Minimal privileges

hi,
what privileges should be granted to an application developer so he/she can view the definitions for indexes and triggers that reside on a different schema.
this is for a production environment so minimal privileges possible.
thanks!

Can you be more specific about what you want to allow (and disallow)?
Do you want the user to be able to write SQL queries against the data dictionary to be able to see the various attributes? Or do you want them to be able to use their favorite GUI to browse to the index or trigger definition? The latter generally requires more privileges and depends on the tool(s) you need to support.
Do you want the user to be able to see any index and any trigger? Or do you want to disallow them from seeing information for only certain schemas/ objects?
What, if any, permissions do the developers have on the underlying tables? Do they have SELECT access to the tables that the indexes and triggers are defined on?
Is it actually necessary to allow developers to see this information in the database? Could you instead just allow them to view the scripts in a source control system that match the index and trigger definitions in the production database?
Justin

Similar Messages

Privileges require for a user to create CONTEXT indexes

Hi all,
   RDBMS: 11.2.0.3
   SO.......: OEL 6.3
   What are the necessary privileges that have to be granted to a user to be able to create CONTEXT Indexes, for example. I have granted the CTXAPP to my user, but when i tryied to create the CONTEXT Index with the command bellow, i got an "insufficient privilege" error message.
   CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01 ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO) INDEXTYPE IS CTXSYS.CONTEXT PARAMETERS ('SYNC (ON COMMIT)');

It depends on whether the user is trying to create the index on his own table in his own schema or on somebody else's table in somebody else's schema. The following demonstrates minimal privileges (quota could be smaller) for user usr_docs to create the index on his own table in his own schema and for my_user to create the index on usr_docs table in usr_docs schema.
SCOTT@orcl> -- version:
SCOTT@orcl> SELECT banner FROM v$version
2 /
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
PL/SQL Release 11.2.0.1.0 - Production
CORE    11.2.0.1.0    Production
TNS for 64-bit Windows: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
5 rows selected.
SCOTT@orcl> -- usr_docs privileges:
SCOTT@orcl> CREATE USER usr_docs IDENTIFIED BY usr_docs
2 /
User created.
SCOTT@orcl> ALTER USER usr_docs QUOTA UNLIMITED ON users
2 /
User altered.
SCOTT@orcl> GRANT CREATE SESSION, CREATE TABLE TO usr_docs
2 /
Grant succeeded.
SCOTT@orcl> -- my_user privileges:
SCOTT@orcl> CREATE USER my_user IDENTIFIED BY my_user
2 /
User created.
SCOTT@orcl> GRANT CREATE SESSION, CREATE ANY INDEX TO my_user
2 /
Grant succeeded.
SCOTT@orcl> -- user_docs:
SCOTT@orcl> CONNECT usr_docs/usr_docs
Connected.
USR_DOCS@orcl> CREATE TABLE tab_documentos (documento CLOB)
2 /
Table created.
USR_DOCS@orcl> INSERT ALL
2 INTO tab_documentos VALUES ('test data')
3 INTO tab_documentos VALUES ('other stuff')
4 SELECT * FROM DUAL
5 /
2 rows created.
USR_DOCS@orcl> CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01
2 ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO)
3 INDEXTYPE IS CTXSYS.CONTEXT
4 PARAMETERS ('SYNC (ON COMMIT)')
5 /
Index created.
USR_DOCS@orcl> DROP INDEX usr_docs.idx_ctx_tab_documentos_01
2 /
Index dropped.
USR_DOCS@orcl> -- my_user:
USR_DOCS@orcl> CONNECT my_user/my_user
Connected.
MY_USER@orcl> CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01
2 ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO)
3 INDEXTYPE IS CTXSYS.CONTEXT
4 PARAMETERS ('SYNC (ON COMMIT)')
5 /
Index created.

