Restriction to access schema objects

Hi,
Is it possible to give restriction that connect with the user in oracle but can not view any object. And if we will run the query
select count(*) from user_objects; will give "0"
but if we write a query for user created table, we can access the table data.
Regs,
Brij

I try to reply.
If you have the user A,and A have a table called A_tab.
Then you can create an user B.
grant select on A_tab to B.
Through this method B only can access A_tab.
I don't know whether it can work for you.

Similar Messages

Access schema objects without having to specify the user.

I've just created a role in a schema and assigned some priveleges.Then I created a user and granted the role to it. But as the newly created user is not the owner of the schema when I say a simle select query like this:
SELECT EMLOYEENAME FROM EMPLOYEES
I get "table or view does not exist" error. Is there a way I can wirte refer to objects in this schema without having to indicate the owner. So instead of writing SCOT.EMPLOYEES I want to write just EMPLOYEES.

>
I get "table or view does not exist" error. Is there a way I can wirte refer to objects in this schema without having to indicate the owner. So instead of writing SCOT.EMPLOYEES I want to write just EMPLOYEES.
>
Create a public synonym for the object.
CREATE PUBLIC SYNONYM EMP32 FOR SCOTT.EMP;Then you do not need to specify the schema.
--- edited to add doc reference
See CREATE SYNONYM in the SQL Language doc
http://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_7001.htm
>
CREATE SYNONYM Purpose
Use the CREATE SYNONYM statement to create a synonym, which is an alternative name for a table, view, sequence, operator, procedure, stored function, package, materialized view, Java class schema object, user-defined object type, or another synonym. A synonym places a dependency on its target object and becomes invalid if the target object is changed or dropped.
>
Edited by: rp0428 on Apr 5, 2012 10:56 PM

Unable to access the objects with out schema as prefix.. can any body help

Hi,
i am using 10g.I have one problem like i unable to get the table access with out mention prefix for that table.
but i created public synonym and gave all grants to all users also. but still i need to mention schema name as prefix otherwise it give the error..
can any body tell me reason and give me solution.
ex: owner:eiis table:eiis_wipstock
connect to: egps schema
in this position if i try with eiis.wipstock it gives error but if i mention like eiis.wiis_wipstock then its working fine.

Pl do not spam the forums with duplicate posts - Unable to access the objects with out schema as prefix.. can any body help

Access to schema objects

Guys,
I am on 10g R2 and have this requirement.
We refresh our QA environment from PROD every day ( exp/imp and schema refresh ). App team now have a requirement where by they want to create few objects including tables every day and load those tables with static data. This in a way doesn't need to be refreshed every day.. So, could place this in another schema. But we do not want to grant access on that schema to the user.
Alternatively, we can get them to send the us a script, that can be run as POST refresh script on completion of the refresh. But this would mean that any changes to the script will involve us copying the file, which could be a hassle.
I am wondering, if there is better way to handle this.. BTW, the app team do not have access to the database host and we don't plan to grant it either..
What is the best alternative ?

You can use DBMS_METADATA and EXECUTE IMMEDIATE
SQL> create user u1 identified by u1;
User created.
SQL> create or replace type u1.type1 as object (a number, b date);
2 /
Type created.
SQL> declare
2 stat varchar2(32000):= dbms_metadata.get_ddl('TYPE','TYPE1','U1');
3 begin
4    execute immediate replace(stat,'"U1".','');
5 end;
6 /
PL/SQL procedure successfully completed.
SQL> desc type1
Name                                                        Null?    Type
A                                                                    NUMBER
B                                                                    DATEYou can loop on all schema objects selected from dba_objecs to manage all objects with a single statement:
SQL> create function u1.f1 return number is
2 begin
3    return 0;
4 end;
5 /
Function created.
SQL> declare
2 stat varchar2(32000);
3 begin
4    for r in (select object_type, object_name from dba_objects where owner='U1') loop
5      stat := dbms_metadata.get_ddl(r.object_type,r.object_name,'U1');
6      dbms_output.put_line(stat);
7      execute immediate replace(stat,'"U1".','');
8    end loop;
9 end;
10 /
CREATE OR REPLACE TYPE "U1"."TYPE1" as object (a number, b date);
CREATE OR REPLACE FUNCTION "U1"."F1" return number is
begin
return 0;
end;
PL/SQL procedure successfully completed.
SQL> desc f1
FUNCTION f1 RETURNS NUMBER
SQL> desc type1
Name                                                        Null?    Type
A                                                                    NUMBER
B                                                                    DATEMax
[My Italian Oracle blog| http://oracleitalia.wordpress.com/2010/02/07/aggiornare-una-tabella-con-listruzione-merge/]

Which all schemas are accessing my objects?

