Running Spatial Query as different user

Has anyone else run into a problem with running a spatial query that works fine in the scheme that created the tables but when I run it after giving permissions to another user it returns no rows. Here is my example and sorry it is little complicated. I am running 9.2.0.7 are there specfic object or system privlidges i need to give the user that doesn't own those tables to run spaital functions?
SELECT /*+ ORDERED ALL_ROWS */ COUNT(incident_n)
FROM mpd_data.incidentsshp i
WHERE sdo_relate(i.geom,(SELECT /*+ ORDERED ALL_ROWS */ sdo_geom.sdo_buffer(geom, m.diminfo, 2)
FROM (SELECT /*+ ORDERED ALL_ROWS */ mdsys.sdo_aggr_union(mdsys.sdoaggrtype(union_geom, 0.5)) geom FROM (select mdsys.sdo_aggr_union(mdsys.SDOAGGRTYPE(d.geom,0.5)) union_geom
from spatial.dime d WHERE d.rcd_nbr IN (select rcd_nbr
from dime
where ((lo_add_r >= 1500 and hi_add_r <= 1600) or
(lo_add_l >= 1500 and hi_add_l <= 1600) or
(1500 between lo_add_r and hi_add_r and
1600 between lo_add_l and hi_add_l))
and street = 'WARREN' and dir = 'N' and sttype = 'AV')))
,mdsys.user_sdo_geom_metadata m
WHERE m.TABLE_NAME = 'DIME'), 'MASK = ANYINTERACT' ) = 'TRUE'
and cdate between 20060101 and 20061231

I have a separate schema for querying with and it works fine. I granted select on the needed tables and created synonyms (for convenience). Didn't have to do anything special for spatial indexes at all.
I believe there is an issue doing spatial queries across a DB Link, so that should be avoided.
--Peter

Similar Messages

Simulate query with different user

Hello all,
sometimes I receive calls from our user in BW that some query is not running/no authorization, but when i run the query it works, because I have rights to see everything.
Is there any way to simulate how a query is running under a different user (which has restricted authorization). I want to check e.g authorization but I do not want to copy existing user to a test user.
I saw in the TA RSTRACE that I can enetr a different user, but how can I run a query with this user profile.
Any help/ideas would be great. Thank you in advance.
Best Regards,
Stefan from Munich/Germany

Hello Edwin,
works perfect. Thank you.
BR,
Stefan

Simple spatial query with different SRID

Can anyone help me with just a real simple spatial query with different SRID.
Here is the error i get when i perform the query:
AND SDO_RELATE(A.geometrie_point, B.GEOMETRIE_POLYGONE, 'mask=anyinteract querytype=WINDOW') = 'TRUE'
ERROR at line 4:
ORA-00604: error occurred at recursive SQL level 1
ORA-13207: incorrect use of the [IN COMPATIBLE BOUNDS in SDO_RELATE] operator
ORA-06512: at "MDSYS.SDO_INDEX_METHOD", line 84
ORA-06512: at line 4

Hi,
I am using 8.1.7.2 and i have the lattest spatial patch.
From the start i had different SRID. The only thing i changed was the bounds of the coordinate system.
I reset my bounds of the coordinate system with SRID 8307 to -180,
180 in X (longitude), and -90,90 in Y (latitude) to see if the query window geometry
(geom2) will be transformed to the coordinate system of the layer geometries (geom1)
Her is the content of the user_sdo_geom_metadata :
GIS_PCP GEOMETRIE_POINT
SDO_DIM_ARRAY(SDO_DIM_ELEMENT('X', -5800000, 3600000, .00000005), SDO_DIM_ELEMENT('Y', 3516000, 6000000, .00000005))
82227
GIS_TEST GEOMETRIE_POLYGONE
SDO_DIM_ARRAY(SDO_DIM_ELEMENT('X', -180, 180, .00000005), SDO_DIM_ELEMENT('Y', -90, 90, .00000005))
8307
Here is my query :
select /*+ ordered */ A.no_point
from gis_pcp A, gis_test B
WHERE SDO_RELATE(A.geometrie_POINT, B.GEOMETRIE_POLYGONE, 'mask=anyinteract querytype=WINDOW') = 'TRUE';
Here is my result :
WHERE SDO_RELATE(A.geometrie_POINT, B.GEOMETRIE_POLYGONE, 'mask=anyinteract querytype=WINDOW') = 'TRUE'
ERROR at line 3:
ORA-00604: error occurred at recursive SQL level 1
ORA-13207: incorrect use of the [IN COMPATIBLE BOUNDS in SDO_RELATE] operator
ORA-06512: at "MDSYS.SDO_INDEX_METHOD", line 84
ORA-06512: at line 4
If i change the bounds of GIS_TEST to the exact bouns of GIS_PCP then i dont have the error message above and i have correct results. Do i have the adjust the bounds of every layer to fit the biggest bound?

