Read only users and row locks

Can read-only users obtain row locks on non-temporary (i.e,. visible to other users) tables, for example through SELECT FOR UPDATE, even though they couldn't not ultimately modify said tables?

Yes.
Here is an example with Oracle XE 11G and HR schema:
Connecting as user having only CREATE SESSION and SELECT privilege on HR.JOBS table:
SQL> desc hr.jobs;
Name                                      Null?    Type
JOB_ID                                    NOT NULL VARCHAR2(10)
JOB_TITLE                                 NOT NULL VARCHAR2(35)
MIN_SALARY                                         NUMBER(6)
MAX_SALARY                                         NUMBER(6)
SQL> select * from session_roles;
no rows selected
SQL> select * from session_privs;
PRIVILEGE
CREATE SESSION
SQL> select owner, table_name, privilege from user_tab_privs;
OWNER                          TABLE_NAME
PRIVILEGE
HR                             JOBS
SELECT
SQL> select job_title from hr.jobs for update;
JOB_TITLE
President
Administration Vice President
Administration Assistant
Finance Manager
Accountant
Accounting Manager
Public Accountant
Sales Manager
Sales Representative
Purchasing Manager
Purchasing Clerk
JOB_TITLE
Stock Manager
Stock Clerk
Shipping Clerk
Programmer
Marketing Manager
Marketing Representative
Human Resources Representative
Public Relations Representative
19 rows selected.
SQL>Now connecting as HR following statement hangs:
SQL> connect hr/hr
Connected.
SQL> select * from jobs for update;Going back to first session:
SQL> update hr.jobs set min_salary=0;
update hr.jobs set min_salary=0
ERROR at line 1:
ORA-01031: insufficient privileges

Similar Messages

  • When i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

    when i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

    Hi lvdmerwe!
    I have two articles here for you that should be able to help you troubleshoot this issue further:
    Trouble adding music to iTunes library or importing audio CD
    http://support.apple.com/kb/ts1387
    iTunes: Missing folder or incorrect permissions may prevent authorization
    http://support.apple.com/kb/ts1277
    Take care, and thanks for visiting the Apple Support Communities.
    -Braden

  • Problem with Read-only user being able to add and delete files and folders.

    The setup:
    Computer #1
    iMac (intel) running 10.5.5
    File sharing ON
    Sharing folder on external USB drive called 'iTunes' (but not the drive volume itself)
    Users:
    - Everyone = Read Only
    - Admin(me) = Read/write
    - UserA = Read Only (with account PW and username identical to local login for computer below)
    Computer #2
    UserA's iBook G4 running 10.4.11
    When I go to finder>network>iMac>connect it prompts me to login which I do and then select 'iTunes' folder which is visible and mounts successfully. I can see all files, access them all. Life seems great. Then I discover that I can also modify and delete files from the iBook, and create and delete directories.
    I'm new to networking and although I've setup and managed minimal networking tasks on PCs before, this is my first foray into the Mac networking world. Please help.
    What am I doing wrong? What haven't I set?
    Thanks in advance.

    Sorry, I should have clarified this in the first email.
    When I login from the iBook, I am logging in under a read-only user (not as myself, who is admin on the iMac). The user on the iBook has only been given read-only permissions on the iMac yet is able to add and delete files.
    This read-only login/PW however, is the admin account on the iBook, but that shouldn't allow this person to write on the iMac so far as I understand things...right?

  • Create "Sysadmin Read only" Responsibility and add to Application user.

    Hi
    I am using 11.5.10.2 (Single node installation) on RedHat LinuxAS4 OS. I have couple of requests from the users.
    Issue 1:
    The user has requested to "Sysadmin Read Only" Responsibility and attach that responsibility to his user. Please find below the request raised by the user.
    Can u add query only access for Sysadmin responsibility as I need an option to check the values assigned to each profile option and other relevant functionalities in sys_admin responsibility.
    Issue 2:
    The user is unable to open two forms simuntaniously. I was asked to set a profile option for that, please let me know which profile option is that.
    Thanks and Regards
    Amith

    Amith
    Issue 1:
    Refer the following thread
    System Administrator Read-Only responsibility.
    Issue 2:
    Perform the following steps
    System Administrator ->Security->Responsibility->Define
    Query the responsibility for which u want to enable Multiform access
    In the Menu Exclusions tab add
    Type: Function
    Name: Navigator: Disable Multiform
    -HTH
    Regards
    Mahesh

  • Can a member be READ-ONLY in a row of some Planning forms?

