Read Only Privilages to User

H,
I am using RDBMS : 9.2.0.6.0 on AIX 5.3 platform.
I have an query! How can I give read only access to any user on a schema which contains more than 1000 tables.
Thanks
Shivank

set feedback off pagesize 0 heading off termout off
spool my_grants.sql
select 'GRANT SELECT ON '||object_name||' TO '||'your_user;' from all_objects where owner = 'your_owner' and object_type = 'TABLE;
spool off
set termout on feedback on heading on pagesize 400your script is available in
my_grants.sql

Similar Messages

Make UDF Read-only for all users

Hi
Can i use any script to make a UDF read-only for all users?
i am looking at CPRF and CUFD Tables
thanks

Hi,
You should never try updating system table directly. That will against supporting policy by SAP.
Thanks,
Gordon

When i try and open the auto cad Lt that i just downloaded i get this error The directory may be locked by another process or have been set Read Only. Directory: '/Users/hockaday' Please correct this problem and press OK to exit the application.

i get this error why i try and open the auto cad that i just downloaded
The directory may be locked by another process or have been set Read Only.
Directory: '/Users/hockaday'
Please correct this problem and press OK to exit the application.

I did install it in the admin account. Actually the computer has four accounts, one for my husband, where I installed it. One for me which also is set to admin, one is called TEST and has nothing in it and one is guest user.
I don't know how AutoCad is interfacing with the account. That is why I am not sure what to do about it. I read other threads in various places and some seemed to point to something having to do with having multiple users. The solutions were not clear. I was hoping someone else had this problem and could tell me what to do. I tried apple support but no help. I have not tried AutoCad yet as I assumed they wont help since this is a free educational version of their product.

Read-Only Role For User Admin

Hi, I am trying to implement a role that would enable a user to have the same functionality as the out-of-the-box User Admin role, but that this user would not be able to actually create or modify users, roles assignments, etc.
The idea is to have a 'Display' role - with read-only access.
The solution we are comtemplating right now involves getting the source code from SAP, copying it, and modifying it - disabling any interaction. We would then create new iviews, pages, etc from there only for this role. This is a tedious task.
Any ideas on how else this can be done?
Thanks

I have only managed to do this by creating a role and assigning the relevant User Admin iViews to the role and then changing the End User Permissions on the role.
I assigned the ReadAll Premission. That did the trick for me.
Groups unfortunately require the manage_groups Permission, so we do not allow the viewing of groups.

Read only privilages

i have a western digital passport 250gb hd with 3 partitions on it.
it has one that i use for general files etc, one that is time machine backups and one that did have tiger on it but is currently empty (maybe its not a partition anymore just empty space??). theye are all formatted to mac os extended. i erased the tiger partition and tried to make the general one bigger. it gave me an error about the general drive so i verified the disk which then gave me an error about my time machine backups so i repaired he disk (the hard drive was selected in disk utility not any of the partitions) it fixed the general one but said time machine backups wasn't fixed and has limited functionality. i ejected the disk and plugged it back in and it took ages to appear. the general partition appeared but an error came up saying there was a problem with time machine backups and it has limited functionality and should be backed up and erased. so i tried to copy my backups folder onto my mac and nothing.
i got info on the backup folder and it said i can only read, the same was for all sub folders and the drive itself (in the name and privilage section it says alex lyons (me) can read and write, unknown can read and write and everyone can read only, above all that it says you can only read). how can i fix this so i can keep my time machine backups and erase the partition??

The only software I know that let's you do it is iPartition. It just came out with the Leopard Compatibility. It coast $50 though...
http://www.macupdate.com/info.php/id/15360/ipartition
The other thing you can do is, that's if you have enough HD space in your computer and time, copy the External HD image (via DiskUtility) into your HD, and erase the External completely and make it only 1 partition, and then copy back the image to the External HD.

Granting Read Only Access to user in another schema

Oracle Database 10g
Red Hat Enterprise Linux Server release 5.3
We are requested by a developer to grant his account read only access to TABLES, VIEWS, INDEXES, SEQUENCES, FUNCTIONS, PROCEDURES, PACKAGES, TRIGGERS, JOBS of another schema.
I know granting read only access to Tables and Views. But is it possible to grant READ ONLY access to other mentioned objects ? How to do it ?
And some views are in INVALID status.
I tried to compile them using alter view owner.viewname compile;
But got this ---- Warning: View altered with compilation errors.
Those views are still in INVALID status. And then I tried to use utlrp.sql . Same result.
Then I used the following
SELECT TEXT FROM DBA_VIEWS WHERE VIEW_NAME='view-name';
select REFERENCED_NAME,REFERENCED_TYPE from dba_dependencies where name='view-name';
It turns out some reference types are non existent.
Does that mean DBAs cannot do anything about this ?

