Apex 4.0 granting connect privileges

Similar Questions

• Granting of privileges through role does not not for PL/SQL

  Version: 11.2.0.2
  
  
  In our shop, we don't grant privileges directly to a user, give us it to a role, and grant this role to user scheduled grantee.
  
  Granting of privileges through a role seems to be fine with the SQL engine. But it does not PL/SQL engine.
  
  In the example below, the GLS_DEV user is granted access SELECT on SCOTT.pets table through a role called tstrole. GLS_DEV can select the SQL table. But does not seem to PL/SQL engine to find out.
  
  Reproduce the problem:
  

  SQL> show user
  USER is "SCOTT"
  
  SQL> select * from pets;
  
  NAME
  -----------------------------------
  PLUTO
  
  
  SQL> conn / as sysdba
  Connected.
  
  
  SQL> create user GLS_DEV identified by test1234 default tablespace TSTDATA;
  
  User created.
  
  SQL> alter user GLS_DEV quota 25m on TSTDATA;
  
  User altered.
  
  
  SQL> grant create session, resource to GLS_DEV;
  
  Grant succeeded.
  
  
  --- Granting SELECT privilege on scott.pets to tstrole and then grant this role to GLS_DEV.
  
  SQL> conn / as sysdba
  Connected.
  SQL>
  SQL> create role tstrole;
  
  Role created.
  
  SQL> grant select on scott.pets to tstrole;
  
  Grant succeeded.
  
  SQL> grant tstrole to GLS_DEV;
  
  Grant succeeded.
  
  SQL> conn GLS_DEV/test1234
  Connected.
  SQL>
  SQL> select * From scott.pets;
  
  NAME
  -----------------------------------
  PLUTO
  
  ---- All fine till here. From SQL engine , GLS_DEV user can SELECT scott.pets table.
  
  --- Now , I am going to create a PL/SQL object in GLS_DEV which tries to refer scott.pets
  
  SQL> show user
  USER is "GLS_DEV"
  
  
  create or replace procedure my_proc
  is
  myvariable varchar2(35);
  
  begin
       select name into myvariable from scott.pets ;
  
       dbms_output.put_line(myvariable);
  
  end my_proc;
  /
  
  Warning: Procedure created with compilation errors.
  
  SQL> show errors
  Errors for PROCEDURE MY_PROC:
  
  LINE/COL ERROR
  -------- -----------------------------------------------------------------
  6/2      PL/SQL: SQL Statement ignored
  6/41     PL/SQL: ORA-01031: insufficient privileges
  
  SQL>
  SQL> 6
    6*    select name into myvariable from scott.pets ;
  
  
  --- PL/SQL Engine doesn't seem to know that GLS_DEV has select privilege on scott.pets indirectly granted through a role
  
  --- Fix
  --- Instead of granting privilege through a role, I am granting the SELECT privilege on scott.pets to GLS_DEV directly.
  --- The error goes away, I can compile and execute the procedure !!
  
  SQL> conn / as sysdba
  Connected.
  SQL>
  SQL> grant select on scott.pets to GLS_DEV;
  
  Grant succeeded.
  
  SQL> conn GLS_DEV/test1234
  Connected.
  SQL>
  SQL> create or replace procedure my_proc
  is
  myvariable varchar2(35);
  
  begin
          select name into myvariable from scott.pets ;
  
          dbms_output.put_line(myvariable);
  
  end my_proc;  2    3    4    5    6    7    8    9   10
   11  /
  
  Procedure created.
  
  SQL> set serveroutput on
  SQL> exec my_proc;
  PLUTO
  
  PL/SQL procedure successfully completed.

  Has anyone encountered the same problem?

  N.Page wrote:
  Ok. Thank you all.
  There is no work around for this like using the clause AUTHID or something?

  Yes. using AUTHID (Summoner vs rights define) can make a difference.
  However it makes sense that pl/sql uses roles a little differently. Although at first glance, it is hard to see why. The reasoning is similar to the difference between a user and a schema.

