Urgent !! System Privileges error

Hi,
I have 4 repository users namely repo_user, rt_owner, rt_access, tgt_user. I have my source and target in other schema namely dev. I created the db link conn
(with owner as public, user as dev and schema as dev) in the module configurations for both source and target. But when I deploy the mapping I get the error that the
table in the source cannot be accessed (system privileges)
I dont want to create the project related tables in the repo related user/schema. So how do I go abt this. Please help

Hi,
I do not know how your environment is set up. In general, when OWB is installed it needs 3 repos
1. Designer repo
2. Runtime Repo and
3. Target repos - This can be either created through OWB or an already existing schema can be registered with OWB as target repo. This is the schema where all your target tables will be existing.
Also, when we register a schema as target in OWB it installs some OWB related tables / functions which are required at the time of execution.
Within OWB designer client, in a project we will be defining a source module and warehouse module. Whichever the schema we use for creating the warehouse module, the mappings / tables gets deployed/created in that schema.
Hope this gives some idea.

Similar Messages

*Listing admin_option for System Privilege *

Hi All,
I have a use case where in i have to list the admin_option for all the system privileges.
Apart from two privileges listed below i could find this info from dba_sys_priv and dba_wm_sys_priv views.
SYSDBA
SYSOPER
We can find these privileges information from v$pwfile view which do not give any information abt admin_option.
Is there any way we can find out this inforamtion?
I executed following steps :
=================================
SQL> conn user2/password
Connected.
SQL>select user from dual;
USER
USER2
SQL> conn user2/password as sysdba
Connected.
SQL> select user from dual;
USER
SYS
SQL> conn user2/password
Connected.
SQL> grant sysdba to user1;
grant sysdba to user1
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> conn user2/password as sysdba
Connected.
SQL> run
1* grant sysdba to user1
Grant succeeded.
======================================
Here when 'user2' is connecting as sysdba, its becoming 'sys' and its 'sys' who is granting sysdba privilege to 'user1'.
So from this, can we say that its always 'sys' who can grant the sysdba privilege and admin_option for sys is always 'YES' where as for other users its always 'NO'
Is this same for 'sysoper' privilege, because initially, its only 'sys' who has both the privileges assigned?
If above is not true, is there any way to find this information?
I am in URGENT need of this information. Could anybody please help me on this?

Just a correction...
From Oracle management Console, we can not change the admin_option assigned by default.
Even if we try to change, the following sql gets executed
REVOKE SYSDBA FROM USER2
GRANT SYSDBA TO USER2
So its ultimately With admin option always :)
That has solved my problem
Thanks all for your help..
--Mrunal

Create a new user for oracle 10G ASM instance with sysdba system privilege

Hi,
In our Golden Gate Project, we require the SYS user credential to connect to the Oracle 10g ASM instance to read the database transaction logs.But our client is not providing the SYS user credential to connnect to ASM instance.
I'm getting the error message "ORA-01109: database not open",When I tried to create a new user using the below the steps in oracle 10g ASM instance
1. Login using "sqlplus / as sysdba"
2. Create user <username> identified by <password>;
But in oracle 11g ASM instance, I'm able to create new user by connecting the ASM instance with SYSASM role without issues.
Is there is any workaround to create a new user with sysdba system privilege in oracle 10g ASM instance?.
Thanks in advance .

Hi,
Recreate the password file for the ASM instance as follows:
Unix:
orapwd file=<ORACLE_HOME>/dbs/PWD<SID> password=<sys_password>
Windows:
orapwd file=<ORACLE_HOME>/database/PWD<SID>.ora password=<sys_password>
Now sys password is reset, we are ready to use sys for ASM management. I decided to create another user ASMDBA as I tried above.
SQL> create user ASMDBA identified by test01;
User created.
SQL> grant SYSASM, SYSOPER to ASMDBA;
Grant succeeded.
SQL> select * from v$pwfile_users;
USERNAME SYSDBA SYSOPE SYSASM
SYS TRUE TRUE TRUE
ASMDBA FALSE TRUE TRUE
Please see this link : http://orachat.com/how-to-change-asm-sys-password-creating-sysasm-user-11g/
Thank you

ALLOW A USER TO KILL A SESSION WITHOUT ALTER SYSTEM PRIVILEGE.

