User X can view SCOTT table (all_object)
I understand, a user views all the objects that he owns plus the objects to which he has access to in table all_objects.
I'm trying to trace for this user where he can view objects where owner='SCOTT'.
I'm trying to find what access user X has on objects under SCOTT schema, but I can't find anything in DBA_TAB_PRIVS, DBA_SYS_PRIVS, user X is assigned a role which has following SYS privs CREATE TABLE, CREATE TRIGGER, CREATE SESSION, and CREATE SEQUENCE.
How can I know what other privs user X is assigned that he can view objects in SCOTT schema.
The application is ArcCatalog from ESRI, and it knows
that the owner of database is user Y. so you mean
it's filtering for all users except SYS/SYSTEM/user Y
and showing the objects other than that?Of course I don't know. But the point is I trust SQL*Plus much more than some app... And from SQL*Plus I can much easier understand what I can see, what I cannot see and why.
To my mind there are following options, if you really want to know that:
1. Try to guess what is the reason probably finding one, probably not.
2. Try to find app documentation that describes the way how it filters out objects.
3. Run trace and see what statements it issues, of course it may filter out something in the frontend app.
4. Wait for a while probably someone knows this app behaviour and can give you more precise answer.
Gints Plivna
http://www.gplivna.eu
Similar Messages
-
While deploying the SharePoint Hosted App I am facing the issue 'Uninstall app for SharePoint': Only users who can View Pages can list Apps"
- Provided the permissions for App Management and Subscription Services as well as DB.
- Added into Host web as SC Administrator
Thanks in Advance.Hi,
The user you are running with Visual Studio should have read permission on the pages of SharePoint web you are trying to deploying your app.
I suggest you add the login user to the SharePoint web in the “Site Settings”->”People and Group”.
Here is a similar thread for your reference:
http://sharepoint.stackexchange.com/questions/68590/error-occurred-in-deployment-step-uninstall-app-for-sharepoint-only-users-who
More reference:
Step by step How to configure environment for app development:
http://gianespo.wordpress.com/2014/01/30/step-by-step-how-to-configure-environment-for-sharepoint-app-development/
Best regards
Zhengyu Guo
TechNet Community Support -
Restriction for users NOT to viewa particular table/Infotype..
Hi All,
We have a requirement where employee's salary details need to be uploaded into the SAP HR database.
But in our scenario, someof our consultants have Production login and can access SE16 Tcode to view the database table entries.
Now since we need to upload the salary details into an Infotype, this infotype should not be made accssable to the consultant logins. In the meanwhile, the logins should not be restricted to user SE16 Tcode.
Hence can we put a restriction, so that these consultants can not view the particular infotype which as salary details?
They should be given access to browse SE16. But at the same time, they should not be allowed to browse PAXXXXX Infotype which contains SALARY details..
How to handle this kind of problems????
Regards
PavanHi All,
I have got a response from another user as follows. But can anyone explain me how exactly move ahead....???
We have recently dealt with a similar scenario.
What we have done is we have used the authorization object S_DEVELOP with OBJTYPE TABL(means table access).
Unfortunately we could not find a way to exclude one or several tables from selection.
Thus we have given two intervals to OBJNAME field.
First interval starts from the very first table in the system /1CN/AMFSAPH1FDT (please check your system for this) to the table just before the one we are trying to restrict (P593R).
Second interval starts from the first table after the restricted one (PABASN) to the last table in the system(ZZXXX) (please check your system for this).
In the solution above we had restricted access to all PAXXXX tables.
Regards
Pavan -
User Role to view all tables?
Is there a 'role' in oracle which enables a user to read (only) all the tables (exluding sys views/tables) ?
There is no such role. You would have to create one and grant SELECT on all desired objects to it. The closest thing to what you are asking is the SELECT_ANY_TABLE privilege, but it allows a user to select any table and view in the database including those in the SYS schema. This is probably not what you want.
Kind regards,
Russ Cannon -
How do I set up a shared folder so all user accounts can view photos?
How do I set up a shared drive for iPhotos for multiple users of my iMac?
For iPhoto 09 (version 8.0.2) and later:
What you mean by 'share'.
