share. 
    And the user's desktop folder. The folder is owned by the user with full permissions. This is the folder the redirection GPO created.
    Any ideas why removing the group from domain admins would drop access to their files? They are still the owners of the files and should have full access but they don't. Is there something I'm not seeing here?

    Effective Access shows the user has full control of the Desktop folder
    This is a problem with the Effective Access tab when using CREATOR OWNER.  As you have noticed, the user doesn't really have the access that the tab says it does.  This is because of how CREATOR OWNER works.
    CREATOR OWNER is only evaluated when a file/folder is created. 
    IF a user can create a file/folder, then the permissions assigned to CREATOR OWNER are copied to a new permissions entry for that user.
    To see this:
    Logon as an administrator and create a file in the Desktop folder in your screenshot.
    Examine the permissions of the new file.
    You'll see that there is a new entry for the account you logged on with.
    CREATOR OWNER is gone.  CREATOR OWNER would still be there if you created a folder (because of "subfolders and files").
    In the Desktop folder (in your screenshot), only SYSTEM and Administrator can create/access files.
    To fix this, you need to grant the users the ability to list the directory contents and create new files/folders.  This corresponds with the suggestion of Table 1 in the document you found.
    I see what you're saying about Administrators domain group. I'll just add them as local admins via GPO and that should solve that issue. 
    No, scary!  This will grant those users administrative permission on your server.  They will be able to see any file anywhere on that server.
    If your goal is to provide a place that is private for each user, then the simplest approach is to grant each user permission to their own folder.  Like this for Test User:
    Notes for above:
    I set the user's permission to Modify because there is no good reason why the user should change these permissions
    The owner of this folder is unimportant.  I leave it set to Administrators
    You can, and I do, remove CREATOR OWNER.  It adds no value in this situation and just causes confusion.
    As for the second screen shot, the *-Admins folder is the root to which Everyone has special permissions on and can create folders. The folder for M* was created by the GPO, which makes M* the owner to which they have Full control of subfolders and files.
    The GPO also created the Desktop folder, giving owner full permissions of subfolders and files. Inside the Desktop folder, permissions remain Full control for owner for subfolders and files. Even if it was the case that they only had permissions on subfolders
    and files, wouldn't each subfolder under that one be considered a subfolder and file of the top folder?
    If this works as you say, then Yes, it should work.  But, I don't see the entries for use M*.  Remember, there should be entries for the M* user that is a duplicate of CREATOR OWNER.
    I suspect that Group Policy is creating the directories (elevated) and then changing the owner to M* afterward.  This does not duplicate the CREATOR OWNER entries as needed.  If this is the case, I consider it a flaw because your permissions do
    not allow user M* to create files/folders, and group policy shouldn't bypass security.
    I'm not saying your wrong, I'm just curious why the technet article would advise Creator/Owner giving full control of subfolders and files only if that were not correct. I can add the permissions for the users easily, I just don't see why I need to give
    explicit permissions to access something when the GPO created those folders for me, which Microsoft recommends you allow. If the GPO can create folders and the folders are owned by the user, then the user can obviously add/create/modify/view those files and
    folders. 
    When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
    A couple things:
    The article instructed the use of Folder Redirection Users group that had permissions to create files.  Your examples didn't have that.  Because of this, your user could create new files.
    The article assumes that the directories you are creating will be empty.  Existing files will be unreadable to everyone except Admins.
    If you follow the directions in the article, then anyone in the Folder Redirection Users group can write files to anyone else's directory.
    One benefit of the document's approach is that all the users could be redirected to the same folder using the article, and it would work.  A benefit, I guess.
    But, I like my user's separate and unable to see each other's files -- at all.  This is why I recommend replacing CREATOR OWNER with the specific user.
    I believe this document is a "how to get it done" document, not necessarily a best practices document.  I see it as a starting point, and that's why I didn't follow it exactly.
    Lastly, CREATOR OWNER permissions are useful but confusing.  I avoid them unless I have the rare circumstance where they are perfect.
    When I restored the data, no permission were reset. Permissions were restored to the wonky version where the Everyone group has full access to everything. Ownership of the files/folders remained the same.
    To summarize:
    In the user's directory, you need to provide permission to list and create new files/folders, and you need grant the user permission to the existing files.
    -Tony

  • Iphoto forgets everything new when quitting!?