Hi
I need a user to have permission to kill a session without having the ALTER SYSTEM privilege. I created a procedure on sys schema and granted the EXECUTE privilege to the user but it doesn't work, how can I do, help please.
CREATE OR REPLACE PROCEDURE SYS.PRC_SESSION_KILLER (P_SID IN NUMBER, P_SERIAL IN NUMBER)
AS
BEGIN
     EXECUTE IMMEDIATE 'GRANT ALTER SYSTEM TO SYSADMIN';
     EXECUTE IMMEDIATE 'ALTER SYSTEM KILL SESSION ''' || P_SID || ',' || P_SERIAL || ''' IMMEDIATE';
     EXECUTE IMMEDIATE 'REVOKE ALTER SYSTEM FROM SYSADMIN';
END;
Thank you very much.

Hi,
I second everything John said.
Are you sure the arguments are correct?
Below is the procedure I use. You may want to run it, just to see what the error is.
PROCEDURE     kill_internal
     s_id          IN     NUMBER,
     serial_num     IN     NUMBER,
     stat_out     OUT     VARCHAR2
IS
     alter_handle     INTEGER;
     ex_val          INTEGER;     -- Returned by dbms_sql.execute
BEGIN
     alter_handle := dbms_sql.open_cursor;
     dbms_sql.parse
          alter_handle,
          'ALTER SYSTEM     KILL SESSION '''     ||
               TO_CHAR (s_id, '999990')     ||
               ', '                    ||
               TO_CHAR (serial_num, '999990')     ||
          dbms_sql.native
     ex_val := dbms_sql.execute (alter_handle);
     dbms_sql.close_cursor (alter_handle);
     stat_out := 'Success: '                    ||
               TO_CHAR (s_id, '999990')     ||
               ', '                    ||
               TO_CHAR (serial_num, '999990');
EXCEPTION
     WHEN OTHERS
     THEN
          stat_out := 'Failure:'          ||
               SQLERRM;
--          dbms_output.put_line (stat_out);
          dbms_sql.close_cursor (alter_handle);
END     kill_internal
;

System.privilege.admin problem

Good afternoon. Please excuse if this has already been asked and answered, but after searching for a few days I still haven't found a fix for this:
After I had to wipe the hard drive on my G5 (don't ask), I reinstalled the OS from the DVD and then used the setup assistant to migrate all my files from my (mirrored) MacBook Pro. Now the application that runs my wireless broadband modem starts up, recognizes the modem, which is getting reception and shows up on Sprint's network (their tech support confirms), but *asks for my admin password, noting that it's necessary for "system.privilege.admin"* I give the (confirmed) password. At that point I get the spinning beach ball for a few seconds, then nothing at all happens. It doesn't freeze, mind you. It just goes back to idle. The same modem works fine with the same software on my laptop.
*How do I fix my "system.privilege.admin"?*
I had to reauthorize my Adobe Creative Suite, too, incidentally, but that took immediately.
Here's what I've already tried:
--Repair permissions
--Un- and reinstall the software
--delete plists associated with Sprint's SmartView software
--create a new user account with admin privileges (beyond my main account that has admin privileges, too, of course)
--confirmed firewall settings as "allow all incoming connections"
None of these had any effect on the problem.
Thank you for your time. I hope you can help.

Ah! Very interesting! I hadn't thought to circumvent the provided application entirely. -- Well, look at that! That did the trick! Thank you, Sig.
Here is the configuration for future reference:
Configuration: Default
Telephone Number: #777
Account name: (field left blank)
Password: (field left blank)
Advanced > Modem Tab:
Vendor: Other
Model: EVDO Support
Enable error correction and compression in modem (checked)
Dial Mode: Ignore dial tone when dialing
Dialing: Tone
Sound: Off
The rest of the settings I left alone.
I'm still curious how to address the system.privilege.admin issue, but my actual problem is solved. Thank you for your help! I appreciate it.

