Users and Rights

How to find out which users other than SYSTEM have rights to access tables that SYSTEM can access? <tables like dba_users, dba_roles, all_tab_columns, all_objects, dba_sys_privs, dba_tab_privs, role_role_privs, dba_role_privs etc.,> Thanks!!

I will show you simple example to analyze this issue. if you login as scott and want to see information about those tables which scott is not owner but have athentications then you will query those views which start with all_views-name like all_tables,all_indexes. these views show you all tabele which scott can access. by putting where clause in query you can see other objects.

Similar Messages

Anywhere access domain users and rights

Hello,
I am working with anywhere access on server 2012 R2, and I am wondering if it has the ability to use the existing domain user rights to existing file share's and folders instead of using its own system.
For example I added a new share and pointed it to an existing folder thinking it would be able to see all of the files in it. That did work, but then it also gave all users in my domain rights to that folder. So it is not using the existing domain
user rights to the folder that was already existing. Is this a bug or a feature?
Also I cannot add a folder on our storage cluster. The cluster servers and the clustered server doesn't show up in the list.
It could be that this is the wrong product for what I am trying to do, but it seems like it has all of the features that I want.
Dan.

Hi Dan,
What is the shared folder’s NTFS permissions? If the domain users group have permissions to access the shared folder, all users in domain can access the folder.
For more detailed information, please refer to the article below:
File and Folder Permissions
http://technet.microsoft.com/en-us/library/bb727008.aspx
For storage cluster, I suggest you ask for help from cluster forums to get more better and accurate answer to the question.
http://social.technet.microsoft.com/Forums/en-US/home?forum=winserverClustering
Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Trouble with UTL_FILE user and rights

Hi,
I have a user ETU35 who writes a file with UTL_FILE.
The file written has PUB02 as owner on Linux Red Hat and these rights: "rw-r--r--"
Is there an environment Linux/Oracle variable to set to fix this problem?
(Documentation says the file is owned by the account that started the instance?)
Many thanks for your help
Edited by: JeanParis on May 9, 2009 7:21 AM

Hi,
From [UTL_FILE|http://download.oracle.com/docs/cd/B28359_01/appdev.111/b28419/u_file.htm#BABGGEDF]:
On UNIX systems, the owner of a file created by the FOPEN function is the owner of the shadow process running the instance. Normally, this owner is ORACLE. Files created using FOPEN are always writable and readable using the UTL_FILE subprograms. However, non-privileged users who need to read these files outside of PL/SQL may need access from a system administrator.
In such similar cases my approach is build a simple shell script and call it after the generation of the file to change the file ownership.
Regards,

Proper user and group rights

Dear readers and admins
My question is about the "correct" setting of the user and group rights, so the following is possible. It relates to Server 10.3 and to 10.4.
Requirements:
Group 1 = "Regular user"
Group 2 = "Administration, Accounting"
User 1 and 2 belong to Group 1, users 3 and 4 belong to Group 2.
User 1 & 2 must have read/write access to files and folders in Group 1, but may not have access to files and folders of Group 2.
User 1 & 2 must be in a position of creation and deletion of file and directory of Group 1, as if they were their own files and directories. I.e. User 2 must be in a position to delete or change files and directories that an other user of Group 1 has created.
User 3 & 4 must have read and write access to files and directories of Group 1 & 2. They must be able to creating and changing such files and directories, as if they were their own files and directories. I.e. User 3 & 4 must be able to create and change files and directories which belong to user 1 & 2.
As I understand it, this can be achieved with ACL's under Server 10.6.
Am I right?
What would such a structure look like with ACL's?
I unfortunately don't have a server 10.6 running, as, down due to technical problems, my server is down.
Thank you in advance for your help.
All a happy new year.
Regards
Thomas Thaler

Yes - and it's pretty easy.
1. You would create whatever share points you would like (very easy to do)
2. You would make sure in Workgroup Manager you have the users assigned to the correct groups that you discussed.
3. On the folders for Group 1 you would add ACL permissions of Full Control for Group 1 and Full Control for Group 2.
4. On the folders for Group 2 you would add an ACL permission of Full Control for Group 2.

HT1600 I have an Apple TV 2nd Gen, iPad 2 and can't get the icon to appear when i swipe from left to right. What am I missing? I am able to get the 'Home sharing' 'user and password on my Mac.

