To prevent user from droping any object from a sepacific schema

Dear User
I have a database user like "aaa" in oracle 7.3.4.0.1 database.i do not want user "aaa" to drop his own schema objects like table and any other objects that he is owner.Do i have any system privilege to stop this user from doing so.User should be able to create objects and modify object but not to drop any object.For this purpose i have created a database trigger at database level to stop user "aaa" for doing above action.this trigger is giving me error on creation in oracle 7.3.4.0.1 .But when i tried same trigger in oracle 8i and 9i it work well.In oracle 8i and 9i it is preventing user from droping his own objects but i get other errors also along with raised error in trigger which i want to stop .The error which i am raising in trigger is
ORA-20001 INVALID COMMAND BUT OTHER TWO ERRORS THAT R RAISED AUTOMATICALLY ARE
ORA-00604 ERROR OCCURED AT RECURSIVE SQL LEVEL 1
AND
ORA-06512 AT LINE 8
I WANT TO STOP THESE TWO ERRORS .
PLZ HELP ME IN THIS REGARD AS SOON AS POSSBILE .
Thank u.

Given that you have not posted your code it is very difficult to know why you are getting these errors.
Howver, I can take a guess. If I were trying to implement this functionality I would build a database event trigger that fired whenever a DROP command was issued and cause that command to fail. If this is the approach you've taken I think you are out of luck, as I belive DDL triggers were introduced in Oracle 8.
Mind you, it's been a long time since I worked on Oracle7, so I might be wrong. In which case post your code, don't make me guess again.
Cheers, APC

Similar Messages

Unknown error when copying any object from Illustrator to Photoshop

When trying to copy an object from Illustrator CS5 and paste it to Photoshop CS5 on Windows 7 I get the the following error when I switch from Illustrator to Photoshop:
The operation cannot complete because of an unknown error. [pdf!]
This only happens between Illustrator and Photoshop - copying an object to InDesign works fine.
I deleted the full Adobe preferences folder on D:\Users\[username]\AppData\Roaming\Adobe but that doesn't help.
Am I the only one with this issue?
Q

There's definitely something wrong.
Have you rebooted your machine recently?
I'm on a Mac, so maybe something happens on Windows that I'm not aware of.
Let's see if anyone on a Windows system has any ideas.
Anyone?

How can we know the affected reports when i remove object from universe

Hi All,
If i remove any objects from the universe.
How can i know the list of affected reports.

Thanks for your update.
It shows what are all the reports has been created by using that particular universe.
But my question was, if i remove any object from the universe, Then what are all the reports affected(We may not use that deleted object in all the reports)

Moving an object from $tmp

Hi Experts,
Suppose i saved an object by mistake in $tmp. How to move this object to quality.
plz give solution for this

Hi Lokesh,
Well everybody said the right thing i.e. if you want to transport any object from $tmp,you have to go to se38 and than-
1.Click on Goto->Object Directory Entry.
2.Click on change i.e. pencil icon and then,
3.Give your package name in the package option.
4.After that you are provided one transport request by the system.
5.Click on continue.
Through this way you can make the object transportable.
But may be sometimes you want one object only local i.e. not to transport($tmp),and mistakenly you make that object transportable.So in order to make it again local,you have to do following things:
1.Go to se09 or se10.
2.Display all the transport request made by you.
3.Now find your transport request in all these.
4.After that you find your program name in them.
5.Now delete that program.
6.After that you go to se38 and do the same procedure as do in your solution i.e. moving a object from $tmp.
7.Give your package name here as $tmp.
Through this way you can again make a object local.
If you don't follow the steps 1-5 than you are not able to make a object loacl again,because the object is locked by the transport request.
Regards.

Cant view objects from another schemas

Hi everybody!
I have a 10.1.2 Jdeveloper and a 9.2.4 Oracle database.
I successfully created a database connection.
With provided login I can access to tables from another schemas in SQL Worksheet, but I cant see any objects from those schemas in the connection tree.
What's wrong?

The Schemas are being filtered so that you only automatically see the schema for the connection that you logged on with. To change the schemas that are visible you need to :
1) Select the connection name in the Navigator (you should see that it has a filter icon overlaid showing that it is being filtered)
2) Invoke the context menu and select 'Apply filters'
3) Shuttle over the other Schemas you wish to see and press OK
Regards,
Lisa Sherriff
JDev QA

Problem when importing objects from SLD to IR

Hi
When i try to import any object from SLD into
IR i cant view all the components under Data Types Message Types Interface Mapping and other related nodes.Just the object gets imporetd but none of ts nodes are visible.
Please let me know if any change in configuration or settings is to be done.
Thanks in Advance

