Regarding privileges

hi all
i have one user scott it is having following privileges.
CREATE SESSION
SELECT ANY TABLE
INSERT ANY TABLE
ON COMMIT REFRESH
SELECT ANY DICTIONARY
if i m connected to scott then i can alter ables which are exists in scott schema.
But i want that any body connected to scott are not able to alter tables.
How it can be possible ?
Thanks in advance
Regards
s

Hi,
The own user can alter his own Tables there is now option to revoke this.
Create a second user how has only select rights on scott tables

Similar Messages

Regarding privilege to view tables in database

hi,
since i am just a begginer in my job as DBA,so any body could help me.The problem is i connected to database and created my own user and granted privilege to view and select particular table in the database.But later when i connected through my user to same database i could not select the table.pleaze any one could give me solution..

Ensure if you have created the table/view in that new user's schema or using dba sys schema.
In any case, you can use schema.table/view_name to select and view the contents of the table.
Or you can login as sysdba and find the table by querying the dba_tables view.
Hope that helps
Z.K.

Cisco privilege levels

I'd like to give some of my users the ability to see the running config (show run) but at the same time restrict them from doing any config changes. I'd thought I might set their privilege level at something more than 1, but less than 15, but I can't find any documentation regarding privilege levels 2-14.
Or am I misunderstanding how the privilege levels are used? For levels 2-14, are they assigned per command, not to a group of users?

hello,
If we are talking about routers, you have many ways to do it locally on the device:
1. through privilege level
http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a00800949d5.shtml
http://www.cisco.com/en/US/partner/docs/ios/sec_user_services/configuration/guide/sec_cfg_sec_4cli_ps6441_TSD_Products_Configuration_Guide_Chapter.html#wp1163501
2.through "menu view"
http://www.cisco.com/en/US/partner/docs/ios/fundamentals/configuration/guide/cf_connections_ps6441_TSD_Products_Configuration_Guide_Chapter.html
3. through " CLI view"
http://www.cisco.com/en/US/partner/docs/ios/sec_user_services/configuration/guide/sec_role_base_cli_ps6441_TSD_Products_Configuration_Guide_Chapter.html

Error while runnig OIM task purging script OIM_TasksArch.sh

Error while runnig OIM task purging script OIM_TasksArch.sh
## Enter date in YYYYMMDD format
(All the task data for users which have been disabled/deleted on or before the entered date would be archived) :
## All the task data for users which have been disabled/deleted on or before TODAY's date would be archived,
Do you want to continue [y,Y,n,N]? :
y
Calculating the number of records that would be archived,
this may take some time, please wait...
ERROR ==> An error has occurred during the process
Please check logs created at /export/home/oracle/Purging_Task/Err_Arch_tasks_2012_11_05_16_51_22.log and try again
./OIM_TasksArch.sh: test: argument expected
bash-3.00$ cat /export/home/oracle/Purging_Task/Err_Arch_tasks_2012_11_05_16_51_22.log
-- Task Archival Execution Status
Task Data Archival Summary
ORA-00942: table or view does not exist

In this link you resolved this issue by giving all privileges to DEV_OIM...
Re: Getting error while running OIM in built purging script OIM_ReconArch.sh
Now if again this ORA-00942: table or view does not exist is coming, possibility is that there is no issue regarding privileges as you already have given all privileges to DEV_OIM...
Anyway try again giving full permissions to it just in case for some reasons permissions might have reset...
Now the only option is to study OIM_TasksArch.sh and figure out which tables or view it wants to refer to and is not available to it..
*./OIM_TasksArch.sh: test: argument expected*
The above line means that this sh file needs some arguments... Please study a bit more to figure out those arguments.. It will work...
*23.2.1 Understanding the Task Archival Utility*
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/archival_utilities.htm#OMADM3033
Following Parameters i.e. Arguments are needed
# File : OIM_TasksArch.sh
# Purpose : To archive data from active task tables to archival task
# tables and to delete data from active task tables.
# Arguments : 1 --> Location of the Oracle Home(ORACLE_HOME)
# 2 --> Oracle Identity Manager Database Name
# 3 --> Oracle Identity Manager Database User Name
# 4 --> Password for the Oracle Identity Manager Database User