  A user is a person who connects to a database. It has a role and this role defines what privileges he gets when you work with data.
  A schema consists of several objects that reside in the database. A package is also such an object. This package is valid, it is necessary to have all privileges directly. A role can be enabled and is a sort of temporary right. A direct subsidy has a permanent status. A user will only get the right to run this package/procedure/function. The package is a type of user interface. It encapsulates the privileges necessary to do something about this user.

  The logical problem happens only when the user and packaging are in the same scheme. The best approach is to have the package in the normal pattern and have a separate "schema access" with which the user connects. Give then execute privs on the package for this second scheme.

• Can not GRANT multiple privileges (separated by commas) at once?

  DB version: 11.1
  Operating system platform: AIX
  
  Connected to sqlplus in AIX.
  

  SQL> grant LMRL , 
   CREATE LIBRARY ,
   EXECUTE ON SYS.UTL_FILE , 
   UNLIMITED TABLESPACE,
   EXECUTE ON SYS.DBMS_PIPE ,
   EXECUTE ON SYS.UTL_FILE,
   select on DBA_OBJECTS,
   select on DBA_ERRORS to  
   myuser;  2    3    4    5    6    7    8    9  
  grant LMRL ,
        *
  ERROR at line 1:
  ORA-00990: missing or invalid privilege
  
  -- Removing LMRL role
  
  SQL> grant 
   CREATE LIBRARY ,
   EXECUTE ON SYS.UTL_FILE , 
   UNLIMITED TABLESPACE,
   EXECUTE ON SYS.DBMS_PIPE ,
   EXECUTE ON SYS.UTL_FILE,
   select on DBA_OBJECTS,
   select on DBA_ERRORS to  
   myuser;  
    2    3    4    5    6    7    8    9   CREATE LIBRARY ,
   *
  ERROR at line 2:
  ORA-00990: missing or invalid privilege
  
  -- Removed the new lines and put everything on one line
  grant CREATE LIBRARY ,EXECUTE ON SYS.UTL_FILE , UNLIMITED TABLESPACE,EXECUTE ON SYS.DBMS_PIPE ,EXECUTE ON SYS.UTL_FILE,select on DBA_OBJECTS,select on DBA_ERRORS to myuser;  
  ERROR at line 1:
  ORA-00990: missing or invalid privilege

  But, when I GRANT these privileges/roles individually, it works
  

  SQL> grant LMRL to  myuser;
  
  Grant succeeded.
  
  SQL> grant execute on SYS.UTL_FILE to  myuser;
  
  Grant succeeded.
  
  SQL> grant create library to myuser;
  
  Grant succeeded.
  
  SQL> grant UNLIMITED TABLESPACE to myuser;
  
  Grant succeeded.
  
  SQL> grant select on DBA_OBJECTS to myuser;
  
  Grant succeeded.

  I don't know if this only happens when I connect locally to AIX. For this DB, I can ' connect remotely and test.

  You cannot mix access privileges with a single command object privileges. You can issue multiple access privileges to a single command.

  Similarly, you cannot combine several privileges object in a single command.

  SQL> create user TEST_A identified by TEST_A;
  
  User created.
  
  SQL> grant CREATE LIBRARY ,EXECUTE ON SYS.UTL_FILE , UNLIMITED TABLESPACE to TEST_A;  -- mixed privileges
  grant CREATE LIBRARY ,EXECUTE ON SYS.UTL_FILE , UNLIMITED TABLESPACE to TEST_A
        *
  ERROR at line 1:
  ORA-00990: missing or invalid privilege
  
  SQL> grant CREATE LIBRARY, UNLIMITED TABLESPACE to TEST_A;   -- multiple system privileges
  
  Grant succeeded.
  
  SQL> grant EXECUTE ON SYS.DBMS_PIPE ,EXECUTE ON SYS.UTL_FILE to TEST_A;   -- multiple object privileges return a different error
  grant EXECUTE ON SYS.DBMS_PIPE ,EXECUTE ON SYS.UTL_FILE to TEST_A
                                 *
  ERROR at line 1:
  ORA-00905: missing keyword
  
  SQL> grant EXECUTE ON SYS.DBMS_PIPE to TEST_A;
  
  Grant succeeded.
  
