Travel Schema:grant all privileges

I have a request to add the travel schema to one of our 9202 databases. Fairly straight forward. I got the *.dmp file from your site:
http://www.oracle.com/technology/sample_code/tech/java/travel/travelschema.htm#system
I created the user travel and used the system tablespace as the default. As for privileges, I noticed that I should "grant all privileges" to travel. Is this wise? What's the minimum amount of privileges that I can grant to travel?

Is this wise? You are quite right to be concerned. Granting ALL PRIVILEGES is a dodgy thing to do. In mitigation I might say that the TRAVEL schema is a sample piece of code and so should only be installed on a development database, where the damage can be limited.
But I think the real problem is that the sample code was developed by Java programmers who couldn't be bothered to work out exactly what privileges were needed. Shocking, yes, but hardly uncommon. And the poltroons have also included instructions on how to
To Download and install the travel schema into the SYSTEM tablespace:
No no no! No application objects go into the SYSTEM schema. What's the point of us non-Oracle people banging on about best practice if their own employees are allowed to post stuff like this on OTN? Sack these bozos!
What's the minimum amount of privileges that I can grant to travel? I have absolutely no idea. I think the safest thing is to build a new database instance, so that the potential for damage is limited. Alternatively, grant CONNECT and RESOURCE and see how far that goes. You may have to grant additional powers. I see they also grant JAVASYSPRIV and JAVAUSEPRIV. Horrible, simply horrible.
Cheerse, APC

Similar Messages

Find users with grant all privileges

Hello,
I am trying to figure out how to query for all users who might have grant all privileges.
Any ideas or scripts?
thanks

Hi,
Please check this out,
http://www.petefinnigan.com/tools.htm
There are a lot of good scripts, maybe one of them can show what you are looking for.
Cheers,
Marcello M.

Create schema with all privileges

hi
I am creating Schema using following sql commands with SYSTEM as user
Create Schema Live2;
CREATE COLUMN TABLE "Connections" (
"memberIdFrom" INTEGER NOT NULL,
"memberIdTo" INTEGER NOT NULL,
PRIMARY KEY ("memberIdFrom","memberIdTo")
Then I goto
Security-->users-->SYSTEM-->object privileges
there is not schema Live2 there
When I add LIVE2 then it's privileges are set to CREATE ANY only
Why this is happening?
I think by default user should have all privileges.
If i try to assign privileges then error exception occurs that Granter and Grantee are identical.

Hi Khalid,
Ideally when you execute sql 'create schema <schema_name>' then the logged in user is going to default owner of the schema and you should see that under 'object privileges' of that user.
The user will have 'create any' privileges which means the user has all the privileges on that schema.
if you want to check who is owner of the schema in the system, please check 'SCHEMAS' under views in SYS.
Regards,
Venkat N.

Travel schema unzip problem

when i downloaded and unzipped the travel schema, the resulting dump files included "binary" or non-ascii characters. the download/unzip process was performed using numerous unzip utilities... please advise
So that we may better diagnose DOWNLOAD problems, please provide the following information.
- Server name
- Filename
- Date/Time
- Browser + Version
- O/S + Version
- Error Msg

Is this wise? You are quite right to be concerned. Granting ALL PRIVILEGES is a dodgy thing to do. In mitigation I might say that the TRAVEL schema is a sample piece of code and so should only be installed on a development database, where the damage can be limited.
But I think the real problem is that the sample code was developed by Java programmers who couldn't be bothered to work out exactly what privileges were needed. Shocking, yes, but hardly uncommon. And the poltroons have also included instructions on how to
To Download and install the travel schema into the SYSTEM tablespace:
No no no! No application objects go into the SYSTEM schema. What's the point of us non-Oracle people banging on about best practice if their own employees are allowed to post stuff like this on OTN? Sack these bozos!
What's the minimum amount of privileges that I can grant to travel? I have absolutely no idea. I think the safest thing is to build a new database instance, so that the potential for damage is limited. Alternatively, grant CONNECT and RESOURCE and see how far that goes. You may have to grant additional powers. I see they also grant JAVASYSPRIV and JAVAUSEPRIV. Horrible, simply horrible.
Cheerse, APC

Travel Schema

I am trying to install the Travel Schema from the "Rooms Information example" But I get the error:
IMP-00016: required character set conversion (type 1 to 871) not supported.
How can i fix this error?
And what is the characterset of the Travel Schema?

