Privilege and roles Question

Hi All
I did a queries
SELECT GRANTEE, PRIVILEGE,GRANTABLE FROM DBA_TAB_PRIVS
WHERE TABLE_NAME='TABLE1' AND GRANTEE IN ('USER1', 'USER_ROLE');
GRANTEE        PRIVILEGE       GRANTABLE
USER1 SELECT NO
USER1 INSERT NO
USER1 DELETE NO
USER1 UPDATE NO
USER_ROLE SELECT YES
USER_ROLE INSERT YES
USER_ROLE DELETE YES
USER_ROLE UPDATE YES
SELECT 'ROLE' TYP, GRANTEE, GRANTED_ROLE, ADMIN_OPTION FROM DBA_ROLE_PRIVS WHERE GRANTEE ='USER1';
TYP      GRANTEE   GRANTED_ROLE   ADMIN_OPTION
ROLE USER1 CONNECT NO
ROLE USER1 RESOURCE NO
ROLE USER1 USER_ROLE NO
My question is since the USER1 is granted the role of USER_ROLE, will it cause conflict to the table privilege?
Because I can't perform Insert when I'm using USER1. It give me an error of ORA-01031L insufficent privileges SQL source: ..

Since you did not mention how you are performing the Inserts/DML's on the TABLE1, and you are facing privileges issues, I presume you are performing it from a PL/SQL Block. However, the priviliges acquired via a Role are not valid in Function/Procedure. You need to have explicit privileges to perform an action in Function/Procedure.
Even without the privilege, you would be able to perform the Inserts/DML's as in static SQL statements that are not contained in PL/SQL blocks.
Try:
grant insert on table1 to user1;