Minimal host privilegues to execute sql job

Hi all,
I have installed OEM Grid Control 10.2.0.5 and I have one problem.
For example, I have created one Administrator TEST (Setup -> Administrators -> Create ... ) which primary role is to execute the jobs (SQL Scripts) on target database testdb.
I logged like new administrator TEST and set Preferred Credentials for my Database Instance (Preferences -> Prefered Credentials -> Database Instance / Set Credentials).
I have setup username/password for database testdb and username/password for specific node for example testnode. Try test and everything is OK.
Now I have created one simple SQL Script Job (select * from dual) on this target testdb database, and for first test I have used Use Preferred Credentials in Credentials tab and everything is passed OK.
In second test what I wish is to execute some other SQL Script Job, but with other dbuser (not like defined in the Preferred Credentials), but with the same OS username/password.
I have choose Override Preferred Credentials of Credentials tab, but here I must type again Database Host Credentials and new Database Credentials (for new database user).
My questions>
1) Is there any way I can use already typed OS username/password, I have earlier defined in Prefered Credentials of my Database Instance, and just change database credentials
2) Can I define some other user (not oracle) on OS (UNIX) with minimal privileges on OS and give his credentials to new OEM Administrators, which is able to execute SQL Script jobs (not to give/always type oracle username password)
Best regards,
Dragan

I am certain, not begin able to test this but you should be able to:
HOST ('sqlplus username/password @my_script', NO_SCREEN);
Hello all,
I am able to start sql/plus using the HOST command from a form, but would like to execute a sql/plus program I have saved on my c: drive as well. Anyone have any ideas or thoughts on how to pass the name of the program while starting (or after starting) SQL/Plus?
Thanks to all,
Jeff

Every time I start Firefox in an unpriveleged login I get an error box saying that an update installation has failed, even when it's up to date.

Firefox 19.0.2; on Windows XP Pro Service Pack 3 build 2600.xpxp_sp3_gdr_130105-0416.
I normally work using minimal privileges - so the user from which I mostly run Firefox doesn't have sufficient privilege to install a Firefox update. Now and again I log in as a privileged user, start firefox, and grab the latest version. However it happens quite frequently that Firefox goes into a mode where on Firefox startup I get an error window saying that it failed to install the update. When that window is dismissed, Firefox starts up and of course it's the latest version. Nothing I have tried appears to have any effect on this, but always after some period of time - in which I will have logged in and out a few times and probably started and stopped Firefox dozens of times - for no reason that I can discern it stops producing this error message and begins to start up without the error. This lasts a few days, and then it reverts to getting the error message.
In case it's useful to anyone, the error window is labelled
Dh'fhàillig ùrachadh a' bhathar-bhuig
which translates roughly to "The software's update failed"
and the text in the window is
Cha do ghabh an t-ùrachadh a stàladh. Dèan cinnteach nach eil lethbhreac eile de Firefox a' dol air a' choimpiutair agad is ath-thòisich Firefox an uairsin is feuch ris a-rithist.
which is roughly "The update couldn't be installed. Make certain no other copy of Firefox is running on your computer and then restart Firefox and try again".
I have of course done what the window tells me; it has no effect (if it had that would mean the OS security was broken) which is a good thing but suggests that the message in the window is a bad thing. I also tried updateing from the Firefox help menu (and was relieved to see that didn't work). Using a priileged user to install the update gives the unprivileged user the latest version, but doesn't ,ake the startup message go away.
I have a suspicion that what is happening is that Firefox running in unprivileged mode finds a security update, downloads it, and fails to install it, instead of recognising that it's running in unprivileged mode and just warning the user than an update is available; once it has done that the update remains downloaded in the unprivileged user's space, and even when the update is installed by the privileged user so that all users now have the updated version Firefox tries to install it despite its being already installed whenever the unprivileged user starts it up. If so, that would be a rather unpleasant problem, since it would tend to encourage people always to login with sysadmin privileges.

hello, when this is happening after you've already updated firefox with your admin account, try to delete the ''updates'' folder and ''active-update.xml & updates.xml'' within the %localappdata% folder of your restricted account like it is described in http://kb.mozillazine.org/Software_Update#Software_Update_not_working_properly

Document rule based classification

from the example in oracle text developers guide i tried to build a rule based document classification, using the code given below:
create or replace package classifier as
procedure this;
end;
show errors
create or replace package body classifier as
procedure this
is
v_document     blob;
v_item          number;
v_doc           number;
begin
for doc in (select document_id, content from documents)
     loop
          v_document :=doc.content;
          v_item:=0;
          v_doc:=doc.document_id;
          for c in (select category_id, category_name from docs_cats_rule_based_class
               where matches(query,v_document)>0)
          loop
               v_item:=v_item +1;
               insert into doc_cat_rule_based_class values (doc.document_id, category_id);
          end loop;
     end loop;
end this;
end;
show errors
exec classifier.this
this gives the following errors:
package classifier Compiled.
line 5: SQLPLUS Command Skipped: show errors
package body Compiled.
line 32: SQLPLUS Command Skipped: show errors
Error starting at line 33 in command:
exec classifier.this
Error report:
ORA-04063: package body "STARDOC.CLASSIFIER" has errors
ORA-06508: PL/SQL: could not find program unit being called: "STARDOC.CLASSIFIER"
ORA-06512: at line 1
i think i am missing some grant to package. please help!