Copying a query from different user group

masters,
is it possible to copy a query from different user group?
if so please tell me how
thnks!

The query made from SQVI is only intended for individual use. It cannot be transported and there is no concept of Global/Standard area. To be able to transport or share the query to other users is by converting it to SAP Query wherein the source of data will also be converted to an Infoset. Remember that is done in the Standard query area. To do this, go to SQVI-> click SAP Query then go to menu Query -> Convert Quickviews... Select your Quickview queries and provide and infoset name.

Running File Explorer as Different User

Hi all.
I work in a domain environment where we log in with standard accounts for day-to-day work and use separate elevated accounts only when needed, and only to run applications that require elevation. This works fine for most things in 8.1, but once again,
Microsoft has disabled the ability to run File Explorer with different credentials. To me, this is insecure and counterproductive. They tell us we should never be logged on with administrative rights, and I agree with that, but this restriction
is the one thing that makes this impossible. In 7, I could get around this by running Explorer cmd or PowerShell using elevated (domain) credentials, but now this won't even work! I get not one but two errors stating that I have insufficient permission
to do this. Is there any workable solution for this, or has Microsoft finally succeeded in forcing us to add our staff accounts back into domain groups or logging in with elevated rights just so we can manage permissions?
Thanks.
A very frustrated server admin
Derek

Hi,
Have you tried to use the runas command, as mentioned in the link below?
runas /user:domain\username "c:\windows\explorer.exe /separate"
http://social.technet.microsoft.com/Forums/windows/en-US/2a366967-f9fb-4010-81f3-94dc15c86ad3/run-explorer-as-a-different-user?forum=w7itprosecurity
Yolanda Zhu
TechNet Community Support

Run SAP Lumira as Different User

Hi.
We have installed Lumira in Win 7 machine, When we tried to start Lumira as a different user (Users are having Two Different Windows AD Account) by giving"Run as a Different User', the Lumira just stuck and not opening up completly.
I can see two diffrent processes. in task manager. First one is the default one.
C:\Program Files\SAP Lumira\Desktop\SAPLumira.exe
and the second one is
C:\Program Files\SAP Lumira\Desktop\cefframe\SAPLumira.exe
Both the process are not responding and CPU Utilization is 0 and Memory utlization is constant.
Anyone faced such and issue or whats the solution for this?
Your help is much Appriciated.
thanks
Aby Sebastian.

Hi,
@Sharon,
We have a standard edition.
@Henry
We have tried it after changing these details to some common paths in the config file already, but unfortunatly, the same issue is there.
I have already raised this with SAP support team. and as per the support engineer, she/he is not aware of this functionality and asked us to raise a enhansement request...
regards
Aby.

Is it possible to run apps concurrently in different "Users" on Mac Pro in latest OSX?

I wish to continuously monitor different folders in Dropbox for "input transactions" destined for my
applications on my Mac Pro, where each Dropbox folder represents different input types from different
sources. It would speed up the process significantly if my monitor program could run concurrently from
each of several defined "Users" on my Mac Pro with OSX.