Hi All,
I have a schema XXX in my database. This database has a total of 20 schemas. I would like to know which all schemas are accessing the objects under XXX schema.
Could someone please help me to figure out a way to find this?
My database version is 92060 and is running on HP Unix environment.
Thanks!

user9104898 wrote:
Hi All,
I have a schema XXX in my database. This database has a total of 20 schemas. I would like to know which all schemas are accessing the objects under XXX schema.
Could someone please help me to figure out a way to find this?
My database version is 92060 and is running on HP Unix environment.
Thanks!Implement Oracle Audit

Thru OEM get list of queries and their schemas that accessed my objects

Hi,
I have a list of objects on my schema and i need to track the list of sql queries by different users that accessed by object during this time period.
i haven't enabled any auditing yet.
is there any way i can get that list of queries and their schemas that accessed those particular objects during a particular time period through OEM.
Can someone guide me please.
Thanks in advance.
Philip.

create a name property in your class and assign a name property to your instances (either in the contructor) and/or using getters/setters. (you'll need a getter anyway.)

Cancelling the privaleges of the user accessing the schema objects ???

Hi,
I have given privilages to the user to access my schema objects(tables). Can i cancell the privilages of the user of accessing my schema objects(table) which i granted them ???
Thank you !!!

Hi,
If you gave a privilege or role to a user using GRANT, you can take it away using REVOKE.
For example:
REVOKE SELECT ON my_table FROM user_name;un-does the privilege given by
GRANT SELECT ON my_table TO user_name;

Access other schema object from connection

Hi;
from the dbconnection, how can I access other schema object?
Thanks

Hi,
I don't know if I understand correctly but if you mean the scenario you connect to the database as SCOTT and you want to map table EMPLOYEES from HR schema, you can do it within wizard and in read only view object you
use schema name as prefix like select * from HR.EMPLOYEES. If you mean something else please describe it more.
regards,
Branislav

Create trigger before any DML or DDL operations on any schema objects

Dears,
I need to create a trigger on schema that fire before any DML or DDL operations on any object (table,view,. . . etc) in the schema.
Can i do this, like "BEFORE insert or update or delete or drop or truncate on SCHEMA" ?
Thanks & Regards,,

Dear Peter,_
Please, i need to say one thing before reading my below simple answers . . .
You must deal with any issue from others seriously and read it carefully_
Sorry, you haven't explained anything about your actual problem, we are still left to guessing.Not right, I was clear as i said the below notes:
1 - I need to create a trigger on schema that fire before any DML or DDL operations on any object.
2 - We have another simple application is connected also to DB and we must have this application but DB password is must written clear in some files and these files must be shared for business requirements.
Since I still do not understand your problem, I can only guess of the most relevant:After all of the above clarification, still do not understand . . . How !!!
1.9 Sweeping privileges. This is always a good exercise
2.10 Audit and Analyse User access. Who connects as what from where (And later maybe why).
3.8 Restrict Access from Specific Nodes OnlyYou are right but not valid in my issue.
3.1 Remove the passwords from scriptsIt seems that you did not read my replies carefully as I said before that DB password is must be written clear in some files and these files must be shared for business requirements.
Why not spend just a day to get some feeling of the ideas, and find the best match(es) for your situation.I am investigating in my issue a month ago and tried a lot of solutions but found that i will have to apply this trigger solution.
If you are looking for a short answer in a public forum, I am afraid you won't find it.
(At least not until we understand what you are trying to do, and why)I know exactly what i need and why. Read again my replies carefully and you will know also.
Not at allSure, you still do not understand because you did not read my replies carefully !
Dear All_
I already created the trigger to prevent any DML or DDL on any schema objects for specific users.
If all the users now have the super password, i can permit specific users to do (DML & DDL) and the others will not be able at all.
As a Challenge, i can say the super password now to the public and they will not be able to do any (DML & DDL) . . . I can say now, "I succeeded" :)
Really, thanks All for greatest support . . . Already i was benefited a lot from your advises.
Regards,

How to restrict AS02 access to certain fields only

How to restrict AS02 (Asset Master Record) access to certain fields only. Currently when you assigned AS02 to a certain user, this will enable the user to change all the fields in the asset master record. Suppose i want only the user to restrict the access to certain field eg.NDJAR (Life in Yrs).
Thanks for your inputs.
Regards,
Robert

hello,
basis has to assign the proper activity with object A_S_ANLKL. in this case they have to allow activity 03 only with combination of Cocode,asset class. see some more details below.
This authorization object is the first part of the object "asset master record."
The definition at this level determines whether the user is authorized to process data in a given company code. The activity type for the transaction is also defined here. This authorization object is used for master data transactions, for the display of value fields, and for reporting.
Defined Fields
The following fields are assigned to the authorization object
Asset class (specified by entering a value in the pop-up window)
Company code (specified by entering a value in the pop-up window)
Activity type - there are three different activity types:
01 = Create
02 = Change (including blocking and deleting)
03 = Display