  SQL> grant EXECUTE ON SYS.UTL_FILE to TEST_A;
  
  Grant succeeded.
  
  SQL>
  SQL>
  

  Hemant K Collette

• debugging of grant connect user session

  I understand that if s/n has not conceded after the option to 'user', very:
  

  grant debug connect session to user;

  , then 'user' wil Geta suite error when it try to debug:
  

  ORA-0131:Insufficient Priviledges
  Debugging requires Debug connect session system priviledges

  Y at - it an explanation why DBA decides not to grant that privilege? Perhaps this privilege slows something? Maybe it can create some security "hole"? Maybe there is another good explanation?
  "User" in this example was schema/account lying for personal development that develops functionality, but it is not serious, in my view, is what sort of 'user '.
  
  so why you think that I do not have this privilege, what bad this privilege when granted could it?

  It's just that you don't get that privilege. For most in-store that ever, I worked these grants are given on the basic application.

  Debugging is a right of developers and nobody can last it.

  But I never use any debugging tool. Only, I relay on my instrumented Code.

• grant the privilege on the SQL types to another schema

  I created two SQL types under the APP_OWNER scheme as follows:
  
  CREATE or REPLACE TYPE t_instr_info as an OBJECT
  (NUMBER IMNT_KY)
  
  CREATE or REPLACE TYPE t_tab_instr_info
  AS THE t_instr_info TABLE
  
  The privilege on these two types as follows:
  
  Grant execute on t_tab_instr_info to vprods_app2
  
  Grant execute on t_instr_info to vprods_app2
  
  The stored procedures must be developed in the scheme of the APP. In the scheme of the APP, I need to call this type to declare the array as follows:
  
  v_tab_output app_owner.t_tab_instr_info: = app_owner.t_tab_instr_info ();
  
  I get a PLS-00905: object owner.t_tab_instr_info is not valid
  
  I tried giving EVERYTHING instead of run, but the problem persists.
  
  Help, please. As a policy of all objects including tables, types etc. must be app_owner and the app schema privileges
  
  Thank you in advance.

  One thing I forgot to mention (since you do not explicitly specify how you are granting things) is that you need to issue DIRECT subsidies (as in my example above), you cannot compile the code if you have subsidies via a role (but you can execute anonymous blocks).

  This is an example

  create user APP_OWNER identified by APP_OWNER default tablespace users temporary tablespace temp;
  grant connect, resource, create role to APP_OWNER;
  
  create user APP_SCHEMA identified by APP_SCHEMA default tablespace users temporary tablespace temp;
  grant connect, resource to APP_SCHEMA;
  
  connect APP_OWNER/APP_OWNER@xe
  
  create role for_apps;
  
  CREATE OR REPLACE TYPE t_instr_info as OBJECT
  (IMNT_KY NUMBER);
  / 
  
  CREATE OR REPLACE TYPE t_tab_instr_info
  AS TABLE OF t_instr_info;
  / 
  
  grant execute on t_instr_info to for_apps;
  grant execute on t_tab_instr_info to for_apps;
  
  grant for_apps to app_schema;
  
  connect APP_SCHEMA/APP_SCHEMA@xe
  APP_SCHEMA_XE?create or replace procedure test
    2  as
    3     v_tab_output app_owner.t_tab_instr_info := app_owner.t_tab_instr_info();
    4  begin
    5     null;
    6  end;
    7  /
  
  Warning: Procedure created with compilation errors.
  
  Elapsed: 00:00:01.17
  APP_SCHEMA_XE?show err
  Errors for PROCEDURE TEST:
  
  LINE/COL ERROR
  -------- -----------------------------------------------------------------
  3/17     PL/SQL: Item ignored
  3/17     PLS-00201: identifier 'APP_OWNER.T_TAB_INSTR_INFO' must be
           declared
  
  APP_SCHEMA_XE?declare
    2     v_tab_output app_owner.t_tab_instr_info := app_owner.t_tab_instr_info();
    3  begin
    4     null;
    5  end;
    6  /
  
  PL/SQL procedure successfully completed.
  