If you want the other user to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account. In that account, enable 'Look For Shared Libraries'. Your Library will appear in the other source pane.
Any user can drag a pic from the Shared Library to their own in the iPhoto Window.
Remember iPhoto must be running in both accounts for this to work.
If you want the other user to have the same access to the library as you: to be able to add, edit, organise, keyword etc.
Quit iPhoto in both accounts. Move the Library to the Users / Shared Folder
(You can also use an external HD set to ignore permissions, a Disk Image or even partition your Hard Disk.)
In each account in turn: Double click on the Library to open it. (You may be asked to repair the Library Permissions.) From that point on, this will be the default library location. Both accounts will have full access to the library, in fact, both accounts will 'own' it.
However, there is a catch with this system and it is a significant one. iPhoto is not a multi-user app., it does not have the code to negotiate two users simultaneously writing to the database, and trying will cause db corruption. So only one user at a time, and back up, back up back up. -
Safari guest user logon can view fox news videos, admin can't, videos run fine in Crome
Not sure what to do...Admin user won't run Foxnews videos whereas Guest user will run Foxnews videos. Have read many posts on checking flash, etc. Been there done that... I created a new Admin user and FoxNews videos worked but could not get iphotos to transfer to new admin user. So I'm still looking to fix the current Admin User. Thx.
I'm having the same problem - Safari seems to hang hourly. I'm switching to Firefox.
-
How to view all tables and column names from a remote database
Hey Guys,
I have a database in a remote server. I have the db link and the schema name.. Now i want to view all the tables in the remote database with column names.. I dont have access to that database using sql developer.. But i can view some tables using the db link..Is there any way i can view all the tables with the column names?user10683742 wrote:
Dont think i have DBA access..It gives the following error
ORA-00942: table or view does not exist
00942. 00000 - "table or view does not exist"You don't have to have 'dba' access, per se. You just have to have SELECT ALL TABLES privilege. when you use a db_link, you are connecting to the remote db with the user defined in the link, and .. on that db .. you will have the privileges of the user defined in the db link. Exactly as if you had used sqlplus to connect to that db with that user. -
Selecting from a view when tables are in more than one schema problem
I give up where am I missing it. Why is the ORA-01031 error being generated on the view u1.bv1. In testing even if I give object access to u3 I still get the same errors:
SQL>
SQL> drop user u1 cascade;
drop user u1 cascade
ERROR at line 1:
ORA-01918: user 'U1' does not exist
SQL> drop user u2 cascade;
drop user u2 cascade
ERROR at line 1:
ORA-01918: user 'U2' does not exist
SQL> drop user u3 cascade;
drop user u3 cascade
ERROR at line 1:
ORA-01918: user 'U3' does not exist
SQL> drop role aRole;
drop role aRole
ERROR at line 1:
ORA-01919: role 'AROLE' does not exist
SQL>
SQL>
SQL> select user from dual;
USER
SYS
1 row selected.
SQL>
SQL> select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - 64bi
PL/SQL Release 10.2.0.1.0 - Production
CORE 10.2.0.1.0 Production
TNS for Solaris: Version 10.2.0.1.0 - Production
NLSRTL Version 10.2.0.1.0 - Production
5 rows selected.
SQL>
SQL> create user u1 identified by u1 default tablespace users
2 quota unlimited on users;
User created.
SQL>
SQL> create user u2 identified by u2 default tablespace users
2 quota unlimited on users;
User created.
SQL>
SQL> create role aRole;
Role created.
SQL>
SQL> create user u3 identified by u3 default tablespace users;
User created.
SQL>
SQL> grant aRole to u3;
Grant succeeded.
SQL>
SQL> alter user u3 default role all;
User altered.
SQL>
SQL> grant create session to u3;
Grant succeeded.
SQL>
SQL> create table u1.t1(c1 number);
Table created.
SQL>
SQL> create table u2.t1(c1 number);
Table created.
SQL>
SQL> grant select on u2.t1 to u1;
Grant succeeded.
