Oracle roles

Hello,
I want to distinguish between the roles that were created by Oracle and the roles that the users created. Which are the roles that Oracle created in the database, DBA,CONNECT,RESOURCE,EXP_FULL_DATABASE ....? There is no columns that tells me which roles were created by Oracle and which by a user(s) in the dba_roles. Thank you in advance.

There is noway you can identified roll is seeded or it is created.
Only way keep diffrence, is to follow some naming convence like user create role shuld start with rl_... like rl_my_select_role ( easy readable)
Cheer,
Virag Sharma

Similar Messages

How to not display nodes in a tree if Oracle roles are NOT used?

How to not display nodes in a tree if Oracle roles are NOT used?
We don't use Oracle DB roles to grant users access to Forms from the menu. We use a template and role system of our own. Basically a few tables with templates and roles.
We want to convert our normal Forms menu to a tree menu and one of our key requirements is that when the tree is populated ONLY nodes with programs (i.e. forms) he has been granted to execute is shown.
Since we don't use Oracle Roles how to do this in a tree?
I created a function to show/hide LEAF nodes, BUT problem is that there are sub-menu nodes showing even if the leaf-nodes under it has not being displayed. My function has suppressed it.
My tree query is like this:
SELECT
     t.status, LEVEL, t.label, t.icon, t.node VALUE
FROM
     tma_tree_menu t
WHERE
tma_authenticate_sys_chk_role(USER, t.node) = 1
CONNECT BY
     PRIOR t.node = t.master
START WITH
     t.MASTER IS NULL
ORDER SIBLINGS BY
t.position
The tma_authenticate_sys_chk_role will return 1 only if the user has access to the form under that node.
I tried the FTree functions in Forms but even that has nothing.
Any help would be greatly appreciated.
Edited by: Channa on Mar 17, 2010 6:49 AM

Would you share the source code? I guess what I need is how exactly you retreive the user credentials from the DB table and set that boolean variable.
and then how to condition it in UIX?

Problems with the installation of Oracle Role Manager

Hello everyone;
I have a problem with the deployment of Jboss 4.05GA; just can not load the Role Manager Administrative Console (http://localhost:8080/ormconsole)
Probe load the Jboss and that if I load the console this APPSERVER (http://localhost:8080)
Also probe load the Role Manager Web UI and I had no problems (http://localhost:8080/webui)
Use the method of installation Install Software Only then can make the integration with the IOM.
Any suggestions for solving this problem.
Part of the Log:
14:17:02,953 ERROR [URLDeploymentScanner] Incomplete Deployment listing:
--- Incompletely deployed packages ---
org.jboss.deployment.DeploymentInfo@40e1e159 { url=file:/C:/jboss-4.0.5.GA/serve
r/default/deploy/server.ear }
deployer: org.jboss.deployment.EARDeployer@873723
status: Deployment FAILED reason: URL file:/C:/jboss-4.0.5.GA/server/default/t
mp/deploy/tmp18940server.ear-contents/ormconsole-exp.war/ deployment failed
state: FAILED
watch: file:/C:/jboss-4.0.5.GA/server/default/deploy/server.ear
altDD: null
lastDeployed: 1228418189671
lastModified: 1228418186515
mbeans:
--- MBeans waiting for other MBeans ---
ObjectName: jboss.web.deployment:war=ormconsole.war,id=-1206236729
State: FAILED
Reason: org.jboss.deployment.DeploymentException: URL file:/C:/jboss-4.0.5.GA/
server/default/tmp/deploy/tmp18940server.ear-contents/ormconsole-exp.war/ deploy
ment failed
--- MBEANS THAT ARE THE ROOT CAUSE OF THE PROBLEM ---
ObjectName: jboss.web.deployment:war=ormconsole.war,id=-1206236729
State: FAILED
Reason: org.jboss.deployment.DeploymentException: URL file:/C:/jboss-4.0.5.GA/
server/default/tmp/deploy/tmp18940server.ear-contents/ormconsole-exp.war/ deploy
ment failed
14:17:03,281 INFO [Http11BaseProtocol] Starting Coyote HTTP/1.1 on http-0.0.0.0
-8080
14:17:03,718 INFO [ChannelSocket] JK: ajp13 listening on /0.0.0.0:8009
14:17:03,781 INFO [JkMain] Jk running ID=0 time=0/94 config=null
14:17:04,015 INFO [Server] JBoss (MX MicroKernel) [4.0.5.GA (build: CVSTag=Bran
ch_4_0 date=200610162339)] Started in 1m:35s:859ms
Thank you

