SQL & PL/SQL :: Grant Permission Revoke?
Dec 16, 2011Is there a way to find out who and how was the GRANT permission revoked from user.Why i am asking is , i see a grant permission exist for a user and has been revoked later.
View 13 RepliesIs there a way to find out who and how was the GRANT permission revoked from user.Why i am asking is , i see a grant permission exist for a user and has been revoked later.
View 13 RepliesI want sql querys for following scenarios
Owner of the compant wants to create 5 users,3 in following fashion
1) 2 -Must have authority of admin
2) 2- Normal user
3) 1 - User whose password is blocked for 15 days
I have a requirement like give reaonly access on my stored procedure to another user , not even execute permission on that steored procedure.
let us know the command ?
i have to grant permission to a user on a package dbms_transaction.After i granted permission i am getting error:
ORA-01031: insufficient privileges
ORA-06512: at "SYS.DBMS_TRANSACTION", line 88
ORA-06512: at line 1
I have two schema named ODI_MASTER and ODI_WORK.Under ODI_WORK there are some tables like TEMP1, TEMP2
Further more when any new tables will create under ODI_WORK, then i need automatically grant select permission to ODI _MASTER schema.
for this purpose i choose trigger, and a Stored procedure.
CREATE OR REPLACE TRIGGER ODI_WORK.TRIG1
AFTER CREATE ON ODI_WORK.SCHEMA
ENABLE
call sp1 (ora_login_user)
[code]...
I searched a lot over blogs, if EXECUTE IMMEDIATE commands exist under Trigger it gets problem. Insert/update/delete statement on trigger seems no problem.
I want to revoke some privileges (given from user, say A, on table TABLE to user B) with SYS, and i've got an error : It says that I can't revoke a privilege that I didn't give.
In DBA_TAB_PRIVS, there's no information about that : I can't know who gives the privilege (when I try to perform the REVOKE statment with OWNER, GRANTOR, I've got the same error).
I would like to know what happens when we fire:
grant all on any table to user_name;
and
grant all on table_name to user_name;
Actually I was performing "grant all on table_name to user_name;" to grant the privilege but 1 of my friends suggested "grant all on any table to user_name;"
I am observing a strange behavior for the ROLES:
The DBA granted the RESOURCE role for my user USER1:
GRANT RESOURCE TO USER1;
The USER1 logged and activated the role RESOURCE.
CONN USER1/USER1
SET ROLE RESOURCE;
... it has some privileges in database ( UNLIMITED TABLESPACE for example that grant to him create table in any tablespace).
Now I created a new tablespace, but the user1 cannot use this new tablespace.So I will to revoke the RESOURCE for the USER1:REVOKE RESOURCE TO USER1;
It seems ok, but the user USER1 can still create tables in the new tablespace.I repared that UNLIMITED TABLESPACE still active, and the REVOKE RESOURCE just will have effect in the next LOGON of the USER1.
How can I REVOKE the ROLE and disable all the privileges from it immediately?
I can connect to a database instance using toad. But I can not connect to the instance through sqlplus. Its says TNS permisson denied ora-12546. However I can connect to other instances on other machines. If there were any permission issues on client oracle directories then I would not be able to connect to other machines with other instances.
I am using Oracle 11g client on windows 7 64 bit and I am connecting to oracle server Linux 32 bit
How to find the list of tables which has permission select only and tables which has both read and write access permission for a particular user.
I'm using ORACLE database.
I have 3 users in one schema. One user is having all the tables, packages,triggers etc and this is the super user.
I want to access all the tables, packages etc without prefix the username in other two users.
Is it possible in oracle dbms for a user to have the permission to create a table but not have the permission to insert in, although the same user just created it?
View 6 Replies View RelatedHow datafile is created with 640 file permission by oracle software.(I know for security reasons it is created with 640 permission)
example:
-rw-r----- 1 orasd dba 104865792 Mar 15 01:17 users01.dbf
I want to change the datafile permission as below. how to change the default value of the datafiles permission from (640) to (644) internally while creating the datafile from oracle side.
example:
-rw-r--r-- 1 orasd dba 104865792 Mar 15 01:17 users01.dbf
My database is running in oracle 10g. I have more than 25 oracle directories which are being used for batch/reporting jobs. I found read and write privileges are missing for 7 Dirs. I checked the last ddl time, it shows Jan 26th.