Owb$client role

Hi,
I have a question regarding privileges which are necessary for OWB. I am not an OWB specialist, so hope someone can give me god advice here.
Our OWB setup is to have one 'technical' account for executing all OWB flows and mappings - this user is granted OWB Client roles and privileged i.e. OWB$Client, OWB_USER and OWB_DESIGNCENTER_VIEW roles and so called 'target' DB schemas where only data are stored with simple DB privs. like 'create table, view, procedure' etc.
This 'techincal' OWB user have on DB level all necessary privileges on objects in 'traget' DB schemas in order to execute procedures, manipulate data etc. This means that privilege resolution on DB level for this user works fine.
But, in order to execute OWB flows and mappings out of this 'technical' OWB user which are modofying data in our 'target' DB schemas our developer is requesting the 'target' DB schemas must be also granted OWB$Client, OWB_USER and OWB_DESIGNCENTER_VIEW role.
Is this really necessary? If yes, why?
many thanks,
goran

Hi Goran,
But, in order to execute OWB flows and mappings out of this 'technical' OWB user
As I understand you developers plan to execute mappings under target user. In this case their requirement is justified.
Regards,
Oleg
P.S. In my opinion direct granting privileges to OWB-related database users is a bad practice.
The only legal and documented way for configuring OWB is using OWB utilities (like Repository Assistant, Design Center etc. - look at OWB Administrator guide http://download.oracle.com/docs/cd/B31080_01/doc/install.102/b28224/security.htm#BGBEBFEG)

Chromium as root

I need to run chromium as root. After the latest update (42.0.2311.90) I cannot do it.
The error is this:
[0420/105918:FATAL:setuid_sandbox_client.cc(126)] Check failed: IsFileSystemAccessDenied().
[1:1:0420/135918:ERROR:nacl_fork_delegate_linux.cc(314)] Bad NaCl helper startup ack (0 bytes)
[1:1:0420/135918:FATAL:setuid_sandbox_client.cc(126)] Check failed: IsFileSystemAccessDenied().
I have tried putting the
user-data-dir
or the
--user-data-dir
or the
user-data-dir=/root/.config/chromium/Default
or the
--user-data-dir=/root/.config/chromium/Default
in the
/root/.config/chromium/chromium-flags.conf
and none of these work. I always get the same error response that I linked.
Another thing that is weird, is that when I run it from command line and keep it running, and doing a
ps aux | grep -i chrom
I get this:
root 3291 2.6 0.2 433860 35096 pts/1 Sl+ 14:05 0:00 /usr/lib/chromium/chromium user-data-dir=/home/user/.config/chromium
root 3293 0.0 0.0 0 0 pts/1 Z+ 14:05 0:00 [chrome-sandbox] <defunct>
root 3302 0.0 0.0 10944 2252 pts/0 S+ 14:05 0:00 grep -i chrom
I don't understand why i get the user-data-dir to be pointing at /home/user/ when I run it as root...
Last edited by stukov (2015-04-20 11:02:39)