>>Could you pls tell me the link in service.sap.com
https://websmp205.sap-ag.de/~form/handler?_APP=00200682500000001943&_EVENT=SEARCH&HIDE=&SEARCH_SPAT=X&SEARCH_BPAT=X&SEARCH_CD=X&SEARCH_P=X&SEARCH_PV=X&SEARCH_C=X&SEARCH_CV=X&SEARCH_TA=&SEARCH_V=&HIDE_EXPERT_SEARCH=X&SEARCH_MAX_RESULT=20
search SAP basis 6.40
Regards,
Jai Shankar

Authorization Scheme - Getting handle on which object is calling the scheme

Hi
I'm currently trying to write a custom authorization scheme using a plsql returning boolean. What I'm wondering is whether there is a way to reference the application object (e.g. page, region, page item, button etc) that has triggered the authorization plsql to run.
What I'm ultimately wanting to do is to create a generic authorization scheme that can be applied to any object, and that auth scheme will look up a database table containing what users can access what object. I can only do this if I know at run-time which object the plsql is currently checking authorization for. (I can get the user from :APP_USER.
For example I have an authorization scheme "test_scheme". I have applied test_scheme to the button "CREATE" on page 1. This button has a button_id which I can find from APEX_APPLICATION_PAGE_BUTTONS view.
During page rendering the buttons authorization scheme will be checked (and so the plsql returning boolean will be triggered). When the plsql is triggered I want to reference the fact that the CREATE button on page 1 (or better the button_id) has triggered the plsql, from within the plsql itself.
I hope this makes sense.
Many thanks in advance.

Hi Scott,
Looks like there are a few others out there encountering the limiatations of authorization schemes.
Hopefully there will be an enhancement at some point to enable referencing the component id which has triggered the authorization scheme to run.
Until then I will go down the route of creating an authorization scheme for each component that needs one.
Many thanks for pointing me to that discussion.
Jimbo

To prevent user from droping his own object .

Dear User
I have a database user like "aaa" in oracle 7.3.4.0.1 database.i do not want user "aaa" to drop his own schema objects like table and any other objects that he is owner.Do i have any system privilege to stop this user from doing so.User should be able to create objects and modify object but not to drop his own objects.For this purpose i have created a database trigger at database level to stop user "aaa" for doing above action.this trigger is giving me error on creation in oracle 7.3.4.0.1 .But when i tried same trigger in oracle 8i and 9i it work well.In oracle 8i and 9i it is preventing user from droping his own objects but i get other errors also along with raised error in trigger which i want to stop .The error which i am raising in trigger is
ORA-20001 INVALID COMMAND BUT OTHER TWO ERRORS THAT R RAISED AUTOMATICALLY ARE
ORA-00604 ERROR OCCURED AT RECURSIVE SQL LEVEL 1
AND
ORA-06512 AT LINE 8
I WANT TO STOP THESE TWO ERRORS .
PLZ HELP ME IN THIS REGARD AS SOON AS POSSBILE .
plz tell me is there any system privilege to stop user from droping his own object or any other way along with trigger at database level.
Thank u.

Hi
DBAs can use PRODUCT_USER_PROFILE (in system schema) to disable certain SQL and SQL*Plus commands in the SQL*Plus environment on a per-user basis. SQL*Plus, not Oracle, enforces this security. DBAs can even restrict access to the GRANT, REVOKE, and SET ROLE commands in order to control users' ability to change their database privileges.
The PRODUCT_USER_PROFILE table enables you to list roles which you do not want users to activate with an application. You can also explicitly disable use of various commands, such as SET ROLE. For example, you could create an entry in the PRODUCT_USER_PROFILE table to:
read more about this at
http://download-west.oracle.com/docs/cd/B10501_01/server.920/a90842/ch10.htm#1005648

Prevent user from update view object

Hi all is there is any way to prevent user from update view object at runtime, but if he have a privilege to Update he can update.
i put all user privilege in a variable in session, but how to use it to prevent user from update .
or ho w to make updateable view just for create or insert data not update it;
thnx in advise

Hi Mohammed,
> tow view object bad way it means to page (as i think project 50 page mean to create 100 page )??
Untill the Question is clear Answer will not be clear U never mentioned the Quantum of Pages u gng to work in POST....
> disable commit button but if user have privilege to insert a new record ??
Did u think this statement means something.. A user who has no privilege to commit the data wht is the purpose of giving privilege to add the data?????????
> if i disable table or form and user try to create new record is new fields will be enabled or will be as previous row.
This too i cant understand?? the user doesnt have access why should he need to create row.. u can disable the Create button too.....
> by the way is there is any way to catch Sql Statement that will be committed when user press commit .
While user press commit and u gng to call the ApplicationModule Commit so u can have a hold on doDML() method of the corresponding entity else if u gng to insert though a procedure or function
U can restrict the same before u calling the same.......
Regards,
Suganth.G

Is there any way to prevent users from ship confirming on a particular date?

