System and object privileges

hi,
when we assign the privileges to a user using connect, resource that user will be having connect privilege and create table, view... etc. but we are not assigning any alter table, updating table, drop table privileges to him, how he can perform this object level privileges on the objects.
please let me know.
thank u

851707 wrote:
hi,
when we assign the privileges to a user using connect, resource that user will be having connect privilege and create table, view... etc. but we are not assigning any alter table, updating table, drop table privileges to him, how he can perform this object level privileges on the objects.
please let me know.
thank uIf the user is the owner of the object, he doesn't need to be explicitly assigned the object privs. He already has all the privs on the object . So the user can perform all the operations on the object.
Aman....

Similar Messages

System and Object privileges question

hello everyone.
I was really making it a priority to really understand both system and object privileges for users. I have setup a couple of 'sandboxes' at home and have done lots of testing. So far, it has gone very well in helping me understand all the security involved with Oralce (which, IMHO, is flat out awesome!).
Anyway, a couple of quick questions.
As a normal user, what view can I use to see what permissions I have in general? what about permissions on other schemas?
I know I can do a:
select * from session_privs
which lists my session privileges.
What other views (are they views/data dictionary?) that I can use to see what I have? Since this is a normal user, they don't have access to any of the DBA_ views.
I'll start here for now, but being able to see everything this user has, would be fantastic.
Cheers,
TCG

Sorry. should have elaborated more.
In SQLPLUS, (logged in while logged into my Linux OS), I am working to try and get sqlplus to display the results of my query so it is easy to read. Right now, it just displays using the first 1/4 or 1/3 of the monitor screen to the left. Make sense? So it does not stretch the results out to utilize the full screen. it is hard to break down and read the results because they are "stacked" on top of each other.
Would be nice if I could adjust sqlplus so the results are easier to read.
HTH.
Jason

Query created in production system and object changeability

Hi,
The production BW has the object changeability for query elements set to 'Changeable original'. Some queries which have been created in this system can be changed, others, which have also been created in the system, can not.
All queries are assigned to the development packate $TMP. None of them have been transported anywhere, nor have they been created somewhere else and transported into the system.
The system is BW 3.5, SP 17.
Has anyone got any idea what the problem could be?
Best regards,
Rita

Hi,
The object changeability in the system is set to 'Changeable Original' and I know where to switch from 'not changeable' to 'changeable original' to 'everything changeable'.
The normal development cycle sees reports being created in the development system and then being transported through to the production system. Here, they should not be changeable. However, users with the relevant authorisation should be able to either -
- create new copies of these reports and change them or
- create new ad-hoc reports and also change these
We have several of these reports on the production system. The object changeability is set to 'changeable original', as I mentioned. I would expect that all queries which have been created on this system and never transported (either in or out of the system) should be changeable, based on this setting. However, some are, some ar not. The error message when trying to change the 'non-changeable' ones is 'Operation falied! No error message available from the server'. If I make a copy of one of these queries, hoping to save is as an ad-hoc query and change it, the error message is 'query could not be saved due to a problem in transport'.
How come some can be changed, others can't? Is there anywhere I can check what the difference is between the changeable and non-changeable reports which have been created on the system?
Best regards,
Rita

Find all system and object privs granted to a user

I need a query to find out all sys and ibject qyery given to a user. This is because a user was able to query all_directories few days ago in production instance, now he is unable to do it.
I found a query to find all roles inside a role. This role "APPS_QUERY_ROLE" has another 25 roles inside it. I want a query which will drill down to each role and "role within a role" to find all privileges associated to a role and hence to the user.

This may be helpful to you :
SYS@orcl> select 'create role ' || role || ';'
2 from dba_roles
3 where role = '&&role';
Enter value for role: APPS_QUERY_ROLE      <------Make sure it should be in CAPS
old   3: where role = '&&role'
new   3: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl> select 'grant ' || privilege || ' to &&role' ||
2 decode(admin_option,'YES',' with admin option;','NO',';')
3 from role_sys_privs
4 where role = '&&role';
old   1: select 'grant ' || privilege || ' to &&role' ||
new   1: select 'grant ' || privilege || ' to APPS_QUERY_ROLE' ||
old   4: where role = '&&role'
new   4: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl> select 'grant ' || privilege || ' on ' || owner || '.' || table_name
2 || ' to &&role ' || decode(grantable,'YES','with grant option;','NO',';')
3 from role_tab_privs
4 where role = '&&role';
old   2: || ' to &&role ' || decode(grantable,'YES','with grant option;','NO',';')
new   2: || ' to APPS_QUERY_ROLE ' || decode(grantable,'YES','with grant option;','NO',';')
old   4: where role = '&&role'
new   4: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl>Source:Re: Help to Generate Role Creation Script
Regards
Girish Sharma