I don't know the inner workings of Chrome/chromium, but if it really does what it appears to be doing, it will always fail if run as root.
I was affraid of that but I was thinking there would exist some simple bypass to that, that would be as simple as "chromium --user-data-dir".
The fact that it is very unusual does not justify the way Alad responded. Your response is indeed polite, his was quarrelsome, and this is why I am going to explain this to you.
I run everything at my desktop as root, as I am a network engineer, a network driver developer and tester for Linux and BSD.
I need to use raw sockets all the time and I also need to use internally developed chrome plugins that need to be run with elevated privileges through chrome. Yes, I can use sudo and yes I know what linux can offer regarding privilege elevation. However, errors regarding privileges at my programs may not have a direct visible error message and that might lead to huge work-hours loss.
This is the reason that I want to run as root, I have been doing this for the last 10+ years, I know that this represents a security vulnerability and I have accepted the risk. I don't need any more lectures about it, I have discussed about this alot and I am not interested in other people opinions about that, although I respect them. I don't propagandize why I believe it's an unecessary overhead for developers, network engineers and/or other professions to run their applications as non root. I expect the same behavior about other people that I ask for their help. It is really simple to just *NOT* reply to a forum post instead of saying something like "don't do that (implying 'don't do that because I don't and no-one else does')" and providing **ZERO** contribution to what the OP (me) is actually asking.
I would really appreciate to get an answer from someone that indeed cares to help me solve my problem.
Last edited by stukov (2015-04-20 12:42:17)

Using button to store all attachments gives problems

In Thunderbird you can store multiple attachments at the same time. At the below right corner you can click 'save all'. I like to use that functionality, and it works for all the folders I choose, but not for the desktop. I would like to know why and how I can solve that problem.

Hi
Yes, you can do this but it will require the sitepoint server privileges to be set for the user, they will at least require file - move/create/delete/update/upload privileges. For better advice I would recommend contacting your server administrator regarding privileges and setting of such as these would at least require a password authentication and 'batch' use.
PZ

+ASM1 down and +ASM2 unreachable

I just installed Oracle11 with RAC on a two node cluster.
I just checked Enterprise Manager for the first time and noticed an error for my two ASM instances. It's telling me that node1 is down and when I check the error this is the message displayed "ORA-01031: insufficient privileges". I checked metalink but nothing came up with that error regarding privileges.
On node2 there is no error or message displayed, just that the host is unreachable.
When I log in as oracle and run crs_stat -t -v it's telling me everything is online and I checked the status of everything and it was all connected. What other things can I check?

Hello,
If you have access to Metalink ( which I assume you do), check this useful link
Doc ID: 396940.1 Troubleshooting and Diagnosing ORA-4031 Error
Regards

TimeCapsule To Time Capsule transfer

So apple decided it wanted to replace my timecapsule due an issue of local connections via WiFi being sluggish and flaky.
(basically unless im in the same room as it music streams are stuttery, accessing files on it is a pain because they dont load, and it seems like its freezing, but via ethernet all is fine, or if im in a certain vicinity...which is weird this randomly happened over night literally, it was fine the night before and then all of a sudden)
So are the replacement TimeCapsules Refurbished? or are they new models?
they are replacing my Dual-Band TC 500GB
Second....i have an itunes library on there (its backed up on another drive, but transfer over USB is entirely slow) so is there a way to have a quick fast transfer between old TC and new TC?

I just replaced my 500GB Time Capsule with a 1TB Time Capsule. I was able to migrate four Time Machine "sparsebundle" files by using the Finder to copy them to disks with spare space, installing the new TIme Capsule, then copying those files to the new Time Capsule. It seems that the primary administrative user ("501") is the owner of those files.
I had to use the System Preferences "Time Machine" panel to redeclare the disk to be used for Time Machine backups, but that might have been due to my giving the new Time Capsule a different name than the old one.
I did have one error message regarding privileges most of the way through copying one of the "sparsebundle" files. When I tried to copy the same file on another Mac it copied just fine.