Nilton wrote:
We are requested by a developer to grant his account read only access to TABLES, VIEWS, INDEXES, SEQUENCES, FUNCTIONS, PROCEDURES, PACKAGES, TRIGGERS, JOBS of another schema.
I know granting read only access to Tables and Views. But is it possible to grant READ ONLY access to other mentioned objects ? How to do it ?
TABLES -> YES grant SELECT
VIEWS -> YES grant SELECT
SEQUENCE -> YES grant SELECT
INDEXES -> There is no read access for indexes...indexes are put on tables and a user who has read access on tables can read the index as well.
FUNCTIONS / PROCEDURES / PACKAGES -> I am not sure what you mean by read access on procedures, functions and packages. You may grant EXECUTE privilege on these.
TRIGGERS -> there is no read access on triggers required. They are implemented on tables for a DML event. If the user has DML access he has the execute access on the trigger as well.
JOBS -> I am not sure what to read from Jobs.
And some views are in INVALID status.
I tried to compile them using alter view owner.viewname compile;
But got this ---- Warning: View altered with compilation errors.
Those views are still in INVALID status. And then I tried to use utlrp.sql . Same result.
Then I used the following
SELECT TEXT FROM DBA_VIEWS WHERE VIEW_NAME='view-name';
select REFERENCED_NAME,REFERENCED_TYPE from dba_dependencies where name='view-name';
It turns out some reference types are non existent.
Does that mean DBAs cannot do anything about this ?There are compilation errors in the Views. e.g. the view may be referring to a table which doesn't exist etc.
Unless you fix the error in the view you can't compile it and male it valid. Fix the view errors. If objects are non existing create them or refer to view to some where else.
If the nonexistent objects were mistakenly dropped, or the data file which contained those objects was dropped, no matter what was the reason for that object to be gone a DBA can bring it back if he is a well prepared DBA and has setup his database for such kind of disasters.
Now tell us why those objects are non-existent ? were they meant to be gone ? or they were dropped mistakenly?
Now here are my guesses:
If they were meant to be gone then probably the views definitions need to be adjusted not to refer them anymore.
If they were mistakenly dropped then:
Do you have them in recyclebin? (only tables) if YES just FLASHBACK TABLE <<tablename>> AS BEFORE DROP.
Is your database has Flashback database ON? if YES FLASHBACK DATABASE until 'time/scn just before the object was dropped'
Do you have backups and your database is running in ARCHIVE LOG mode? if YES perform an incomplete recovery using RMAN.

Shared folder read-only for other users

We setup a new iMac with three accounts for members of the family. Two have admin rights. We installed Quicken Essentials 2010 for Mac, and put the Quicken data file in the Users/Shared/Quicken folder. Everything worked great for user #1 who copied the file to the shared Quicken folder.
User #2 (also an admin) was not able to open Quicken, as an error stating the file was read-only. I checked permissions, and set user1 and user2 with read/write and everyone with read/write. Basically, all permissions on that data file are read/write for everyone.
That still did not work. Then, I set user2 as the owner. Now, user2 can use Quicken and the file, but user1 cannot. Same error.
How do we get it so that files in the Shared folder are really shared and accessible to everyone?

The solution that I discovered to work: Place your quicken data file(s) on an external drive (or create a partition if you only have access to a single hard drive) and have permissions on that drive (o volume) set to "ignore ownership on this volume" It works for me. Both accounts can now access my single quicken data file. To set the permissions on a drive/volume, select the drive or volume, choose "get info" from the file menu and at the bottom of the get info window mark the box "Ignore ownership on this volume".
It might be worth your while to spend ten bucks on an ebook titled Take Control of Sharing Files in Snow Leopard. Take Control of Sharing Files in Snow Leopard discusses
sharing digital media files.
http://www.takecontrolbooks.com/snow-leopard-sharing?pt=INTERNAL

Grant read only to one user

Hello everyone,
I'd gone through unlimited forums and blogs but not got any proper solution and is getting confused as I'm not good in sql.
I had created a db user.
I need grant it following privileges same as read only apps user:-
(1) It can only select all tables except dba related tables, views etc.
(2) It can only select any table of any user
(3) It can only select any function, procedures and every custom objects.
(4) it can select any table without prefixing apps. before table.
Step by step instructions required with sql statements.

