create the user who can update another table schema

Hello

We have a system of prod in which we need to update the schema of the application running the declaration different update and create/run function, procedure, package bodies. It is very easy if you use the schema owner. But I need to run the activities of another user due to some restrictions. How can I do?

Can u suggested to update any table privilege... but this would give all access table dictionary also.

Is there any privilege that would allow any other user update another schema table without using the schema name before the name of the table?

PLSS suggest

John,

Can we use public synonym for that?  I don't know if the risk of security for her:

SQL > connect h/h

Connected.

SQL > select * from scott.emp;

Select * from scott.emp

*

ERROR on line 1:

ORA-00942: table or view does not exist

SQL > connect scott/tiger

Connected.

SQL > create public synonym scotemp for scott.emp;

The synonym is created.

SQL > connect HR/hr;

Connected.

SQL > select * from scotemp;

Select * from scotemp

*

ERROR on line 1:

ORA-00942: table or view does not exist

SQL > connect scott/tiger

Connected.

SQL > grant select on emp to HR;

Grant succeeded.

SQL > connect h/h

Connected.

SQL > select * from scotemp;

..

..

14 selected lines.

SQL > show user;

The USER is 'hr '.

SQL > update of ename set scotemp = 'SMITHX"where empno = 7369;

setting a day of scotemp set ename = 'SMITHX"where empno = 7369

*

ERROR on line 1:

ORA-01031: insufficient privileges

SQL > connect scott/tiger

Connected.

SQL > grant update on HR emp;

Grant succeeded.

SQL > connect h/h

Connected.

SQL > update of ename set scotemp = 'SMITHX"where empno = 7369;

1 line update.

SQL > rollback;

Complete restoration.

SQL >

Concerning

Girish Sharma

Tags: Database

Similar Questions

  • Create the user who needs to see all Tables

    I'd like my developer to be able to view all the tables when it connects to SQL developers and browse the tables.
    What is the best that I can do this?

    Please see what I've done below:
    I have to create the user and granted privileges below, but he can't see any table when he opens a SQL Developer session.

    GRANT CREATE session, CREATE table, CREATE view,
    CREATE the procedure CREATE synonym
    To mydeveloper;

    The only way it can the tables so I'll give him the dba role, I don't want to do.

    Any suggestion?

    Hello

    If by "all tables", you mean all the tables/views in the database, including those in the SYS schema (such as V$ session) SELECT ANY TABLE are not enough. To display tables/views of SYS, you may need to look into SELECT_CATALOG_ROLE or SELECT ANY DICTIONARY. For security reasons, I prefer to create a role and grant select necessary findings and then grant this role to the developers.

    Ioan

  • What is the proper way to create a user who can connect through the Console, but not through the VMWare Client?

    I did the following steps:

    1. create a user

    2. assign the Group root (remove all the other group of the user)

    What's my not just?

    Thank you!

    It is the way to do it.   Either you must be part of the root group to be given to the role admin (or a bespoke) at the level of the host to access the DCUI.

    If you create a user is added to the root group, but is assigned all permissions (either singularly or through a group) on the host then, then the user will be able to connect to the DCUI but not the client vSphere (or any other method of the API).

  • JDeveloper 12 c how to block created the user.

    Hello, this is my first post. I have a question regarding my request - I use JDeveloper 12 c. In my application, I have implemented the user file, which has all the users who can connect to my request. For each user, I have an option called 'user locked '. I want to do that if the user is locked, it cannot log in to my application. Someone has an idea how I can do?