Is this wise? You are quite right to be concerned. Granting ALL PRIVILEGES is a dodgy thing to do. In mitigation I might say that the TRAVEL schema is a sample piece of code and so should only be installed on a development database, where the damage can be limited.
But I think the real problem is that the sample code was developed by Java programmers who couldn't be bothered to work out exactly what privileges were needed. Shocking, yes, but hardly uncommon. And the poltroons have also included instructions on how to
To Download and install the travel schema into the SYSTEM tablespace:
No no no! No application objects go into the SYSTEM schema. What's the point of us non-Oracle people banging on about best practice if their own employees are allowed to post stuff like this on OTN? Sack these bozos!
What's the minimum amount of privileges that I can grant to travel? I have absolutely no idea. I think the safest thing is to build a new database instance, so that the potential for damage is limited. Alternatively, grant CONNECT and RESOURCE and see how far that goes. You may have to grant additional powers. I see they also grant JAVASYSPRIV and JAVAUSEPRIV. Horrible, simply horrible.
Cheerse, APC

Sample Travel Schema Diagram

Hi,
I downloaded the travel schema from this link:
http://www.oracle.com/technology/sample_code/tech/java/travel/travelschema.htm
I was wondering, is there some place where I can get the schematic diagram: listing dependencies between tables, constraints for this travel schema?
Or is there a product that comes with the Database install where I can get the complete picture?
thanks

Is this wise? You are quite right to be concerned. Granting ALL PRIVILEGES is a dodgy thing to do. In mitigation I might say that the TRAVEL schema is a sample piece of code and so should only be installed on a development database, where the damage can be limited.
But I think the real problem is that the sample code was developed by Java programmers who couldn't be bothered to work out exactly what privileges were needed. Shocking, yes, but hardly uncommon. And the poltroons have also included instructions on how to
To Download and install the travel schema into the SYSTEM tablespace:
No no no! No application objects go into the SYSTEM schema. What's the point of us non-Oracle people banging on about best practice if their own employees are allowed to post stuff like this on OTN? Sack these bozos!
What's the minimum amount of privileges that I can grant to travel? I have absolutely no idea. I think the safest thing is to build a new database instance, so that the potential for damage is limited. Alternatively, grant CONNECT and RESOURCE and see how far that goes. You may have to grant additional powers. I see they also grant JAVASYSPRIV and JAVAUSEPRIV. Horrible, simply horrible.
Cheerse, APC

How grant all the privilege of a specific schema to a user?

How grant all the privilege of a specific schema to a user?
I already create a new schema and import the neccessary data for that schema.
Now I want to assign all the privilege for that schema to user HR (let user HR become the owner of that schema). How to deal with it?
Edited by: qkc on May 13, 2011 10:45 AM

qkc wrote:
How grant all the privilege of a specific schema to a user?
I already create a new schema and import the neccessary data for that schema.
Now I want to assign all the privilege for that schema to user HR (let user HR become the owner of that schema). How to deal with it?
Edited by: qkc on May 13, 2011 10:45 AMThere is no way - by definition - that one user can "become the owner" of another schema. A schema is, by definition, the collection of objects that belong to one owner.
but perhaps that is just semantics in the context of what you really want.
use sql to build sql:
spool doit.sql
select 'grant select on someuser.' || table_name || ' to someotheruser;'
from dba_tables
where owner = 'SOMEUSER';
spool off

Need to grant DML privileges to all tables in few schemas

Hi,
I need to grant DML privileges to all tables in few schemas to a role. How can I achieve that?
I thought it's below syntax but it doesn't work. Please advice.
grant ALL ON ALL TABLES IN SCHEMA <Schema_name> TO <role_name>;Thanks,
Gangadhar

GR wrote:
Hi,
I need to grant DML privileges to all tables in few schemas to a role. How can I achieve that?
I thought it's below syntax but it doesn't work. Please advice.
grant ALL ON ALL TABLES IN SCHEMA <Schema_name> TO <role_name>;
There is no single command to grant privileges at that level. There are either ANY privileges or privileges on an object.
You can write a bit of code to generate and execute what you want, but you would have to rerun it if any new tables were created.