  Elapsed: 00:00:01.17
  

• APEX calendar 5.0 - edit privilege access control

  Hello experts,

  Is it possible to access to the APEX 5.0 calendar control - privilege to change so the user cannot click in the calendar to add/edit events? I have disabled all these sites, it looks like this, where the user wishes to add/edit events:

  

  But I want to do, so that the user cannot click in calendar thanks to the privilege of change. Is this possible?

  Thank you.

  Zajcev

  Zajcev wrote:

  Is it possible to access to the APEX 5.0 calendar control - privilege to change so the user cannot click in the calendar to add/edit events? I have disabled all these sites, it looks like this, where the user wishes to add/edit events:

  But I want to do, so that the user cannot click in calendar thanks to the privilege of change. Is this possible?

  I see no easy way and sure to implement this exact requirement, A read only attribute exists in the region of calendar, but as several other properties properties it it has no effect on the civilian component made.

  What I would say is rather to make the details read-only pages when users have no permissions to change rather than block access entirely. You can do so with a type of PL/SQL Expression condition in the reading of the section only, page level using the apex_authorization.is_authorized method to assess the approval scheme:

  not apex_authorization.is_authorized('EDIT_EVENT')

  If the detail pages contains data that users are not allowed to access, use the authorisation schemes as usual to avoid areas or elements of rendering.

• How to grant object privileges to a user?

  Hello

  I use the Data Modeler 4.0.3 and I'm trying to find out where I can assign object privileges to a user that you create in the physical model. I see a "Access Privileges" tab in the user properties window, but I don't see an 'object of privileges' a.

  Where you define the privileges of the object for a new user? For example, I would grant the privilege to execute on DBMS such as DBMS_LOCK, DBMS_ALERT, or packages. Is there a way I can do? Should I import from a database?

  Thank you

  Hello

  Double-click the user name that you want to grant privileges in the physical model (or right-click and select properties), then general tab on permissions. You must at least have the name of the package in the physical model in order to be able to grant privileges.

  Best regards

  Heli

• grant user privileges for the execution of a procedure in a package

  Hi all
  
  My need is to grant privileges to User1 to run only a single procedure proc1 in package1.
  It is possible at all?
  Do I need to grant more privileges if procedure1 calls procedure2?

  Hello

  Marco wrote:
  OK, so I can create procedureN off package1 claiming enforcement procedureN package1.proc1 and grant privileges to User1.

  Is this possible without rights for package1.proc1?

  Yes, it is possible. If user_x has EXECUTE privileges on procedureN procedureN has DEFINE AUTHID (which is the default), then user_x doesn't have privileges on the packaging or the tables used in procedureN.

• Grant sysdba privileges

  Just a quick but im struggeling...
  
  How to grant sysdba privileges to a user?

  Check here:
  http://www.oracleutilities.com/OSUtil/orapwd.html

  -André

• [8i] grant of privileges on a service to a user

  My apologies if this is a stupid question, but I don't usually have to do...
  
  My normal username doesn't have privileges to perform a function that I need to use, so I logged in as SYSTEM and tried to grant the privilege of my normal username by using the following:
  

   GRANT EXECUTE ON SCHEMA.FUNCTION_NAME TO <username>;

  But he gave me an ORA-01031: insufficient privileges...
  
  If the SYSTEM does not have the privileges to grant that... so what should I do? I don't have the password for the user who owns the service, but I know that I can run the function with a different user name.

  user11033437 wrote:
  My apologies if this is a stupid question, but I don't usually have to do...

  My normal username doesn't have privileges to perform a function that I need to use, so I logged in as SYSTEM and tried to grant the privilege of my normal username by using the following:

   GRANT EXECUTE ON SCHEMA.FUNCTION_NAME TO ;
  

  But he gave me an ORA-01031: insufficient privileges...

  If the SYSTEM does not have the privileges to grant that... so what should I do? I don't have the password for the user who owns the service, but I know that I can run the function with a different user name.

  I'm sure that (but not certain) that you can grant permissions to others of the schema using sys/system up to version 9, so you would need to get the user that has the function to grant access.

  Why you do not have the password... or why you can't get it? There are ways to access the schema (assuming that you have access to the sys/system), but I'm not really a fan of support without a good reason :)

• Grant create session, grant no privilege to aquser-> ORA-01031?