    It is a code for my .java login:

    public class LoginBean {}

    private String _username;

    private String _password;

    public LoginBean() {}

    LogEvents.addSyslog ("OPEN", "Connection...", null, null, null);

    }

    {} public void setUsername (String _username)

    This ._username = _username;

    }

    public String getUsername() {}

    return _username;

    }

    {} public void setPassword (String _password)

    This ._password = _password;

    }

    public String getPassword() {}

    return _password;

    }

    public String doLogin() {}

    String _username =;

    Byte [] pw = _password.getBytes ();

    FacesContext ctx = FacesContext.getCurrentInstance ();

    HttpServletRequest request = ctx.getExternalContext () .getRequest () (HttpServletRequest);

    try {}

    CallbackHandler Manager = new URLCallbackHandler (UN, pw);

    MySubj subject = weblogic.security.services.Authentication.login (handler);

    weblogic.servlet.security.ServletAuthentication.runAs (mySubj, request);

    ServletAuthentication.generateNewSessionID (request);

    String loginUrl = ' faces/welcome. '

    LogEvents.addSyslog ("LOGIN. TRUE', 'Connected' - + this ._username, null, null, this ._username);

    sendForward (loginUrl);

    } catch (FailedLoginException fle) {}

    ResourceBundle resourceBundle = BundleFactory.getBundle ("abc.view.ViewControllerBundle");

    String msgTxt = null;

    If (resourceBundle! = null) msgTxt = ("LOGIN resourceBundle.getString. NOT VALID");

    If (msgTxt == null) msgTxt = "a bad user name or password was specified";

    LogEvents.addSyslog ("LOGIN. (FALSE', 'Error while recording -' + this ._username, null, msgTxt, this ._username);

    FacesMessage msg is new FacesMessage (FacesMessage.SEVERITY_ERROR, "Incorrect Username or Password", msgTxt);.

    ctx.addMessage (null, msg);

    setPassword (null);

    } catch {} (the LoginException)

    reportUnexpectedLoginError ("LoginException", the);

    }

    Returns a null value.

    }

    {} private void sendForward (String forwardUrl)

    FacesContext ctx = FacesContext.getCurrentInstance ();

    try {}

    ctx.getExternalContext (.redirect (forwardUrl));

    } catch (IOException ie) {}

    reportUnexpectedLoginError ("IOException", IE);

    }

    ctx.responseComplete ();

    }

    ' e private void reportUnexpectedLoginError (String errType, Exception) {}

    ResourceBundle resourceBundle = BundleFactory.getBundle ("abc.view.ViewControllerBundle");

    String msgTxt = null;

    If (resourceBundle! = null) msgTxt = ("LOGIN resourceBundle.getString. OTHER') .concat ("(") .concat (errType) .concat ("") ");

    If (msgTxt == null) msgTxt = "an unexpected error during the connection (".concat (errType).concat("), see the logs for details");

    FacesMessage msg = new FacesMessage (FacesMessage.SEVERITY_ERROR, "Unexpected error during connection", msgTxt);

    FacesContext.getCurrentInstance () .addMessage (null, msg);

    FacesContext.getCurrentInstance () .renderResponse ();

    }

    }

    Kind regards

    WK

    Hello

    for that, you or the other

    1 - write your own authentication provider in WLS that authenticates users, but also looks at the flag of "lock".

    2 use the SQL authentication provider and modify the SQL query to include indicator

    3 - in your code, check the user file before performing the authentication. At this point, you already have the user name. Just make sure that you don't tell people that their account is locked before you checked the authentication can be processed successfully. Otherwise - if you let them know right after comparing the lock check - your app can be used to exploit your underlying identity management system.

    Frank

  • Create the table and take the name of user who can read/write on this table

    Dear gurus,

    I need to add the following column in Oracle 11g DB AND also add the name of user who can read/write ONLY the following table, any table to access the same read?

    I use to go to Oracle PL/SQL client.

    My dbname is 'customerdb '.

    TableName: "extractOrders."

    +: example of the field data.
    Column0 = logID: 1
    Column1 = idNumber: 39D13613-F061-D38D-100A-16536409C6D8
    Column2 = timestamp: 2011/07/11-13:45
    Column3 = resultCode: 40509
    Column4 = resultMessage: could not find the IDENTITY card
    Column 5 = number: 9813080808
    Column6 = iid: 87670200100001466100
    Column7 = products: D1430 | "' S1412 ' | "" S1407 | "' S2607 ' | "' S1417 ' | "" S1411 | "' S1413 ' | "" S1502 | "" S1406 | "' S1522 ' | "' S1524 ' | "' S1474 ' | "" S1473 ".

    user596669 wrote:

    I need to add the following column in Oracle 11g DB AND also add the name of user who can read/write ONLY the following table, any table to access the same read?