Hello All,
We have a requirement to prevent users from ship confirming on a particular date. This is due to they are performing Annual Physical Inventory.
Is it possible to restrict users performing shipping transactions on this particular date?
I have tried adding exception to the existing Calendar set at org level and there is no customer specific Calendar defined, however it is still allowing me to perform ship confirm.
Please let me know if you have any suggestion on this requirement.
Thanks

Hi,
Yes is Possible.
You can add An Exception in Your Shipping Calender.
So when Some one tries to ship an Order on that date Oracle will automatically select Next possible date.
Thanks
Shameer

How to create a new user without any sample objects from any other user?

Question as the title.
I had the example dababase installed when I installed the Oracle database.
Every time, when I create a new user, there will be some example objects coming
with the new user.
How can I remove these objects from the new user?
Or, how can I create a new user without the example objects?
Thanks in advance.

I think the easiest way for you would be to use OEM.
Just locate each object that you want to remove and right click->remove. Don't bother doing this for any indexes as these will be removed when you drop the corresponding tables.
If you want to try command line through sqlplus then identify the objects you want to remove by selecting from the user_objects view while logged in as this user. This will give you the name and type of object. Then issue the relevant drop command.
It's probably worth making sure you have a valid backup first, just in case things go wrong!

CE10 how to prevent user from view hostrical instance

hi,
We are currently using CE10. One of our user used search functionality in enterprise to search for reports start with 'employee' and it came back with all the crystal reports on the server that started with employees, even the one the user doesn't have access to. My greatest concern about this is that users can view historical instance and it is sensitive data. Does anybody know whether or not this is a bug in CE10? Is there a patch/fix for this? Is there any configuration change that I can make to
prevent users from being able search all the reports on the server rather just their own reports? Any help is greatly appreciated.
Regards,
Susan

hi,
I have an EVERYONE group with limited access(view object), and EVERYONE group is added to each folder with NO ACCESS. If I revoke view object(explicitly denied) privilege from EVERYONE group, do I still need to remove EVERYONE group from each folder? When I'm at folder level in CMC, I see EVERYONE GROUP added, but when I tried to remove the EVERYONE GROUP, the EVERYONE group is not an option for removal. What am I missing?
Thanks for your help!
Regards,
Susan Johnson

ME53N Prevent user from making a change

How do you prevent a user from making a change to a purchase requistion via transaction ME53N? We want the user to make a change to the purchase requisition using transaction ME52N not transaction ME53N. When the user is in transaction ME53N and clicks on the pencil to change the purchase requisition we want to prevent the user from making any changes by sending a message or force the screen to go to display mode. Thank you in advance.

Sharon,
I don't believe that your exact requirement can be met with standard SAP.
However, this is a very odd requirement. It sounds like you are saying that it is OK for a user to make a PR change in ME52N, but for the same user it is not OK to make a PR change in ME53N.
In most companies, if it is not OK for a user to make a PR change in ME53N, it is therefore also not OK for this user to make a PR change in ANY transaction, including ME52N.
It is a straightforward matter to allow a user access to ME53N and ME52N, but to block his ability to change any PR at any time. If this is your requirement, then consult with your authorization team about the authorization objects that are checked in the ME5* series of transactions. As I recall, it is possible to tailor authorizations (create/change/display etc) by plant, by Purchasing group, by purchasing org,by document type, etc.
Rgds,
DB49

Prevent User from receiving grant.

Hi,
I have one database "user", whom I have assigned "The role". All the needed access are assigned to "The role",
Now, whenever my team member create new table, procedure, i expect them to grant necessary priviledges to "The role" and not to "user". Hence, I want to prevent them from granting any priviledges directly to "user".
How can i achieve this?

Hi
Check this too..
grant privileges for future object?
you automate the process, to the role..
- Pavan Kumar N

ODI not able to detect primary/foreign keys from XML- user lacks privilege or object not found