Thank you for your response. Let me give you some more facts on my situation.
My monitor, running on a Mac Pro, reads folders owned by my clients, where the folders are shared
thru Dropbox with my service. So, yes, my monitor is "reading" different Dropbox member's folders looking for
"input" files to my service. My monitor is programmed (with a list) of the various clients' folders
names in which to search. Obviously, there is some number of clients (and folders) where the monitor
begins to take several seconds (too long) to scan and service, merely due to the sheer number of folders being
scanned. So, if I could create a second User on the Mac Pro, and run another (copy) of the monitor
programmed with another unique list of folders NOT being serviced by the monitor in the first
User, and (here's the problem) both monitors were running CONCURRENTLY, then the total number of
folders (and clients) being serviced could possibly almost double. Then, I could add a third User, then
a fourth, etc. to handle even more clients and folders.
The giant problem here is, each separate User does NOT run concurrently with the others, certainly where
all are logged in and "running". Actually, it appears OSX only executes programs within ONE user at a
time: the one in focus at the time. It so happens that OSX multitasks within that one User the differently-named
programs quite well; but OSX does not (continue to) execute anything in other Users, until another
User is manually switched to. Therefore, in my case, I can only run one monitor in one User at a time, thus ruining any benefit I might otherwise achieve IF OSX ran programs concurrently in multiple Users, another form of multitasking that apparently OSX is not designed to do. My monitors run with Excel VBA, which becomes the name of that program within
one User, so I am limited to running only 1 monitor per User. (Groups don't help.). On the other hand, It might help a little if
my monitor somehow could switch between OSX Users programmatically, rather than manually...I do not want
to sit at my Mac Pro constantly and manually fast-switching between Users to even attempt to solve my problem. Rather, I want
the software to run concurrently 24/7 unattended to successfully provide the service promised to all.
So, because there are lots of brilliant folks that know a lot about MACs and OSX, certainly more than me, I
am wondering IF someone knows how to get OSX to multitask across more than one User at a time, which
would solve my dilemma?? Maybe it's just not possible, I don't know...
Also, would OSX Server edition maybe be better suited to solve my problem? I know nothing about the Server's capability.
I would also hate to have to run Windows on my Mac Pro to solve this. Would VMware/Fusion work here?
Thank you again for taking the time to help...

Slow running spatial query

I am hoping someone can help. I am writing alot of spatial queries but I am having a hard time figuring out what is wrong with this one and maybe someone can give me some advise. Here is my query
select count(inc) from public_crimeshapes.aggassault2004 h, spatial.tracts2000 t
where mdsys.sdo_relate(h.geom, t.geom,'mask = anyinteract querytype=window') = 'TRUE'
and tract2000 = 012300 and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') >= '01/01/2004') and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') <= '12/31/2004')
This one runs fast in less than 3 secs but if I added multiple tract2000 numbers like this
select count(inc) from public_crimeshapes.aggassault2004 h, spatial.tracts2000 t
where mdsys.sdo_relate(h.geom, t.geom,'mask = anyinteract querytype=window') = 'TRUE'
and tract2000 in (012300,012400,012500,014300,014400,016600,016700,016800,016900,017000,017100,017200,017300,017400) and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') >= '01/01/2004') and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') <= '12/31/2004')
it will take like 5 mins to run. Is there another way to run a spaital query on multiplue polygons? Tracts2000 is a polygon and aggassault2004 is a point file. Thanks for the help I am running Oracle Spatial 9i.
Matt

Hi,
Can you try the following:
select /*+ ordered */ count(inc)
from spatial.tracts2000 t, public_crimeshapes.aggassault2004 h
where mdsys.sdo_relate(h.geom, t.geom,'mask = anyinteract querytype=window') = 'TRUE'
and tract2000 in (012300,012400,012500,014300,014400,016600,016700,016800,016900,017000,017100,017200,017300,017400) and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') >= '01/01/2004') and
(to_char(to_date(h.fr_date,'yyyymmdd'), 'MM/DD/YYYY') <= '12/31/2004');
Note I added the ordered hint, AND reversed the order of the tables in the from clause. What this will hopefully tell the optimizer is:
find the tract2000 from the tracts2000 table (hopefully you have a non-spatial index here) using the in clause. Do this first, then:
for each of those, use the spatial index to find the assault cases.
Hopefully this will be fast.
If the assault cases are stored as point data, when you create the spatial index use layer_gtype=point to ensure best performance.