    I use to go to Oracle PL/SQL client.

    Let's say your table than extractorders is the schema of database clientsproperty.

    As this pattern create a stored procedure that runs with the privileges of the customerschema. Having this procedure return a ref cursor For example

    create or replace procedure ReadExtractOrders( c in out sys_refcursor ) authid definer is
    begin
      open c for select * from extractorders;
    end;
    

    As this code executes with the privileges of the customer schema it can read the table belonged to this scheme.

    Now give execute rights on this process for the Joe database schema - and this pattern can create a cursor on the table of ExtractOrders , without being able to access or use directly or refer to this table. Read access to this table is therefore protected by a reliable code belonged schema customers.

    Learn about the AUTHID clause and how it can be used to differentiate the code approved and non-approved, which allows to PL/SQL code to run with different privileges than the demand for prescriptions.

  • How to find the owner of the user or who created the user?

    Hi all

    I want to know owner of user or users who created?

    example:
    system created the test user.
    test has created the user xyz.

    So I want to know who created xyz?

    Thanks in advance,
    Sandeep.

    You can not find who created the user unless you enable the audit of the database or write a trigger (CREATE ddl event-based) that will track the session information of the user who executes a command from the user to CREATE.

  • terminate my account. I'm bouncing from one statement to another. I want to discuss with the person who can cancel my membership please

    terminate my account. I'm bouncing from one statement to another. I want to discuss with the person who can cancel my membership please. I followed the instructions to do so but clearly have not unlocked the hidden icon that says 'Cancel membership' and in fact, it's there for that. I pay by the month

    Click always need Help (help), and then select the Chat option:

    Contact the customer service

  • I need to update the screenshots for a new version of an app existing Itune application to download a new version. Since I did not create the original version, can you guide me how to create a new version with the new version number?

    I need to update the screenshots for a new version of an existing iTunes Connect App asks me to download a new version. Since I did not create the original version, can you guide me how to create a new version with the new version number?

    You must call the assistance of the company and ask them to help you with this. You can find contact information by logging on http://digitalpublishing.acrobat.com/ and looking at the Middle at the bottom of the page.

    Neil

  • How to create the user to access the web console to Vcenter Server Appliance

    The default console is located at https:// < ip >: 5480

    For VC apparatus, the user who has access by default is root. Can I create another user level system and grant him access to the console?

    I tried to create a user by useradd m consoleuser and changed the passwd... However, I am not able to connect to the web console with this user...

    On a similar note, can I give access to the console to a user of the AD?

    Concerning

    Girish

    It is probably not supported by VMware, but it seems they're locking access web console rules of pam.

    You must modify the /etc/pam.d/vami-sfcb file to change the reading of the line "auth required pam_succeed_if.so uid eq 0' to succeed/deny rule change.»

    For example, you can change the line to read "auth required pam_succeed_if.so uid > = 0' and then allow any user with a UID of 0 or more to connect to the console of the web."

  • Assignment of roles to the user when creating the user

    Hi all

    I gave a roll deposited (< dsp:input bean = "ProfileFormHandler.value.roles.role" maxsize = "30" size = "30" type = "text" / > on the registration page.) After registration, each field in db except role (table dps_role).
    Pls let me know what I am doing wrong.

    Thank you

    You should not assign roles to the user as 'ProfileFormHandler.value.roles.role' of 's profile. You can link formhandler property to which you can pass the name or id of the role that you want to assign role assignment must always route through safety ATG API in order to properly update the mappings of Homeland Security. Because of these dependencies, you should not try the role of simply call profile.setPropertyValue ('roles',...) The code cannot fail this way, but if you assign the role in this way then it may not work as expected when checking for role based privileges. Here's one possible way to do it:

    1. in your file properties formhandler declare a dependency on the directory of the default user, which by default points to the profile database:

    userDirectory = / atg/userprofiling/ProfileUserDirectory

    So, in the form Manager, you declare corresponding setUserDirectory() and getUserDirectory().