HI JLK,
i think i have solved the problem. Try to install the Oracle Role Manager with the installer and select the "Install Software and Configure" and install the "Standard Model" to the Database. Don't deploy the standard.car file.
I hope i could help you.
Thomas

Urgent : Can BPEL humantask link up with Oracle roles & responsibilities?

Hi,
We are designing a bpel human task workflow for an approval process for an Oracke application. The requirement is such that the approval responsibility in the current system is available to only certain users and the list of these approvers keeps changing. Is there a way to link up the bpel humantask workflow with the oracle roles & responsibilities so that the bpel processwoul send email notifications only to those people who have the aaproval responsibility?? I havent been able to find any documentation on this.All documents just mention that the approvers list is picked up from LDAP or OID. We do have OID as well as Oracle HR installed but Im not sure how to sync the data between the fnd_user having a specific role & responsibility to the OID data.
I think this would be the most common scenario for most people and Im sure there should be a way to link the fnd_user in Oracle apps to the OID --does anyone have any information on this? We need to finalize the design asap and any pointers will be very helpful for me.
Thanks!

Theoretically you should be able to delete the default partition... The errors in the log don't look related to that anyway...
It seems like you have soa and bpm on the same server... You may try to untarget bpm* from soa_server...
Other than that... You probably have to start thinking in recreate your domain (or restore from backup)...
Cheers,
Vlad

Need to enable Oracle Role

Post Author: GaryI
CA Forum: Data Connectivity and SQL
I am using Crystal Reports for Visual Studio 2005 and an Oracle database. From my C# application, I am dynamically setting the location of the database to use in the report with the code fragment seen at the end of this post.
My problem is..... The user I am instructing Crystal to connect with needs to enable an Oracle role before the tables needed to generate the report can be seen. For security reasons, the database administrators do not wish to have this role enabled by default when the user logs on. Crystal is creating a new connection to the database using the server/userid/password information I supply, but the required role is not enabled and therefore the tables for the report are not visible and the report fails.
So.... how do get Crystal reports to see the tables? I can think of two ways.
1) Somehow convince Crystal reports to enable the role when it connects to the database. I have not discovered a way to accomplish this. Is there a way to do this?
2) My application already has a connection to the database with the required role enabled. Now if I could just get Crystal reports to use this database connection instead of creating its own, my problem is solved. But..... I cannot find a way to tell Crystal to use an existing database connection that I pass in. Is there a way to do this?
Or does anybody have more ideas?
The code fragment mentioned above................
            ReportDocument rd = new ReportDocument();
            rd.Load(filename);            foreach (Table t in rd.Database.Tables)            {                TableLogOnInfo inf = t.LogOnInfo;                ConnectionInfo connect = inf.ConnectionInfo;                connect.ServerName = serverName;                connect.DatabaseName = database;                connect.UserID = userID;                connect.Password = pwd;
                t.ApplyLogOnInfo(inf);            }            crystalReportViewer1.ReportSource = rd;

Post Author: Jagan
CA Forum: Data Connectivity and SQL
I think that security/DBAs need to provide a solution but I usually find guidance is required too. e.g. would security allow a new role that only has select access to the tables (or even only to necessary tables) that could be granted to a user by default? Are you using an existing user? Could you use a 'reporting only' user? If a role (even a new, read-only role) can't be defaulted, would the DBAs be prepared to write code that only grants it to the reporting user when it logs on from a recognised production machine and/or from a recognised client? etc. etc.
I think you need to discuss possible solutions with them and see what they will allow/support.

