Problem with role and user; user can't see the table
Hello forum,
I've created a role:
CREATE ROLE enr_service;
GRANT CONNECT TO enr_service;
GRANT ALL ON Locataires TO enr_service;
GRANT ALL ON Batiments TO enr_service;
GRANT ALL ON Sportifs TO enr_service;
GRANT SELECT ON Epreuves TO enr_service;
and also a user:
CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
GRANT enr_service TO ENR1;
ALTER USER ENR1 DEFAULT ROLE enr_service;
ALTER USER ENR1 DEFAULT TABLESPACE USERS;
I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
SELECT * FROM Sportifs;
ORA-00942: table or view does not exists
I can't see what I've done wrong. Any help is appreciated.
Sebastian
user2019788 wrote:
Hello forum,
I've created a role:
CREATE ROLE enr_service;
GRANT CONNECT TO enr_service;
GRANT ALL ON Locataires TO enr_service;
GRANT ALL ON Batiments TO enr_service;
GRANT ALL ON Sportifs TO enr_service;
GRANT SELECT ON Epreuves TO enr_service;
and also a user:
CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED ON USERS;
GRANT enr_service TO ENR1;
ALTER USER ENR1 DEFAULT ROLE enr_service;
ALTER USER ENR1 DEFAULT TABLESPACE USERS;
I can connect to the database with this user but when I try to query a table he's been granted access to I get an error message:
SELECT * FROM Sportifs;
ORA-00942: table or view does not exists
I can't see what I've done wrong. Any help is appreciated.
SebastianThat's probably because ENR1 doesn't have any table named SPORTIFS and he didn't qualify the table name with the schema name ...
Similar Messages
-
Problems with JFileChooser and Windows 2000 (can't see mydocuments contents
Hi! I've an applet which has a JFileChooser component. In other Windows, I can select the MyDocuments folder and it goes there and list all the contents OK. But, in Windows 2000, when I go to MyDocuments, none of the contents is listed in the file chooser. I need to navigate through all the directories to get there (C:\documents and settings\user\my documents) and then, it shows its contents, but obviously, I don't want it to be this way because is difficult for the common user.
Any idea of why is going on this?
Thanks in advance!Hello, You need to use something like o=isp as the
root DN, then o=yourorg.com goes beneath it.
i.e.
For the other questions on setup, just choose o=isp
as base DN when you set up the directory server. When
you run ims_dssetup.pl, choose o=internet as the DC
tree base, then choose o=isp as the user/groups base
suffix.
When you are installing messaging server it will ask
where to put the default organization, this is where
you would choose o=abc.com, o=isp
For more info on how this structure works please take
a look at this link and it will all fit into place:
http://docs.sun.com/source/816-6017-10/changes.htm#170
8Alright, I got ims_dssetup to run successfully. But now when the ims 5.2 installation is about 50% done, I get the message:
A serious problem occurred while installing the iPlanet Messaging Server Messaging SIE entry in LDAP (msg.cfgldap.sie.inf). It reported the following problem:
The server configuration for the Messaging SIE entry in LDAP (msg.cfgldap.sie.inf) cannot be created. -
Problem with Roles and Triggers
I'm having a strange problem with Roles and Triggers in Oracle. It's a little difficult to describe, so bear with me...
I'm trying to create a trigger that inserts records into a table belonging to a different user/owner. Of course, the owner of this trigger needs rights to insert records into this other table. I find that if I add these rights directly to the owner of the trigger, everything works okay and the trigger compiles successfully.
However, if I first create a Role and grant the "insert" rights to it, and then assign this role to the owner of the trigger, the trigger does not compile successfully.
To illustrate this, here's an example script. I'm using Oracle 10g Release 2...
-- Clean up...
DROP TABLE TestUser.TrigTable;
DROP TABLE TestUser2.TestTable;
DROP ROLE TestRole;
DROP TRIGGER TestUser.TestTrigger;
DROP USER TestUser CASCADE;
DROP USER TestUser2 CASCADE;
-- Create Users...
CREATE USER TestUser IDENTIFIED BY password DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" QUOTA UNLIMITED ON "USERS";
CREATE USER TestUser2 IDENTIFIED BY password DEFAULT TABLESPACE "USERS" TEMPORARY TABLESPACE "TEMP" QUOTA UNLIMITED ON "USERS";
CREATE TABLE TestUser.TrigTable (TestColumn VARCHAR2(40));
CREATE TABLE TestUser2.TestTable (TestColumn VARCHAR2(40));
-- Grant Insert rights on TestTable to TestRole...
CREATE ROLE TestRole NOT IDENTIFIED;
GRANT INSERT ON TestUser2.TestTable TO TestRole;
-- Add TestRole to TestUser. TestUser should now have rights to INSERT on TestTable
GRANT TestRole TO TestUser;
ALTER USER TestUser DEFAULT ROLE ALL;
-- Now, create the trigger. This compiles unsuccessfully...