Hi Guys,
Im trying to load an xml file with two entities address and employee as below. The topology reverse engineering everything works fine. Im even able to view the xml data in ODI, but when i try to load the data from these two entities joining by the schema primary keys and foreign keys which odi created on reverse engineering process for xml, im getting the below error. Im able to load data from one entity, error only occurs when i use the join odi creates internally to identify the xml components employee and address
XML File:
<?xml version="1.0" encoding="UTF-8" ?>
<EMP>
<Empsch>
<Employee>
<EmployeeID>12345</EmployeeID>
<Initials>t</Initials>
<LastName>john</LastName>
<FirstName>doe</FirstName>
</Employee>
<Address>
<WorkPhone>12345</WorkPhone>
<WorkAddress>Test 234</WorkAddress>
</Address>
</Empsch>
</EMP>
Topology: jdbc:snps:xml?f=C:/Temp/RR/Empsch.xml&s=Empsch&re=EMP&dod=true&nobu=false
Error Message:
-5501 : 42501 : java.sql.SQLException: user lacks privilege or object not found: EMPSCH.EMPSCHPK
java.sql.SQLException: user lacks privilege or object not found: EMPSCH.EMPSCHPK
    at org.hsqldb.jdbc.Util.sqlException(Unknown Source)
    at org.hsqldb.jdbc.JDBCPreparedStatement.<init>(Unknown Source)
    at org.hsqldb.jdbc.JDBCConnection.prepareStatement(Unknown Source)
    at com.sunopsis.jdbc.driver.xml.SnpsXmlConnection.prepareStatement(SnpsXmlConnection.java:1232)
    at sun.reflect.GeneratedMethodAccessor65.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:597)
    at oracle.odi.core.datasource.dwgobject.support.OnConnectOnDisconnectDataSourceAdapter$OnDisconnectCommandExecutionHandler.invoke(OnConnectOnDisconnectDataSourceAdapter.java:200)
    at $Proxy2.prepareStatement(Unknown Source)
    at oracle.odi.runtime.agent.execution.sql.SQLCommand.doInitializeStatement(SQLCommand.java:83)
    at oracle.odi.runtime.agent.execution.sql.SQLCommand.getStatement(SQLCommand.java:117)
    at oracle.odi.runtime.agent.execution.sql.SQLCommand.getStatement(SQLCommand.java:111)
    at oracle.odi.runtime.agent.execution.sql.SQLDataProvider.readData(SQLDataProvider.java:81)
    at oracle.odi.runtime.agent.execution.sql.SQLDataProvider.readData(SQLDataProvider.java:1)
    at oracle.odi.runtime.agent.execution.DataMovementTaskExecutionHandler.handleTask(DataMovementTaskExecutionHandler.java:70)
    at com.sunopsis.dwg.dbobj.SnpSessTaskSql.processTask(SnpSessTaskSql.java:2913)
    at com.sunopsis.dwg.dbobj.SnpSessTaskSql.treatTask(SnpSessTaskSql.java:2625)
    at com.sunopsis.dwg.dbobj.SnpSessStep.treatAttachedTasks(SnpSessStep.java:577)
    at com.sunopsis.dwg.dbobj.SnpSessStep.treatSessStep(SnpSessStep.java:468)
    at com.sunopsis.dwg.dbobj.SnpSession.treatSession(SnpSession.java:2128)
    at oracle.odi.runtime.agent.processor.impl.StartSessRequestProcessor$2.doAction(StartSessRequestProcessor.java:366)
    at oracle.odi.core.persistence.dwgobject.DwgObjectTemplate.execute(DwgObjectTemplate.java:216)
    at oracle.odi.runtime.agent.processor.impl.StartSessRequestProcessor.doProcessStartSessTask(StartSessRequestProcessor.java:300)
    at oracle.odi.runtime.agent.processor.impl.StartSessRequestProcessor.access$0(StartSessRequestProcessor.java:292)
    at oracle.odi.runtime.agent.processor.impl.StartSessRequestProcessor$StartSessTask.doExecute(StartSessRequestProcessor.java:855)
    at oracle.odi.runtime.agent.processor.task.AgentTask.execute(AgentTask.java:126)
    at oracle.odi.runtime.agent.support.DefaultAgentTaskExecutor$2.run(DefaultAgentTaskExecutor.java:82)
    at java.lang.Thread.run(Thread.java:662)
Caused by: org.hsqldb.HsqlException: user lacks privilege or object not found: EMPSCH.EMPSCHPK
    at org.hsqldb.error.Error.error(Unknown Source)
    at org.hsqldb.ExpressionColumn.checkColumnsResolved(Unknown Source)
    at org.hsqldb.QueryExpression.resolve(Unknown Source)
    at org.hsqldb.ParserDQL.compileCursorSpecification(Unknown Source)
    at org.hsqldb.ParserCommand.compilePart(Unknown Source)
    at org.hsqldb.ParserCommand.compileStatement(Unknown Source)
    at org.hsqldb.Session.compileStatement(Unknown Source)
    at org.hsqldb.StatementManager.compile(Unknown Source)
    at org.hsqldb.Session.execute(Unknown Source)
    ... 27 more
Please advice
Thanks
Revanth

Thats obvious from the xml file contents you have given here. In this xml file You have four complex type. Two of them are employee and address. However the employee doesnot have any relation with address as you have not added the relationship. Thats why its failing. Its not the fault of ODI.
Also I would suggest not to use auto generated dtd by ODI as you might face problem in future. For example the address type of XML has 8 attributes and 4 of them are not mandatory. That means each of your xml file may have attributes between 4 to 8. This is where ODI auto generated DTD fails.
XML Schema complexType Element
Thanks
Bhabani

To prevent user from droping any object from a sepacific schema

Similar Messages

Maybe you are looking for