Error When Run ABAP Query in Different Client

Hi ABAPers,
Currently I develop ABAP Query using SQ01 / SQ02 / SQ03.
Everything goes well, and I have already test that the query work well. The query can be execute and show the result correctly.
My peer in same SAP system, but different client, run the same query. As I know that query is same with ABAP program which is client independent, can be execute across client. But then the runtime error show up.
The error said that
Exception condition "NO_POSITION_FOUND" raised.
Can anybody told me what's happened here, and how can I resolve this problem?
Thank you in advance
Regards
Hadi

Hi,
Since you are testing it in other client,i think due to data inconsistency you are getting that error.
Try to check the corresponding tables in both clients and can verify.
Cheers,
KK.

Sdo_filter fail when query against a spatial view in different schema

We have a table with X,Y coordinates and would like to run spatial query against it. We do not want to change the table structure, so we opt to use a function based index. USER_SDO_GEOM_METADATA is updated and index is built. Then we created a view with spatial column from the table. Everything works fine with the user who owns the table and view.
When we try to run a spatial query against the view from a different user, it failed with error. However, if we substitute the select from my_view* with the actual SQL statement that created the view, it works. So it looks like Oracle refuse to acknowledge the spatial index if accessed via view. Here is some simplified scripts:
--- connect as USER1.
--update meta data
INSERT INTO USER_SDO_GEOM_METADATA ( TABLE_NAME, COLUMN_NAME, DIMINFO, SRID ) VALUES
('LOCATIONS', 'MDSYS.SDO_GEOMETRY(2001,2264,SDO_POINT_TYPE(NVL(X_COORD,0),NVL(Y_COORD,0),NULL),NULL,NULL)',
SDO_DIM_ARRAY( SDO_DIM_ELEMENT('X', 1300000, 1600000, 1), SDO_DIM_ELEMENT('Y', 400000, 700000, 1) ), 2264 );
--created index
CREATE INDEX LOCA_XYGEOM_IDX ON LOCATIONS
( SDO_GEOMETRY(2001,2264,SDO_POINT_TYPE(NVL(X_COORD,0),NVL(Y_COORD,0),NULL),NULL,NULL)
) INDEXTYPE IS MDSYS.SPATIAL_INDEX;
--create view
CREATE VIEW USER1.MY_VIEW AS SELECT ID ,X_COORD,Y_COORD, SDO_GEOMETRY(2001,2264,SDO_POINT_TYPE(NVL(X_COORD,0),NVL(Y_COORD,0),NULL),NULL,NULL) SHAPE
FROM USER1.LOCATIONS WHERE X_COORD>0 AND Y_COORD>0;
-- run spatial query from view, works fine by user1 by failed on user2.
SELECT SHAPE FROM (
SELECT * FROM USER1.MY_VIEW
) a WHERE sdo_filter (shape, sdo_geometry ('POLYGON ((1447000 540000, 1453000 540000, 1453000 545000, 1447000 545000, 1447000 540000))', 2264), 'querytype=window') = 'TRUE';
-- run spatial query from table directly, simply replace the view with actual statements that created the view. works fine by user1 AND user2.
SELECT SHAPE FROM (
SELECT ID ,X_COORD,Y_COORD, SDO_GEOMETRY(2001,2264,SDO_POINT_TYPE(NVL(X_COORD,0),NVL(Y_COORD,0),NULL),NULL,NULL) SHAPE
FROM USER1.LOCATIONS WHERE X_COORD>0 AND Y_COORD>0
) a WHERE sdo_filter (shape, sdo_geometry ('POLYGON ((1447000 540000, 1453000 540000, 1453000 545000, 1447000 545000, 1447000 540000))', 2264), 'querytype=window') = 'TRUE';
When run against the view by user2, the error is:
ORA-13226: interface not supported without a spatial index
ORA-06512: at "MDSYS.MD", line 1723
ORA-06512: at "MDSYS.MDERR", line 8
ORA-06512: at "MDSYS.SDO_3GL", line 1173
13226. 00000 - "interface not supported without a spatial index"
*Cause: The geometry table does not have a spatial index.
*Action: Verify that the geometry table referenced in the spatial operator
has a spatial index on it.
Note, the SELECT SHAPE FROM (****) A WHERE SDO_FILTER(....) syntax is a third party application, all we have control is the part inside "(select ...)".
So it appears Oracle is treating view differently. Have attempted fake the view name into USER_SDO_GEOM_METADATA, did not work. Also, granted select on the index table to user2, did not work.
if we re-created the view in user2 schema, it worked for user2 but not user1, so it's not something we can do for every user.
Searched the forum, no good match found. A few posts talked about "union all" in view caused the problem but I do not have the union.
We are only use Oracle 10g Locator, not full spatial edition.
Any ideas?
Thanks!
Edited by: liu.284 on Oct 4, 2011 12:08 PM