Grant all privs of one schema

Hi,
how i can grant all previleges for user to another user
say i have 2 user A and B
how we can provide all priveleges to user A on user B
Thnaks

That is not really what you said in your original posting. You really need to be a little clearer on your requirements....
Do you want them to have select, update, delete privileges on all the tables?
Do you want them to be able to do execute on any procedure?
Do you want them to be able to select off of any sequences?
Do you need them to be able to access the tables through synonyms?
No matter what you are doing you can probably create a script through the different objects view that will create its own script to grant whatever you want.
Example:
SQL> connect tsb/password
Connected.
SQL> select 'grant select, update, delete on '||object_name||' to scott;' from user_objects
2 where object_type='TABLE';
'GRANTSELECT,UPDATE,DELETEON'||OBJECT_NAME||'TOSCOTT;'
grant select, update, delete on RATE_FACT_TAB to scott;
grant select, update, delete on DIST_RATE_TAB to scott;
grant select, update, delete on CNFGTR_TDE_DIST_RATE to scott;
grant select, update, delete on TIMSJOBS to scott;
grant select, update, delete on TIMSLOCATIONS to scott;
grant select, update, delete on STAGING_TABLE to scott;
grant select, update, delete on STAGING_TABLE_CBINDS to scott;
grant select, update, delete on STAGING_TABLE_CPLANS to scott;
If you spool this then you can execute these as a script or individually.
You can do similar grants with other object types.
The issue will always be that you could run into problems with things such as nested tables and user defined types.
Regards
Tim

How can i view all privileges granted to an user?

How can i view all privileges granted to an user? I have access to dba_ views.

You should look at:
http://download.oracle.com/docs/cd/B10501_01/nav/catalog_views.htm?remark=homepage#index-DBA
Look at the views that have the letters "PRIVS" in their names:
DBA_COL_PRIVS
DBA_ROLE_PRIVS
DBA_RSRC_CONSUMER_GROUP_PRIVS
DBA_RSRC_MANAGER_SYSTEM_PRIVS
DBA_SYS_PRIVS
DBA_TAB_PRIVS
ROLE_ROLE_PRIVS
ROLE_SYS_PRIVS
ROLE_TAB_PRIVS
ROLE_WM_PRIVS
SESSION_PRIVS
Depending on what privileges you want that is where to look.
Regards
Tim
You can get help from teachers, but you are going to have to learn a lot by yourself, sitting alone in a room.[]....Dr. Seus

Oracle Data Integrator 11.1.1.5 Work Schema - List of Privileges

Hi All,
Oracle Data Integrator 11.1.1.5.
Extracting data from Oracle DB for Oracle EBS 12.1.3.
Customer created read-only schema (XXAPPS) to extract the data from EBS.
For ODI Work schema we now created one schema 'XBOL_ODI_TEMP' on the source DB. We are now looking for appropriate privileges that needs to be granted to XXAPPS and 'XBOL_ODI_TEMP' so that we won’t face the any error messageS related to permissions when we run ODI scenario?
We are now facing the error message : ODI-1227: Task SrcSet0 (Loading) fails on the source ORACLE connection VTB_ORACLE_EBS_1213.
Caused By: java.sql.SQLSyntaxErrorException: ORA-00942: table or view does not exist.
Similar previliges can be granted to the work schema on target.
Venkat

i think it would be fine with only one schema(user) created at the source system which has got read access on the tables of the EBS DB. Now to resolve this error, assuming XXAPPS user is the one used,
in the topology --> data server(for EBS) --> physical schema the EBS schema name could be selected for Schema and XXAPPS as the work schema(for all ODI work related objects e.g. CDC)
Also, in the Data server the user XXAPPS needs to be used which has read access to EBS tables.
Now everytime ODI generates a query it will access a table lets say DUMMY as ,<EBS Schema>.DUMMY thus the reference is made.
Alternatively, you can create synonyms for EBS tables in XXAPPS schema.

Non-System Travel Schema ends up in System, Why?