  Hello
  
  How can it be possible that despite all the privileges a user always generates ORA-01031: insufficient privileges?
  
  Grant create session, granted a privilege of aquser
  
  
  Dequeue messages with java->
  
  oracle.jms.AQjmsException: JMS-120: Homtningen Fron k÷n utf÷rdes inte
  at oracle.jms.AQjmsError.throwEx(AQjmsError.java:315)
  at oracle.jms.AQjmsConsumer.jdbcDequeue(AQjmsConsumer.java:1630)
  at oracle.jms.AQjmsConsumer.receiveFromAQ(AQjmsConsumer.java:1037)
  at oracle.jms.AQjmsConsumer.receiveFromAQ(AQjmsConsumer.java:962)
  at oracle.jms.AQjmsConsumer.receiveFromAQ(AQjmsConsumer.java:940)
  at oracle.jms.AQjmsConsumer.receive(AQjmsConsumer.java:792)
  at AQSub.AQReceiver (AQSub.java:188)
  at AQSub.eval (AQSub.java:130)
  at com.tibco.im.wf.Job.step(Job.java:986)
  at com.tibco.im.wf.Job.checkStep(Job.java:822)
  to com.tibco.im.wf.NewJobDispatcher$ JobCourier.runx (NewJobDispatcher.java:240)
  to com.tibco.im.wf.NewJobDispatcher$ JobCourier.run (NewJobDispatcher.java:207)
  Caused by: java.sql.SQLException: ORA-01031: otillrocklig beh÷righet
  
  at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:74)
  at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:131)
  at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:204)
  at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:455)
  at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:406)
  at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:399)
  at oracle.jdbc.driver.T4Caqdq.receive(T4Caqdq.java:431)
  at oracle.jdbc.driver.T4CConnection.doDequeue(T4CConnection.java:3369)
  at oracle.jdbc.driver.PhysicalConnection.dequeue(PhysicalConnection.java:9142)
  at oracle.jdbc.driver.PhysicalConnection.dequeue(PhysicalConnection.java:9189)
  at oracle.jms.AQjmsConsumer.jdbcDequeue(AQjmsConsumer.java:1305)
  ... more than 10

  GRANT CREATE SESSION, aq_user_role to my_aq_user_role.

  Well, have you seen this?

  4.2.1.2 the user role
  You should avoid granting AQ_USER_ROLE, because this role provides enough privileges to the queue or the print queue on the 8, 1-style queues or superiors.

  Since you have not provided no version information, it's a little hard to know if it is applicable to your case. However, this should be a case of applying logic/troubleshooting/debugging skills to determine what privileges are missing.

  Kind regards

  Mark

  EDIT: I realize that you have explicitly granted the privileges ENQUEUE_ANY and DEQUEUE_ANY, but have you followed the other suggestions EXECUTE, for example right on DBMS_AQ?

  Published by: Mark Williams on May 28, 2010 11:37

• Granting of privileges of table on the tables users another

  Can someone tell me what a privilege must be granted to a user to be able to grant the insert/update/select/Delete/execute on an other users tables/packet?
  
  I thought that "grant any privilege" has been the only one to have... and - user I am using to grant privileges on the other scheme users this has however - I always get: ORA-01031: insufficient privileges when you try to run the grants.
  
  Any ideas what I'm doing wrong here?

  By default, a package runs under the privilege of the owner unless you specify the rights of authentication as long as the current user. The owner must have a direct grant of the object of all the privileges used and cannot inherit those privileges to a role.

  How the owner has the 'all purpose of grant privilege' which they have been granted? Or should you be run as the current user to their privileges.

  HTH - Mark D Powell.

• ORA-01031: insufficient privileges when granted access privileges to a new user

  Hello.

  When you are connected to a SYSTEM, I'm trying to create a new user and give him all the system privileges, but do so always the following error message appears:

  Cannot process the SQL command

  -

  Error at startup to the line: 123 to orders.

  SYSDBA GRANT TestUser

  Error report-

  SQL error: ORA-01031: insufficient privileges

  01031 00000 - "insufficient privileges".