Similar Messages

  • Privileges and Roles Based Views

    Hello,
    I have been confguring Roles based Views with Windows radius authentication on our 2960's and 3750's and it is working great.  I have 2 users, one with a Roles Base View called "priv3" and the other is for admins of login as the "root" view.  I have one Windows Active Directory group for "priv3" users and the other for admins using "root".
    Now I have to configure this on our 2955 switches and to my horror they don't seem to support Roles Based Views!!  fI you know if they can then all this would be solved, I've using the latest IOS c2955-i6k2l2q4-mz.121-22.EA13.bin.
    How can convert the Roles Base Views to privileges and use radius and not effect the other switches,as I've never used privilges.
    I hope someone can help with the config:
    Below is the config I use on the 2960's and 3750's and also what I use on the radius servers.  I guess I would need ot use a priv 15 setup and a custom view called priv3?
    Priv3 radius user settings
    cisco av-pair cli-view-name=priv3
    Priv 15 or root user settings
    cisco av-pair shell:priv-lvl=15
    cisco av-pair shell:cli-view-name=root
    Config:
    version 12.2
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname 3750
    boot-start-marker
    boot-end-marker
    logging buffered 64000
    logging console informational
    logging monitor informational
    enable secret 5 $1$1UGK$kHB.S2UwMVXaG3C0
    username admin privilege 15 secret 5 $1$BsaS$cLHllovL2ZFb1
    username priv3users view priv3 secret 5 $1$JfnH$vUu.B.natnyB.
    aaa new-model
    aaa authentication login default group radius local
    aaa authentication enable default line
    aaa authorization console
    aaa authorization exec default group radius local
    aaa session-id common
    clock timezone GMT 0
    clock summer-time BST recurring last Sun Mar 2:00 last Sun Oct 3:00
    switch 1 provision ws-c3750g-12s
    switch 2 provision ws-c3750g-12s
    system mtu routing 1500
    udld aggressive
    no ip domain-lookup
    ip domain-name CB-DI
    login on-failure log
    login on-success log
    crypto pki trustpoint TP-self-signed-3817403392
    enrollment selfsigned
    subject-name cn=IOS-Self-Signed-Certificate-3817403392
    revocation-check none
    rsakeypair TP-self-signed-3817403392
    crypto pki certificate chain TP-self-signed-3817403392
    certificate self-signed 01
      removed
      quit
    archive
    log config
      logging enable
      logging size 200
      notify syslog contenttype plaintext
      hidekeys
    spanning-tree mode rapid-pvst
    spanning-tree extend system-id
    spanning-tree vlan 10 priority 8192
    vlan internal allocation policy ascending
    ip ssh version 2
    interface GigabitEthernet1/0/1
    interface GigabitEthernet1/0/24
    interface Vlan1
    description ***Default VLAN not to be used***
    no ip address
    no ip route-cache
    no ip mroute-cache
    shutdown
    interface Vlan10
    description ****
    ip address 10.10.150.11 255.255.255.0
    no ip route-cache
    no ip mroute-cache
    ip default-gateway 10.10.150.1
    ip classless
    no ip http server
    ip http secure-server
    logging trap notifications
    logging facility local4
    logging source-interface Vlan10
    logging 10.10.21.8
    logging 172.23.1.3
    access-list 23 permit 10.10.1.65
    snmp-server community transm1t! RO
    snmp-server trap-source Vlan10
    radius-server host 10.10.1.33 auth-port 1645 acct-port 1646 key 7 090D7E080D37471E48
    radius-server host 10.10.1.34 auth-port 1645 acct-port 1646 key 7 08607C4F1D2B551B51
    radius-server vsa send accounting
    radius-server vsa send authentication
    line con 0
    exec-timeout 60 0
    logging synchronous
    line vty 0 4
    access-class 23 in
    exec-timeout 60 0
    logging synchronous
    transport input ssh
    line vty 5 14
    access-class 23 in
    no exec
    transport input ssh
    parser view priv3
    secret 5 $1$XSCo$feyS.YaFlakfGYUgKHO/
    ! Last configuration change at 16:34:56 BST Fri Apr 13 2012
    commands interface include shutdown
    commands interface include no shutdown
    commands interface include no
    commands configure include interface
    commands exec include configure terminal
    commands exec include configure
    commands exec include show ip interface brief
    commands exec include show ip interface
    commands exec include show ip
    commands exec include show arp
    commands exec include show privilege
    commands exec include show interfaces status
    commands exec include show interfaces Vlan10 status
    commands exec include show interfaces Vlan1 status
    commands exec include show interfaces GigabitEthernet2/0/12 status
    commands exec include show interfaces GigabitEthernet2/0/11 status
    commands exec include show interfaces GigabitEthernet2/0/10 status
    commands exec include show interfaces GigabitEthernet2/0/9 status
    commands exec include show interfaces GigabitEthernet2/0/8 status
    commands exec include show interfaces GigabitEthernet2/0/7 status
    commands exec include show interfaces GigabitEthernet2/0/6 status
    commands exec include show interfaces GigabitEthernet2/0/5 status
    commands exec include show interfaces GigabitEthernet2/0/4 status
    commands exec include show interfaces GigabitEthernet2/0/3 status
    commands exec include show interfaces GigabitEthernet2/0/2 status
    commands exec include show interfaces GigabitEthernet2/0/1 status
    commands exec include show interfaces GigabitEthernet1/0/12 status
    commands exec include show interfaces GigabitEthernet1/0/11 status
    commands exec include show interfaces GigabitEthernet1/0/10 status
    commands exec include show interfaces GigabitEthernet1/0/9 status
    commands exec include show interfaces GigabitEthernet1/0/8 status
    commands exec include show interfaces GigabitEthernet1/0/7 status
    commands exec include show interfaces GigabitEthernet1/0/6 status
    commands exec include show interfaces GigabitEthernet1/0/5 status
    commands exec include show interfaces GigabitEthernet1/0/4 status
    commands exec include show interfaces GigabitEthernet1/0/3 status
    commands exec include show interfaces GigabitEthernet1/0/2 status
    commands exec include show interfaces GigabitEthernet1/0/1 status
    commands exec include show interfaces Null0 status
    commands exec include show interfaces
    commands exec include show configuration
    commands exec include show
    commands configure include interface GigabitEthernet1/0/1
    commands configure include interface GigabitEthernet1/0/2
    commands configure include interface GigabitEthernet1/0/3
    commands configure include interface GigabitEthernet1/0/4
    commands configure include interface GigabitEthernet1/0/5
    commands configure include interface GigabitEthernet1/0/6
    commands configure include interface GigabitEthernet1/0/7
    commands configure include interface GigabitEthernet1/0/8
    commands configure include interface GigabitEthernet1/0/9
    commands configure include interface GigabitEthernet1/0/10
    commands configure include interface GigabitEthernet1/0/11
    commands configure include interface GigabitEthernet1/0/12
    commands configure include interface GigabitEthernet2/0/1
    commands configure include interface GigabitEthernet2/0/2
    commands configure include interface GigabitEthernet2/0/3
    commands configure include interface GigabitEthernet2/0/4
    commands configure include interface GigabitEthernet2/0/5
    commands configure include interface GigabitEthernet2/0/6
    commands configure include interface GigabitEthernet2/0/7
    commands configure include interface GigabitEthernet2/0/8
    commands configure include interface GigabitEthernet2/0/9
    commands configure include interface GigabitEthernet2/0/10
    commands configure include interface GigabitEthernet2/0/11
    commands configure include interface GigabitEthernet2/0/12
    ntp logging
    ntp clock-period 36028961
    ntp server 10.10.1.33
    ntp server 10.10.1.34
    end
    Thanks!!!!