Create user with DBA privileges with a restriction to access user data

Hi
I need to create a user with all DBA privileges with a restriction to access all user schemas
Thanks,
Balaji

Use Database Vault - http://download.oracle.com/docs/cd/E11882_01/server.112/e16544/toc.htm
HTH
Srini

Authorisation: controlling access to objects/data

Hi all,
I am looking for some pointers to design patterns that deal with authorisation.
The issue at hand is the following: for an enterprise application we need to implement a mechanism that manages user-access to certain data. Example: if a user asks for sales-figures, only the data that he/she is allowed to see (e.g. based on office) should be included in the result.
The question that we asks ourselves is: do we set up a separate authorisation manager (sessionbean) that includes all the business logic to restrict user-access, or do we make the specific objects (entity beans) responsible for this.
The latter solution would take the form of: entitybean Office, getSalesFigures(Year, User) method; based on the User object access is granted or not. The method will return 0 if the user has no access.
Feedback is appreciated.
Regards,
Jaap

Hi,
The Composite View pattern http://java.sun.com/blueprints/corej2eepatterns/Patterns/CompositeView.html
has some discussion about applying security based on user roles.
Also the Intercepting Filter pattern
http://java.sun.com/blueprints/corej2eepatterns/Patterns/InterceptingFilter.html
can be used to apply security checks. The Java petstore applies this pattern for self-registration of users, and this is explained in more detail at
http://java.sun.com/blueprints/patterns/InterceptingFilter.html which includes an explantion of the pattern being applied, and also a link the details of its implementation at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/sample-app/sample-app1.3.1a3.html#wp1065478
These should give you a good starting point for designing role based security. The petstore used a seperate module for security because it was allowing self-registration of users. If your application does not allow users to create and manage their own user accounts(like yahoo mail etc) and instead all accounts are set up administratively(someone in the company sets up each user account), then the J2EE platform may provide the capabilities you require and you may not need to write a separate module.
The J2EE programming model also has a lot of support for role based security. So you may be able to leverage the J2EE environment to do much of the work for you. The J2EE security model is described in the security chapter of the BluePrints book at
http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/index.html
hope that helps,
Sean

Accessing Schemas

Hi All...
Please tell me in how many ways a user schema can be accessed....
I know 4 ways....these are..
1. user's own schema....
2. privileges granted to other users schema...
3. public objects...
4. by defining roles....
Please tell me if thr is any other way in which a user can access a schema or the objects which he's access to?
Please reply soon....
Thanks in advance...
Bhupesh...

here is an example to access a remote schema object.
you should have the tns string configured on your database to connect to the remote database.
then you can create the database link
using
CREATE DATABASE LINK local
CONNECT TO hr IDENTIFIED BY hr
USING local
see the sql reference guide for compelt syntax details.
in the above sql
"hr" is the username
"hr" is the password
"local" is the connect string to conenct to the remote database.
after you have created the link
you can query in such a way.
SELECT * FROM employees@local
where "employees" is the table in the remote database and
"local" is the database link name.
similar to query you can also perform insert/update etc.
good luck.

How to synchronize test schema objects with the prod schema objects.

Hi,
I have a requirement of synchronizing test schema objects with the production schema objects. Please let me know the below
1. if there is a standardized method for such activity,
2. if there are oracle utilities for this task.
3. If i had to do this job manually, can you let me know the check list if any.
Thanks
Purushotham M

http://www.oracle.com/technetwork/issue-archive/2012/12-sep/o52sqldev-1735911.html
You could try database diff tool in sql developer(but there are some licence restrictions).
I don't know your database version, you could try DBMS_COMPARISON package also.
Look at this link http://docs.oracle.com/cd/B28359_01/appdev.111/b28419/d_comparison.htm
Other solution is to create db link between test and production database, and then you can try different types of queries like
select table_name from user_tables
minus
select table_name from user_tables@db_link_to_other_database
And you can do this for columns, indexes and so on.
But you must have proper DDL scripts for this, to generate sync script.
Also there is a question about work process, you are doing sync in reverse order(from production to test). Test db is for test, after test you go to production db with proper ddl and dml scripts, so these schemas shouldn't be different in the first place(talking about schema, not data here).

How to restrict VK11 access based on condition class D (Tax)

hi ,
I have a requirement to restrict VK11 access based on condition class D (Tax). Because all users should not have access to maintain tax data in VK11 while general pricing data they can maintain. when condition class is D then we should have control.
Thanks
Akhilesh

Hi Akhilesh,
Please find the below link and click on View article.
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c
how to create authorization object?
Thanks
Dasaradha

Restriction to access schema objects

Similar Messages

Maybe you are looking for