    Iphoto forgets any albums I make and any photos I import from camera when quitting.
    I recently have upgraded to tiger btw, and this all started since upgrading to tiger which has caused a long list of problems..
    I am fully up to date as far as software updates go.
    I have tried trashing iphoto's preferences = no joy
    Tried command alt at iphoto start-up = no joy (after watching the rebuilding for 15 minutes a message told me IIRC that it couldn't rebuild as the library or disk is locked.
    I have found the new photos in the iphoto mess in the pictures folder of my user. I deleted them and their folders (the ones for each day, not the whole lib!).
    I have repaired permissions, and tried command alt booting iphoto = same no joy as above.
    Things I haven't tried - Re-installing iphoto, fiddling or deleting one or more of the various iphoto database type files, and shouting at my ibook/iphoto.
    Backing up is impossible right now, my maxtor one touch died on me the other day and I need to talk to the apple store about a replacement or refund.

    Hi richard,
    The iPhoto library in the finder is organized differently than with the open application.
    This is a view of how the iPhoto Library looks in the Finder.
    It is organized by Year folders. Inside the Year folders are Month folders. Inside the Month folders are the days of the Month. Inside the day folders are the photos you took on that day. If you imported video clips and RAW files on that day they will be in an Originals folder. If you have edited any photo imported on that day, the original will be in that folder also.
    Two Apple kbs for you to read
    Don't tamper with files in the iPhoto library folder
    About the iPhoto Library folder
    Now that that info is out of the way, it does seem iPhoto is not saving the changes because you lost permissions somewhere along the line for something within iPhoto library in the finder.
    To check permissions on the iPhoto Library folder in the finder, and change them if necessary, take a look at this screenshot.
    iPhoto Library Info
    Make sure the permissions are Read/Write for you and make sure to check the box at the bottom of the window.

  • Losing permission to songs in my library

    In the past three weeks, I have been losing permission to songs in my library. I can locate the song in my ITunes library and the folder where they are stored, but the songs that I have lost permission to have "green ink". I have moved them out of ITunes and tried to reload them, but ITunes will not allow me. These are songs I purchased on other websites and uploaded to my ITunes library. Some of the songs I have had for years and have been able to play them all along. But recently, certain songs in my library I lose permissions for.
    Also--I only notice it is happening when I click play on a specific song and the player skips the song. I go back and keep trying to click on it and it won't play. Then when I go into library, I find that it now has "green ink" and I have lost permissions.
    Help

    Hey Kerry Hill,
    Thanks for the question. If I understand correctly,  you are getting a permission error and cannot play music. I would recommend that you read this article, it may be able to help the issue.
    iTunes: Missing folder or incorrect permissions may prevent authorization - Apple Support
    Windows Vista or Windows 7
    Open Computer from the Start menu.
    From the Organize menu, choose Folder and Search Options.
    Click the View tab.
    In the "Advanced settings" pane under "Hidden files and folders," make sure that the "Show hidden files and folders" option is selected.
    Click OK.
    Navigate to the following location by either typing it into the address bar, copying and pasting it into the address bar, or clicking through the folder hierarchy listed:C:\ProgramData\Apple Computer\iTunes
    Right-click the SC Info folder shown and on the shortcut menu, choose Delete.
    Restart the computer.
    Thanks for using Apple Support Communities.
    Have a good one,
    Mario

  • PS3 and Safari crashes after Snow Leopard upgrade

    How is everyone enjoying the crashes after their Snow Leopard upgrade? I can't save a photo using PS3, or download a photo to flickr or facebook without a crash. PS3 crashes, Safari crashes and work flow is at a crawl? Spoke with tech yesterday and they told me that this would stop if I downloaded Snow Leopard again, which I did, but the problem wasn't resolved. To top it off, I lost permissions on the iMac and can't use the computer. Please tell me where all of the accolades came from? Were the reviews done by people who actually work on their computers or by people who play on them? Oh, and another thing, lost my wireless access to the router and had to start all over. Be careful here, this has not been fun!

    Excuse me, I meant to write CS3 instead of PS3.

  • All Data Source History is Empty

    Using Crystal Reports 10 for many years and this problem just started happening last week. When I  try to create a new Report or Change the data source of an existing one, all History, Favorite even current connection is empty. ODBC data source still exists and tests successfully in control panel. I'm Using Windows XP sp3.
    Also, another oddity is that when I have Crystal open for a while and I go to open a new file it doesn't do anything. I have to open crystal reports again to be able to open a new report.
    Any Ideas?
    Shirley

    Hi Shirley,
    CR saves the history in your registry. Either you have lost permissions through your Profile, possibly your IT team has pushed out an updated limited Profile, or possibly your anti-virus software is now blocking CR from accessing the registry.
    Check your AV history and log files to see if they logged anything.
    Or try doing a Repair install of Cr 10 through Add/Remove Programs. I don't recall now but you may need the keycode to re-install/repair it. Run a program called licensemanager.exe in the CR folder, search your PC for it, and it should show you the keycode, save it in a text file just in case.
    Don