    Hi,
    Can a member be READ-ONLY in a row of some Planning forms?
    For example, I have a member called Salary as a row in a Form that is used to maintain employees. We allow Planners to update Salary in "Employee Detail" form.
    However, in another form , we roll up Salary to "ALL EMPLOYEES IN DEPT" member and we do not want users to update that as it is added up by a calc script.
    What is the best way to restrict users from updating in this 2nd form but allow update to Salary in first form.
    Thanks.

    Hi,
    You can use Asymmetric Rows and set the member you want to be read only, for more information on how to create them on forms have a read of http://download.oracle.com/docs/cd/E12825_01/epm.111/hp_admin/ch06s03s14.html
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Read only user creation for Oracle EM Console 11.1.1.5

    Dear All.
    I have created Read only user for Oracle EM Console.
    I have followed below link to do the same
    http://moshe-soa.blogspot.com/2011/09/blog-post.html.
    I have noticed with read only user is that TEST button in EM Console is active means user with read only user can create a trans, in Prod scenario it is a risk.
    Raised a CR with Oracle and found that it is a bug
    Bug 14082464 - CANNOT DISABLE TEST/TEST WEB SERVICE BUTTON IN SOA EM COSOLE is there in Metalink.
    So my question is there any way by which i can disable the TEST button in EM Conasole.
    I think there are some WLST script or servlet java class available to resolve this issue.
    Can any one confirm this and please suggest if any one aware of any alternative method.
    Thanks,

    Hi, have you got any solution to this problem? I am having exact the same issue in 11.1.1.6.

  • SharePoint 2010 List View Web Part not showing for read-only users?

    Hello all,
    I have List View Webparts on my Blank Web Part page, and it's not showing for Read-Only users.
    Is this intended by Microsoft or is it a bug?
    Thank you!

    Hi,
    According to your post, my understanding is that the read only user could not see the list view web part.
    Per my knowledge, the issue may be cause that the user do not have the proper permission for the list.
    1. Check whether the user can access the list.
    2. Check whether the user can view all the items instead of partial items in the list.
    3. Check whether there are some fields refer to other lists or terms, especially the lookup field or managed metadata filed.
         If that is the case, make sure the user can access the lookup list.
    Thanks,
    Jason
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Jason Guo
    TechNet Community Support

  • Want to create a Read Only user for a given app owner user

    Hi Folks,
    We have an application owner schema, lets call it OWNER, which has different objects living under it.
    Now, for certain reasons, the app group wants a read only user which should be able to view objects living only in OWNER. It would only be able to read things, and have no create or alter types of priv to be able to change anything.
    The first idea was to create a new user (e.g. RO) and give this explicit grants (select only) for all objects in OWNER. Though this works, is a maintenance havoc, since everytime there is a new object in OWNER, you have to remember to give explicit grants to all RO (or RW ) kind of users.
    What i am looking forward to is, some sort of privilege or role concept that apply on the user level, and not on object level. something that allows me to say, all objects of this schema (e.g. OWNER) are visible to user RO. Other restrictions on RO would control read or write behaviour.
    Does this thing exist ? please point me to the documentation/example..
    regards
    raghav..

    CREATE OR REPLACE TRIGGER myTest.trg_mytest
    AFTER DDL
    ON myTest.SCHEMA
    DECLARE
         lv_obj_type VARCHAR2(20) := TRIM(UPPER(ora_dict_obj_type));
         lv_evt_type VARCHAR(20)      := TRIM(UPPER(ora_sysevent));
         lv_obj_name     VARCHAR2(30) := trim(UPPER(ora_dict_obj_name));
         lv_role_name     VARCHAR2(30) := 'myTest_RO';
         lv_stmt          VARCHAR2(4000) := NULL;
         ln_job_nr     NUMBER;
    BEGIN
         IF lv_evt_type != 'GRANT' --lv_obj_type <> 'OBJECT PRIVILEGE' --
         THEN
              DBMS_JOB.SUBMIT(ln_job_nr,'begin execute immediate ''grant ' || ' select on ' ||
                                       lv_obj_name || ' to ' || lv_role_name || '''; END;');
         END IF;
       INSERT INTO TB_EVT_LOG(d_date, description)
       VALUES(SYSDATE,  lv_obj_name || '~~~~ created ' || lv_obj_type || '~~~~' || lv_evt_type );
       EXCEPTION
         WHEN OTHERS THEN
           RAISE;
    END trg_mytest;
    /This works. But, my problem is that it is not able to filter out the Grant statement itself, Its logging an entry for the grant (as a ddl operation as well).
    what am I doing wrong here ?
    regards
    raghav..