It seems a bug, where a function-based spatial index is not correctly handled in a view query transformation.
Not sure if the following works for you or not.
add a new column "shape" (mdsys.sdo_geometry) in table locations, use a trigger and x_coord/y_coord
to set values for this new column, and just create a normal spatial index on this new column. (drop the
function-based spatial index). And create a view like:
CREATE VIEW USER1.MY_VIEW2 AS SELECT ID , X_COORD, Y_COORD, SHAPE
FROM USER1.LOCATIONS WHERE X_COORD>0 AND Y_COORD>0;

Firefox Flash plugin crashes when FF launched with "Run as different user"

I often start Firefox in Windows 7 (x64) using the "Run as different user" mechanism. After upgrading my Flash plugin to v11 (11.8.800.94), the browser will hang for several minutes when visiting any page that contains Flash content. When Firefox becomes responsive again, scrolling a page with Flash content will cause the app to hang again. Disabling the Flash plugin eliminates the problem.
It seems the plugin is silently crashing -- I'm not alerted to a plugin crash in any way (no dialog or yellow "Flash player crashed" notice at the top of the window), but after FF hangs I will see a new crash report entry in the FF about:crashes list. An example crash report is available at https://crash-stats.mozilla.com/report/index/ff452291-b5b2-44e4-a172-416792130818
The plugin does not crash when Firefox is running under the same account that is logged onto Windows interactively -- only when running FF as a different user. For example, if I log onto Windows with user account Adam and launch FF normally, the problem does not exist. If I close FF and launch it as user Bob (shift+right-click Firefox Shortcut, choose "Run as different user"), the problem will appear. However, if I log into Windows as user Bob and launch FF normally, the problem does not exist.
I have tried the following as troubleshooting steps, all to no effect:
Create new Windows user accounts to rule out potential Windows or Firefox profile issues.
Use another PC (also Windows 7 x64). The same behavior occurs on both PCs
Disable AVG antivirus.
Upgrade Firefox to latest version (23.0.1).
Disable Flash hardware acceleration.
Give both user accounts full local admin privileges.
Can anyone suggest something to try next?
Update: Per the troubleshooting instructions at < http://forums.adobe.com/thread/1018071?tstart=0 >, I was able to eliminate the problem by adding the line
ProtectedMode=0
to my C:\Windows\SysWOW64\Macromed\Flash\mms.cfg file to disable Flash Player Protected Mode. There are instructions on that page for submitting a Protected Mode-related bug, and I will follow through with that.

Maybe you did't understand my previous statement. There are no crashes in FF 3.6, There is no previous evidence FF 14 was ever here, I completely uninstalled all trace of Firefox, no app data, no preferences, no cache. I will upgrade to FF14 so I can send IDs,
so here ya go.
Crash ID: bp-fa9da320-92dc-47f7-afff-33e702120718
AdapterDeviceID: 0x2a02
AdapterVendorID: 0x8086
Add-ons: {972ce4c6-7e08-4474-a285-3208198ce6fd}:14.0.1
BuildID: 20120713134347
CrashTime: 1342655269
EMCheckCompatibility: true
Email: [email protected]
FramePoisonBase: 7ffffffff0dea000
FramePoisonSize: 4096
InstallTime: 1342655256
Notes: AdapterVendorID: 0x8086, AdapterDeviceID: 0x2a02GL Context? GL Context+ GL Layers? GL Layers+
ProductID: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
ProductName: Firefox
ReleaseChannel: release
StartupTime: 1342655256
Theme: classic/1.0
Throttleable: 1
URL: http://www.mozilla.org/en-US/firefox/14.0.1/whatsnew/?oldversion=rv:1.9.2.13
Vendor: Mozilla
Version: 14.0.1
This report also contains technical information about the state of the application when it crashed.