System and admin privileges after restore

I just restored my system from a disk image.
The system boots fine, but I can only launch programmes that are owned by my user (firefox, photoshop etc.). Programmes owned by the system (system - rw, admin - rw, everyone - r) will not launch, so no mail, no system prefs and no terminal.
The HD is system owned and I can't unlock the lock in get info o the HD or any of the programmes.
repair permissions from the install disk (though it's a 10.4 disk) or from a 10.5 via target HD mode doesn't help.
Tried adding my user to the admin group using single user mode, but it said that user was already part of the group. And even if I'm not an admin I should still be able to launch programmes, no?
Thanks,
John

VK said for locked HDs and volumes at http://discussions.apple.com/thread.jspa?threadID=2329689
sudo chflags 0 /volumes/*
sudo chmod a+rx /volumes/*

Tracing all users and their privileges

Hi everbody!
I want to trace all users(online/offline) and those user's given privileges as a system dba. Are there any data dictionary views to trace it ?
i.e.
we have 3 users and 3 of them have connect,resource. How can we know who have which privs ?
i checked dba_role_privs, nothing to solve my prob.
thanks.

You should never assign CONNECT or RESOURCE to anyone.
Determine what privileges each connected user requires and create a role that contains the actual privs required.
System and Object privileges may be granted explicitly or in roles and roles can be granted to roles. Check here too:
all_tab_privs_made
all_tab_privs_recd
all_col_privs_made
all_col_privs_recd

Roles/System privileges/Object privileges

Oracle 10g. we created a role and assigned this role to the user. We also assigned some system privileges and Object privileges directly to the same user. Now the company's new policy is that the user's permissions have to be assigned only via role. system privileges and Object privileges cannot be assigned directly to the user. So I have to alter the role. The steps are:
1. grant system privileges and Object privileges to role. (this will be executed as a script)
These privileges were directly assigned to the user.
2. revoke all privileges which were directly assigned to the user.
Do I miss anything?
Please advise.
Thanks
S.

Object privileges cannot be assigned directly to the user.Privileges acquired via ROLE do not apply within PL/SQL procedures.
You may face some coding challenges in the future due to this policy.

Difference between system level privilege and object level privilege

hi
i just want to know the difference between system level privileges and object level privilege.
please correct me if i am wrong
with system level privilege user can create objects such as creating tables,view,synonyms etc
where as in object privilege we can only manipulate operations on object i.e perform dml not ddl
please help

Hi,
810345 wrote:
hi
i just want to know the difference between system level privileges and object level privilege.
please correct me if i am wrong
with system level privilege user can create objects such as creating tables,view,synonyms etc
where as in object privilege we can only manipulate operations on object i.e perform dml not ddl There are some system privileges that only concern manipulating objects: SELECT ANY TABLE, for example.
The main difference is that the system-level privileges tend to cover all objects of a certain type, including objects that haven't been created yet.
Object-level privileges usually apply only to one specifi object, such as one particular table, and are lost if the object is dropped. (For example, if I create a table called table_x, give you SELECT pivileges on it, then you can query my table. But if I then drop table_x and re-create it, you will not be able to see it unless I grant the privilege again.)

IView and system admin objects appear changed or not registered when transported

Hi,
Recently we moved a few objects - iViews, pages and roles as epa and system admin objects as config archive and imported them manually to Test system. But when checked in the next landscape, the iView properties appear different. Eg. In Development system, the iView was unchecked for visibility option i.e. iView should not be visible. But when transported to test system, the property was checked and gave error. On reimporting, the same thing happened and we had to manually correct the property. This is not an expected behaviour and manual changes are not to happen after development changes.
Similarly, though config archive import showed the 2 new system objects in the respective location of Test system, the expected functionality was not working. I checked this by deleting one of them and manually creating the same entry and it worked fine. So I also had to delete the 2nd one and create a manual entry. The system admin objects we used pertained to System Configuration --> Content Mgmt--> Form Based Publishing --> Forms Availablity --> Folder Settings
We also moved kmcs and they are reflecting properly with correct folder permissions.
We don't understand why this is so occurring (iView and system admin entry appearing different or not getting registered )and never experienced such a case in previous projects. We don't want to face the issue going forward when transporting changes to staging and Prod systems.
Please assist as to what went wrong or any probable cause and solution for same.
Thanks,
Janani

Hi,
Has anyone faced such a situation before and know the reason for same ?
Regards,
Janani

Object system and its method genericinstantiate?????????????

