grant the user

Hello
There is a user permission 'select any table'... but I won't be selected only 'a table' by this user...

grant select any table of XUSER except XTABLE
command is not in Oracle :)

How to do that without revocation "any select permission?

Published by: lucky 18.Eki.2011 14:35

You could create a policy from the CAE on this table. For example, you might have the political function ensure that the table is expressly granted to the user, otherwise will raise an error.

However, this means that SELECT ANY TABLE wouldn't work for anyone (not even DBA), with respect to this table. Think through all the possible implications of which (including exports, statistics, etc.) and make sure you have your bases covered entirely if you go this route.

Tags: Database

Similar Questions

  • Grants the user script

    I want to get the user to my database creation script.

    So I used the following query.


    SELECT "create a user" | U.UserName | "identified" |
    DECODE (PASSWORD,
    NULL, 'EXTERNAL ',.
    "with the values" | '''' || PASSWORD | ''''
    ) || CHR (10) | "default tablespace". USER_USERS | CHR (10) |
    "temporary tablespace. temporary_Tablespace | CHR (10) |
    "profile" | PROFILE | CHR (10) |
    'quota ' |
    DECODE (Q.max_bytes,-1, 'UNLIMITED', NULL, 'UNLIMITED', Q.max_bytes).
    "on" | USER_USERS |
    DECODE (account_status, "LOCKED", "account lockout",
    "EXPIRATION", "password expired",
    "EXPIRED------& LOCKED ',"account password expires","
    NULL)
    ||
    ';'
    FROM DBA_USERS U, Q DBA_TS_QUOTAS
    -Comment this paragraph to include the system users & default
    If U.username NOT IN ('SYS', 'SYSTEM',
    "SCOTT', 'GENERAL', 'OUTLN', 'WKPROXY', 'WMSYS', 'ORDSYS', 'ORDPLUGINS', 'MDSYS."
    "CTXSYS', 'XDB', 'ANONYMOUS', 'OWNER', 'WKSYS', 'ODM_MTR', 'ODM', 'OLAPSYS."
    'HR', 'OE', 'PM', 'SH', 'QS_ADM', 'QS', 'QS_WS', 'QS_ES', 'QS_OS', 'QS_CBADM ',.
    'QS_CB', 'QS_CS', 'PERFSTAT')
    AND U.username = Q.username (+) AND U.default_tablespace = Q.tablespace_name (+)
    ;

    Then download the creating user script.

    Now, I want to get all subsidies previledges, object, resource group etc. of those to all users.
    Is any script available?

    How can I get that
    Thank you

    Published by: user618704 on February 25, 2009 02:34

    Hello

    I think that you have received the 'http://toolkit.rdbms-insight.com' script, so you answer from the same link
    Too much. Check it out

    http://Toolkit.RDBMS-insight.com/grants_script.php

    -Pavan Kumar N

  • movements of the user through tablesapce

    Hi team,

    can move in bulk to the users in the tablespace, but these users have not all objects in their schemas. pls suggest me what the dependencies_ are.


    Concerning
    Phani Kumar

    821131, if the Oracle username does not object then as user names are not associated with storage spaces, except that each user has a default temporay tablespace used to support sort operations and a tablespace of object by default if the user is never given created table privileges / index, and you can change these default values at any time even if the user owns objects. Existing objects are not performed.
    - -

    As Lordane said, you just need to grant the user the quota required to use a different default tablespace. If the user has tables or indexes, you don't have to move them, but if you want you can use alter table move and alter index rebuild instructions to move most of the tables and indexes. There are some restrictions, such as tables with columns of data type long cannot be moved through alter table move but can be located via export/drop/recreate/import.
    - -
    HTH - Mark D Powell.
    correct view of index in tables and indexes

    Edited by: Mark D Powell on June 8, 2011 08:58

  • Create a schema of the user with the same name and tables within this scheme

    I am a newbie with Oracle.
    I installed my first Oracle 10 g database in my life.
    I need to create a user and a new schema with the same name.
    Subsequently, I need to create tables in this schema using the * isqlPlus.
    I got to create the user via the Oracle Enterprise Manager Console.
    I tried to create a schema through the same tool, but I have not found a possibility to do using GUI.
    Is it possible to do so through Oracle Enterprise Manager Console?
    What are the permissions the user must have access isqlPlus to create the tables in the schema?