    2 then in the formhandler, get the DirectoryPrincipal objects associated with the user profile and the role you want to assign and then assign the role to the user:

    import atg.userdirectory.UserDirectory;
    import atg.userdirectory.DirectoryPrincipal;
    import atg.userdirectory.User;
    import atg.userdirectory.Role;
    import atg.userdirectory.DirectoryModificationException;
    
    import java.util.Collection;
    import java.util.Iterator;
    
    ..
    ..
    
    private boolean assignRoleToUser(String roleName, String userId) {
    
      UserDirectory userDirectory = getUserDirectory();
      DirectoryPrincipal userPrincipal = userDirectory.findUserByPrimaryKey(userId);
      DirectoryPrincipal rolePrincipal = userDirectory.getRoleByPath(roleName);
    
      User user = (User)userPrincipal;
    
      Collection collection = userDirectory.getRoles();
    
      boolean status = false;
    
      Iterator iter = collection.iterator();
      while(iter.hasNext())
      {
        Object obj = iter.next();
        if(obj instanceof Role) {
          Role role = (Role)obj;
          if(roleName.equals( role.getName() ) && user!=null) {
            try {
              status = user.assignRole(role);    //will return true if the role was added otherwise false
            }
            catch (DirectoryModificationException e) {
           //handle exception
            }
            break;
          }
        }
      }
      return status;
    }
    

    In the code above 'roleName' parameter is the name of the role to be assigned to the profile with the id as "userId". If you want to do the role assignment when creating the user, then you can do the things above in postCreateUser() so that you can get the Principal associated with the profile. For more information about the interfaces and classes used here, you can refer to the documentation of the API of the ATG.

    http://docs.Oracle.com/CD/E26180_01/platform.94/APIDoc/ATG/userDirectory/package-summary.html

  • Display warning message if the user tries to update the existing column of trans_dt

    Form of Oracle 10g

    Hi gurus

    I appreciate if someone help out me. I need to display the warning message if the user try to update the existing trans_dt, and I don't know what trigger I use. Thank you

    Concerning

    Matt

    Hello

    You can select the value entered by the user and then compare it with the data from the db table

    in WHEN-VALIDATE-ITEM trigger

    SELECT trans_dt

    V_ INTOtrans_dt

    table

    WHERE THE... -PKs;

    Then

    IF: trans_dt <> v_trans_dt

    THEN

    -warning-

    -u he could leave it as what or

    raise form_trigger_failure;

    END IF;

    Amatu Allah.

  • Create the user with privileges only data entry.

    Hello guys,.

    A very basic question. I created the request of APEX, well obviously the user with whom I created this application has developer access, now I want to create a user who is able to see the developed application, I tried to find the user options, but could not.  Someone can help me to find the option, I need to follow, so that the newly created user is only able to enter data into forms and run reports and should not be able to make changes in the application developed.

    Concerning

    Faisal Niazi says:

    A very basic question. I created the request of APEX, well obviously the user with whom I created this application has developer access, now I want to create a user who is able to see the developed application, I tried to find the user options, but could not.  Someone can help me to find the option, I need to follow, so that the newly created user is only able to enter data into forms and run reports and should not be able to make changes in the application developed.

    Create 'end users' by selecting No for the user is an administrator of the workspace and the user is a developer account privilege options create new user accounts. These users connect to the APEX Application Builder. It can be given direct access to a request by specifying the ID of the application or alias to the URL:

    apex.oracle.com/pls/apex/f?p=

    or

    apex.oracle.com/pls/apex/f?p=

    Using an alias for the application is recommended.

    To restrict user access to pages, components and specific applications, create authorisation schemes and the apply to the application level.