What version of Oracle are you using? Did you create the required tables and index in the earlier steps? What did you run it from? It appears that you did not run it from SQL*Plus. Please see the following demonstration that shows that it works fine on Oracle 10g when run from SQL*Plus with minimal privileges. I did not use any data.
SCOTT@10gXE> CREATE USER stardoc IDENTIFIED BY stardoc
2 /
User created.
SCOTT@10gXE> GRANT CONNECT, RESOURCE TO stardoc
2 /
Grant succeeded.
SCOTT@10gXE> CONNECT stardoc/stardoc
Connected.
STARDOC@10gXE>
STARDOC@10gXE> create table news_table
2    (tk    number primary key not null,
3      title varchar2(1000),
4      text clob)
5 /
Table created.
STARDOC@10gXE> create table news_categories
2    (queryid number primary key not null,
3      category varchar2(100),
4      query      varchar2(2000))
5 /
Table created.
STARDOC@10gXE> create table news_id_cat
2    (tk         number,
3      category_id number)
4 /
Table created.
STARDOC@10gXE> create index news_cat_idx on news_categories (query)
2 indextype is ctxsys.ctxrule
3 /
Index created.
STARDOC@10gXE> create or replace package classifier
2 as
3    procedure this;
4 end classifier;
5 /
Package created.
STARDOC@10gXE> show errors
No errors.
STARDOC@10gXE> create or replace package body classifier
2 as
3    procedure this
4    is
5       v_document    clob;
6       v_item        number;
7       v_doc            number;
8    begin
9       for doc in (select tk, text from news_table)
10       loop
11         v_document := doc.text;
12         v_item := 0;
13         v_doc := doc.tk;
14         for c in
15           (select queryid, category from news_categories
16            where matches (query, v_document) > 0)
17         loop
18            v_item := v_item + 1;
19            insert into news_id_cat values (doc.tk,c.queryid);
20         end loop;
21       end loop;
22    end this;
23 end classifier;
24 /
Package body created.
STARDOC@10gXE> show errors
No errors.
STARDOC@10gXE> exec classifier.this
PL/SQL procedure successfully completed.
STARDOC@10gXE>

Copy assignment structure to a new document

I lay out a biweekly newspaper and we keep a consistent layout from one week to the next. After each issue, I duplicate and rename the original file, delete all the content and then input the new content from Word documents (my workflow does not currently incorporate InCopy). I want to set up InCopy so that each story has its own assignment, and writers can submit stories directly into my layout. Is there a way to not have to reassign each text box to an assignment after copying the file? Ideally I would like to duplicate both the InDesign document and the InCopy assignment folder, and then point InDesign to a new directory.
I am using InDesign CS5.5, and InCopy CS6 on both Macs and PCs. The InCopy files are located on a college network over which I have minimal privileges.
Thanks for your help

It is reccomended that you set up assignments for each story weekly. It can get a bit messy with linking.
I used to be the design editor at my school's newspaper and the way we set it up was as such:
Each section had its own InDesign template file that had basic geometry layed out
Every week (our paper was weekly) I would open up the .indt files and save them in a new directory on our server
Then I would make minor adjustments to geometry to match how many stories we were going to have
I would then assign InCopy assignments to each story then
I would reccomend you do the same or something similar.
PS, you shouldhave the same CS versions of InDesign and InCopy for this workflow. Either buy an older version of InCopy CS5.5 on Amazon (cheaper), or upgrade InDesign to CS6 (recommended).