    Thank you!!!

    Felipe

    A schema is just a collection of objects belonged to a particular user. If you do not need to create a separate schema: the schema is created automatically when you create the user.

    To connect to the database, a user must CREATE SESSION privilege. To create a table, the user has the CREATE TABLE privilege and should be given a quota on any tablespace will be created in the table. If you don't care management quota or limit the storage space that a user can create tables, you can grant the user the UNLIMITED TABLESPACE privilege. If you care the management of quota, you must run commands like

    ALTER USER <>
      QUOTA <>
      ON <>
    

    for each tablespace for the user to be able to use.

    Justin

  • failed to connect the user had not granted the type of logon required on this computer

    W2K, Win XP Home, Win XP Vista Pro and al

    Some win appear XP OS like win 2 k professional versions, others as XP Home appear as WP Pro builds.
    The integrated network has a combination of these BONES still bastard licensed and the subject of errors occur

    "failed to connect the user didn't would have been granted the type of logon required on this computer.

    What sets with that?

    Never had this problem until that Microslop mixing and matching the OS with no sense of compatibility problems started

    IS THERE ANOTHER OS THAT WORKS THERE... PLEASE EXPLAIN!

    Frustrated and angry consumers of products Microslop

    Dave R

    check out this link and see how it works for you.

    http://forums.techguy.org/networking/533210-solved-user-has-not-been.html

  • grant the role of service to service user service tenant: failed when you try to deploy VIO

    Hello

    I have problems when you try to deploy VIO with integration of ads.  I am able to successfully deploy Violence without AD as an authentication source.  However, when I try to deploy VIO with AD as the source of authentication right about 85%, I get an error in the /var/log/jarvis/ansible.log:

    > > 2016-04-14 17:29:11, 597 p = 354 u = jarvis |  TASK: [config-controller | create endpoint of keystone] *.

    > > 2016-04-14 17:29:12, p = 354 737 u = jarvis |  changed: [172.22.33.31]

    > > 2016-04-14 17:29:12, 738 p = 354 u = jarvis |  TASK: [config-controller | create tenant services] *.

    > > 2016-04-14 17:29:13, 714 p = 354 u = jarvis |  changed: [172.22.33.31]

    > > 2016-04-14 17:29:13, 715 p = 354 u = jarvis |  TASK: [config-controller: grant the role of service to service user tenant service] *.

    > > 2016-04-14 17:29:15, 152 p = 354 u = jarvis |  has failed: [172.22.33.31] = > {'impossible': true}

    > > 2016-04-14 17:29:15, 153 p = 354 u = jarvis |  MSG: exception: name

    > > 2016-04-14 17:29:15, 154 p = 354 u = jarvis |  FATAL: all hosts have already failed - abandonment

    I tried Googling this error and was brought to this thread: problem of Installation of VIO - status: Bootstrap failed controller node but he is actually getting an LDAP error that I'm not.

    This thread suggest you check the log of the key, but there is not keystone on my VIO Device directory:

    > > root@localhost:~# ls/var/log/keystone

    > > ls: cannot access/var/log/keystone: no such file or directory

    So I'm puzzled.

    This ended up being a bad configuration of the options of the AD.

  • System to grant to the user of the application views

    Hi all

    11.2.0.1

    Batch process Tha night encounter problem blocking where their generations report affected and delayed.