  * Cause: An attempt was made to execute a database operation without

  the necessary privileges.

  * Action: Ask your database or the designated security administrator

  administrator to grant you the required privileges

  After clicking OK, the user is still being created, but it lacks many privileges to access.

  How can I solve this problem?

  I use Oracle SQL Developer version 4.1.2.20 and Oracle database 11g of the express edition.

  Connect as SYS, not SYSTEM to grant this priv

  Give him with extreme prejudice - it is powerful

  Note in the 12 c database we have stopped a lot of the administrative bits of the SYSDBA role in less powerful. This gives you more flexibility on who can do what in your database

  https://docs.Oracle.com/database/121/DBSEG/authorization.htm#DBSEG578

• Grant the privilege to access HTTP with httpuritype

  Hi all

  With SQL Developer and DB - 12 c, perfectly executed the following:

  Insert in the values of service)

  1

  , httpuritype('__http://api.mercadopublico.cl/servicios/v1/publico/ordenesdecompra.xml?fecha=02032014&ticket=DF140AC7-B227-44C7-95DD-FEA0AF61C542').getxml)

  );

  but when I write a procedure like this:

  create or replace PROCEDURE GET_TICKET AS

  BEGIN

  Insert in the values of service)

  1

  , httpuritype('__http://api.mercadopublico.cl/servicios/v1/publico/ordenesdecompra.xml?fecha=02032014&ticket=DF140AC7-B227-44C7-95DD-FEA0AF61C542').getxml)

  );

  END GET_TICKET;

  
  

  gives this error:

  Connect to the ccs_xml database.

  ORA-29273: HTTP request failed

  ORA-24247: network access denied by access control list (ACL)

  ORA-06512: at "SYS." HTTPURITYPE", line 38

  ORA-06512: at "SYS." HTTPURITYPE", line 108

  ORA-06512: at "CCS_XML. GET_TICKET', line 3

  ORA-06512: at line 2

  Process is complete.

  Disconnection from the ccs_xml database.

  How do I grant the necessary privileges.

  your help is highly appreciated

  Best regards

  Carlos

  Yes, that's what I alluded to in your feed: How to import xml data from a site http with PL/SQL

  If you're on 11g, you may also need to set an ACL for the request.

  See this article for an overview of what you need to do, it applies to 11g and beyond:

  ORACLE-BASE-fine-grained Access to Services network in Oracle Database 11g Release 1

• Granting of privileges to another user

  Hello
  
  I'm new to plsql. During my apprenticeship. I created two paintings, BOOKS and AUTHORS in database(10g) by SYSDBA orcl.
  
  Yet once I logged user SCOTT account and I am unable to see tables of BOOKS and AUTHORS.
  
  Please let me know how to grant privileges to administrator (to edit, delete, insert and update) to the user SCOTT for these tables.
  
  Thank you and best regards,
  Hortense.

  808099 wrote:
  1A obtained now that SYSDBA role and SYS is user.
  2. I was able to connect to sqlplus by giving "/ as SYSDBA" under the user name. That's why I felt it as a user.

  "/ as sysdba" connects to the database that the SYS user using operating system with the SYSDBA role authentication enabled.

  3. in the second place, I don't know what my table BOOKS belong to the. Because I just ran a script to create table in scott/tiger@orcl. Please suggest how can I know what pattern belongs to.

  If you connected to the database as user SCOTT and run the script to create the table, the table would be almost certainly owned by SCOTT. If you connected to the database as the user SYS and run the script to create the table, the table would be most likely owned by SYS. If the script specified in the schema owner, i.e.

  CREATE TABLE library.book ...
  

  the table should be created in the specified schema. But you must have privileges very powerful to create objects in the patterns of the other user and SCOTT does not have these privileges, unless you have specifically granted them.

  4. in the third place, I delete the BOOKS and the AUTHORS of SYS and create them in the user SCOTT. But thought if GRANT privileges may be an alternative.

  Not really. It is often best to have the paintings belonging to the correct schema in the first place. You use grants to allow other users to access (or modify) the tables but other users will not have the same level of privileges (for example, they will be able to run the DDL against the table).

  Justin