SQL>
SQL> create or replace view u1.bv1 as
2 select u1.t1.c1 as c1 ,u2.t1.c1 as c2
3 from u1.t1, u2.t1 where u1.t1.c1 = u2.t1.c1;
View created.
SQL>
SQL> grant select on u1.bv1 to aRole;
Grant succeeded.
SQL>
SQL> create or replace view u1.gv1 as select * from u1.t1;
View created.
SQL>
SQL> grant select on u1.gv1 to aRole;
Grant succeeded.
SQL>
SQL> connect u3/u3
Connected.
SQL>
SQL> select * from u1.bv1;
select * from u1.bv1
ERROR at line 1:
ORA-01031: insufficient privileges
SQL>
SQL> select * from u1.gv1;
no rows selected
SQL>
SQL> spool offUser u1 cannot do a grant on a view to other user if the view uses tables from other schemas unless you do a "with grant option" grant.
You need to do the following to make it work:
SQL> grant select on u2.t1 to u1 with grant option;
Grant succeeded.
SQL> -
Create user who can update another schema table
Hi,
We have a prod system under which we need to update the application schema by running different update statement and create/execute function,procedure,package body. This is very easy if you use the owner schema. But i need to run those activities from another user due to some restriction. How can i do that??
May u suggested to give update any table privilege..but this would give all the dictionary table access also.
Is there any privilege that would allow any other user to update another schema table without using the schema name infront of the table name??
Plss suggestJohn,
Can we use public synonym for it ? I don't know the security risk for it though :
SQL> connect hr/hr
Connected.
SQL> select * from scott.emp;
select * from scott.emp
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> connect scott/tiger
Connected.
SQL> create public synonym scotemp for scott.emp;
Synonym created.
SQL> connect hr/hr;
Connected.
SQL> select * from scotemp;
select * from scotemp
ERROR at line 1:
ORA-00942: table or view does not exist
SQL> connect scott/tiger
Connected.
SQL> grant select on emp to hr;
Grant succeeded.
SQL> connect hr/hr
Connected.
SQL> select * from scotemp;
14 rows selected.
SQL> show user;
USER is "hr"
SQL> update scotemp set ename='SMITHX' where empno=7369;
update scotemp set ename='SMITHX' where empno=7369
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> connect scott/tiger
Connected.
SQL> grant update on emp to hr;
Grant succeeded.
SQL> connect hr/hr
Connected.
SQL> update scotemp set ename='SMITHX' where empno=7369;
1 row updated.
SQL> rollback;
Rollback complete.
SQL>
Regards
Girish Sharma -
How we can lock No more than one user can use the table at a single time
Hi Abapers,
0) which function modules to lock & unlock a table.
1) When you execute the program, we can check if there is any lock on this table. If yes, the user should be able to only view the table contents and not modify.
2) If there is no lock, then lock the table and go into change mode.
3) On exiting from the program, unlock the table using the function module.
4) more than one user can't modify the table just display.
Note: If there is any lock, display message saying table is locked.
Plz help me for this requirement.
Thanks
NaniHello Nani
Have a look at the lock object EMMARAE (<i>Lock MARA and MARM/MAKT exclusively</i>) in transaction SE11.
Inspect the F1 help for field <b>Lock mode</b>:
DE ENQMODE
Short Text
Lock mode
Definition
Defines how to synchronize table record access by several users.
The following modes exist:
Exclusive lock
The locked data can be read or processed by one user only. A request
for another exclusive lock or for a shared lock is rejected.
Shared lock
Several users can read the same data at the same time, but as soon
as a user edits the data, a second user can no longer access this
data. Requests for further shared locks are accepted, even if they
are issued by different users, but exclusive locks are rejected.
Exclusive but not cumulative lock
Exclusive locks can be requested by the same transaction more than
once and handled successively, but an exclusive but not cumulative
lock can only be requested once by a given transaction. All other
lock requests are rejected.
If you want to lock a standard table search whether the table is used in lock objects (<i>Where-Used-List</i>). If it is a customer table you have to create your own lock object (including two function modules: one for enqueuing and the other for dequeuing).
The lock modules can be found in menu <b>GoTo -> Lock Modules</b>.