Query on Oracle Roles

hi all
i have a question about Oracle Roles
i was reading the below doc
http://psoug.org/reference/roles.html
my question is
e,g
SQL> create role olap_role;
Role created.
SQL> grant connect,resource to olap_role;
Grant succeeded.
SQL> select role, GRANTED_ROLE from role_role_privs;this is what i did.
connect and resource as oracle standard. if someone has changed the roles inside connect and resource, from which table can I get the information
SQL> select role, GRANTED_ROLE from role_role_privs;
ROLE                           GRANTED_ROLE
DBA                            SCHEDULER_ADMIN
DBA                            OLAP_DBA
DBA                            EXECUTE_CATALOG_ROLE
DBA                            DELETE_CATALOG_ROLE
JAVASYSPRIV                    JAVAUSERPRIV
XDBADMIN                       XDBWEBSERVICES
OLAP_USER                      SELECT_CATALOG_ROLE
IMP_FULL_DATABASE              EXECUTE_CATALOG_ROLE
LOGSTDBY_ADMINISTRATOR         RESOURCE
OLAP_ROLE                      CONNECT
DBA                            SELECT_CATALOG_ROLE
ROLE                           GRANTED_ROLE
DBA                            EXP_FULL_DATABASE
DBA                            WM_ADMIN_ROLE
EXP_FULL_DATABASE              EXECUTE_CATALOG_ROLE
IMP_FULL_DATABASE              SELECT_CATALOG_ROLE
OLAP_DBA                       SELECT_CATALOG_ROLE
DBA                            GATHER_SYSTEM_STATISTICS
DBA                            JAVA_DEPLOY
EXECUTE_CATALOG_ROLE           HS_ADMIN_ROLE
EXP_FULL_DATABASE              SELECT_CATALOG_ROLE
OLAP_USER                      CONNECT
OLAP_ROLE                      RESOURCE
ROLE                           GRANTED_ROLE
DBA                            JAVA_ADMIN
DBA                            IMP_FULL_DATABASE
DBA                            XDBADMIN
SELECT_CATALOG_ROLE            HS_ADMIN_ROLE
DBA                            XDBWEBSERVICES
OLAP_USER                      RESOURCE
OLAP_USER                      OEM_MONITOR
29 rows selected.there is nothing called resource in the roles column. I know i am missing something. but i am unable to get it.

Further to the previous reply, Pete Finnigan has a collection of SQL scripts that do a nice job of following the cascade of roles and privileges down to the last detail of who can do what. See: http://www.petefinnigan.com/tools.htm
Regards
Jonathan Lewis
http://jonathanlewis.wordpress.com
http://www.jlcomp.demon.co.uk
A general reminder about "Forum Etiquette / Reward Points": http://forums.oracle.com/forums/ann.jspa?annID=718
If you never mark your questions as answered people will eventually decide that it's not worth trying to answer you because they will never know whether or not their answer has been of any use, or whether you even bothered to read it.
It is also important to mark answers that you thought helpful - again it lets other people know that you appreciate their help, but it also acts as a pointer for other people when they are researching the same question, moreover it means that when you mark a bad or wrong answer as helpful someone may be prompted to tell you (and the rest of the forum) what's so bad or wrong about the answer you found helpful.

RE:Oracle Role manager

HI
can any one explain me in brief about Oracle Role Manager and where Service Oriented Architecture comes in to picture.
Thanks

All I know abt ORM is,
1)for a typical ORM engagment you need to first need to do a top dpwn analysis to identify commonly used roles and privileges and translate them into Business Roles and IT Roles respectively.
2) Load Hierarchy data, clean the data through ORM reporting
3) Use Role Discoverer to mine the roles fed to it.
4) this will then translate into a role catalogue which you need the business to agree upon and sign off on.