    DBelt --
    Hopefully this example suffices.
    Setup
    SQL> CREATE USER test IDENTIFIED BY test;
    User created.
    SQL> GRANT CREATE SESSION TO test;
    Grant succeeded.
    SQL> GRANT CREATE PROCEDURE TO test;
    Grant succeeded.
    SQL> CREATE ROLE test_role;
    Role created.
    SQL> GRANT CREATE SEQUENCE TO test_role;
    Grant succeeded.
    SQL> GRANT test_role TO test;
    logged on as Test
    SQL> CREATE OR REPLACE PACKAGE definer_rights_test
      2  AS
      3          PROCEDURE test_sequence;
      4  END definer_rights_test;
      5  /
    Package created.
    SQL> CREATE OR REPLACE PACKAGE BODY definer_rights_test
      2  AS
      3          PROCEDURE test_sequence
      4          AS
      5          BEGIN
      6                  EXECUTE IMMEDIATE 'CREATE SEQUENCE test_seq';
      7          END;
      8  END definer_rights_test;
      9  /
    Package body created.
    SQL> CREATE OR REPLACE PACKAGE invoker_rights_test
      2  AUTHID CURRENT_USER
      3  AS
      4          PROCEDURE test_sequence;
      5  END invoker_rights_test;
      6  /
    Package created.
    SQL> CREATE OR REPLACE PACKAGE BODY invoker_rights_test
      2  AS
      3          PROCEDURE test_sequence
      4          AS
      5          BEGIN
      6                  EXECUTE IMMEDIATE 'CREATE SEQUENCE test_seq';
      7          END;
      8  END invoker_rights_test;
      9  /
    Package body created.
    SQL> EXEC definer_rights_test.test_sequence;
    BEGIN definer_rights_test.test_sequence; END;
    ERROR at line 1:
    ORA-01031: insufficient privileges
    ORA-06512: at "TEST.DEFINER_RIGHTS_TEST", line 7
    ORA-06512: at line 1
    SQL> EXEC invoker_rights_test.test_sequence;
    PL/SQL procedure successfully completed.
    SQL> SELECT test_seq.NEXTVAL from dual;
                 NEXTVAL
                       1

  • Privileges and role

    I use CS_ADMIN to login DB, querying its role
    select * from dba_role_privs where grantee = 'CS_ADMIN';
    GRANTEE GRANTED_ROLE ADMIN_OPTION DEFAULT_ROLE
    CS_ADMIN RESOURCE NO YES
    CS_ADMIN CONNECT NO YES
    CS_ADMIN DBA NO YES
    Then I query the DBA'S privilege
    select * from role_sys_privs rsp WHERE rsp.privilege LIKE '%TABLESPACE%' AND rsp.role = 'DBA'
    ROLE PRIVILEGE
    DBA DROP TABLESPACE
    DBA ALTER TABLESPACE
    DBA CREATE TABLESPACE
    DBA MANAGE TABLESPACE
    Then, We can know that CS_ADMIN user has DBA role and DBA role can create tablespace
    But I use CS_ADMIN to create a procedure to run statement in the package
    EXECUTE IMMEDIATE ‘create tablesapce...’;
    The procedure will throw a error, ORA-01031 :insufficient privileges
    But I can directly run the ‘create tablesapce...’ statement in the command pattern.
    Why?
    Thanks.