Package relocation question

I build most of my /usr/local and make packages out of everything. With my discovery of Solaris 10 zones (whee), I've gone through my packages that have scripts and prefixed paths with ${PKG_INSTALL_ROOT}.
Some of my packages need to generate userids/groupids (i.e. ssh) and have a checkinstall script that looks for assignment of the expected uid. I was actually debugging something else and stumbled upon this issue:
checkinstall:
UIDNAME="`nawk -F: '$3 == \"16\" {print $1}' ${PKG_INSTALL_ROOT}/etc/passwd`"
GROUPNAME="`nawk -F: '$3 == \"16\" {print $1}' ${PKG_INSTALL_ROOT}/etc/group`"
When I execute pkgadd -v -R /foo/zones/myzone/root -d MYopenssh-4.3p2.pkg MYopenssh:
+ nawk -F: $3 == "16" {print $1} /foo/zones/myzone/root/etc/passwd
nawk: can't open file /foo/zones/myzone/root/etc/passwd
source line number 1
To ensure that I did not fatfinger the path, I cut'n'paste that error directly into another window with root shell:
: (r) mybox; ls -l /foo/zones/myzone/root/etc/passwd
-rw-r--r-- 1 root root 752 Sep 13 16:42 /foo/zones/myzone/root/etc/passwd
All of my package documentation say that checkinstall is "executed in-place", which I take to mean "not chrooted".
I know this is not the "proper" way to add a package to a zone, but it was an easy chroot target for me to use for debugging. For this situation, that shouldn't matter.
Comments?
Message was edited by:
WRWindsor

nevermind, I found the problem here.
The script is executed with minimal privileges, which means it cannot see zone ROOTDIRs.
Now back to my other problem. whee.

Execute on DBMS_LOB

ORDS 2.0.10 on Tomcat 8.0.15
Oracle Database 11.1
We recently refreshed our database and tightened up security and to my surprise, APEX with OHS/Apache still works fine but APEX on ORDS gives an error about needing execute on DBMS_LOB.
Questions
1. Is it sufficient to grant EXECUTE access to just APEX_PUBLIC_USER or is a PUBLIC grant required?
2. More importantly, why does OHS *not* need the grant?!
Thanks
Request Path passes syntax validation
Mapping request to database pool: PoolMap [_failed=false, _lastUpdate=-1, _pattern=null, _poolName=apex, _regex=null, _type=REGEX, _workspaceIdentifier=null, _serviceName=null]
Applied database connection info
Attempting to process with PL/SQL Gateway
==== Processing Request: ====
GET /apex/
==== Headers in Request ====
accept: text/html, application/xhtml+xml, */*
accept-language: en-US
user-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
accept-encoding: gzip, deflate
host: foo.bar.com:8080
connection: Keep-Alive
cookie: ORA_WWV_REMEMBER_UN=ADMIN:xxx; _ga=GA1.2.130838378.1414603134
authorization: YIIKWwYGKwYBBQUCoIIK....
==== Cookies in Request ====
ORA_WWV_REMEMBER_UN = ADMIN
_ga = GA1.2.130838378.1414603134
Using default page: apex
SID: 997
isValidRequest(), procedure name: <apex>
Validating: apex
*** Total number of arguments: 1
Parse: 1 ms
begin
apex;
commit;
end;
*** Total number of arguments: 1
Exec: 13 ms
get_page FAILED:ORA-06550: line 16, column 7:
PLS-00201: identifier 'DBMS_LOB' must be declared
ORA-06550: line 16, column 7:

Looking closer at the Java error stack, I see this
at oracle.dbtools.apex.OWA.getPage(OWA.java:258)
I realize that Oracle's out-of-the-box installation grants access to PUBLIC on all the Oracle-supplied SYS.DBMS_* packages but our environment has heightened security by revoking public access and granting access only to specific accounts that need the access, including APEX_xxxxxx.
But since this "getPage" is a new component introduced as a side-effect of using ORDS (as opposed to other deployment options like OHS or EPG), maybe the documentation should make it clear that the minimally privileged database user APEX_PUBLIC_USER needs EXECUTE privilege on SYS.DBMS_LOB when using ORDS.
Thanks

User VS Schema

Hi,
I have a database where there is only one schema, say SCHEMA1, to which the application connects.
Now, I am to create three more users, user1, user2, and user3, who must be able to connect to SCHEMA1.
User1:
Must have read, write, drop and all other relevant privileges on SCHEMA1. All priveleges that the owner of SCHEMA1 has.
User2 and User3:
Must have only read access to all objects in the schema.
Users 1, 2, and 3 must be audited.
Is there a way other than granting privileges on each of the object in SCHEMA1 recursively? Something like granting read/write privileges on the schema as a whole?
Also, any such statement as CREATE TABLE/CREATE VIEW/CREATE INDEX/... should actually create the object in SCHEMA1 and not in the schema associated with USER1.
Thanks,
Aswin.