Oracle Role for User Administration

Hello,
I am a DBA. We have a separate group that maintains oracle user accounts within an oracle database. We would like that group to maintain users (add/remove users from database, add/remove roles, etc.) but we do not want to give them the 'DBA' role for security reasons. Ideally, we want to grant them a role that gives them the ability to administer users but not do anything else.
Does a role like this exist within Oracle? If not is there a workaround to obtain this type of functionality?
Thank you!

Do you have this actually working? I have it complaining about permissions on the line that tries to create the user. I thought oracle restricted doing this for security reasons. I am creating this as a user with the 'DBA' role and then when I try to execute it as the same user (which can create users normally) I get this error:
SQL> exec system.create_user('troy1','troy1');
BEGIN system.create_user('troy1','troy1'); END;
ERROR at line 1:
ORA-01031: insufficient privileges
ORA-06512: at "SYSTEM.CREATE_USER", line 4
ORA-06512: at line 1
And here is the code (based off of the example)...
CREATE OR REPLACE PROCEDURE create_user( p_username IN VARCHAR2, p_password IN VARCHAR2 )
AS
BEGIN
EXECUTE IMMEDIATE 'CREATE USER ' || p_username || ' IDENTIFIED BY ' || p_password || ' DEFAULT TABLESPACE users ';
END;
Any ideas?

Sybase group to oracle roles

I've been testing Sybase to Oracle migration using SQL Developer 3.1.06 release. I dont see the user/groups on the Sybase is not getting converted in respective roles in Oracle. Am i missing something here? Any help is much appropriated.
Thanks
~ G

Looks like a open issue. My Query is very similar to one below. Any update on this? Is this a know issue on SQL Developer migration option for Sybase? Can someone confirm..
SQL Developer 3.1 not migrating Sybase Users to Oracle 11g R2

Migrate ORACLE ROLES to JDEVELOPER

JDeveloper 11.1.1.4.0
We need to migrate an ORACLE Forms application to ADF. Currently in our forms app, we are using Oracle User logins created in ORACLE( It is not from any table. The user id and Role is in the ORACLE itself). And this login detail is used to connect to the DB. We also have our triggers already set in the DB to update certain columns with Logged in USER ID. But in ADF we can connect to the DB only with one same Connection, though we have different users and roles at application level. So we have the following questions
1) Can we import the ORACLE Userids and Roles to JDeveloper
2) How to make a dynamic connection to the DB based on each user login
Edited by: 966247 on Nov 16, 2012 2:02 AM

To retrieve users and roles, configure ReadOnlySQLAuthenticator on WLS.
To authenticate as db user, try to create proxy user in oracle db, something like this:
https://blogs.oracle.com/imc/entry/how_to_use_database_proxy
Dario

Oracle Role Creation Date time stamp

Hi All ,
Can anyone pls help me to find out the Date time stamp when a Role has been created into database .
Your early response will be appreciable.
Many thanks ,

Hi,
>>Actually I am searching through google to see the each column name description for sys.user$ but not able to find anything useful
These base tables are not documented (public) ... It seems that PTIME column stores the time stamp information when the password's user has changed.
SQL> create user myuser identified by myuser;
User created.
SQL> select
2    name,
3    to_char(ctime,'dd/mm/yyyy hh24:mi:ss') ctime,
4    to_char(ptime,'dd/mm/yyyy hh24:mi:ss') ptime
5 from
6    user$
7 where name='MYUSER';
NAME            CTIME               PTIME
MYUSER          30/04/2008 10:52:25 30/04/2008 10:52:25
-- waiting some time ...
SQL> alter user myuser identified by legatti;
User altered.
SQL> select
2    name,
3    to_char(ctime,'dd/mm/yyyy hh24:mi:ss') ctime,
4    to_char(ptime,'dd/mm/yyyy hh24:mi:ss') ptime
5 from
6    user$
7 where name='MYUSER';
NAME            CTIME               PTIME
MYUSER          30/04/2008 10:52:25 30/04/2008 10:53:08Cheers
Legatti