B04 - Best practice with regards delete privilege and folders

Hi,
Many depts sales, finance etc.
Sales Dept as example
Just installed BO4 and want to give Sales Dept their own folder and allow users full control over their own documents within Sales Flder but ensuer they don't have permission to delete other Sales users reports in this folder nor delete Sales folder itself.
Would defined schedule access privilege achieve this.
Want to ensure delete privilege tight and users can only delete their own reports and can't delete folders.
Many Thanks

Hi Philip,
You can achieve this by creating your own Access Level where you can include the right "Delete object that the user owns".
For the requirement: Sales Group should only be able to see Sales Folder:
Assign View Object right to Sales Group first on the Public Folder keeping the option "Apply to sub-objects" unchecked. Then you can assign the custom Access Level to the Sales Folder which includes the right as per your requirement.
Regards,
Nakul Mehta

Clarification regarding the revoke privilege

The customer revoked "select any table" privilege from a user.
(If SELECT ANY TABLE is revoked from a user, then all procedures contained in that users schema relying on this privilege will fail until the privilege is reauthorized)
In the below user's procedure,there isn't any select statement.But,the procedure still becomes invalid after revoke.why ?
And after the customer had run the procedure again,it becomes valid again .(The customer hasn't recompiled the procedure explicitly).
SQL>create or replace procedure calling
is
i number;
begin
--pining;
dbms_lock.sleep(60);
end;
/

To answer the question as to why the procedure worked when invoked: Oracle automatically attempts to recompile any invalid stored procedure, function, or package when an attempt to execute the objects occurs. If all necessary privileges are in place the recompile works and the execution proceeds. If the recompile is not successful then an error is returned to the caller.
As to why the procedure went invalid when the "select any" privilege was revoked I am not sure though I suspect it has to do with the way the privilege is tracked and maintained internally.
The full Oracle version should have been included in your post. You never know when it is important to some specifics of the question. Such as with 11g Oracle has improved dependency tracking so that many table alterations should no longer result in stored code going invalid in cases where the change does not affect the actual code logic.
HTH -- Mark D Powell --

IPod Classic 80GB - "iTunes library cannot be saved you do not have enough access privileges for this operation" It says it has synced but it hasn't. Help please I am not very tech minded

iPod Classic 80GB. Message reads ' iTunes library cannot be saved you do not have enough access privileges for this operation'. It says it has synced but it hasn't. Please help, I am not very tech minded.

See this article about troubleshooting the error message regarding access privelages. It may be preventing your iTunes library from being able to save/retain music you have recently imported to it, which may explain why no new content is being added to your device.
Trouble adding music to iTunes library or importing audio CD
B-rock

OSDBA group privileges during 9i installation on HP-UX 11.11

Please see my other message with the same subject. Sorry for the inconvenience.
Best Regards,
Bharat Bhargava.

Here:
OSDBA group privileges during 9i installation on HP-UX 11.11

SSL VPN message "This (client) machine does not have the web access privilege."