ice_cold_aswin wrote:
Hi,
I have a database where there is only one schema, say SCHEMA1, to which the application connects.
Now, I am to create three more users, user1, user2, and user3, who must be able to connect to SCHEMA1.No, they don't "connect to" schema1. They connect as themselves and are granted minimal privileges to selected objects in schema1.
>
User1:
Must have read, write, drop and all other relevant privileges on SCHEMA1. All priveleges that the owner of SCHEMA1 has.If you give them create/alter/drop schema1 objects, you are on the fast-track to DBA hell.
>
User2 and User3:
Must have only read access to all objects in the schema.
So create a role, grant only SELECT to that role (GRANT SELECT ON SCHEMA1.TABLE1 TO MYROLE) and grant that role to user2 and user3
Users 1, 2, and 3 must be audited.
So turn on the necessary auditing. That is a totally separate function.
Is there a way other than granting privileges on each of the object in SCHEMA1 recursively? Something like granting read/write privileges on the schema as a whole?
What would be recursive? Grant the necessary privileges to a role. Grant the role to the necessary users.
Also, any such statement as CREATE TABLE/CREATE VIEW/CREATE INDEX/... should actually create the object in SCHEMA1 and not in the schema associated with USER1.
Again, user1 absolutely should not be allowed to execute DDL against another schema. In fact, I'd question if USER1 should be allowed to execute DDL at all. If you think it is necessary for your application, I'd question the basic assumptions of the application design.
The objects (tables, etc) needed by the application should belong to a schema created for that sole purpose. Since a schema is the collection of objects belonging to a user (and thus the common confusion between the concept of "user" vs. "schema"), the user created to own the application schema is usually locked. No reason for anyone to actually connect to the database with those credentials. User accounts typically don't actually own any objects. They are granted CREATE SESSION and whatever other minimal privs needed to access the objects owned by the application schema.
Thanks,
Aswin.

Cant install packaged application Apex 5

I have tried to install some of packaged applications, but i cant. Error looks like in the picture bellow. I granted users APEX_PUBLIC_USER, APEX_REST_USER, APEX_LISTENER to create view but error is still there. Anyone has same problem ?

2932898 wrote:
Thanks for reply,
If you mean the first step of installation wizard (shown in picture bellow INTEST), i have already granted create view to schema INTEST, but not helped..
I have successfully installed the Live Poll package application on apex.oracle.com, where I obviously have only minimal privileges (and no way of changing them):
select
    privilege
from
    user_sys_privs
order by
    privilege;
CREATE CLUSTER
CREATE CREDENTIAL
CREATE DIMENSION
CREATE EXTERNAL JOB
CREATE INDEXTYPE
CREATE JOB
CREATE LIBRARY
CREATE MATERIALIZED VIEW
CREATE OPERATOR
CREATE PROCEDURE
CREATE SEQUENCE
CREATE SYNONYM
CREATE TABLE
CREATE TRIGGER
CREATE TYPE
CREATE VIEW
The privileges must be granted directly to the schema, not through a role.

Applet Printing thru DOS command

I've a local applet which exec DOS command to print text file to a dot matrix printer.
However, I need to amend the local policy file with
grant {
java.io.FilePermission <<ALL FILE>> "read,execute"
It's quite impossible to do this as my company is a finanical institute and this action must be challenged by Internal Audit.
I have tried to grant the above privilege to my applet only and use signed applet but both methods doesn't work too.
It seems that there are no way to do it.
Could anyone let me know if I can archieve the result with minimal privilege grant in the policy file?

I've a local applet which exec DOS command to print text file to a dot matrix printer.
However, I need to amend the local policy file with
grant {
java.io.FilePermission <<ALL FILE>> "read,execute"
It's quite impossible to do this as my company is a finanical institute and this action must be challenged by Internal Audit.
I have tried to grant the above privilege to my applet only and use signed applet but both methods doesn't work too.
It seems that there are no way to do it.
Could anyone let me know if I can archieve the result with minimal privilege grant in the policy file?

Administrator locked himself out! Help!