Running jobs as different users

The job I am creating in the Job Scheduler needs to run SQL as several different users. I have heard that 11g will allow this. However I am wondering whether there is any way to do it in 10gR2. I have tried to embed a CONNECT user/password within the PL/SQL block as EXECUTE IMMEDIATE and stand alone. Nothing seems to work. Does anyone have any suggestions on a way to do this before 11g?

Hi,
The Scheduler can run stored procedures and pl/sql blocks but it runs all PL/SQL as the job owner. The limitation of not being able to run different SQL as different users is a PL/SQL limitation.
There is a workaround however. For each SQL that needs to run as a particular user create a PL/SQL stored procedure in that user's schema . By default (do not use the authid current_user clause) these stored procedures run with the privileges of their owner. Then grant execute on these stored procedures to the job owner. Now the job owner can call any of these procedures when he needs to run SQL as another user.
One thing to watch out for is that stored procedures do not use role privileges , so do not rely on role privileges in your SQL statements.
This should do what you need.
Hope this helps,
Ravi.

DS5.2 - is it possible to run db2ldif.pl as a different user?

Normally we run exports using the following command
./db2ldif.pl -s "c=us" -a us.ldif -D "cn=directorymanager" -w <password>But I'd like to be able to run this as a different user, e.g.:
./db2ldif.pl -s "c=us" -a us.ldif -D "uid=me,ou=people,c=us" -j <password file>When I try that I get the following error:
adding new entry cn=export_2009_5_12_11_21_27, cn=export, cn=tasks, cn=config
ldap_add: Insufficient accessThe user in question has full read/write to the directory, but I'm guessing I've missed something that's not immediately apparent.
Does anyone know if this approach is possible? If so, do you know what steps I've missed?
Many thanks.

I'd like to be able to run this as a different user...Yep, as long as you have ACIs set up to allow the necessary access, this works fine.
The user in question has full read/write to the directory...Do you mean they have full access to cn=config, or to the suffix with your data?
Note that the error happens while db2ldif.pl is attempting to add an entry beneath cn=config.

Run program as different user

Hey there guys, how can i run a program as a different user in fluxbox?

this will allow you to run applications as a different user in an X session. It's not mine - I got it from somewhere but I don't remember it anymore.
#!/bin/sh
# usage is:
# save as ~/script-name
# chmod +x script-name
# ~/xsu username 'programname &'
# ex:
# ~/xsu john 'firefox &'
if [ $# -lt 2 ]
then echo "usage: `basename $0` clientuser command" >&2
exit 2
fi
CLIENTUSER="$1"
shift
# FD 4 becomes stdin too
exec 4>&0
xauth list "$DISPLAY" | sed -e 's/^/add /' | {
# FD 3 becomes xauth output
# FD 0 becomes stdin again
# FD 4 is closed
exec 3>&0 0>&4 4>&-
exec su - "$CLIENTUSER" -c \
"xauth -q <&3
exec env DISPLAY='$DISPLAY' "'"$SHELL"'" -c '$*' 3>&-"

Runas with different user with password also in Batch File

Hi,
I need to run one application with different user credentials.
I am using Runas command in batch.
When running the task it's prompting for password.
Here i want to run the application without any promptings.
Can any body help me is there any batch script for running the program silently without any prompts.
Thank You,
Avis

Runas is typically not for windows forms but for console operations.
Try the forum of your program language.
However, be aware that probably there will no answer for this given because Runas is mostly meant for malicious programs so code for that is not allowed to distribute using forums.
Success
Cor

Running Spatial Query as different user

Similar Messages

Maybe you are looking for