    I give this command operators, so that they will kill or stop the process that keeps the lock:

    SELECT TO_CHAR ("sysdate, ' HH24:MI:SS of MON-DD-YYYY"). ' The user '. S1. UserName | | » @'|| S1.machine | | "(SID = ' | s1.sid |)

    ') with the statement: ' | sqlt2.sql_text | |' if it blocks the SQL statement ' | S2. UserName | | » @'|| S2.machine |

    ' (SID ='|) S2.SID | |') Blocked-> SQL ' | sqlt1.sql_text AS blocking_status

    GV $ lock l1, Gv$ session s1, Gv$ lock Gv$ session s2, l2, Gv$ sqlt2, Gv sql $ sql sqlt1

    WHERE s1.sid = l1.sid

    AND s2.sid = l2.sid

    AND sqlt1.sql_id = s2.sql_id

    AND sqlt2.sql_id = s1.prev_sql_id

    AND l1. BLOCK = 1

    AND l2.request > 0

    AND l1.id1 = l2.id1

    AND l2.id2 = l2.id2;

    But this needs system views and you can not run the app user ID.

    On the security audit decision or without having violated, what I have to grant select to all system views accessed by this script to the user of the application, then create synonyms it 1 by 1?

    Or is it a one-time grant for all views of the system? So I is not need to type a plus creating synonyms so that I can't miss any?



    Thank you

    Petra k.

    f55237a7-2c38-4DB3-a7a3-1d77256f0730 wrote:

    Hi all

    11.2.0.1

    Process batch Tha night meets lock problem where their generations report interrupted.

    I give this command operators, so that they will kill or stop the process that keeps the lock:

    SELECT TO_CHAR ("sysdate, ' HH24:MI:SS of MON-DD-YYYY"). ' The user '. S1. UserName | | » @'|| S1.machine | | "(SID = ' | s1.sid |)

    ') with the statement: ' | sqlt2.sql_text | |' if it blocks the SQL statement ' | S2. UserName | | » @'|| S2.machine |

    ' (SID ='|) S2.SID | |') blocked SQL-> ' | sqlt1.sql_text AS blocking_status

    GV $ lock l1, Gv$ session s1, Gv$ lock Gv$ session s2, l2, Gv$ sqlt2, Gv sql $ sql sqlt1

    WHERE s1.sid = l1.sid

    AND s2.sid = l2.sid

    AND sqlt1.sql_id = s2.sql_id

    AND sqlt2.sql_id = s1.prev_sql_id

    AND l1. BLOCK = 1

    AND l2.request > 0

    AND l1.id1 = l2.id1

    AND l2.id2 = l2.id2;

    But this needs system views and you can not run the app user ID.

    In view of the security check or without having violated, what I give select all system views accessed by this script to the user of the application, and then create the names it 1 by 1?

    Or is it a one-time grant for all views of the system? So I no need to type one by one so that I can't miss any?

    Thank you

    Petra k.

    While approach posted will work subsequently, it's like making three left turns around the block;

    instead of making a single term of law.

    Place the SQL desired in a procedure (FIND_LOCKER) owned by the extremely privileged schema; then do as below

    GRANT EXECUTE ON FIND_LOCKER TO OPERATOR_USER;

  • GRANT SELECT on a table to the user / role changes for the tab last_DDL

    Hello

    Is grant select (or any private object) to the user/role a DDL statement?

    GRANT SELECT on a table to the user / role changes the last_DDL to the table.
    1 > is this expected behavior?
    2 > no way in which we can grant select on a table by another user, without changing the DDL? (for example create view).


    The test is performed:

    Prior to the issuance:


    OBJECT_NAME CREATED TIMESTAMP LAST_DDL_TIME OWNER
    ------- ---------------------- ---------- ------------- --------------------
    AR HZ_CUSTOMER_PROFILES 8 MAY 00 13 MARCH 13 2003-06 - 26:12:41:29



    Grant statement:
    GRANT SELECT ON "AR". "' HZ_CUSTOMER_PROFILES ' TO 'AR_VIEW ';

    Note: AR_VIEW is a role, I tried granting also directly to the user.