  • Authorization RADIUS - read-only user on FWSM

    Hi support community,
    I am experiencing an issue while trying to create some read-only users on my FWSM.
    I've setup the authentication on my RADIUS Server, which works fine, and put the aaa authorization command LOCAL  command.
    I've also set the commands - associated priviege :
    privilege show level 3 mode configure command dhcpd
    privilege show level 5 mode configure command privilege
    All this things works great when i authenticate locally on the FWSM.
    However, this is not working whe authenticating via the RADIUS server:
    aaa authentication enable console MY_RADIUS LOCAL
    aaa authentication http console MY_RADIUS LOCAL
    aaa authentication ssh console MY_RADIUS LOCAL
    And i set up the authorization locall, because i dont run any TACACS server :
    aaa authorization command LOCAL
    I managed to make this work on ASA, by sending RADIUS attributes (cf a document that i can't find anymore...).
    So what are exactly the differences between asa and FWSM ?
    On my ASA there was a command i could not run on the FWSM :
    aaa authorization exec authentication-server
    (i am running version 4.1 on FWSM and 8.4 on ASA).
    Thank you for your help.
    Florian

    You really need to see the example given here,
    [Read only user for a schema|http://arjudba.blogspot.com/2008/09/create-read-only-user-for-schema.html]
    [Global read only user|http://arjudba.blogspot.com/2008/09/how-to-make-global-read-only-user.html]

  • ADF: Read only user access to application role on BTFs

    Hi,
    My JDeveloper version is 11.1.1.5
    I am trying to create read only users in my adf application. But I am unable to give read only permissions to the user on bounded task flows/ .jssf page which have editable tables and forms.
    I have searched for the information, I did not find any solution.
    Could some one please help me?
    Many thanks in Advance
    --Anil
    Edited by: 977652 on Apr 5, 2013 6:50 AM

    If you are using ADF BC, you can protect fields at EO level or protect the entire EO (check the security tab). The frontend will then render fields as read-only if your user is only allowed read permissions.
    If you are not using ADF BC, you can implement a custom resource permission as described here (ignore the fact that this is for an entity, the principle remains the same) http://www.oracle.com/technetwork/developer-tools/adf/learnmore/76-insert-update-entity-protection-334421.pdf
    You must then add an el expression to each fields readOnly attribute or you can implement a phaselistener that traverses all fields enclosed within a form and make them readonly.

  • Read only user in weblogic throwing error messages in logs

    Hi,
    We have a requirement to create a read only user with monitor access.
    our requirement is to monitor em console using moniotr user, i.e. this user will login to em console, monitor order flow from instances tab by entering order no. and dates, and logout from em console.
    we have done below steps to create monitor user,
    Admin Console->Security Realms >myrealm >Users and Groups-> new
    created user Monitor_User_1 and assigned group as Monitors.
    but whenever this user logs in or searches we are getting below error message:
    <Sep 15, 2013 7:25:21 PM EST> <Warning> <oracle.jps.admin> <BEA-000000> <Access denied. Required roles: Operator, Admin, executing subject: principals=[Monitor_User_1, Monitors]
    java.lang.SecurityException: Access denied. Required roles: Operator, Admin, executing subject: principals=[Monitor_User_1, Monitors]
    we even did below steps:
    With admin access login into EM Console. Select soa_infra, right click mouse -> Security -> Application Roles. On right side, click green arrow and see list of Roles shown. Select the role named SOAMonitors, click on this. And add a Monitor_User_1 to this.
    but we are still getting same error.
    Kindly let us know if we are missing something while creating monitor user and how to get rid of these messages.
    Please note that we are already in Production and our log files are filled with these messages.
    Thanks & Regards,
    Vivek Vishal

    moving this discussion to WebLogic Server - General thread.

  • Restict read only users to certain columns

    Hi guys ,
    I want to restrict read-only users to read only certain columns on the table.How do I go about restricting?