Hi,
Richa wrote:
Hello everyone,
I'd gone through unlimited forums and blogs but not got any proper solution and is getting confused as I'm not good in sql.
I had created a db user.
I need grant it following privileges same as read only apps user:-
(1) It can only select all tables except dba related tables, views etc.
(2) It can only select any table of any userThe SELECT ANY TABLE system privilege enables a user to select from any table including dba related tables and views. If you want to exclude them, then you have to give SELECT privileges on all the other tables, one at a time, and remember to do it for new tables as they are created.
(3) It can only select any function, procedures and every custom objects.The EXECUTE ANY PROCEDURE system privilege does that.
(4) it can select any table without prefixing apps. before table.Don't be sill. That's like saying "it can select from any table without giving the table name", or "without typing anything".
You might reduce how often you have to qualify the table name with the schema name by using "ALTER SESSION SET CURRENT_SCHEMA = schema_name;".
Step by step instructions required with sql statements.To give the privileges mentioned in (1), (2) and (3) to user FUBAR, log in as SYSTEM and say
GRANT SELECT ANY TABLE TO fubar;
GRANT EXECUTE ANY PROCEDURE TO fubar;

Give the read only access to user on Apps Schemas!

Hi,
How we can create the database user and give the access on APPS schemas(INV, PO etc).
Please assist me.
Thanks,
Faziarain

Dear Hussein,
I followed anil passi forum for creating apps read only schema , but only issue is we have multiorg enabled .
what is the modification dowe need in this step.
Step 4
Write a after logon trigger on apps_query schema. The main purpose of this trigger is to alter the session to apps schema, such that the CurrentSchema will be set to apps for the session(whilst retaining apps_query restrictions).In doing so your logon will retain the permissions of apps_query schema(read_only). Howerver it will be able to reference the apps objects with exactly the same name as does a direct connection to apps schema.
conn apps/&1 ;
PROMPT CREATE OR REPLACE TRIGGER xx_apps_query_logon_trg
CREATE OR REPLACE TRIGGER xx_apps_query_logon_trg
--16Jun2006 By Anil Passi
--Trigger to toggle schema to apps, but yet retaining apps_query resitrictions
--Also sets the org_id
AFTER logon ON apps_query.SCHEMA
DECLARE
BEGIN
EXECUTE IMMEDIATE
'declare begin ' ||
'dbms_application_info.set_client_info ( 101 ); end;';
EXECUTE IMMEDIATE 'ALTER SESSION SET CURRENT_SCHEMA =APPS';
END;
Thanks and Regards

How to set a shared calendar 'read only' for SOME users in ML server

I am setting up Mountain Lion Server and wish to set up a series of calendars to be used by a studio of approx 20 people - two calendars will show the kind of thing I'm trying to achieve.
Calendar A shows appointments and meetings - it can be viewd and edited by all
Calendar B shows who is taking leave and when - it can be viewed by all, but edited by only a small group of people
What is the best way to set this up? On The earlier version of the server we had set up calendars on the server and delegated - this is not possible on Mountain Lion Server.

I don't think you can do this strictly by personalization since you need to use SPEL, unless the attribute you will be using for the display to control readonly is already present in the VO. Basically you need to check a value, say Supplier, and have another attribute say readOnly, tthat is set to TRUE if the supplier equals your desired supplier and FALSE for all other suppliers.
Regards,
LC

ADF: Read only user access to application role on BTFs

Hi,
My JDeveloper version is 11.1.1.5
I am trying to create read only users in my adf application. But I am unable to give read only permissions to the user on bounded task flows/ .jssf page which have editable tables and forms.
I have searched for the information, I did not find any solution.
Could some one please help me?
Many thanks in Advance
--Anil
Edited by: 977652 on Apr 5, 2013 6:50 AM

If you are using ADF BC, you can protect fields at EO level or protect the entire EO (check the security tab). The frontend will then render fields as read-only if your user is only allowed read permissions.
If you are not using ADF BC, you can implement a custom resource permission as described here (ignore the fact that this is for an entity, the principle remains the same) http://www.oracle.com/technetwork/developer-tools/adf/learnmore/76-insert-update-entity-protection-334421.pdf
You must then add an el expression to each fields readOnly attribute or you can implement a phaselistener that traverses all fields enclosed within a form and make them readonly.