I submitted a request for information on a BC4J version of the travel schema samples and was directed to http://otn.oracle.com/sample_code/tech/java/ejb_corba/files/hotel/hotelHome.htm
I downloaded the Non-System version of the schema (http://otn.oracle.com/sample_code/tech/java/travel/travelschema.htm#user) from http://technet.oracle.com/sample_code/tech/java/travel/travel8i_user.zip.
I use the Oracle Enterprise manager (v9.0.1.0.0) as my tool for doing all management functions in my 8.1.7.4 (and 9.0.1.3.0) SIDs.
I created the user travel and submitted a job to import the dump file into this user.
The parameters of the job are:
FILE=/home/oracle/dumps/otntravel8i.dmp
LOG=/home/oracle/dumps/Travel_In.log
FROMUSER=TRAVEL
TOUSER=TRAVEL
GRANTS=y
INDEXES=y
ROWS=y
CONSTRAINTS=y
IGNORE=y
DESTROY=y
COMMIT=y
RECALCULATE_STATISTICS=y
I have tried this several times using different methods of creating the user TRAVEL, its default tablespace, etc. It appears that no matter how I create the user travel, the import creates all tables in the system tablespace.
Am I doing something basically wrong? How do I force the system to use the proper tablespace?
Why is there even an example dump that would use the system tablespace? Is that not one of the big no-nos of schema development?

Hi,
We have updated the travel8i_user.zip file on the travel schema page. The updated dump file can be used to import the data correctly into the user's default tablespace. Please let us know if you still face any problems with it.
Regarding the system tablespace dump, we have provided for users to import the data quickly in a test database without needing to create other objects. The recommended way is definitely to use the non-system tablespace.
Thanks & Regards,
Srinivas When was travel8i_user.zip updated? I just now went an redownloaded (http://technet.oracle.com/sample_code/tech/java/travel/travel8i_user.zip).
I ended up with the same file i had before -- otntravel8i.dmp dated Wednesday, September 27, 2000, 3:45:44 PM

Grant Apps Privileges to custom User

Hi, gurus,
after successfully upgrading ebs 11.5.10.2 database to 10.2.0.5, we want to create a database user that will have all APPS Schema privileges.
Please can anyone help us with all the Privileges,Roles etc that have to be granted to this User.
thanks