I want know how to check which userid revoked it.
I am installing Oracle 10g using windows 7 but i am facing problem Ora-12546.
View 6 Replies View RelatedAt the time of installing developer 6i am getting the above error,at the stage of selecting the path for forms its throwing the above error saying the permission denied in setting the value path....
does any one come across this type of error before...
I have database in 9.2.0.3 on windows 2003 R2 one server and i have serve with 10.2.0.4 64 bit on windows 2008 R2 64 bits. I want to move database from 9.2.0.3 to new server on 10.2.0.4.
!)should i do the cold backup of 9.2.0.3 and then create db instance on new server and then use dimutility to create new instance and then run the patch upgrade.
!!) I would like to do export all schema and user permision (is if possible?)export and then import to new server?
We have a requirement to create a file using UTL_FILE package. so we tried to generate the file in directory at UNIX level,for example "/tmp" which means when we executing the stored procedure which in turn calls UTL_FILE package and create a file say "a.txt". On checking the permission for "a.txt", it shows as follows
-rw-r----- oracle dba a.txt
this means read and write for oracle user, read for dba group and no permission for other user.
our requirement is to have the following privileges at UNIX level.
-rw-r--r-- oracle dba a.txt
Is it possible to do at oracle level since the file is owned by oracle user or at UNIX level (with out logging to oracle user)?
Environment: UNIX AIX 6.1 and Oracle 11.2.0.3
I receive errors when trying to backup my database (version 9.2.0.2.0) to an NFS device.
I mounted the NFS device in the HP-UX 11.11 server with the folowing comand :
CODEmount -F nfs -o hard,rw,rsize=32768,wsize=32768,suid,proto=tcp ip_adress:/nfs/RMAN_BACKUPS /rman_backups
the device is succefully mounted.
drwxrwxrwx 2 99 100 17 Nov 25 16:17 rman_backups
When i begin a backup with rman i receive the folwing error :
CODEcanal ORA_DISK_1 : dM-imarrage de l'M-ilM-iment 1 dans 25/11/11
RMAN-00571: ===========================================================
RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS ===============
RMAN-00571: ===========================================================
RMAN-03009: failure of backup command on ORA_DISK_1 channel at 11/25/2011 16:35:00
ORA-19504: Echec de crM-iation du fichier "/rman_backups/DB_6jmsi811_1_1.bkupset"
ORA-27041: ouverture du fichier impossible
HP-UX Error: 13: Permission denied
Additional information: 2
Gestionnaire de rM-icupM-iration (Recovery Manager) terminM-i.
It say permission denied but it is set to drwxrwxrwx and i can create and change any file in the directory.
I am learning oracle DBA training course. I tried to find disc space and mail alert .I got permission denied error message.I was running this script in my own pc.
CODE #!/bin/sh
# Shell script to monitor or watch the disk space
# It will send an email to $ADMIN, if the (free avilable) percentage
# of space is >= 90%
[code]...
what are ASMlib devices and how to find the group permission of it ?
View 1 Replies View RelatedWhile I am installing oracle 10g on vista i am getting the error ora-12546:tns:permission denied at database configuration Assistant.
View 1 Replies View RelatedI recently installed 2 node Oracle 11g RAC on RHEL5. While creating Clustered Database, database creation on second node (racnode2) failed. So, I connected */ as sysdba* on the node and executed startup only to get this error message:
SQL> startup
ORA-01078: failure in processing system parameters
ORA-01565: error in identifying file '+RACDB_DATA/RACDB/spfileRACDB.ora'
ORA-17503: ksfdopn:2 Failed to open file +RACDB_DATA/RACDB/spfileRACDB.ora
ORA-01034: ORACLE not available
ORA-27123: unable to attach to shared memory segment
Linux Error: 13: Permission denied
Additional information: 196612
Additional information: 10
SQL>But, *'+RACDB_DATA/RACDB/spfileRACDB.ora'* is present.