  • ITunes loads but doesn't appear

    I recently upgraded to the newest version of iTunes (I think 10) and upgraded my iOS for my iPhone to 5 when I reconnected my phone iTunes would not open to get backup files for my iPhone so I was forced to set my phone up as a new iPhone. Yet, iTunes still doesn't open. I can see it in the processes tab of the task manager yet it won't appear on my screen. I've run out of options and read every link on my google searches and apple help pages. Can anyone suggest something? Things I've tried
    1. uninstalling iTunes, reinstalling and then restarting my PC
    2. Right clicking iTunes > Run as > new user
    3. Setting up a new user profile
    4. ending iTunes process in task manager and restarting iTunes...appears in task manager as iTunes.exe but does not appear on screen
    5. changing startup and services options in msconfig - bonjour, apple mobile device and itunes all ticked
    6. right clicking iTunes > Properties > fiddling with user permissions
    Connecting my iPhone doesn't seem to work either. I get the 2 chimes when I connect but nothing happens...not even the windows what would you like to do dialog. Has iTunes lost permissions along the way somewhere?
    Hoping someone can help!

    Hi,
    check the following things:
    1st: Where are you bouncing to, and in which format? Make sure you have selected the correct format, the correct filename and that the filename is the same in the ID3 Tag settings menu within the mp3 bounce dialog, so that you can find the song later in iTunes.
    2nd: Look if the song has been added to iTunes with another filename. Also check that in iTunes the option is enabled to copy the new songs into the iTunes Library when importing.
    Make sure iTunes is running when you do your bounce.
    report back, and we'll see..
    Fox

  • Xserve Admin Account Problems

    Hi,
    Recently rebooted my Xserve 10.5.6 and now when i log in as admin it logs in as what appears to be a regular user and none of the usual admin tools that you would see in the Dock are there (i.e. user manager etc)
    It has also lost permissions to insall apps or uninstall apps.
    If i log in to the server as another user and try and perform administrative tasks it will prompt me for the admin password and seems ok.
    Can anyone explain what has haoppened to the admin account and is it possible to reverse these changes?
    TIA
    Mark

    as an admin user, did you have and files stored in your documents folder that are now missing?
    from a terminal post the output from
    dscl . read /groups/admin
    and
    whoami

  • Hyperion 9.3.1 OpenLDAP issue, HELP!!

    I see that OpenLDAP issues seem to be common and have read and read everything I can find yet nothing seems to help me out.
    Here is my scenario, We had a power outage, OpenLDAP service would not start.
    I ran db_recovery and now services starts.
    Now I have lost permissions for at least my self and maybe more. I went into User Manager searched the MSAD user list and I am no where to be found.
    I searched for another user and that one is found. My theory at this point is that OpenLDAP is failing to sync with AD correctly since the recovery.
    Is there log files that will help? How can I rebuild OpenLDAP? I am getting reports that there is no data in the database from users but I am under the belief this is a OpenLDAP and or EssBase to Shared Services Security issue.
    Please Help!! I am not a Hyperion admin or user, I have just been handed this system because I am a MS SQL DBA.

    How did you recover it? You should supply a backup location to fix it. Try creating a provisioning report from Shared Services and see whether provisioning info is intact.
    After that is done, you can re sync Essbase to synchronize with HSS
    I've written something on restore HSS here Oracle - Hyperion Labs......: Restore Hyperion Shared Services
    Don't do a re-install and reconfigure (that is only the last step)
    Regards
    Celvin
    http://www.orahyplabs.com

Maybe you are looking for

  • Cannot install software for printer m521dn

    Hello! I have a problem, trying to install software for HP lj pro m521dn. Tried to use both Full Solution and basic print and scan drivers installer. OS is Win7 enterprise x64. Connection with printer is network. When installing, progress bar reaches

  • HT1414 is it possible to update your ipad without backing it up or transferring purchases when using another computer

    Is it possible to update your ipad 2 to the latest software without backing it up or transferring purchases to another computer other then your own?

  • Using WMI to Partition Disks & Create Volumes

    Hi All, I have been searching for a method of partitioning and creating volumes which does not use Diskpart, but have had a difficult time finding one. I have a python library which runs on a Linux machine and remotely administers a Windows host via

  • MRP information

    Hi, I am working on ECC 5.0 and got stuck with one of the client requirement. My client want to extract the information about the PO that are created because of some demand.MRP(dependent or independent requirement). Business process is that MRP run->

  • Question about De-Factoring a query

    Good afternoon, I have the following query that produces the results I want (it does a DENSE_RANK): with agelist as    select age      from student     group by age select age,         select count(*)           from agelist x          where x.age <=