    I recommend before you post you always search for the error.
    There have been questions in this forum on this very error really more than a million times, just because most people don't like to put effort in resolving their own issues.
    That said, the cause is always the same: roles are disabled during compilation of pl/sql.
    However, I think creating a tablespace in pl/sql is fundamentally evil, as it makes you loose control over the database.
    Sybrand Bakker
    Senior Oracle DBA

  • System Privileges, Object Privileges and Roles in Oracle 10g r2

    Hello,
    I am looking for a comprehensive details about each and every role, privileges(both object and system) that are available in standard Oracle EE 10g r2.
    I have visited administrator reference manual and other documents from docs.oracle.com but could not fine this information.
    Can anyone redirect me to an appropriate URL or documentation that details whats and hows of each and every roles and privileges?
    Thanks,
    R

    Rich V wrote:
    Hello,
    I am looking for a comprehensive details about each and every role, privileges(both object and system) that are available in standard Oracle EE 10g r2.
    I have visited administrator reference manual and other documents from docs.oracle.com but could not fine this information.
    Can anyone redirect me to an appropriate URL or documentation that details whats and hows of each and every roles and privileges?
    Thanks,
    RHi, you can use dba_role_privs,role_sys_privs views,for more information see
    http://download.oracle.com/docs/cd/B19306_01/network.102/b14266/admusers.htm
    http://www.cuddletech.com/articles/oracle/node36.html

  • ValidTo and ValidFrom for privileges and roles (since SP2) - no effect

    Hi IDM Community,
    has anybody tried the new functionality that you can enter validfrom and validto values for role assignments and privilege assignments in business roles?
    In my case I can define these values in a workflow but I don't see any effect. There are no values for these attributes written to the database. I think that normally there should be some MX_PENDING_VALUE objects created in which the validfrom, validto should be stored. But nothing happens. When I define a validfrom, validto value for a privilege in a business role and submit the change and view the details of the role again there is no validto or validfrom assigned for this privilege.
    Has anybody encountered the same problem?
    BR
    Jörn Kaplan

    Hello,
    I am testing the abap -- initial load (SP2)"WriteABAPUsersRolePrivilegeAssigments"-pass with the ValidTo and ValidFrom and the  "sap_getTimeDependentPrivilege"- Jscript. 
    There is always an error:
    "putNextEntry failed storingXXXXXXX
    Exception from Modify operation:java.lang.IllegalArgumentException: Entry does not exist - entry: XXXXXXX
    The logonuid XXXXXXX is stored in sap%$rep.$NAME%roleAssign and sap%$rep.$NAME%role.
    SP1 is running!
    But I dont want to lose TimeDependentPrivilege like in Initial Load (SP1)
    Who can help me?
    BR Chris

  • Users, privileges and roles problem!

    Hi everyone,
    I am using oracle 10.2.0.
    I have a user (dba1) who is the owner of tables in my database. I have connected to sqlplus as sysdba and created the role <b>admin</b> and granted the admin all the privileges.
    SQL> grant all privileges to admin;
    Grant succeeded.
    SQL>Then I granted the <b>admin</b> role to the user dba1:
    SQL> grant admin to dba1;
    Grant succeeded.I have created another role, sel_role and given that role the privileges to select tables. For example:
    SQL> grant select on kund to sel_role;
    Grant succeeded.Now I have created another user, Anton, and have given that user the role sel_role:
    grant sel_role to Anton;
    Grant succeeded.Now when I try to log in as anton and try to use the select statement which is given to Anton by sysdba, using the sel_role, to select the table kund, I got an error:
    SQL> connect anton/oracle
    Connected.
    SQL> select * from kund;
    select * from kund
    ERROR at line 1:
    ORA-00942: table or view does not existWhat could be the solution to this problem?
    Thanks in advance

    Solomon Yakobson wrote:
    Connect as sysdba and issue:
    ALTER USER anton DEFAULT ROLE ALL;SY.Same problem!
    SQL> alter user anton default role all;
    User altered.
    SQL> connect anton/oracle
    Connected.
    SQL> select * from kund;
    select * from kund
    ERROR at line 1:
    ORA-00942: table or view does not exist