General Questions about Oracle Roles/Privileges

Hi,
I have a few questions I'm hoping to get clarification on:
1 - Is there a view similar to DBA_SYS_PRIVS/DBA_TAB_PRIVS that shows which system privileges have been assigned to users/accounts ONLY, filtering out roles? If not, how would one go about obtaining this list?
2 - Is there a view similar to DBA_ROLE_PRIVS that shows also just shows which users have been assigned to which roles ONLY, again filtering out roles? If not, how would one go about obtaining this list? I assume some type of recursion has to be done here to flatten out the roles.
My end goal is this:
- List of all users and directly assigned system privileges only
- List of all users and directly assigned table/object privileges only
- List of all users and all roles (if role X contains role Y, this list should show user has role X and Y)
Many thanks!

1 - Is there a view similar to DBA_SYS_PRIVS/DBA_TAB_PRIVS that shows which system privileges have been assigned to users/accounts ONLY, filtering out roles? If not, how would one go about obtaining this list?
it's simple:
select grantee, privilege from dba_sys_privs where grantee in (select username from dba_users);
select grantee, owner, table_name, privilege from dba_tab_privs where grantee in (select username from dba_users);
2 - Is there a view similar to DBA_ROLE_PRIVS that shows also just shows which users have been assigned to which roles ONLY, again filtering out roles? If not, how would one go about obtaining this list? I assume some type of recursion has to be done here to flatten out the roles.
select grantee, granted_role from dba_role_privs where grantee in (select username from dba_users);
select grantee, granted_role from dba_role_privs where grantee in (select role from dba_roles);Hope this helps...

Oracle Role Manager won't install

I'm running MS Windows Server 2003 SP1 in a Virtual PC environment. The Oracle DB instance that I plan to connect with is hosted on another Virtual PC. Network configuration between the Guest PCs appears to be working normally through a Microsoft Loopback Adapter that I installed on the Host.
When attempting to run the setup.exe utility that ships with ORM (which should trigger the launch of the Oracle Universal Installer), a CMD window opens in which I can see things proceeding as I would expect them to.
However, when the window closes, instead of the Universal Installer GUI popping up, nothing happens.
When you restart the server, you get a message indicating that setup.exe encountered some problems and are prompted to report the problem to Microsoft.
Any ideas on how to resolve this?
Edited by: imcapple on May 13, 2009 3:11 PM

Sounds like an issue with OUI - there's a log file in Program Files\Oracle\<something> that should lead you toward the OUI log file. In my experience the reason this happens is due to java classpath issues..
Paul

Oracle Roles Issue

Hi,
I have 8 Roles assigned to my user of which 1 is secured and not default.
When I log in and check SESSION_ROLES view it correctly shows 7 roles active.
After that I fire SET ROLE XYZ IDENTIFIED BY ABC
Now if I check SESSION_ROLES only this latest role is shown active all other are gone ?
Can you please help with this, as I would like to have all roles enabled after SET ROLE command.
Thanks

Thanks so what would be my option here as secured role is set via procedure call, as password for it is generated based on a key using TRANSLATE function.
I would like them all to be active.

Oracle Role Manager integration with OIM

Hi all
I need to test installation OIM and ORM products.
This products was installed on windows platform. My questions are:
1) How realized connection (integration) between OIM and ORM ???
2) Where i can search information (documents) over ORM product ???
Thanks for u time
Gustavo

Hi Gustavo,
Did you able to integrate ORM and OIM? I am getting some database error whcih deploying the integration libarary. Can you please offer me some help on this.
Debi

Oracle roles

Similar Messages

Maybe you are looking for