Hello!
I am trying to configure the SSL VPN (WebVPN) and I am almost done but when clicking on the URL's I configured in the bookmarks, I get the message "This (client) machine does not have the web access privilege. Please contact your SSLVPN provider for assistance." I looked through the many tutorials and guides in existence and none talks about such error and the fix for it. In fact, if I search the net for this error message I get only one match, in the Cisco website, where is say that "The client computer does not meet the security criteria of having web access functionality through the SSL VPN gateway." and as fix it gave this tip "Check the URL to the gateway or contact the administrator if it persists." So, nothing on the website about what this issue is and how to fix it. I will provide my IOS configuration and hopefully someone will spot the issue. Here it goes:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R1
boot-start-marker
boot-end-marker
logging message-counter syslog
no logging buffered
enable secret 5 $1$1LLX$u7aTc8XfNqPZhPVGwEF/J0
enable password xxxxxxxx
aaa new-model
aaa authentication login userAuthen local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization network groupauthor local
aaa session-id common
crypto pki trustpoint TP-self-signed-1279712955
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1279712955
revocation-check none
rsakeypair TP-self-signed-1279712955
crypto pki certificate chain TP-self-signed-1279712955
certificate self-signed 01
3082023A 308201A3 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31323739 37313239 3535301E 170D3130 30333233 31313030
33375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 32373937
31323935 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A8EF 34E3E792 36660498 9801F934 E8A41865 3599EA35 B073AC91 D7A53AF4
A4390D2F CB3DB2DE 936B28F0 A25F3CE1 6F40FD9E E79096F2 F89620E0 B31A7B34
649BBA22 AE44CB55 9F38BF0C 2F2770CF 8380C167 C17D760C 380E28E4 FF7D6874
9EFC310A 2AA60835 F1AA384F CD1A0173 19C98192 EBFBD531 24CB9203 EA9E7D54
B2C30203 010001A3 62306030 0F060355 1D130101 FF040530 030101FF 300D0603
551D1104 06300482 02523130 1F060355 1D230418 30168014 0D9D62EC DA77EAF3
11ABF64D 933633F9 2BA362DC 301D0603 551D0E04 1604140D 9D62ECDA 77EAF311
ABF64D93 3633F92B A362DC30 0D06092A 864886F7 0D010104 05000381 81006853
48ED4E3E 5721C653 D9A2547C 36E4F0CB A6764B29 9AFFD30A 1B382C8C C6FDAA55
265BCF6C 51023F5D 4AF6E177 C76C4560 57DE5259 40DE4254 E79B3E13 ABD0A78D
7E0B623A 0F2D9C01 E72EF37D 5BAB72FF 65A176A1 E3709758 0229A66B 510F9AA2
495CBB4B 2CD721A7 D6F6EB43 65538BE6 B45550D7 A80A4504 E529D092 73CD
   quit
dot11 syslog
ip source-route
ip dhcp excluded-address 192.168.0.1 192.168.0.10
ip dhcp pool myPOOL
   network 192.168.0.0 255.255.255.0
   default-router 192.168.0.1
   dns-server 87.216.1.65 87.216.1.66
ip cef
ip name-server 87.216.1.65
ip name-server 87.216.1.66
ip ddns update method mydyndnsupdate
HTTP
add http://username:[email protected]/nic/update?system=dyndns&hostname=<h>&myip=<a>
interval maximum 1 0 0 0
no ipv6 cef
multilink bundle-name authenticated
vpdn enable
vpdn-group pppoe
request-dialin
protocol pppoe
username cisco privilege 15 password 0 xxxxxxxx
crypto isakmp policy 3
encr 3des
authentication pre-share
group 2
crypto isakmp fragmentation
crypto isakmp client configuration group vpnclient
key cisco123
domain selfip.net
pool ippool
acl 110
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10
set transform-set myset
reverse-route
crypto map clientmap client authentication list userAuthen
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
archive
log config
hidekeys
interface Loopback0
ip address 10.11.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
interface Loopback2
description SSL VPN Website IP address
ip address 10.10.10.1 255.255.255.0
interface Loopback1
description SSL DHCP Pool Gateway Address
ip address 192.168.250.1 255.255.255.0
interface FastEthernet0
description $ES_LAN$
ip address 192.168.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
interface BRI0
no ip address
encapsulation hdlc
shutdown
interface FastEthernet1
interface FastEthernet2
switchport access vlan 2
interface FastEthernet3
interface FastEthernet4
interface FastEthernet5
interface FastEthernet6
interface FastEthernet7
interface FastEthernet8
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
bundle-enable
dsl operating-mode auto
interface Vlan1
no ip address
interface Dialer1
ip ddns update hostname myserver.selfip.net
ip ddns update mydyndnsupdate host members.dyndns.org
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip policy route-map VPN-Client
dialer pool 1
ppp chap hostname xxx
ppp chap password 0 xxxx
ppp pap sent-username xxx password 0 xxxx
crypto map clientmap
ip local pool ippool 192.168.50.100 192.168.50.200
ip local pool sslvpnpool 192.168.250.2 192.168.250.100
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
ip http authentication local
ip http secure-server
ip nat inside source static tcp 192.168.0.2 21 interface Dialer1 790
ip nat inside source static tcp 192.168.0.15 21 interface Dialer1 789
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 10.10.10.1 443 interface Dialer1 443
ip nat inside source static tcp 10.10.10.1 80 interface Dialer1 80
access-list 102 deny   ip 192.168.0.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 102 permit ip 192.168.0.0 0.0.0.255 any
access-list 110 permit ip 192.168.0.0 0.0.0.255 192.168.50.0 0.0.0.255
access-list 144 permit ip 192.168.50.0 0.0.0.255 any
route-map VPN-Client permit 10
match ip address 144
set ip next-hop 10.11.0.2
control-plane
banner motd ^C
================================================================
                UNAUTHORISED ACCESS IS PROHIBITED!!!
=================================================================
^C
line con 0
line aux 0
line vty 0 4
password mypassword
transport input telnet ssh
webvpn gateway MyGateway
ip address 10.10.10.1 port 443
http-redirect port 80
ssl trustpoint TP-self-signed-1279712955
inservice
webvpn install svc flash:/webvpn/svc_1.pkg sequence 1
webvpn install csd flash:/webvpn/sdesktop.pkg
webvpn context SecureMeContext
title "My SSL VPN Service"
secondary-color #C0C0C0
title-color #808080
ssl authenticate verify all
url-list "MyServers"
   heading "My Intranet"
   url-text "Cisco" url-value "http://192.168.0.2"
   url-text "NetGear" url-value "http://192.168.0.3"
login-message "Welcome to My VPN"
policy group MyDefaultPolicy
   url-list "MyServers"
   functions svc-enabled
   svc address-pool "sslvpnpool"
   svc keep-client-installed
default-group-policy MyDefaultPolicy
aaa authentication list userAuthen
gateway MyGateway domain testvpn
max-users 100
csd enable
inservice
end
Thank you!