I have an Apple TV 2nd Gen, iPad 2 and can't get the icon to appear when i swipe from left to right. What am I missing?
I am able to get the 'Home sharing' 'user and password on my Mac.
Also using IPad 2 I am able to get the ITunes to accept the user name and same password as the Mac.
However, the only way I can see the 'Home sharing; icon is in Music on the Ipad. When I tap on the Icon it asks for a password.
When I give the same password, it is rejected.
Help!!!!
Jaxxdiggs

Personally I think the iOS devices are poor at reconnecting - Airplay establishes that a link is available but when the iPhone/iPad has been away from the house and rejoins the network i think AppleTV already thinks it's connected with a different IP address and fails to recognise it has joined the network again with new credentials.
Something along those lines anyway.
I find that a combination of restarting AppleTV, router and iOS device tends to fix it, but not for everyone.
AC

HT5243 It says on the "Java for Mac OS X 10.6 Update 8" pg that this download is for all users and supercedes all earlier versions. Yet to the right is says you HAVE to have 10.6.8 as a requirement. WHICH is it? Is it for all versions of 10.6 or not?

It says on the "Java for Mac OS X 10.6 Update 8" pg that this download is for all users and supercedes all earlier versions. Yet to the right is says you HAVE to HAVE 10.6.8 as a requirement. WHICH is it? Is it for all versions of 10.6 or not? Why isnt this made more clear?
And question is STILL not answered. WHICH is to be downloaded and used?
I would like an answer.

Thank you for the clarification! It is really kinda circle-speaking to state on an information page to put forth info people need in that manner. It really does add to the confusion and frustration when you need a simple,
straight answer, such as you gave, and you dont get one. Kind of like that . . other... software company....
This rabbit hole still continues, though. I'm going to ladder it out, just to see for myself:
Have: MacBookPro / 2.4 GHz/ Intel Core i5/ running OS X 10.6.3 -
Need: latest version of Java, so Flash update can be loaded;
                              (want html5 to be the standard so badly, but client wants Flash)
Attempted: Tried to find Java for Mac OS X 10.6 Update 2 on Apple website. No Joy.
        Found:   Update 2 is proper update for Mac OS X 10.6.3. Could not find download on Apple website;
                       - No Joy.
Attempted: Tried to find Java for Mac OS X 10.6 Update 8. Half Joy. Confusing, no straight info.
        Found:   In order to install update for Java, must update OS X from present 10.6.3 to 10.6.8
Attempted:   Tried to find update to OS X 10.6.3 to 10.6.8. on Apple website.
how far does the rabbit hole go?

User Roles and Rights

Hi,
I would like a particular user, r012, to be able to do user admin management.
I granted "User Management" and "User Security" rights to this user, but they are still not able to, for example, reset someone else's password. It says "permission denied".
I also created a role called UserAdmin, and assigned those two user rights to that role. When r012 su's to UserAdmin, they can then do most user management, although they are still not able to grep /etc/shadow, which I would like for them to be able to do to determine if a user is locked.
1. Does a user have to su to a role to be able to do user management? Can't I just assign those user management features to them and they can stay within their own account?
2. Is there anyway to grant the ability to grep /etc/shadow to a user?
Thanks.

/etc/shadow by default is read-only for the owner only, and the owner is root. What you can do is either assign the rights to the user to have access to such files, or create a role that allows them to do this. One way to do this is to assign the rights to the user via the SMC. For example, I can assign the role of primary administrator to a user, who can then use pfexec from a regular shell without having to su to root or some role. To grep /etc/shadow from a regular shell, you can type pfexec grep user1 /etc/shadow, and then pfexec passwd user1. No su'ing into root or a role is needed. You can assign whatever commands or rights are necessary to accomplish the function.

Filter -Different texts in left and right section in user help ( F4 )

Hi Friends,
When I try to filter values in Analyzer, different texts are shown in user help for selectable (left window section) and selected (right window section).
In leftsection texts are shown as defined eg, text short , but sfter selecting the value, on the right section text long is displayed.
Example:
If a characteristic Z_IO1 with key 1234,
text short T1
mid.text T123
text long T123456
Now I try to filter:
selectable value is shown as
1234 T1 (setting key and text short)
and after moving it to the right side with blue arrow it changes to
1234 T123456 (same settings) if text long doesn't exist text mid. is shown.
Did smomeone face this Issue or has any idea? Then let me know, please.
And something different is strange : When I try to restrict in BEx Query Designer, system works as expected,
display in left and right section of filter window don't differ.
Thanks in advance for your input.
Best Regards
Joe

Hi Venkat
Thanks for reply. My problem isn't filter value selection controlled by rea mode, it's just the display of the filter value texts (descriptions) in the F$ window for selected items. For me it seems, that it is not to change, default is set. I.e. the longest text available is displayed (according to property in RSD1) without any dependence on required texts (short, medium, ling), as mentioned in my example.
Regards
Joe

Has anyone found a solution to sending mail to groups in Mavericks? I've been given 2 approaches - 1 to type user name group into address and the other to go to address book and right click on group. Neither are satisfactory. Does anyone have a solution?