System privileges do not enable extraction from source

Hi
I'm new to OWB, Also for this I granted select on source to target.
I'm using OWB10g/Oracle on Windows xp on same m/c(Local Host), I created mapping source tables emp/dept (look up on dept) and taget to dept_emp.
When I valaidate gives validation compled successfully, When I go to deployment manager, It gives System privileges (I granted select privilges using SQLPLUS), When I tried to deploy it gives another error Runtime owned by different platform.
What is the error, Pl help.
Many thanks in advance
Murthy

I fixed the problem

VLD-2771: System privileges may not allow extraction from source T.

How to solve this problem.
while deploying I am getting this message,besides where in oracle site I can find documentation for the errors in warehouse builder.
VLD-2771: System privileges may not allow extraction from source T.
I had given dba privileges to both source and target schemas, but still getting the error.
Regards,
Prabhathg

When I tried to deploy my mapping, I am getting warning message <<VLD-2771: System privileges may not allow extraction from source D_UII_MV_NCA_INFRACONN.>>. As solution written in "http://forums.oracle.com/forums/thread.jsp?forum=57&thread=252565&message=742299", I gave SELECT privilege on the source table to the target user. But still, I am getting this error message.
Can you please guide me in right direction?

"Insufficient privileges"-error when starting database when on network

Hi
I have an Oracle 9.2.0.5 database installed on my laptop (Windows 2000 Prof), but I have a small problem.
When I'm plugged in to the company's network, I can start the database normally.
However, when I'm not connected to the company network, i.e. only logged in locally on my laptop, then I get an ORA-01031 Insufficient Privileges error when I start the database. Therefor, I can't do anything.
When I'm plugged into the company network, start the database, and then unplug my laptop, I can still connect to the database. So I guess it checks some userrights only when it starts the database.
I checked the user account settings, and my user is a local administrator, and is in the ORA_DBA usergroup.
Does someone know which setting I have to change?

You can install MS Loopback Adapter on your system and assign an IP Address to the loopback adapter. You should then be able to work even when not connected to the network.
Mudassar Choudhry.

DBA role and system privileges

I created a new user (PIPPO) with the default dba role in my db.
I know that the dba_role has the SELECT ANY TABLE and INSERT ANY TABLE system privileges.
I expeperienced that if I select a table of another schema on a simple sqlplus session everything is OK, but if I select the same table on the same manner in a PL/SQL procedure or in the creation of a wiew, both owned by PIPPO, the error message is that the table not exists...
So I have to grant SELECT and INSERT on the tables I want to my user PIPPO.
Does anyone tell me if this is normal or strange?
Thanks

This is normal. To access other schema's table you need to have direct grant not through roles. DBA is a role.

Osascript deny authorization_right_obtain 'system.privilege.admin'

I got this error when i run(AppStore) my application in Mac:
com.apple.SecurityServer: Sandbox denoed authorizing right 'system.privilege.admin' by client 'usr/bin/osascript'
sandbox: osascript deny authorization right-obtain system.privilege.admin