Given these lock modules the logic should be quite clear after starting the program:
1. Request lock -> if successful, continue in Change mode; -> if failed, continue in Display mode
2. Before leaving the report remove lock (note: no problem if no lock has been set in the beginning).
Regards
Uwe -
Error creating view with tables of other user
I am creating of view containing two tables of another user. I
am a dba-user.
The statement looks like this:
CREATE VIEW TEST
(SELECT ...
FROM DWH.TABLE_A A, DWH.TABLE_B B
WHERE A.ID = B.ID)
I get an error-message (ORA-00942: Table or view not found).
When I create the view as user DWH, everything went OK. I don't
think it has something to do with privileges since I am the dba-
user.
How can I create a view using other users tables?Hi
To create view on table of another user you need to have select
privilege grant directly to you - not to role granted to you. In
your case you can select tables because you have granted dba
role and it has select any table prvivilege, but you havent
directly granted this rights without role.
Regards -
How can I get the logoff time of each db user from system view?
I can get the logon_date from gv$session.
Now,I want to get the logoff_date from some view or table.
I know that I will get it with trigger.
But,I am not will to user trigger for it.
Who can tell me which view or table will show the info?But,I am not will to user trigger for it.Are you saying you are not willing to fire a trigger to gather this information?
I don't know of a table, if one exists, someone will know.
I say until you find a table, just write a SYSTEM TRIGGER on LOGOUT and place this information in your own table.
Eric -
How can I see which roles or users have access to a table?
How can I see which roles or users have access to a table?
For a given table, how can I see the grants, who and what?
Many thanksdba_tab_privs.
Grantee can be a role or an user, as roles are fake users.
Sybrand Bakker
Senior Oracle DBA -
Can't view borderless tables on black background - please help.
In CS3, when you viewed a table on a black background, the table was visible because of a dotted white line. In CS4 (I'm on a Mac by they way) the table outline was only black and I read that they never fixed this issue.
Does anyone know how I can view a borderless tables against a black background in CS5? I want to change that dotted line to white.
I appreciate any feedback. This issue is driving me nuts.
Thanks!Hi,
it's too bad! At least I will show you my two reference images, perhaps there is it (so too for someone else in the forum) a viable option:
and here my settings
good luck, Hans-G. -
Can i change table in query as per user given data
hi master
sir,
can i change table in query as per user given data
see
select * from @variable
i need use in lov
please give me idea
thankingyou
AamirYou cant directly use in sql instead you can write an anonymous block and frame the query as per the input table name and then use execute immediate to execute the query.
Something like this
declare
qry_table varchar2(30);
qry_stmt varchar2(1000);
type typ_sample is table of VARCHAR2(100) index by binary_integer;
tab_sample typ_sample ;
begin
qry_table := &Table_name
qry_stmt := 'select a from '||qry_table;
execute immediate qry_stmt bulk collect into tab_sample ;
end;
Message was edited by:
Shasi
Maybe you are looking for
-
Background: I have had this problem for several months, now. This problem began when an update came for Java on the Firefox Plugin-check. I promptly installed the new Java update. But the Firefox update wouldn't register that I downloaded it, even af
-
How to restore time machine backup without disturbing already installed app
Hi! My school recently reconfigured/reformatted my macbook and install the school image. Now it is filled with applications that the school help us installed. Now how do i restore the backup that my time machine backups last time? Migration assistant
-
SBS Client Application Launcher has encountered a problem and needs to close
I logged in to a remote session on the SBS to add a user to a security group. Now, when I log on to my computer with the domain administrator account, I get the error "SBS Client Application Launcher has encountered a problem and needs to close." The
-
.DOC to .PDF conversion with the format maintainence
Hi, My requirement is to convert the exact text witht he formating in the .DOC file to PDF file. I have done this using POI and IText ar files but I am unable to maintain the formating , tried and search the net but unable to find the solution. Pleas
-
Where is the "Show Duplicates" functions in iTunes 11?
I recently upgraded to the new version of iTunes and can't find the "show duplicate" options. This is one of the main reasons I don't upgrade to the new iTunes, because of this kind of stuff - missing functionality that I use on a regular basis... An