  • Advanced Group Policy Management - On privileges and roles

    Hello!
    We are rolling out AGPM 4.0 SP2.  Seems to work well enough.
    We currently have more than one set of standard permissions.  For example, our Citrix team controls GPOs for Citrix, our Desktop team controls GPOs for desktops, etc.
    Is there no way to delineate this in AGPM?
    My first thought was that I could use PowerShell to rapidly set, and regularly audit and auto-correct these privileges.  True to Group Policy form, there is limited PowerShell support - in this case, none at all.
    My second thought was that templates might include AGPM roles.  So I could say 'Group X has privileges to Template A,' 'Group Y and Z have privileges to Template B,' and so forth.  When I create a template, it would include those permissions.
     Nope.
    I'm all for opening up access, but this might be a tough sell.  Am I the only one who has disparate security boundaries around group policies?  Am I overlooking a solution to this?
    Thanks!
    RCM

    Have you thought about multiple AGPM Servers, one for each group? Each AGPM store could utilize separate standard permissions and control the subset of policies which are within the scope of the
    group. You can even
    use Group Policy itself to manage a multiple AGPM Server environment.
    Brandon
    MDOP on the Springboard Series on TechNet

  • DFD diagram and ER crossmatrix for role definitions and role's privileges on objects

    Hello,
    Having the question on derivative use of combination of DFDs and ER diagrams ( let us be more fixes and focus on Relational model ).
    In DFD there are defined external entities and functions, data flows and data stores that are forming processes.
    Functions represents procedures, transactions, transformations.
    Dataflows presents procedures parameters, intermediate reports, temporary table data, data that is passed , retrieved/written, signals, triggers/events that controle or trigger function...
    Context of my question is focused on external entities.
    External entity suppose to denote the sourced or destinationed system ( for example Archiving system ) or operator, system that is out of scope of the DFD and it is mentioned just as target or destination or source of dataflow or control flow.
    In context of these understandings I am using external entitiy also for types of users of the system:  staff that is triggering functions or schedulers or job managers, or reporting systems ( or components of reporting systems like for example business intelligence extraction processes ).
    What is my problem that on basis of external entity definitions and E/R model also define roles and privilege classes for access to data objects.
    And from those generating ddls for database roles, privileges on entitities to those roles.
    But in privileges granting to role having two different kind of privileges on data objects:
    - privileges that are granted on various schema objects
       For example role1 has grant on tab1, view2, procedure1, package3,
    - the other type of privilega is based on the scope or range of semantically defined scope or semantic area.
    Semantic area is scattered through tables because of normalisation and using semantic area as entity of which primary key is
    partitioning the table data through many semantic areas.
    So this privilege should be granted on basis of the rows in table not column ( more semantically then structurally ...row oriented more than column ).
    Both privileges that are granted to roles are also basis for functional roles
    ( privilege that is granted that functional role has grant to trigger or execute some function or process ).
    My question is?
    How do you handle modeling technology for analysis and design for role privileges and consolidation between database and functional roles ?
    Grateful for any idea, experience and suggestions.

    Hello,
    Guess I was looking for the formal sequence of steps that would bring me to the
    ddls for "create role ..." and "grant privileges to role".
    You can do that.
    1) I assume you have logical model and it's engineered to relational model, also you have data flow diagram created
    2) You need to define information structures for flows connecting "Information store" to primitive process - attribute usage of particular entities should be defined for those "information structures" processed in flows
    3) You need to define create, update and delete operation for flow going from primitive process to store - read is assumed in opposite direction
    4) create a role in Process model and assign primitive processes to it - list of available processes to add depends on current data flow diagram
    5) You need an open physical model for your relational model
    6) Select "transfer process model roles to physical model roles" from context menu of top level DFD - select roles, relational and physical model there - roles with related permissions will be created in physical model
    Entity1 is divided in several subtypes for different business areas.
    And account manager for business_area1 is allowed to work on subtype1 ( view on prime table )...
    Different implementation of entity hierarchies are not processed correctly in that wizard - i.e to get permissions to table corresponding to child entity - that entity should be used in information structure and flow.
    Philip