    After the grant:

    OBJECT_NAME CREATED TIMESTAMP LAST_DDL_TIME OWNER
    ------- ---------------------- ---------- ------------- --------------------
    AR HZ_CUSTOMER_PROFILES 8 MAY 00 21 MARCH 13 2003-06 - 26:12:41:29



    Old thread, discuss whether Grant is DDL or not, but no documented conclusions.
    ( Re: Grant, revoke is DDL and DCL? )

    Please help in the assessment above.

    -Best regards,.
    Mani

    It's the DOF.

    After all, this isn't DML, it implicitly committed and you cannot use it directly in PL/SQL: features of DDL. :-)

  • grant any constraint for the user

    Please help me how to grant all permissions to the user?

    SG2 wrote:
    Hi all

    My requirement is I want to give only the privileges of constraint on the user that I don't want to talk about any table name, is it possible?

    Thank you

    constraint related to tables, so I believe that you can do without the table name reference

  • How to grant a user (me) the DBA role?

    Hi all.

    I was wondering how you connect to the identifier of the database administrator.
    I've done there is a workspace on apex.oracle.com, and I thought as I did, I would have full access. However, I can't get the identifier of the database administrator. With the identifier of the database administrator, I mean the next screen: connect you to www.apex.oracle.com, go to the workshop of SQL, click utilities, and then click the database. What I see is a screen wonder a user name and password.

    All the info I found on the internet always refers to the local host APEX, whereas I only use the online version...

    I tried to use admin as username and admin as the password did not work. Even my own credentials do not work. I don't know how to create a user who is granted the DBA role. As far as I know, APEX I am registered as the APEX_PUBLIC_USER. How can I change this to my own account and grant me the role DBA?

    All I want is make a backup of the complete basis set, and be able to take a peek. Be able to backup is the most important part for me. I don't want an app, but really all of the backup database: all tables and their columns, with all of their corresponding lines filled with data. Everything.

    So please, if anyone knows how to give me the DBA role, tell. I use APEX 4.1.1.00.23, on www.apex.oracle.com.

    Thank you.

    You will never access DBA on apex.oracle.com. If you want to export, you will need to use the feature 'generate the DDL', and for your data, you can use the data workshop later. You can export your data from the table to a CSV (one for each table), and then import these data into your own database using a feature of loading data in TOAD sqldeveloper (or APEX).

  • Details of grant required for the user and schema

    Hello

    I have the Oracle - 10.2.0.4.0 version

    We figure A (many objects exist) and user B (no objects exist - acts as a user of the application to access objects in the other schema).

    I have listed below doubts.

    (1) I want to know the method to find the list of the users have access to the objects in A schema and privileges for schema objects A
    (2) I want to know the method to find the list of the subsidies granted for objects of schema to user B

    Have a look on the DBA_TAB_PRIVS view, then come back here with specific questions after you have tried to find what you need to know it.

  • Grant Select on sys.dba_role_priv to the user; error

    version 10204
    It's the user's request: Add: select sys.dba_role_priv to: ROLE vas_user;

    I was just wondering what I'm doing wrong? How to fix?

    SQL > grant Select on sys.dba_role_priv to vas_user;
    Grant Select on sys.dba_role_priv to vas_user
    *
    ERROR on line 1:
    ORA-00942: table or view does not exist

    I was just wondering what I'm doing wrong?

    incorrect spelling

    How to fix?

    Use the correct name

    SQL> desc dba_role_priv
    ERROR:
    ORA-04043: object dba_role_priv does not exist
    
    SQL> desc dba_role_privs
     Name                                                       Null?    Type
     ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- ------ ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
     GRANTEE                                                   VARCHAR2(30)
     GRANTED_ROLE                                                  NOT NULL VARCHAR2(30)
     ADMIN_OPTION                                                   VARCHAR2(3)
     DEFAULT_ROLE                                                   VARCHAR2(3)
    
  • ORA-01994: GRANT failed: failed to add the users to the public password file

    Snoussi,

    our applications 11.5.10.2 and db 9.2.0.6 whenever I'm in the process of grant dba privileges to rman user sys, I get the below error

    ORA-01994: GRANT failed: failed to add the users to the public password file

    I created the password file and I've changed remote_login_passwordfile = NONE for remote_login_passwordfile = EXCLUSIVE lock
    in initSID.ora then I bounced DB but its showing again.