i use following code to set proxy in mac::
var BaseLogFolder = Path.Combine (ContainerDirectory,"MyneTest","Localstore");
            if (!Directory.Exists (BaseLogFolder))
                Directory.CreateDirectory (BaseLogFolder);
            string SetProxyFile = Path.Combine (BaseLogFolder, string.Format ("Authenticationproxy.sh"));
            if(!File.Exists (SetProxyFile))
                File.AppendAllText (SetProxyFile, "unset DYLD_LIBRARY_PATH" + Environment.NewLine);
                File.AppendAllText (SetProxyFile, "unset DYLD_FALLBACK_LIBRARY_PATH" + Environment.NewLine);
                File.AppendAllText (SetProxyFile, "osascript -e 'tell app \"Terminal\" to do shell script \"networksetup -setwebproxy ethernet on\"'");
            System.Diagnostics.Process process = new System.Diagnostics.Process();
            System.Diagnostics.ProcessStartInfo startInfo=new System.Diagnostics.ProcessStartInfo();
            startInfo.UseShellExecute=false;
            startInfo.FileName="sh";
            startInfo.Arguments=SetProxyFile;
            startInfo.RedirectStandardOutput=true;
            process.StartInfo=startInfo;
            process.Start();
Its debug and release version work good but when i make its AppStore package and run it then i got this error:
com.apple.SecurityServer: Sandbox denoed authorizing right 'system.privilege.admin' by client 'usr/bin/osascript'
sandbox: osascript deny authorization right-obtain system.privilege.admin
Have you any solution of this???

SQL Workshop insufficient privileges error :-S

Hi everyone,
The problem I have is when I try to compile a procedure, function or whatever I get the ORA-01031: insufficient privileges error.
I tryed to give the DBA role to the APEX_PUBLIC_USER without success.
I tryed to grant the "execute" (on an especified procedure or function for testing purposes) privileges to that user and I still getting the error. :-S
I can compile any object from the SQL Navigator but APEX.
What am I missing?
Hope u could help me :)
Thanks in advance,
Fury Morales.

You should not be messing around with the grants made to the APEX product accounts (FLOWS_xxx etc).
Scott's suggestion is to have your workspace parsing schema be granted the 'create procedure' privilege.
From sqlworkshop you can the run query below to determine the 'system' privileges granted to the workspace schema
select privilege from user_sys_privs;
Varad
Edited by: varad acharya on Jul 28, 2009 4:32 PM

Who may grant a system privilege?

I am asking this as the Oracle doc explains:
Only users who have been granted a specific system privilege with the ADMIN OPTION or users with the system privileges GRANT ANY PRIVILEGE or GRANT ANY OBJECT PRIVILEGE can grant or revoke system privileges to other users.
http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96524/c24privs.htm#791
Im not clear on this: why does GRANT ANY OBJECT PRIVILEGE give you the ability to grant SYSTEM privs??
Thanks,
DA

This conflicts with the admin guide (http://download-uk.oracle.com/docs/cd/B10501_01/server.920/a96521/privs.htm#15326) which says: "To grant a system privilege, you must have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege."
It works as said in the admin guide.
SQL> create user test identified by test;
User created.
SQL> grant grant any object privilege to test;
Grant succeeded.
SQL> grant create session to test;
Grant succeeded.
SQL> conn test
Enter password:
Connected.
SQL> grant create any synonym to test2;
grant create any synonym to test2
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> conn sys as sysdba
Enter password:
Connected.
SQL> grant grant any privilege to test;
Grant succeeded.
SQL> conn test
Enter password:
Connected.
SQL> grant create any synonym to test2;
Grant succeeded.
Message was edited by:
Yas

Granting any privilege system privilege....in Ora10g

Hi,
In order to be given to a user -Info_bi let's name him - the grant to select any table from user Info , This user (Info) must be given the system privilege "any privilege".... So :
connect sys/....@.... as sysdba;
Connected to Oracle Database 10g Enterprise Edition Release 10.2.0.1.0
Connected as SYS
SQL> GRANT ANY PRIVILEGE TO "INFO";
GRANT ANY PRIVILEGE TO "INFO"
ORA-00990:Privilege is missing or invalidWhat error do i do...????
Many thanks...
Sim

There is.......!!!!
Read at :
Oracle® Database SQL Reference
10g Release 2 (10.2)
Part Number B14200-02
The Prerequisites section of the grant command....
I pasted there an extract of it...
To grant a system privilege, you must either have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege. Greetings,
Sim

Event tasks in SYSTEM Privilege ?