Hi Experts,
I have a workflow, in this workflow header tab there is no triggering event is mentioned .
no business object no triggering event .
when i checked the workflow the first task is created by business Object system and its method genericinstantiate.
now i am not able to understand what is the role of BO system and this method.
Also i am not able to understand how this workflow is getting triggered is this method is helping this workflow to get triggered.
thanks in Advance
Thanks & Regards
Anit Gautam

when i checked the workflow the first task is created by business
Object system and its method genericinstantiate.
now i am not able to understand what is the role of BO system and this method.
If you are not able to trace from where this event is getting triggered, the simple way to find how the task is receving the event is
1.Switch on the event trace by using the txn SWELS.
2. Trigger the workflow by using the same event either from SWUE txn or directly stsrting the process which raises this event.
3. Onc the event is triggered , go to SWEL txn and check what are the workflow templates and tasks are receiving the event which you have triggered.

Changing Original System and Transport Target System for Objects

Hi Gurus,
I need to do mass transport of all the Infoobjects to newly defined system. Since these objects have different Original system. Its giving me error. Again, for other objects, Transport Target system is QAS, But we want to change it to NBW (A new system to which we want to send transport) . I am able to change package of Infoobjects. Is there mechanism to change Original System and Transport Target for System? Please let me know ASAP.
Regards,
Harpal
Message was edited by:
Harpalsinh Gohil

If you simply edit your original post, it will go to the top of the list. There's no need to post duplicates.
Subjects with a subject of "Urgent" will be filtered out by a lot of responders.
Why not close this thread and bump the other one?
Rob

Deleting a Business System and related/assigned objects

I am PI newbie (as will soon become apparent) so first I apologise for my “simple” question.
In PI one business system has been replaced with another e.g. BS_US_1CLNT is replaced by BS_US_2CLNT. I want to delete the first business system and all its related components and links without breaking anything, preferably.
What is the best way to do this? I assume I go to the interface builder, select Object View, then select BS_US_1CLNT and open the object list. The object list consists only of communication channels so I can right click on each CC and delete? But what if these have been assigned already to Configuration Scenarios? Are there other objects/assignments I should take care of or check? Is this the right way to go about this i.e. simply right click on each CC under the BS_US_1CLNT tree and then delete?
Please help me with the steps I should take to proceed with this, and any objects etc. I should take care of.
All help greatly appreciated.
Wish you all a nice day further.

Hi Glen,
It is not easy just to delete all the objects pointing to a certain business system, but the way to delete would be communication channels first and then the business system would be last.
When deleting a communication channel, you can see where it is used by right-clicking on it and then select the Where-Used List option. It will list the objects that uses that communication channel, namely receiver agreement (for receiver) and sender agreement (for sender).
Once you have re-created the receiver/sender agreements to use the new business system, it should now be safe to delete the channels and the sender/receiver agreements. You should also do the same with the business system, right-click it and select Where-Used List. You also need to re-create the objects that uses that business system e.g receiver det, interface det, receiver agreement (if not yet deleted), sender agreement.
Do not worry about being a newbie, everyone of us started as one
Hope this helps,
Mark

Device object not present,restart the system and run setup again????

i install window xp sp2 in my macbook,when i install driver by mac os cd,installation run until sigmatel,it show error,the my mbp will restart automatically,and the driver installion not complete!! i try to install sigmatel idt sound driver manually,when system update the hardware configuration,it show an error message
" device object not present,restart the system and run setup again"!!!! so i can not fully install bootcamp driver in window!
any can help??
macbook pro 13" 2010 mid

Hi:
Your notebook is not supported by HP for Windows XP.
Please read the XP downgrade guide at the link below for instructions on how to get your audio to work in XP.
http://h30434.www3.hp.com/t5/Notebook-Operating-systems-and/General-XP-Downgrade-Guide-for-HP-Laptop...
The specific instructions for your model series can be found in the section titled 3. Difficult Models
Paul

Exporting system procedural objects and actions

Hi
Version-Oracle 11.2.0
When i'm trying to export a blank dump it's getting hanged'.Even after 4 hours it's showing
'exporting system procedural objects and actions'.
Following is the command
'exp username/password file=E:\Export\Blank.dmp log=E:\Export\Blank.log full=y indexes=n rows=n'
Any help

user588120 wrote:
Hi
Version-Oracle 11.2.0
When i'm trying to export a blank dump it's getting hanged'.Even after 4 hours it's showing
'exporting system procedural objects and actions'.
Following is the command
'exp username/password file=E:\Export\Blank.dmp log=E:\Export\Blank.log full=y indexes=n rows=n'
Any helpTry to export only one table
Do you get any error on your log file?
If you fail to export any table, then try to TRACE the Data Pump job. Use the following Metalink note:
*Export/Import DataPump Parameter TRACE - How to Diagnose Oracle Data Pump [ID 286496.1]*
My Oracle Video Tutorials - http://kamranagayev.wordpress.com/oracle-video-tutorials/

Where we can set the Multi lingual support in BW system and Info Object?

Where we can set the Multi lingual support in BW system and Info Object?

Hi,
You can check that in RSD1 -> Info-object -> Master Data text tab -> language dependent or not.
Bye
Dinesh

System and object privileges

Similar Messages

Maybe you are looking for