    SQL > show the distance parameter

    VALUE OF TYPE NAME
    ------------------------------------ ----------- ------------------------------
    real chain of remote_archive_enable
    remote_dependencies_mode string TIMESTAMP
    remote_listener chain
    Remote_login_passwordfile string NONE
    REMOTE_OS_AUTHENT boolean FALSE
    remote_os_roles boolean FALSE
    SQL >

    Here is my information in initSID.ora file.

    ----------------------------------------------
    #############################################################################
    #
    # END OF THE CBO SETTINGS SECTION
    #
    #############################################################################


    #---FIN OF REQUIRED OPTIMIZER PARAMETERS-

    #
    # Client settings.
    #
    Remote_login_passwordfile = EXCLUSIVE lock
    #EMOTE_LOGIN_PASSWORDFILE = exclusive lock
    IFile=/U05/Oracle/visdb/9.2.0/DBS/VIS_linux2_ifile.ora
    [oracle@linux2 dbs] $

    Published by: HumanDBA on June 9, 2009 04:06

    Danny,

    Do you use a spfile to start the database? If Yes, then you must change this setting in the spfile so (issue "show the spfile parameter' to check).

    Kind regards
    Hussein

  • Cannot grant the privilege on the column the user through role?

    Hello:

    From what I read in the docs I should be able to create a role that has privileges to UPDATE a column in a table and then assign this role to a user, that should be able to update the column in the table. I get "insufficient privileges" when I try which, although it works as advertised if I book directly to the user. I read the docs wrong?

    WATCH session:
    CREATE TABLE "GAFF"."FOO2" 
    
       (    "F1" NUMBER, 
    
        "F2" NUMBER, 
    
        "F3" VARCHAR2(50), 
    
        "F4" NUMBER, 
    
         CONSTRAINT "FOO2_PK" PRIMARY KEY ("F1")
    
    /
    
    
    
    create role foo2_u_f2;
    
    
    
    grant update (f2) on foo2 to foo2_u_f2 ;
    
    
    
    grant select on gaff.foo2 to play ;
    
    
    
    grant foo2_u_f2 to play ;
    GAME session:
    update gaff.foo2 set f2 = 1 where f1 = 1
    ORA-01031: insufficient privileges

    Probably foo2_u_f2 role is not a default role to the user's game. Initially, when the user is created the default role is set to ALL. Later, it can be changed to NONE or set of roles. Log in as a game and question:

    select * from session_roles
    /
    

    I bet that you won't see any foo2_u_f2. Then the question:

    select granted_role,default_role from user_role_privs
    /
    

    This will give you a list of the user default set roles. Another question, you can:

    set role foo2_u_f2
    /
    

    This will allow the role of foo2_u_f2 in the current session. Or you can identify you as privileged user and issue AMENDED the USER default ROLE..., foo2_u_f2.

    SY.

  • How to add users to grant the W7 SP1 HPE telnet service?

    Hi all.

    I activated the server telnet and service in my new W7 SP1 HPE update. However, I have problems with the step of https://technet.microsoft.com/en-us/library/cc770895#BKMK_Anchor2 where he is said to run "mmc lusrmgr.msc. I get "local users and groups - this computer is running Windows 7 Home Premium. This Snapin cannot be used with this version of Windows. Message to manage the user accounts on this computer, use the tools in user accounts in Control Panel. ». I checked the user accounts of its control panel and don't see anything for telnet.

    If I'm stuck? Y at - it a telnet/SSH server of third parties to run on this Windows 7 SP1 HPE box so I can access the computer in text mode?

    Thank you in advance. :)

    You can run this command from a high command prompt:

    net localgroup TelnetClients AntDude / add

Maybe you are looking for