Has anyone found a solution to sending mail to Groups in Mavericks? I've been given two solutions - neither are satisfactory. One is to type name of group into address line, the other is to go to address book and right click on group.

thanks a lot for your kind help... saved me a lot of time and effort, could not believe it at first that the process is so simple but once i followed the steps it worked fine. appreciate your help.

RSC GUI error : user and passowrd incorrect but telnet is right

Hi all, I had installed RSC on my v480 server and u10 client.when I connect to RSC by telnet ,the user and password is correct,but when I used RSC GUI, it make error : the user and password is incorrect.
after I reset RSC,the error is here. how to fix it ? thanks .

Solved it Just now! The user Name though was different in the USer accounts panel in Control Panel Windows. The actual USER name was PC. Found it in Advance USER name settings In windows.
Use that USER name and You will be able to Login without an Issue!.
PS: Cross Platform Is a goddam **** off!

Why does new Skype work with one user, and not another?

Running 19.4.5, I installed the latest version of Skype. (I do not activate it on login) This opens, but crshes/unexspectedly quits on "sign in". I tried the same with a "new user", and the app opened fine. I compared the two users to make sure that Skype was correctly featured in my usual user. No difference. Still crashes.
Does anyone have an idea what could be conflicting with Skype?

Right, problem solved! . Am posting this as it may help in future. I use a useful little app called Window Dragon,(a haxie) which helps resize windows with the mouse. This was causing the conflict, but had not with earlier versions of Skype. All I had to do was exclude Window Dragon from working with the new updated version of Skype and everything back to normal.
Solutions to apps that "quit unexpectedly" or crash often mention that haxies can often come into conflict with apps. So best to start with any haxies one has installed, disable, test etc..

Working with multiple users and computers, but shared data

Sorry if this is posted in a poor place, I'm not sure where the best place is. This is sort of a general questions.
For a long time, my wife and I have had either one computer, or two machines but one has definitely been just a terminal. We've basically set up all of our data to be one one primary machine, and if we want to view/edit that data we have to use that machine.
We just got a new MacBook Pro and I would like to be able to use two machines as equals. Sadly, this idea of multiple computers, with two users and some shared data is really giving me difficulty. I was wondering if anyone has any suggestions on how to best manage things like:
Synchronizing portions of our contact list (We share about 50% of the combined library -- we don't have to share all though).
How to manage iPhoto so that we can each have access to the photos. As an added difficulty (or maybe this is easier?) my Wife just wants to have access to the pictures for viewing and sharing on Facebook/Picassa/etc. I am the only one who wants to edit, correct and cull our library. That said, I always edit when I first put the data on the machine, and almost never again; so it would be fine to have one (or both accounts) set up as view only for the iPhoto data.
How to manage iTunes so that we can each have access to the music. As a super awesome bonus, it would be great if we could have three libraries: His, Hers and Shared. Maybe as much as 30% of our music library is similar, the rest just gets in the way.
What is the best solution people have found for calendars? (I'm thinking two separate calendars, and we each subscribe to each others iCal feed)
Mail.app and bookmark synching is not really a problem for us.
Two extra points:
* One machine is portable, and the other isn't. Ideally, when the laptop is out of the house, both machines should still have reasonable access to the shared data. That is: Just dumping things in the shared folder won't work because when the laptop is out of the house we will be disconnected from the source data.
* We just got a second iPhone. This means that both of us will be taking photos/video separately and trying to synch back to the master data store.
* Basically, I'm trying to minimize data duplication as much as possible, and just synchronize the systems to each other.
Thanks a ton in advance. If anyone has any suggestions at all, I would love to hear them. Including "This is in the wrong forum, go ask here instead..."

So you have a desktop Mac and a laptop Mac, right? Two user accounts (and a third admin account) on each computer, right?
I profess that I haven't tried this, but here is how I would approach your problem:
Sharing Music and Photos between multiple user accounts on the same computer:
See if http://forums.macrumors.com/showthread.php?t=194992 and http://forums.macrumors.com/showthread.php?t=510993 provide any useful information to assist you in this endeavor.
Sharing across multiple computers:
Turn on file sharing on the Desktop (System Preferences > Sharing). Now you can mount the Desktop as an external drive on the laptop's Desktop. Copy the music and photo folders across. Will take awhile to do the first time. Then, for future use, get a copy of the donationware CarbonCopyCloner or equivalent. You can use CCC to selectively sync specific folders from one computer to the other. There may be a hassle with digital copyright issues on music and movies, though.
Calendars:
As you have suggested yourself, publishing yours and subscribing to hers is probably the best way to do it, on the same computer. Across computers, syncing with CCC or equivalent would probably be the way to go.

How to change default /Users and /Groups to different Volume?