CREATE TRIGGER TestUser.TestTrigger AFTER INSERT ON TestUser.TrigTable
BEGIN
INSERT INTO TestUser2.TestTable (TestColumn) VALUES ('Test');
END;
When I do a "SHOW ERRORS;" after this, I get:
SQL> show errors;
Errors for TRIGGER TESTUSER.TESTTRIGGER:
LINE/COL ERROR
2/3 PL/SQL: SQL Statement ignored
2/25 PL/SQL: ORA-00942: table or view does not exist
SQL>
As I said above, if I just add the Insert rights directly to TestUser, the trigger compiles perfectly. Does anyone know why this is happening?
Thanks!
AdrianHi Raghu,
If the insert rights exist only on TestRole, and TestRole is assigned to TestUser, I can do the INSERT statement you suggest with no problems if I just execute it from SQLPlus (logged in as TestUser).
The question is, why does the same INSERT fail when it's inside the trigger? -
I do have problem with my apple Tv. I can't play the movies that I have in my external hard drive
Hi to all. I do have a problem with my apple Tv. I can't play the HD movies that I have in my external hard drive which is connenected to my macbook pro. Some of them don't play at all and it's switching off the XBMC, and some of them are just starting for a few seconds and then is getting paused trying to buffering for a long time. The simple avi movies are playing with fewer stops for buffering. What is the problem? Can you help me?
Have you jailbroken your device? If so we cannot help you here
-
Is there any way to darken the gridlines in iCal? I'm using it on a Macbook with Lion and find it difficult to see the gridlines on the iCal display.
''Problem:'' For whatever reason, NoScript is stopping Runescape Community Toolbar from working properly which freezes your first Firefox window.
''Fix:'' Uninstall the toolbar. Disable NoScript. Install the toolbar. Add your RS account to it and make sure it works, then Enable NoScript again.
EDIT: Posted a fix earlier that was wrong. Corrected to the right one, sorry ^_^ Answer was on Runescape Forums. -
Please, I need help. I´ve just downloaded your adobe creative cloud and now I CAN´T SEE THE DESKK ON MY PC!!!!!
Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html -
Haven't been able to use pages for a while. Keep getting following message. Have tried reinstalling iWork, but no luck. Same problems with Keynote and Numbers/
Have you moved Pages from its installed location? Or just dragged a copy to your current system?
It can't find some of its resources apparently.
Peter -
Final user's can not see the data due to limited authorization.
We have created a InfoSet with three info Objects, 0Account, 0Costcenter and 0COMP_CODE. 0Costcenter have an attribute retail location 0RT_LOCATIO.
0RT_LOCATIO is an authorization relevant object. We as consultants can execute the infoset properly, but final user's with limited authorizations can not see the data because of authorization failier
We hae several options to solve the issue, deleselect the auth. flag in the infoobject; delete the infoobject from the attributes of the cost center or create an authorization object and assign it to the final user's profile. But we don't want to go that way.
My question is, is there any way to avoid including this attribute in the infoset definition? We are not using it in the query and we don't need it, so if we could delete it from the infoset (in the same way you add or delete infoobjects from an Infocube) without changing the cost center aster data, we will have our problem solved.
Does anyone how to do this (if possible)?
Thanks in advance!Just do two things to find the authorization check failed for that user.
1. Execute SU53 output and find out the authoirzation check failed. If yes, please send that to BASIS Team.
2. Next one, switch on the authorization trace in ST01 and ask that user to see that data. if the user is failed with authorization issue. switch off the trace in ST01 and find out the issue.
Do this way, if it is not successful you can go for any other alternate way.
Hope this would help you. -
Have just updated to the latest version of ios6 on my iPhone 4Sand now I can't see the apps that need updating. Is showing 8 but just left with blank screen- how do I fix this?
Look for the little Flag button in the lower left corner.
-
I have a Netgear WNR2000 router and an Edimax EW-7438RPn wifi range extender. I have gotten the range extender to work well with my MacBook Air, however, while my iPhone 3Gs and iPad mini can pick up the wireless signal from the range extender, they cannot get to the Internet through it. No IP Address, Subnet Mask, Router, or DNS appear in the details on either the iPhone or the iPad mini. How do I get the iPhone and the iPad to connect to the Internet. It seems that the problem is with the iPhone and iPad, since the MacBook Air works just fine with this set up.
Junglemania,
Go into the setup page of the EW-7438RPn. Go to Wireless Advanced Settings. There is a WMM settings. Make sure the WMM is enabled.
This may help you out. -
Problem with Afaria and LDAP user authentication in Android device
Hi all,
I have a server with Afaria 7 (SP4, hotfix3) installed. In this Afaria there is a tenant (system) without LDAP/AD integration working correctly. I need to have other tenant with LDAP integration in which the users must be authenticated.