Read Only Access while assigning Analysis Types and Reports in User/Group

Hi Team,
While Assigning Analysis Type,Reports and Workbooks to User "Read" option is not enabled. It is not working and as soon as we select analysis type ,Only one option is editable "Create/Update/Delete". The other two Option is always there as display "Read" and "Execute" . Execute might work with "Scripts template" but "READ" should work for analysis types and Reports.
We are already struggling with "Read Only" Access in security filter as its not working now.
Thanks
Edited by: user7918731 on Mar 2, 2011 11:22 AM

The behavior for Analysis type, workbook and script as follow:-
The Analysis type create/update/delete option will be enabled, read and execute option will be disabled by default.
The report workbook read option will be enabled, and other two options will be disabled.
The script execute option will be enabled, and other two option’s will be disabled.
For providing “Read Only” access in security filter, Switch to the administration tab, Click on Security Filters, Click on Add button, Open Create Security Filter window, Select the access level to Read Only and select user in assigned user , Click on ok.
It should work.

Tabular Form - Read only condition for certain users

Is it possible to make a select list field in a tabular form read-only to certain users? Here's the situation:
The tabular form lists the users who need to select "Approve" or "Reject" in that field (they are approving or rejecting an engineering change)
I want all of them to see the approval/rejection of their team, but only have access to edit the select list associated with their record.
Thanks in advance.
Apex 4.0.0.00.46

You could use either "authorisations" tab or "conditional display" for the relevant column attribute.
Report Attributes->Column Attributes->authorisationsIt would be better to have some more detail about what you are trying to get (maybe a quick mock up of the form, for example) but, I can envision something along the lines of the following:
For each approval/rejection field:
1. Create an authorisation appropriate for access to to each approval/rejection field e.g. authorisation scheme "FOO"
2. In the relevant fields column attributes, set the authorisation to "FOO"
3. now create a read only "public" copy of the above field, using the "display as text (based on LOV does not save state)" - set the authorisation for this field as "{NOT FOO}"
(if you don't want to use authorisations, you could build an equivalent using "conditional display" instead, which is basically the same thing, except column specific)
The downside is of course that you're duplicating fields in your query, which creates a bit of redundancy. There may be better ways to achieve this (maybe you could make use of the APEX_ITEM api, for example) but this is fairly easy to set up IMO.

Read-Only cell for all users

Hi,
We're running an 11.1.1.2 Planning application. A member in the Account dimension is read-only for all users including the Admin account.
The member is read only when accessed through a Data Form or through Smart View.
We addressing the Account dimension at level 0 on the data form.
The member is not Dynamic.
The member is only locked for EUR and GBP currencies.
The member has previously been moved to a new location in the Account dimension however we have run multiple database refreshes since the move.
Let me know if you need any more info. Any help which can be provided would be greatly appreciated.
Thanks
Jim

Hyperion Planning and More...: Why My Data Form is Still Read Only...!!!
See if any of the points mentioned here is any help.
Cheers..
Rahul S.

Create Read Only User in Oracle 10.2.0.4

Hi., Friends,
I want to create an user in Oracle 10.2.0.4 with read only rights of my hole database. I am not having Enterprise Manager Console so i want create from command prompt.Can u please explain me the step for create and assign read only role to user.
Regards
Mahendran

Hi Mahendra,
I am happy with Surendrajain's reply, but with this sql you will not able to view the data present in SAP Schema,
The entire sql query with the comments in bracket is given below
1) create user PPMTEST identified by program1;
2) Create role PPMROLE;                           { PPMROLE is the role name which will be later assigned to the user PPMTEST}
3) Grant CONNECT to PPMROLE;                                 { CONNECT role allows the user to connect to oracle database}
4) Grant SELECT_CATALOG_ROLE to PPMROLE;       { SELECT_CATALOG_ROLE role allows the user to view the oracle data dictionary}
5) GRANT SELECT ANY TABLE to PPMROLE;             { "SELECT ANY TABLE" privilege allows the user to view the table which is present in the SAP schema}
6) Grant PPMROLE to PPMTEST;                                         { Assigning the role PPMROLE to the user PPMTEST}
7) COMMIT;
Thanks and Regards
Debdeep

Read Only Privilages to User

Similar Messages

Maybe you are looking for