Hi,
Please check SAP note:
2004579 - You cannot create a FR company from a Package
Thanks & Regards,
Nagarajan

Service 'Apple Mobile Device' (Apple Mobile Device) failed to start. Verify that you have sufficient privileges to start system services. and 'iTunes was not installed correctly. Please reinstall iTunes. Error 7 (Windows error 193)

Hi!
So i think i closed the wrong service at some point a few weeks back (apple mobile device) but iTunes remained working after that for another week. I then updated iTunes and i get the same "Service ‘Apple Mobile Device’ (Apple Mobile Device) failed to start. Verify that you have sufficient privileges to start system services." every time. If i click ignore, just so i can access iTunes with out syncing my iPod (touch 2nd gen) i then get 'iTunes was not installed correctly. Please re-install iTunes. Error 7 (Windows error 193)" when it has all installed. I don't understand what the problem is anymore as I have looked at other questions on the apple website, carried out the advice and it hasn't work. Any of them.
Tings I have done:
- Wiped all iTunes and Apple data from my computer (if you search for 'iTunes' or 'Apple' nothing comes up apart from applets from system code.
- Attached iPod before iTunes install and updated drivers.
- Installed iTunes as 'Run as administrator'
- Uninstalled and re-installed the software nearly 20 times now and rebooted the computer in between everytime.
Please someone help because i really need to get music on my ipod and i enjoy the ease of use of iTunes compared to spotify or Windows Media Player.

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down the page in case one of them applies.
The further information area has direct links to the current and recent builds in case you have problems downloading, need to revert to an older version or want to try the iTunes for Windows (64-bit - for older video cards) release as a workaround for performance issues or compatibility with QuickTime or third party software.
Your library should be unaffected by these steps but there are also links to backup and recovery advice should it be needed.
Regarding AMDS failures there is a hint in another thread that disabling the Windows Firewall before attempting to reinstall may help, otherwise take a look at the steps outlined in this post. Re: Can't install iTunes 12.1 on Windows 7 64-bit. I know they look a little daunting, but the process of generating the logs themselves isn't that hard to do. Extracting useful information from them is still a challenge but maybe something will leap out. If you want to post the log for the failed components for me to have a look at here or in the other thread please edit out any personal information, particularly your email address, first.
tt2

Regarding privileges

Similar Messages

Maybe you are looking for