Thanks for the reply hsawwan,
I have granted all the roles and privileges of apps to custom user. I have also created synonyms on the following apps tables and packages in the custom schema:
sqlplus custom_schema/password
create synonym fnd_global for apps.fnd_global;
create synonym fnd_client_info for apps.fnd_client_info;
create synonym fnd_profile for apps.fnd_profile;
create synonym fnd_message for apps.fnd_message;
create synonym app_exception for apps.app_exception;
create synonym fnd_log_repository for apps.fnd_log_repository;
create synonym fnd_log for apps.fnd_log;
create synonym hr_signon for apps.hr_signon;
create synonym jg_context for apps.jg_context;
create synonym fnd_application_vl for apps.fnd_application_vl;
create synonym fnd_responsibility_vl for apps.fnd_responsibility_vl;
create synonym fnd_languages for apps.fnd_languages;
create synonym fnd_user for apps.fnd_user;
create synonym fnd_application for apps.fnd_application;
create synonym fnd_lookup_types for apps.fnd_lookup_types;
create synonym fnd_product_groups for apps.fnd_product_groups;
create synonym fnd_profile_options_vl for apps.fnd_profile_options_vl;
create synonym fnd_new_messages for apps.fnd_new_messages;
create synonym fnd_data_group_units for apps.fnd_data_group_units;
create synonym fnd_oracle_userid for apps.fnd_oracle_userid;
create synonym fnd_product_groups for apps.fnd_product_groups;
create synonym fnd_product_initialization for apps.fnd_product_initialization;
create synonym fnd_product_init_condition for apps.fnd_product_init_condition;
create synonym fnd_product_init_dependency for apps.fnd_product_init_dependency;
create synonym fnd_product_installations for apps.fnd_product_installations;
create synonym fnd_profile_options for apps.fnd_profile_options;
create synonym fnd_profile_option_values for apps.fnd_profile_option_values;
create synonym fnd_security_groups_vl for apps.fnd_security_groups_vl;
create synonym fnd_user_resp_groups for apps.fnd_user_resp_groups;
create synonym icx_parameters for apps.icx_parameters;
create synonym fnd_log_messages for apps.fnd_log_messages;
create synonym fnd_cache_versions for apps.fnd_cache_versions;
i have granted execute on APPS.FND_CORE_LOG to custom_schema
I created the procedure below with custom_schema (procedure created successfully):
CREATE OR REPLACE PROCEDURE INSERT_PEN_BALANCES_MAR11(p_payroll_date IN DATE, p_low_line_id IN NUMBER, p_high_line_id IN NUMBER) AS
CURSOR all_people IS
SELECT LINE_ID,
STAFF_ID,
EMPLOYEE_NUMBER,
FULL_NAME,
ASSIGNMENT_ID,
PAYROLL,
ORGANIZATION
FROM
APIREPORTS.ALL_PENSION_PEOPLE_INFO_MAR11
WHERE
LINE_ID BETWEEN p_low_line_id AND p_high_line_id
AND
BALANCE_LOAD_STATUS = 'NO';
CURSOR assignment_actions(l_assignment_id IN NUMBER) IS
SELECT
A.ASSIGNMENT_ACTION_ID, B.PAYROLL_ACTION_ID, B.ACTION_TYPE, B.EFFECTIVE_DATE, B.PAYROLL_ID
FROM
APPS.PAY_ASSIGNMENT_ACTIONS A,
APPS.PAY_PAYROLL_ACTIONS B
WHERE
A.PAYROLL_ACTION_ID = B.PAYROLL_ACTION_ID
AND
A.ASSIGNMENT_ID = l_assignment_id
AND
B.EFFECTIVE_DATE BETWEEN TRUNC(p_payroll_date, 'MONTH') AND p_payroll_date
--B.EFFECTIVE_DATE = p_payroll_date
AND
B.ACTION_TYPE IN ('R','Q')
-- AND
-- B.ACTION_STATUS = 'C'
AND
A.ACTION_STATUS = 'C';
CURSOR balance_ids(l_assignment_action_id IN NUMBER) IS
SELECT
A.BALANCE_NAME_AND_SUFFIX,
A.DEFINED_BALANCE_ID,
A.BALANCE_DIMENSION_ID
FROM
APPS.PAY_BALANCES_V A,
APPS.PAY_BALANCE_DIMENSIONS B
WHERE
A.BALANCE_DIMENSION_ID=B.BALANCE_DIMENSION_ID
AND
B.DATABASE_ITEM_SUFFIX IN ('_ASG_ITD','_ASG_RUN','_ASG_YTD')
AND A.ASSIGNMENT_ACTION_ID = l_assignment_action_id;
--AND A.BALANCE_NAME_AND_SUFFIX IN ('GOG Net Salary_ASG_RUN','Total Earnings_ASG_RUN');
-- Variable to hold the calculated value
balance_value NUMBER;
-- Counter to commit after a fixed number of records
p_counter INTEGER := 0;
-- Local Variable to hold the status of each insert
l_status VARCHAR2(30);
BEGIN
-- Initialize the environment
--BEGIN
--APPS.fnd_global.apps_initialize(2352,50001,800);
--END;
FOR i IN all_people
LOOP
p_counter := p_counter + 1;
FOR j IN assignment_actions(i.ASSIGNMENT_ID)
LOOP
FOR k IN balance_ids(j.ASSIGNMENT_ACTION_ID)
LOOP
BEGIN
-- Retrieve the value of the balance
balance_value := NULL;
l_status := 'INSERT SUCCESSFUL';
balance_value := apps.pay_balance_pkg.get_value(k.DEFINED_BALANCE_ID, j.ASSIGNMENT_ACTION_ID);
BEGIN
INSERT INTO APIREPORTS.ALL_PENSION_LATEST_BAL_MAR11
(STAFF_ID,
FULL_NAME,
ASSIGNMENT_ID,
EMPLOYEE_NUMBER,
BALANCE_NAME_AND_SUFFIX,
AMOUNT,
PAYROLL,
PAYROLL_ID,
PAY_PERIOD,
ORGANIZATION,
ASSIGNMENT_ACTION_ID,
PAYROLL_ACTION_ID,
PAYROLL_ACTION_TYPE,
CREATION_DATE
VALUES
(i.STAFF_ID,
i.FULL_NAME,
i.ASSIGNMENT_ID,
i.EMPLOYEE_NUMBER,
k.BALANCE_NAME_AND_SUFFIX,
balance_value,
i.PAYROLL,
j.PAYROLL_ID,
j.EFFECTIVE_DATE,
i.ORGANIZATION,
j.ASSIGNMENT_ACTION_ID,
j.PAYROLL_ACTION_ID,
j.ACTION_TYPE,
SYSDATE
EXCEPTION WHEN OTHERS THEN
l_status := 'ERROR WITH INSERT';
END;
END;
END LOOP;
END LOOP;
IF (l_status = 'INSERT SUCCESSFUL') THEN
UPDATE APIREPORTS.ALL_PENSION_PEOPLE_INFO_MAR11
SET
BALANCE_LOAD_STATUS = 'YES'
WHERE
LINE_ID = i.LINE_ID;
END IF;
IF (p_counter = 10) THEN
COMMIT;
p_counter := 0;
END IF;
END LOOP;
COMMIT;
END INSERT_PEN_BALANCES_MAR11;
procedure created successfully.
Now when i execute the procedure i get the following error:
EXEC INSERT_PEN_BALANCES_MAR11('31-DEC-2010',1,1930);
ERROR at line 1:
ORA-00942: table or view does not exist
ORA-06512: at APPS.FND_CORE_LOG line 25
ORA-06512: at APPS.FND_CORE_LOG line 432
ORA-06512: at "APPS.FND_PROFILE", line 110
ORA-06512: at "APPS.PAY_MONITOR_BALANCE_RETRIEVAL", line 35
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 4426
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5403
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5265
ORA-06512: at "APPS.PAY_BALANCE_PKG", line 5250
ORA-06512: at "ADARI.INSERT_PEN_BALANCES_MAR11", line 71
Please help me out.
Thanks.