I know that for iOS devices is necessary reinstall the iphoneserver selecting "Afaria Server managed authentication" but at first I want to make run the Android devices. For this reason I don't do this yet.
I follow the next steps:
1-Create a new tenant
2- Configure LDAP integration
3-Create a inventory policy with authentication required
4-Create a static group associated to the inventory policy
5-Create a enrolment policy associated to the static group.
When I launch the Afaria agent on the device, the user/password parameters are required. After fill the user/password parameters, the device connect to the server and then is show the message "user or password incorrects".
I have seen the log and seem the problem is that Afaria can't authenticate this user.
I validate that Afaria can "see" the LDAP users creating a user group that contains this user(JimenM99)
The problem is autentication, because if I remove "autentication required" of the inventory policy, the device enrol correctly.
Could you please help to solve this problem?
Thanks in advance.Hi all,
I have a server with Afaria 7 (SP4, hotfix3) installed. In this Afaria there is a tenant (system) without LDAP/AD integration working correctly. I need to have other tenant with LDAP integration in which the users must be authenticated.
I know that for iOS devices is necessary reinstall the iphoneserver selecting "Afaria Server managed authentication" but at first I want to make run the Android devices. For this reason I don't do this yet.
I follow the next steps:
1-Create a new tenant
2- Configure LDAP integration
3-Create a inventory policy with authentication required
4-Create a static group associated to the inventory policy
5-Create a enrolment policy associated to the static group.
When I launch the Afaria agent on the device, the user/password parameters are required. After fill the user/password parameters, the device connect to the server and then is show the message "user or password incorrects".
I have seen the log and seem the problem is that Afaria can't authenticate this user.
I validate that Afaria can "see" the LDAP users creating a user group that contains this user(JimenM99)
The problem is autentication, because if I remove "autentication required" of the inventory policy, the device enrol correctly.
Could you please help to solve this problem?
Thanks in advance. -
Problem with Photoshop and Corrupt User Account
This morning when I attempted to save a document I was working on in Photoshop CS3, the application suddenly crashed. Since then, I have not been able to reopen Photoshop without it quitting unexpectedly within seconds of launch. Never had this happen before. I tried rebooting, resetting the PRAM, fixing disk permissions, repairing the disk, rebuilding the directory with DiskWarrior, trashing Photoshop's preference files and reinstalling the program with no change. None of the other apps on my computer seem affected, only Photoshop.
What did make a difference was creating a new user account. While logged in to the new account, Photoshop launches fine and I can work in it with no problem. I also have a Carbon Copy Cloner backup of my boot drive (which I've failed to keep up to date - it's a few months old) and Photoshop works fine from there (if I boot from the clone).
So it seems that my primary user account has become corrupted. What I'm wondering is if (1), I can "repair" my old User Account or (2), if I should move all my user files to the new User Account (and the best way to do that) or (3), if I should try and update the clone of my hard drive without transferring any of the User Account or possible OS corruption to it and then wipe my primary drive clean (after I've tested the clone) and reclone the clone back to the primary.
Thanks for reading.Try booting into the Safe Mode using your normal account. Disconnect all peripherals except those needed for the test. Shut down the computer and then power it back up after waiting 10 seconds. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. When you reboot normally, the initial reboot may be slower than normal. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application un-installer. For each disable/delete, you will need to restart if you don't do them all at once.
Safe Mode - About
Safe Mode -
Problem with iTunes and multiple user accounts in Windows
I am running iTunes on a PC (Windows XP) and have multiple user accounts. When I switch between user accounts and try to open iTunes, I get a message that tells me I can't open the program because another user is using it. Is it really true that I can only have iTunes open in one user account at a time on a PC with multiple user accounts ?!? If not, what am I doing wrong?
You are right, can only have one open. You have to log out of a user before logging in to another user to use iTunes. Do not use the fast user switching ability of Windows.
-
Problems with roles and ldapgroups in IDM 8
Hello Guys,
I'm facing a problem. I have to put users in ldap groups and i using roles. I have create an IT role and a Business role.
I use the IT Role to add users in ldap groups through a rule and the business role to assign groups to a user. The business contains the IT Role.
Normally, when i put a list of two groups in the rule, i must have user put in the two groups and if i remove one of this group in the rule, user must be removed from the choosen group. Unfortunatly, the second scenario doesn't work. I always have the two. And i can't removed the users from all groups.
Is there something that i'm missing?
I'm using IDM 8.A patch 2 and Sun Directory Server 6.3.