  • What should I use to create the user interface of a CEAP plugin on mac

    Hey there,

    I'm new to the development of a plugin, but I did development of script for quite a long time however. I'm tring to develop an ECAP plugin. I go to the sample project of "Panelator" (from AE CC SDK), but I don't know how to create ui for the control panel plugin stuff.

    The sample project is not an example of code to do this on a mac computer, I found the code examle for windows however.

    So, can someone generously tell me how? I had to do with cocoa? But as I understand it, I can only use Objective-C to write cocoa ui.

    Thank you very much!!!

    Hi Li Zhiqing,

    We have just announced in the next major update to AE CC signs HTML5 is supported:

    http://blogs.Adobe.com/AfterEffects/2014/04/new-changed-after-effects-CC-2014.html

    This will allow to create the user interface using HTML5 and use your scripts for the conduct of AE.  It is quite a bit easier than the use of cocoa for the construction of the UI panel.  Thoughts?

  • user name of the user who runs an Apex application in a database trigger

    Hello

    I need to fill a field of the audit in a trigger of database with the username of the user who runs an Apex application.
    In Oracle forms, I would have used the keyword "USER", I tried to use
    the word 'USER' in my trigger, but it is up to the user "APEX_PUBLIC_USER". I guess
    all users get connected as long as 'APEX_PUBLIC_USER' at a certain level.

    Can someone tell me how I can get the real of the user connected to the application of the Apex of a database trigger?

    I thank in advance for any assistance.

    Might want this in addition:

    nvl(v('APP_USER'), user)
    

    Since the database has no notion of the Apex, if you never update/insert/etc ' ing outside a session of Apex, v() will return a null value. That may be fine for your needs, but if your column is not nullable, it will throw an error.

    Just something to consider.

  • I want to create the user in the direct areas but I found thi message: the requested account name is already in use.

    Over the period of re - use the account in the domains.live

    I want to create the user in the direct areas but I found thi message

    The requested account name is already in use or has been used in the past and has not been through the waiting period required of re - use.

    Can you help me

    Hi, Ahmed.

    It seems that the domain name you have selected is not available (or has already been used and it is found that the previous owner of the domain has used the same user name as an account).  In any case we can not help you here.  You need help from domain.live.

    Please go to http://help.live.com/help.aspx?project=domains&market=en-us&querytype=keyword&query=SNIAMODTUOBA&tmt=&domain=domains.live.com&format=b1 and down, click on support and follow the prompts to get help.  Although it is technically to the implementation of the field, I'm sure that your application will be either still answered or they will direct you to the proper location for assistance.

    In addition, you can try http://windowslivehelp.com/product.aspx?productid=25 for help Windows Live Administration.  If you can not find help with solutions validated or by performing a search, try posting in the forums.  I suggest the following for the problem that you specified: http://windowslivehelp.com/forums.aspx?forumid=7e6f04c0-6a48-4719-98f4-a9729d34c76e.

    I hope this helps.

    Good luck!

Maybe you are looking for

  • 39 of Firefox does not hotlink protection on Apache servers

    An ISP (VentraIP) confirmed my observations. Apparently, if you enable protection hotlink on the files selected for example style.css, you can use Firefox 39 typing a URL of type http://www. [webname].com/style.css and Viola!] You suddenly; see the c

  • Indications do not appear in the maps on my Macbook Pro

    Why Directions do not appear in the directions tab in Maps on my Macbook Pro? I use OS X El Capitan, version 10.11.5. How can we solve this problem in order to be able to receive Directions on the routes tab? Thank you!

  • Satellite Pro A10 - modem dissappeared

    I suddenly lost my A10 (software Toshiba AMR modem) modem. The received message is "deleted modem" or "modem not present." I tried recovery: the modem appeared again for awhile, but disappear once I installed SP2 again. Now, in the information system

  • Messenger Messages

    I can't find anyway to delete my messages Mesenger my watch. I tried force touch and swipe.  Does anyone else know this?

  • Error code: 8024402F (cannot install updates)

    WINDOWS COULD NOT SEARCH FOR NEW UPDATES