Call me dumb -- but call me! Or rather, tell me how to get
out of this mess I just created for myself.
I'm the Contribute 3 administrator for a site for one of our
clients. He got a message saying he needed a new connection key. As
the administrator, I first wanted to test the basic functionality,
so I created a new connection key for a user with minimal
privileges -- fewer than my client, and not an administrator.
Then, to test the new key, I closed Contribute, then
double-clicked on the new key. I got a message asking if I wanted
to replace the existing key. I assumed this meant just for the
moment, and clicked yes.
Well, the new key does connect with the site, but without the
editing privileges my client needs. And I am no longer the
administrator.of the site, but rather this minimal user. By
clicking "yes" to "replace existing key?" I changed my identity. I
don't know the password for the administrator connection key I
created years ago. And I can't give administrator privileges to the
identity based on the new connection key, because Contribute knows
there is already an existing administrator for the site.
Of course, that "existing administrator" is me, but I've
locked myself out and lost the key (or rather, the password for the
key), so there is no way I can tell Contibute, "Hey, it's me, the
Administrator, let me in!" And I also can't start over, because
Contribute is reserving the Administrator's chair for me.
So what the heck do I do now?
Help!!!!!

Or just create a completely new connection to the site
entering your ftp username and password. You then have the
opportunity to choose your role as Contibute understands that if
you have this username and password you have they keys to the
entire site anyways!
Pretty sure I am correct that this will work...
[email protected]

OL5.7 & Oracle 11gR2 - unable to login at terminal

I was installing oracle 11gR2 which requires me to log in as "root" to run some scripts. Well I opened a terminal windows and
typed "login" at the prompt, then the system asked for the username and I typed "root" (without quotes of course) then I typed the
requested password but the system replies with "Login incorrect" message.
I'm sure I'm typing the correct username and password.
However, say that I'm logged as "oracle" and try to run the user/groups administraton program under the system menu, the system
will ask for my "root" password and it will accept it with no problems.
What I did was to log out "oracle" , log in as root, ran the scripts, then log in as "oracle" again, rerun the oracle installation, and now it says
it cannot continue installation because there is already an installation in the same direcrtory and asks me to choose a different location.
I will have then to delete all files under the /u01/app/oracle or uninstall the software completely with some oracle utility, I don't know.
Anyway I first have to solve the problem of the system not accepting my login as root in the terminal window, what am I doing wrong ??

My comments:
1) su does not standard for "super user". Su stands for switch user, substitute user, etc. http://en.wikipedia.org/wiki/Su_(Unix)
I agree, sudo is a better way to go than su. sudo is more secure and allows the OS administrator to grant the minimal privileges required. As well, knowing the root password is not required. Configuring sudo can be a bit complicated however and requires an experienced OS administrator to do so correctly and safely.
2) To remove your Oracle installation from UNIX:
cd <directory where dbms is installed>
rm -Rf *
3) Your OS configuration may have restrictions that prevent you from opening a session as root. You should get your OS administrator to assist you. Or are YOU the OS administrator? : )
4) The purpose of logging in as root to complete the dbms installation - certain files in the dbms installation have to be owned as root. As well, a few files are required in /etc, and only root can write to that directory. You must run the required scripts as root, or your dbms installation will be incomplete.
Scot

Triggers hiding when clause

I have a when clause in the header of an insert trigger that does not show up when using SQL Developer to view the code.
select
text
from
user_source
where
name = 'FOO_INSERT_B_TRG'
order by
line;
TEXT
trigger bar.foo_insert_b_trg
before insert
on bar.foo
for each row
when (new.foo_id is null)
declare
begin
:new.foo_id := key_pkg.create_key_f ('BAR', 'FOO');
end foo_insert_b_trg;
9 rows selectedHowever, when I pull the code up by double-clicking the trigger I get this.
create or replace
trigger bar.foo_insert_b_trg
before insert
on bar.foo
for each row
declare
begin
:new.foo_id := key_pkg.create_key_f ('BAR', 'FOO');
end foo_insert_b_trg;Notice that line 5, which has my when statement, is missing. This is causing this line to actually be removed when we open the object up, edit it, and then save it.
Edited by: Maxo on Mar 22, 2013 11:55 AM
Edited by: Maxo on Mar 22, 2013 12:01 PM
Edited by: Maxo on Mar 22, 2013 12:04 PM