I strongly believe it is a permission issue that ORACLE owned processes are not able to access disks owned by GRID user. I checked the permission of disks:
[oracle@racnode2 ~]$ cd /dev/oracleasm/disks
[oracle@racnode2 disks]$ ls -l
total 0
brw-rw---- 1 grid asmadmin 8, 65 Nov 19 19:15 CRSVOL1
brw-rw---- 1 grid asmadmin 8, 49 Nov 19 19:15 DATAVOL1
brw-rw---- 1 grid asmadmin 8, 81 Nov 19 19:15 FRAVOL1
[oracle@racnode2 disks]$And also, ORACLE user has asmdba among other privileges.
[oracle@racnode2 disks]$ id
uid=1101(oracle) gid=1000(oinstall) groups=1000(oinstall),1201(asmdba),1300(dba),1301(oper) context=user_u:system_r:unconfined_t
I am willing to furnish further data.
We are having 10g 2Node RAC on Windows 2003. I cannot stop services by using command ""crsctl stop crs/ srvctl stop database "" without administrator permission through my OS user. Is it possible to stop the services without Administrator permission on OS level.? What kind of OS level permission need to access the ""crsctl/srvctl etc"".
View 6 Replies View RelatedI have created a simple external job to run export (expdp) job to be run from PL/SQL. When I create a job as SYS user, the job runs good but the same fails when I execute it as application user. I am certain that I am missing some privileges.
Below is the job:
BEGIN
dbms_scheduler.create_job(
job_name => 'mytestjob',
job_type => 'executable',
job_action => '/u01/myexpdp.sh',
enabled => TRUE,
[code]....
wanted to grant dbms_scheduler permission to the system user in oracle 11.2.0.3,but it is showing insufficient privileges, but my System has Sysdba rights.
SQL> SELECT * FROM v$pwfile_users WHERE sysdba='TRUE';
USERNAME SYSDB SYSOP SYSAS
------------------------------ ----- ----- -----
SYS TRUE TRUE FALSE
[code]....
Revoke succeeded.
SQL> conn system
Enter password:
Connected.
[code]...
while i ran this query
"
SQL> select * from session_privs;"
for system user i have 202 rows of different privileges,but the same query for sysdba has 208 rows...
I have a stored procedure which when executed creates a user and grants some roles to the user and also makes certain roles DEFAULT using "alter user"
The issue comes when i execute the procedure.
I have a User who has a role and this role has the "alter user" privilege, for example lets say that the user1 has the role ABC, and role ABC has the "alter user" privilege.
SQL> grant alter user to ABC;
Grant succeeded.
SQL> grant ABC to user1;
Grant succeeded.
Now, when i run the stored procedure as the user1, it gives me an error on a line saying "insufficient privileges", when i check the line, its this line:
alter user user1 DEFAULT ROLE "ROLE1", "ROLE2"
But as far as i know the user1 has the "alter user" privilege
I want to make those two roles ROLE1, ROLE2 DEFAULT because i don't want the other roles ROLE3,ROLE4 to be default, as you know if there are many roles and if we alter user with default for certain roles other roles become DEFAULT=NO.
So i get the error at "alter user" statement though the user has the "alter user" privilege, what do you think might be wrong?
OR is there anyway to grant roles to the user with default=NO option?
Say we have db1 and db2 two databases installed on two different servers.For internal needs, I have to insert some data from a table t1 on db1 to a table t2 in db2. This can be done by issuing from a user on db1 :
insert into t2@dblink2
select *
from t1;
where dblink2 is a correct database link that points to u2 (the t2 owner for example) on db2.
Now what I want to do is to grant privileges remotely.Is there a way to issue somthing like
execute@dblink2 'grant select on t2 to public';
It would be like u2 has issued the statment...
I don't want to use OS scripts (.sh or .bat).
if a user have alter table gant but could not alter .. what additional grant it need
SQL> alter table HRS_PERS_FIELDS_INC modify(PER0000252 NUMBER(19,3));
alter table HRS_PERS_FIELDS_INC modify(PER0000252 NUMBER(19,3))
*
ERROR at line 1:
ORA-00942: table or view does not exist
I logged in as system and I just execute below script, however Im getting error "SQL Error: ORA-00942: table or view does not exist 00942. 00000 - "table or view does not exist""
GRANT execute ON UTL_FILE TO USER1;
How to grant privilege on ult_file?