Users are created in /Volumes/<boot>/Users and groups in /Volumes/<boot>/Groups.
We need these to be created on a different volume, eg., /Volumes/External/Users, and /Volumes/External/Groups.
Setup Assistant correctly put user Backups into */Volumes/External/Shared Items/Backups* and also correctly put web services on /Volumes/External/ServiceData -- we want to do the same for Groups and Users.
Groups are the most critical, as the group needs bulk storage. Users we could leave as is if it can't be done.
How can this be configured? We've read File Server Admin, Open Directory Admin, and Advanced Server admin from http://www.apple.com/server/macosx/resources/documentation.html without finding an answer.
Thanks in advance.

1. Create new folders on the external volume to hold users and groups, but to prevent confusion name them something other than "Users" and "Groups". /Volumes/External/NetUsers and /Volumes/External/NetGroups would be reasonable choices.
2. Share both of these folders (in Server Admin -> server name in sidebar -> File Sharing -> Volumes & Browse modes -> select each folder -> click Share near the top right).
3. Enable both folders for automounting on clients (Server Admin -> server name in sidebar -> File Sharing -> Share Points-> select each folder -> Share Point tab under that -> Enable Automount option) with the default options (Directory: /LDAPv3/127.0.0.1, Protocol: AFP, Use for: User home folders and group folders). Be sure to click Save (not just OK in the dialog).
4. To migrate users, run Workgroup Manager, and change the home location for the users you want to move (select Accounts in the toolbar -> /LDAPv3/127.0.0.1 from the hidden pop-up menu under that -> User icon tab at the left -> select the user(s) you want to change -> Home tab on the right -> select the NetUsers option from the "Where" list). Then, for each user, run this command on the server: "sudo cp -Rp /Users/username /Volumes/External/NetUsers".
5. Similarly, move Group folders in WGM (Accounts -> /LDAP... -> Groups icon on left -> select groups to move -> Group Folder tab on right -> NetGroups in the list). Then, for each group, run "sudo cp -Rp /Groups/groupname /Volumes/External/NetGroups".
6. Test to make sure all is working before deleting the old user and group folders from /Users and /Groups (do NOT delete /Users and /Groups themselves, just the individual folders from under them).

How to create the file on a location where user having rights?

Hi,
I have requirement, in my application a lot program thatcreating a report in a file and it is written into a user location. Now it specified directly like ( c:\ or d:\......).
The problem is that the user doesn't have rights to access that directories. What i suggest or feel i want to create that particular reports on a location where the end user having rights.
Basically in Windows system %userprofiles% having right to do anyting. Suppose the OS installed in C: the %userprofiles% c:\documents and settings\username or D: then D:\Document and settings\username.
How to achieve this please help me.
Good help will be appreciated.
kanish

Hello,
The best practice would be to create the file in My Documents for the current connected user to the windows.
Unfortunately, you did not mention your forms version. In older version like 6.x there is function in d2kwutil library called Read_Registry in win_api_environment section and in latest versions the same function availble in webutil library with client_ name.
So, you can read the registery for current connected user by using the above mentioned function from the following path of registry.
My Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
There is an entry called Personal. Read the path from that entry at runtime while generating/saving file to the client's location and save the file into that path.
-Ammad

I can not re-install/ update apple iTunes on my HP PC running Win7-64. I get a registry key error when installing and am asked to make sure I have access. IT is a home PC with one user and I have admin priveledges.

When the updater notified me of an iTunes update, I selected the update option. The update failed and killed the version I was running. I have tried for a year to fix the problem without sucess. I can't completely remove all Apple products. I can not install any apple products especially iTunes which is the only one I am interested in.
When I install iTunes now I get a registry key error similar to this:
I am using a machine where I am the only user and am the Admin. I have looked at the security settings on this key and see nothing wrond with it or the parent keys. I tried removing all apple products but ran into similar problems. At this time I still have Bonjour. Mobile Device Support, Software Update, and Application Support installed.

These ones are tricky. But the following instructions are worth a try.
First do a complete uninstall of iTunes and related components (but don't reinstall just yet), as per the following document:
Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7
a. Launch regedit (Start >> Search Programs and Files >> type Regedit and open the regedit that comes up.)
b. Access the following Location: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData \S-1-5-18\Components
c. Perform the following actions
i. Right Click on Components Folder
ii. Select Permissions
iii. Select Full Control and Read Permissions options
iv. Select Advanced Button
v. Select Owner Tab
vi. Select to Change Owner to the Administrators
vii. Check the option “Replace owner on subcontainers and objects”
viii. Select OK when prompted that it may not change all.
ix. Select Apply
x. Select Apply again
xi. Exit the Registry Editor
Now try reinstalling iTunes again. Does it go in properly this time?

Users and Rights

Similar Messages

Maybe you are looking for