  • User can not inherited privilege from Role

    DD1 is a new user, CT_GROUP_USER is a role with all tables access right.
    1)First, check the privilege of role CT_GROUP_USER
    select table_name,privilege from dba_tab_privs where grantee='CT_GROUP_USER'
    we can see CT_GROUP_USER have ALL tables' privilege.
    2)Second, grant CT_GROUP_USER role to user DD1
    GRANT ct_group_ADMINISTRATOR to DD1 with admin option
    GRANT ct_group_USER to DD1 with admin option
    select * from dba_role_privs where grantee='DD1'
    we can see CT_GROUP_USER role here
    3)
    USE DD1 to access table ct_user, it looks DD1 did not have privilege inherited from  CT_GROUP_USER
    4) Do additional operation, grant a table privilege to DD1
    grant select,insert,update,delete on CT_ACLENTRY     to DD1 WITH GRANT OPTION
    select table_name,privilege from dba_tab_privs where grantee='DD1'
    DD1 ONLY have CT_ACLENTRY  privilege.
    USE DD1 to access ct_aclentry, it is succeed.
    5) RUN below script on Oracle 10g and Oracle 11g, User DD3 can access tables on 10g but failed on 11g.
    CREATE USER DD3 IDENTIFIED BY DD3
    GRANT CREATE SESSION TO DD3
    GRANT CT_GROUP_ADMINISTRATOR TO DD3
    GRANT CT_GROUP_USER TO DD3
    Question: Is there any setting for GRANT on Oracle 11g?
    Additional: ALTER USER DD3 DEFAULT ROLE CT_GROUP_USER
    Above command can not let DD3 access tables, DD1 neither

    1)
    we can see CT_GROUP_USER have ALL tables' privilege.
    Can we? You don't post results of this statement, you I can only assume you can see it, but I can't
    And granting ALL privileges is a bad idea anyway.
    2) Why 'with admin'?
    3)
    USE DD1 to access table ct_user, it looks DD1 did not have privilege inherited from  CT_GROUP_USER.
    For you maybe, but as you don't post any failing SQLs and any error messages, who can tell?
    5) 'but failed' on 11g.
    Please keep in mind this is a discussion room, not a chat room, and we can't see what you are doing.
    You need all these lines to ask 'My car is broke, please fix my car'. I can't see any car from here.
    Sybrand Bakker
    Senior Oracle DBA

  • Automatic Creation of Roles and Role Mappings in GRC

    Hi,
    we are planning to use SAP Identity Management and SAP GRC Access Management.
    In SAP IDM we have defined several business roles that contain privilieges in SAP systems. When a user is requesting a role, the request will first be sent to SAP GRC for approval and risk checking.
    In order to get this to work, we need to load the business roles of SAP IDM into SAP GRC and we also need to configure the role mapping between the business roles and the technical SAP privileges.
    From what I understood, this could be implemented by loading the required information via Excel filles into SAP IDM.However, this is a quite cumbersome and error-rpone approach an we would like to automate this.
    Is there a way to use e.g. web service calls to create/delete roles and role mappings in SAP GRC?
    BTW: is a documentation of all available GRC web service calls and their parameters available?
    Thanks for your help in advance!
    Best regards
    Tom

    Hi Tom,
    as stated before, the web service description is in the config guide.
    Unfortunately there is no web service to create roles or even mappings in CUP - this is one of many I would also like to se created
    I don't think in your context you will be able to directly send Business Roles to CUP. The role mapping only happens after you send the request, so I'm not sure if that's in time for risk analysis - you will need to try that.
    Are you a customer or a consultant - anyway, feel free to contact me if you need further help integrating CUP and IdM. This is an evolving interface with many possible scenarios, so it's not easy to give you good advise without seeing the full picture.
    Frank.

  • Transport request for BW queries and roles.

    Hi All,
    we need to craete 20 bw queries on 4 multiproviders. We need to save 18 queries as workbooks in one role and the other 2 queries in other role.  Both the roles and queries does not exist and will be created in Developement environment.
    We just want to know how we can transport them in the quality environment. What is the right method to transport them.
    Can we transport all the object queries, workbooks and roles in number of transport requests so that if few queries or workbooks needs any changes then we do not have to transport all objects just the request which includes the changed objects.
    Thanks & Kind Regards,
    Hardeep

    Thanks a lot for all of you for your quick response. But i still have questions.
    If we create one transport for roles and one transport for each query then we will be having 21 transport requests. But the transport request on same multiprovider can lock the clacuated key figures and restricted key figures, if they are present in more than one query, it means they will be present in more than one transport requests, so they can be locked and trasport request will be failed.
    If i just create one transport request for all the objects roles, quaries & workbooks it will not loack any object, and transport request will not fail. But i have to transport all the objects again if i need to change one of the queries.
    Please let me know if there is a method that i can divide my queries as per multiprovider and can create transport requests as per multiprovider so that we can not lock calculated keyfigures and restricted key figures. Is workbooks can be published in the role in the same transport request. If it is and if in more than one transport request we are publishing the different workbooks to the same role, will it lock the role.