Granting table privileges on another users tables

Can anyone tell me what privilege needs to be granted to a user to be able to grant insert/update/select/delete/execute on another users tables/packages?
I had thought that 'grant any privilege' was the one to have... and - the user I am trying to use to grant the privileges on the other users schema has this however - I'm still getting : ORA-01031: insufficient privileges when trying to run the grants.
Any ideas what I'm doing wrong here?

Ok... well...
The 'with grant' option doesn't appear to be the issue.
The user attempting to perform the grants:
i.e. GRANT SELECT ON user_2.table_1 TO view_role
has the 'grant any object privilege' and - that seems to be enough. When I run the statement above as a simply as typed - it works fine.
However - what I'm actually doing is concatenating that together in a string and running (from a package created by/as user_1) and doing an execute immediate...
i.e.
l_sql := 'GRANT ' || l_rec.privilege || ' ON ' || l_rec.owner || '.' || l_rec.table_name || ' TO ' || p_role;
EXECUTE IMMEDIATE l_sql;
And - it's this that's giving me the insufficient privileges...
I do not have invokers rights set on the package - so that shouldn't be an issue. And - I can't find any documented restriction on doing this (and - in fact - it works fine if I create the package as user_2 and run it as user_2 - the owner of the objects).
I'm at a loss.

Granting object privileges to remote users.

Hello,
Here's the situation:
I have 2 databases located on 2 different servers both running Win2k3. In the first database the main schema is M1 and it has to read objects on the another schema M2, located on the second database.
I created a database link on the first database, to point to the second database
create database link connect2M2db connect to M2 identified by M2 using 'connect2M2db'Now I would like to grant object privileges(insert,update,delete) to M1 on M2' objects. Can anyone tell me how to do that?
Thanks in advance.

I didn't put the whole thing, (my bad) but your reply was helpful. As I said before, I have 2 dbs, on 2 differents servers. I created the dblink on the first server. I also created synonyms on the first server using the following syntax:
"create or replace synonym syn_name for user2.table" which from the link you provided me, is wrong as I didn't append the dblink name.
After that, I would like to grant object privileges to user1, by executing the command from server2. For doing that, is the following syntax correct: "grant select on table_name to user1". My issue is that user1 does not exist on server2. Should I rather use the following: "grant select on table_name@dblink to user1"?

Travel Schema:grant all privileges

Similar Messages

Maybe you are looking for