Hi Maxo,
This issue has been reported before on this forum:
Unable to see the WHEN clause for a trigger.
The bug referenced in that thread is a regression from SQL Developer 3.1. and remains open. From the bug comments:
With only minimal privileges, we query all_triggers to get only the package
body (when-clause kept in a different column), whereas with
SELECT_CATALOG_ROLE or DBA role we query dba_source that contains the full
trigger source.So the alternatives for working around this issue are:
1. Keep multiple versions of SQL Developer installed, using 3.1 when you need to work with triggers.
2. Obtain additional privileges in order to avoid the regression in 3.2
Hope this helps,
Gary
SQL Developer Team

[Resolved] Minimal WM environments and modern computing power

Hi, I'm not trying to start any flamewars with this thread. With that out of the way, I'll continue.
I have wondered quite often why there are always some (or more than some in this community!) people in every linux community that prefer to run a very minimalist setup. I will find no shortage of people who have i5/i7's with 8GB of Ram and gods know what else in their hardware. However, these same people insist on running a WM that would be just as happy on a 386Mhz with 128MB of ram and using a coloured Hercules, or Trident, video card.* Why do that to your super-fast-with-gobs-of-ram-and-cpu-power-computer ? What is the rationale behind doing so?
I subscribe to the philosophy that unspent/cached ram is wasted resources/ram. I've seen others say the same thing and that question is never really answered or rebutted (no, I'm not asking for a rebuttal, just pointing out my observations). And this begets the next question about other computer habits a lot of people have, such as trying to squeeze out as much power as their system can use but they still use a blank wallpaper and wonder how else they can "optimize" their setup. I don't get it.
As I'm Canadian, I'll issue a blanket apology in advance to any people I've offended and/or people whos goldfish is in emotional torment due to this thread.
*To anyone too young to remember these things, feel free to look them up on Wikipedia, or the like, and see how the old guard used to do computing. You'll be fascinated or horrified; guaranteed either one of those emotional states will show up when you start the reading frenzy on Wikipedia.
Last edited by MoonSwan (2011-09-04 00:42:18)

First off, let me just say that as an American I find the entire idea of Canada vulgar, blasphemous and inconsiderate of my feelings.
Second, to answer your question: I'm actually getting a new Thinkpad next week with the works: i7 quad-core, high-def monitor with dedicated Nvidia graphics card, mSata 40-gig SSD along with a 750-gig HDD--the only thing in it that's "standard" is the 4 gigs of RAM. And still, I'll be using Awesome with it (though I'll probably try out KDE with it just for curiosity's sake, just like dhave said in his post above). Most of the reasons here have been covered, but I'll chime in anyway:
- Have you ever noticed that with certain apps (e.g. music players, backup programs, bittorrent clients) you actually spend more time monitoring them than interacting with them? It's nice to have all those windows neatly arranged and available at a single key-press, rather than needing to jerk my wrist around every two seconds just to see something.
- Most minimal WMs offer users finer control over their working environment and, since they aren't updated too frequently, usually provide a stable environment that only needs to be configured once in a great while.
- Newer, more powerful hardware + bloated software = wasted money, really. If the only advantage that GNOME or KDE have to offer is making the things I do throughout the day look fancy, then I feel like I've been cheated in a way. Spending $1200 USD on a new laptop which, in a couple of years, won't run KDE any better than my current one does now doesn't seem like a sound investment. Running a light-weight environment on that same hardware will guarantee that it runs faster than what I have now, and will stay that way for years. Really, the definition of "software bloat," in a practical sense, is essentially "Software which over time requires greater resource expenditure to accomplish the same basic tasks of its predecessor," which fits both of the big DEs. I should also point out that I use several KDE apps and enjoy doing so; it's Plasma and KWin that eat up more than their share of resources and bog my system down.
- Frankly, the more control you wish to exercise over your own setup, the less practical the big DEs seem. If I wish to control package management, network utilities, system monitoring, disc burning, and music playing from a terminal--while using a graphical file manager, bittorrent client, feed reader and web browser of my choice, as well and things like GIMP occasionally--then all a DE really ends up providing that I can't get elsewhere is a window decorator and a panel. Of course, in some cases the DE's equivalents of the utilities I mentioned end up getting installed anyway, so they just eat up hard drive space without getting used (we're privileged enough to largely avoid this problem in Arch--thanks, devs!).
Really, it's a matter of personal taste; I largely agree with your view on RAM, although I don't like using anything that simply eats it up for no good reason. I like to reserve RAM for things like web browsing, /tmp and preloading app files.

Minimal privileges

Similar Messages

Maybe you are looking for