The definition of my IT Role is :
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Role PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Role authType='ITRole' name='My Groups'>
<ResetLimit count='0'>
</ResetLimit>
<Services>
<ObjectRef type='Resource' name='RESSOURCE LDAP'/>
</Services>
<ContainedRoles>
</ContainedRoles>
<RoleAttributes>
<RoleAttribute name='My Groups:#ID#RESSOURCE LDAP:groups'>
<Comment>Auto generated by Role Mes Groupes</Comment>
<AttributeName>groups</AttributeName>
<AttributeValueRef>
<ObjectRef type='Rule' id='#ID#RuleListeUserGroups' name='Rule Liste User Groups'/>
</AttributeValueRef>
<Requirement>Authoritative merge with value, clear existing</Requirement>
<ResourceRef>
<ObjectRef type='Resource' id='#ID#RESSOURCE LDAP' name='RESSOURCE LDAP'/>
</ResourceRef>
</RoleAttribute>
</RoleAttributes>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#All' name='All'/>
</MemberObjectGroups>
</Role>Thanks All!i have it role mapped to ldap groups implemented successfully with the following...
1. Instead of a rule adding to groups, you should have a resource attribute mapping ... this is described in the ldap resource adapter references....
<AccountAttributeType id='101' name='ldapGroups' syntax='string' mapName='ldapGroups' mapType='string' multi='true' />2. Now have your IT ROLE to have the group population like the following
<RoleAttribute name='MYROLE:RESOURCE-NAME:ldapGroups'>
<AttributeName>ldapGroups</AttributeName>
<AttributeValueString>
<List>
<String>cn=Wirelessaccess,ou=Groups,dc=example,dc=com</String>
</List>
</AttributeValueString>
<Requirement>Authoritative merge with value</Requirement>
<ResourceRef>
<ObjectRef type='Resource' name='RESOURCE-NAME'/>
</ResourceRef>
</RoleAttribute> -
Problems with comments-enabled PDF: I can't see my client's comments
Hello,
I really hope somebody can help me.
THE SITUATION: I have a comments-enabled PDF. The comments repository is located on my externally hosted webdav server. Both my client and I have local copies of the PDF, and up until today, my client was able to post comments on the PDF.
THE PROBLEM:
- Today, my client suddenly noticed that the review had "expired" and she can't post her comments.
- I am able to see and post my own comments in the PDF, but I can't see my client's comments in the PDF.
- My client can see her own comments. (I don't know if she can see mine.)
- If I log into my webdav site with FTP, I can see my client's XML file which contains all her comments. I can also see my own XML file which contains my comments, and it is indeed updating each time I add a new comment.
I thought it would be possible to import the XML file containing all her comments into the PDF. However XML is not a format that Acrobat allows you to import!!! It only will accept FDF, XFDF, or PDF!
Phone tech support was spectacularly unhelpful. I seriously doubt "Nelson" from Bombay has ever used Acrobat in his life. He asked me to send the file to him, which I did, but I haven't heard back.
So my question is:
1) How can I get my Acrobat file to view the comments which are sitting on the comments server in an xml file? Why would it see mine but ignore hers?
2) If I can't get the comments to show up, then can I at least import my client's comments, which are currently sitting in an XML file, into my PDF?
bonus question: Why is there so little documentation about dealing with webdav comments repositories? Is it considered better to use acrobat.com instead of our own webdav server or something?
This is Acrobat 9.1.0 Pro for Leopard.Thanks for your reply, Steve. Yes, she did say that there was an end date, but when I go there, I don't see one. Baffling.
I have decided to go over to her office, create an archive of her PDF, then try to pull those comments into a new PDF.
This is a GIANT PAIN. And egg in my face, after I've sold this client on the ease and convenience of a PDF workflow!
So is there any way to get xml comments back into a PDF???
Maybe you are looking for
-
Read file from directory, update contents of the each file
hai, I could not understand how to debug the error i have now. target 1- read the files from directory // i able ot do this part 2- for each file for each file read the content & compare with the existing List & update the list // i able to do this p
-
How can I transfer all my photos on iPhone to iCloud for archive and delete them off my phone?
I do not want to simply backup my phone with iCloud. My iPhone's memory is full and I would like to transfer all my 10,000+ photos to iCloud for safe keeping, and delete them off my phone. Could I do that? I know that iCloud is typically used for
-
How can I delete photos in iPhoto?
Using iPhoto 8.1.2, I deleted several images in a certain event. But as soon as I opened the same event later, all the deleted images were there again! I tried once more and also emptied the trash-bin. I even closed iPhoto. Started iPhoto, opened the
-
I just recently bought a PC, and I just spent some money on some new songs. I plugged my iPod into the computer and my photos immediately began to sync to my photos library, but my music will not move to my iPod. This did not happen on my old PC. Sug
-
I'm getting classes that are not from JDBC Driver
Hello I configured a data source connection against RAC using the oracle.jdbc.pool.OracleDataSource. When I get the connection and check what classes I'm getting I get the following: java.sql.Connection: com.evermind.sql.DriverManagerConnectionPoolCo