Hello Experts,
SAP IDM 7.2 SP8.
I have query on event task being defined on SYSTEM PRIVILEGE (PRIV:SYSTEM:<REPO_NAME>).
I believe IDM should not trigger provisioning tasks(ex. HOOK TASK 4) due to removal or addition of SYSTEM privilege.
Only removal/addition of ACCOUNT PRIVILEGE (PRIV:<REPO_NAME>:ONLY) should
trigger of provisioning tasks which also remove/add of system privilege for the user as defined in provisioning framework.
So, How Event tasks should be defined for system privileges ?
I think it should be empty (NONE).
Below screenshots shows the current configuration being done for system privileges in my client's IDM system.
This results in trigger of HOOK TASK 4 when SYSTEM privilege is removed/added from the user which causes errors which I know happen because of defining event tasks on SYSTEM PRIVILEGES.
Your help is appreciated.
Thanks & Regards,
Pradeep

Hi Steffi,
Thank you very much.
I just compared Task defined at Repo level and privilege level and could relate then.
Add Task (Assignment at Repo level, screenshot 1) = Add Task (Assignment at Privilege level, screenshot 3)
Remove Task (Assignment at Repo level, screenshot 1) = Remove Task (Deassignment at Privilege level, screenshot 3)
Provisioning task (Privilege tasks at Repo level, screenshot 1) = Provisioning task (Privilege tasks at Privilege level, screenshot 2)
Deprovisioning task (Privilege tasks at Repo level, screenshot 1) = Deprovisioning task (Privilege tasks at Privilege level, screenshot 2)
So I need to set Add Task (Assignment at Privilege level, screenshot 3) and Remove Task (Deassignment at Privilege level, screenshot 3) to NONE .
In your case, this is the setting done and so provisioning does not trigger due to addition/removal SYSTEM privilege which is correct.
I would do this change in Dev system and test it .
I will update the thread with result.
Event task defined at repo level.
Screenshot 1:
Task defined at privilege level (tab Tasks)
Screenshot 2:
Event task defined at privilege level.
Screenshot 3:
Thanks & Regards,
Pradeep

Use oes management api get "No privilege" error

Hi all，
i try to use oes management api to manage my application's entitlements.
but while i coding get a “No privilege” error , any suggest ?
regards
java code:
RBAC_Manager mgr = null;
RBAC_Context rbacCtx = null;
mgr = new RBAC_Manager(new URL("https://10.1.18.4:7011/servlet/AxisServlet/blm"),"admin","password");
rbacCtx = mgr.createContext();
System.out.println("user -> " + rbacCtx.getLoginUser());
ScopeManager scopeMgr = rbacCtx.getScopeManager();
Organization o = scopeMgr.getRoot();
rbacCtx.setScope(o);
Scope s = rbacCtx.getScope();
s = scopeMgr.getScope("ejianlong");
rbacCtx.setScope(s);
scopeMgr = rbacCtx.getScopeManager();
scopeMgr.createApplication("jlerp_a");output:
user -> //user/RootOrg!AdminDir/admin/
com.bea.ales.management.exception.ManagementException: No privilege to create Application jlerp_a under RootOrg!ejianlong
at com.bea.ales.management.ScopeManager.createApplication(ScopeManager.java:156)
at com.jl.test.model.Class1.main(Class1.java:36)Edited by: Lighting Cui on 2011-9-12 下午5:34

Have worked it out...
In case anyone else has the same thing happening, the issue was with the external hard drive. I had read-only privileges while it was connected to my new MacBook. It's a Seagate GoFlex. Had to download the NTFS for Mac driver from their website
http://www.seagate.com/au/en/support/external-hard-drives/desktop-hard-drives/ba ckup-plus-desk/ntfs-driver-for-mac-os-master-dl/
and installed it on the laptop. Then I selected the GoFlex volume, Command I and changed the access to read and write. Problem solved.

Urgent !! System Privileges error

Similar Messages

Maybe you are looking for