  • How to config the user and role in the runtime for executing in the GP?....

    Hi Experts,
    I am learning GP(Guided processor)according the document
    http://help.sap.com/saphelp_nw70/helpdata/en/44/0d5b8f250d5cfae10000000a155369/frameset.htmneed.
    I meet two question when I learn the GP.
    The first:
    This document don't tell me how to config the member framework of the company.  After I design the GP, I have to config the user and role in the runtime for executing. I hope I can use the WDA(webdynpro for java or webdynpro for java) to implement to config the user for executing in the runtime. Thus, the customer don't config the user when runing the GP. But I don't know how to do this.
    I need a document guide step by step to tell me how to do this.
    The second:
    If I use the workflow in the GP, I have to install and config the NWDI(Netweaver Development Infrastructure). Now I have installed the NWDI, but I don't know config it so that I can download it to my machine for develop the workfolw in the GP.
    Do you give me some hints? Thanks a lot.
    Thank a lot.
    Best regards,
    tao

    Hi, Mithu,
    Thanks a lot for your help in advance.
    I have carefully read the document: https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6b66d7ea-0c01-0010-14af-b3ee523210b5.
    Now, I think I have to set the processor of every actions in every process if I use the GP for processing the workflow.
    I am better to hope that I can set the processor to the role for every actions in every process in the runtime through get the organizational structure in the WDA(webdynpro for java or webdynpro for java). Thus, the customer don't set the processor to the role for every action in every process when runing in the GP.   I don't know how to do this. 
    Whether the function is not supported in the GP? If so, I have to config two organizational structure: in the R/3 and in the Portal. I don't think our customer don't receipt this solution.
    Do you give me some hints? Thanks a lot.  My email: [email protected]
    Thanks again.
    Thanks & Regards,
    Tao

  • What privileges or role is required for user to acces the explain plan?

    Hi mates,
    Can anyone pls tell me what privileges or roles(grants) are requred for a user to access the explain plan in oORACLE 8i 8174..
    I think the select any dictionary is not valid for explain plan accessibility in 8i.
    Cheers.

    I already had that... Just that a user (not a dba) requires access to the explain plan and I dont want to grant him a dba role.
    Are you aware of any other grant I can give to the user?

  • Trying to install features and Roles

    OK I've selected my features and Roles. When I run the install from a PXE boot using the Lite Touch Windows PE (x64). The OS installs and reboots and then attempt to run the roles and features install, at which point it dies and return the summary screen
    showing errors. These error are listed below from the ZTIOSRoles log. Close to the bottom of this transaction list is the following.
    <![LOG[Copying source files locally from
    \\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="12:46:55.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1"
    thread="" file="ZTIOSRole">
    I am able to browse to the share and dig down to the directory. I guess at this point my questions are.
    1. Why is it looking to something on the deploymentshare when the fuctionallity is built into windows itself?
    2. What component is ZTIOSRole and how do I find out what it is really looking for?
    Note: This is a 2012 R2 Server and I'm trying to install ... And it fails at the First Role
    File and Storage Services
    ---- File Services
    --------File Server
    --------Data DeDuplication
    Hyper-v
    Role Administration
    ---- Hyper-v Management Tools
    -------- Hyper-v GUI Management Tools
    -------- Hyper-v Module for Windows Powershell
    Windows Server Backup
    Can someone please help
    <![LOG[Microsoft Deployment Toolkit version: 6.2.5019.0]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[The task sequencer log is located at C:\Users\ADMINI~1\AppData\Local\Temp\SMSTSLog\SMSTS.LOG.  For task sequence failures, please consult this log.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole"
    context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles will be installed.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Roles specified in Role:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  FileAndStorage-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Hyper-V]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[RoleServices specified in RoleService:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  File-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  FS-FileServer]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  FS-Data-Deduplication]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Features specified in Feature:]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  RSAT-Role-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  RSAT-AD-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  RSAT-Hyper-V-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Hyper-V-Tools]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Hyper-V-PowerShell]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[  Windows-Server-Backup]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoles.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSRoleServices.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[No items were specified in variable OptionalOSFeatures.]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Event 41003 sent: ZTI Heartbeat: Processing roles (0% complete]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Property Parameters is now = -FeatureName FileAndStorage-Services]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread="" file="ZTIOSRole">
    <![LOG[Validating connection to
    \\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64]LOG]!><time="12:46:54.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread=""
    file="ZTIOSRole">
    <![LOG[Mapping server share:
    \\WIN-DEPLOY-SRV\DeploymentShare$\Operating Systems\Windows Server 2012 R2 SERVERSTANDARDCORE x64\sources\sxs]LOG]!><time="12:46:55.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1"
    thread="" file="ZTIOSRole">
    <![LOG[ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="12:47:00.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="3" thread="" file="ZTIOSRole">
    <![LOG[Event 41002 sent: ZTI ERROR - Unhandled error returned by ZTIOSRole: Path not found (76)]LOG]!><time="12:47:00.000+000" date="11-08-2013" component="ZTIOSRole" context="" type="1" thread=""
    file="ZTIOSRole">