    Always include the following information when asking a question:
    <ul>
    <li>Full APEX version</li>
    <li>Full DB/version/edition/host OS</li>
    <li>Web server architecture (EPG, OHS or APEX listener/host OS)</li>
    <li>Browser(s) and version(s) used</li>
    <li>Theme</li>
    <li>Template(s)</li>
    <li>Region/item type(s)</li>
    </ul>
    935462 wrote:
    Hi guys ,
    I want to restrict read-only users to read only certain columns on the table.How do I go about restricting?Who are readonly users? How are they determined?
    What exactly are you talking about?
    Is it a report, If then which report Interactive or Classic?
    In either of them you can do conditional display of column using the same login
    Look at this for options http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21674/bldapp_rpt_att.htm#BCEBDIFA

  • Creating a read-only user account

    I am trying to create a read-only user account. Reason being,
    when our users may be able to use MS Access to pull information
    and modify changes (if possible). I was told there is a way to
    do this. Help?

    I'm connecting using ODBC with a user account that I created.
    This dummy account will be available to approx 15 users so they
    can generate reports using Crystal. But, if there is someone
    that wants to generate queries using MS Access, they can still
    modify the data. So, how do I create only select statements to
    disallow users from using MS Access to link to the oracle
    database and change data?

  • I am the the only user and the administrator for my laptop and I have forgotten my password so I can't make any changes or download any programs....

    I am the the only user and the administrator for my laptop and I have forgotten my password so I can't make any changes or download any programs....

    Reset Password using Recovery HD
    Boot into Recovery Partition.
    Start the computer,then press and hold down command and R keys to start into recovery partition.
    When you see the Apple logo, release the keys.
    Wait until you see OS X Utilities window shows up.
    Move the mouse to the menubar at the top and click "Utilities", then select "Terminal"
    from the drop down.
    Terminal window will appear.
    Type in   resetpassword   and press enter key on the keyboard.
    Do not close the Terminal window
    Reset Password Utility window will open with Macintosh HD selected.
    Select the user account from the popup menu box.
    Enter a new password.
    Reenter the new password for the user.
    Enter a hint.
    Click the "Save" button.
    Click  in the menubar and select Restart.

  • How hide ribbon bar for read only users from custom master page.

    Hi,
    I want to hide the ribbon bar for read only users, on my custom master page I put inside of a SharePoint:SPSecurityTrimmedControl this div: <div id="ms-designer-ribbon">, but when I  save the changes the master page does not work
    anymore.
    <!--MS:<SharePoint:SPSecurityTrimmedControl runat="server" AuthenticationRestrictions="AddAndCustomizePages">-->
    <div id="ms-designer-ribbon">
    <!--SID:02 {Ribbon}-->
    <!--PS: Start of READ-ONLY PREVIEW (do not modify) --><div class="DefaultContentBlock" style="background:rgb(0, 114, 198); color:white; width:100%; padding:8px; height:64px; ">The SharePoint ribbon will be here when your file is either previewed on or applied to your site.</div><!--PE: End of READ-ONLY PREVIEW -->
    </div>
    <!--ME:</SharePoint:SPSecurityTrimmedControl>-->
    I'll appreciate any suggestions in order to solve this.
    Regards.

    did you close browse and open a fresh session?
    also authericationrestrictions for add & customize people so its more than read...
    check this one
    http://msdn.microsoft.com/en-us/library/jj822366.aspx
    another blog for same stuff:http://spgurunet00.web707.discountasp.net/post/2012/12/13/Hiding-SharePoint-2013-Ribbon-from-Anonymous-Users.aspx
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Maybe you are looking for

  • Selection screen of HR

    Hii All- I want to design the selection screen of a standard transaction PECM_CHANGE_STATUS . Can anybody help me how the first field "Reporting Period" is designed??? Tx

  • Null Pointer Exception in orion-ejb-jar.xml GUI editor

    Hi, I am getting a NPE when attempting to configure CMR mappings orion-ejb-jar.xml with the GUI/Properties Editor. Using 9.0.5.2 on Windows XP professional SP2 Have defined the necessary <relationships> descriptors for this relation. 1:M unidirection

  • Detect java enable or not

    i trying one test. that is java test. can i detect java runtime version using as3. or calling from java script to the java version. else possible to detect java enable or disable from browser using as3.

  • What happened to the tool bar/back & forward arrows?

    the tool bar and back/forward arrows are gone- how do I get them back? When I visit a subject within a site (such as craig's list) I can't use the back arrow to get to the site page

  • HT4053 how do i get into the camera? when i push the camera icon it wont open

    When i try to open the camera or go into my photos by pushing either of the icons it opens and clses right away....what am i doing wrong?