    OK I've selected my features and Roles. When I run the install from a PXE boot using the Lite Touch I am able to browse to the share and dig down to the directory. I guess at this point my questions are.
    1. Why is it looking to something on the deploymentshare when the fuctionallity is built into windows itself?
    I think you are incorrect in stating that all functionality is built into Windows. Windows may require the sxs directory contents to install some OS Roles and Features. Does this directory exist in your Deployment Share, and if so does it contain all the files
    synced with your original OS source?
    Keith Garner - keithga.wordpress.com

  • Making users available for OpenSSO realm group and role assignment?? Help.

    Here is the situation. We have 3 Open SSO realms set up. One we have called OpenSSO-Admin, a second called OpenSSO-Provider and a third OpenSSO-Internal. We are having issues provisioning and managing the OpenSSO-Internal OpenSSO-Provider realms, but OpenSSO-Admin seems to be fine.
    Here is the behavior that is manifest.
    In the 2 'broken' realms, when we create users and assign them to the appropriate Open SSO realm, they appear to be provisioned correctly in IDM as well as the realm (We have validated user creation in LDAP and everything about the user appears to be fine). When we view the groups and roles in the specific resources, we are presented with a list of users that are in Brackets and appear to be provisioned. The brackets indicate that the users are not found as available users. The bracketed users can not be unassigned, nor can any others. note, our bracketed users in the list of assigned users are created from a workflow which assigns them directly to the appropriate group and role based on their business role.
    The third realm, OpenSSO-Admin works fine and we can add, and manage users in the groups and roles within the realm.
    We have ruled out the workflow as a source as the problem persists when we use the tool to manage users. We can create a user from scratch and add them to the realms. In the 'Broken' relms, the users do not appear in thelist of available users to be assigned to the groups or roles. Yet in the 'good realm, everything appears fine. We can move users from one realm to another and the problem persists in the broken realms, but when a user is added to the 'good' realm, everything is fine.
    I have tried reconciling and get no different results.
    Question is, We have isolated that the issue seems to be in the generation / management of the left hand "Available Users" list. How and where is this generated from and how can we check/fix or regenerate this list?
    Thanks.
    Joe

    I should clarify. We are using Sun IDM 8.1

Maybe you are looking for

  • How do I view downloaded public library audiobooks in WMA form on my 4th generation ipod?

    I am able to transfer files using Overdrive.  Overdirve says there are ipod permissions for using these WMA files on the ipod.  The files transfer.  They function (when the ipod is docked to the computer and they play through the computer).  My probl

  • How to write screenplay - help?

    Hi, I'm back, this time having discovered Adobe Story Free Ed. I'd like to use A Adobe Story to produce my first screenplay, but having never wrote a screenplay in my life, I'm at a loss of how to start. this screenplay is about:  an interplanetary "

  • Album Art Not In Song List View

    I have an iPhone 3GS running iOS 4.2.1. When I bring up the iPod application and select "Albums" I see the list of all of the albums with the covers. I also have album covers in cover flow. Howerver, when I click on the album to display the songs the

  • MY ipod is not known on itunes.

    I first plgged in my ipod into my computer and the computer known the ipod but not itunes. Then i rest my ipod and then i clicked restored. After it was done downloading and error came up saying the ipod could not be restores and error occured. the e

  • How to copy procedure to sql plus window.

    I am trying to copy my procedure from note pad to sql plus window and some of the texts are being cut off. How can I copy the entire procedure to sql plus window. thanks