Revoke ROLE on the user table

Hi team,

I'm trying to revoke grant on the user table

The Sub statement gives error saying

[code]

REVOKE < role_nm > on < a.table_nm > to < b.user_nm >

Error: ORA 00990: missing or invalid privilege

[/ code]

But the following works fine

[code]

REVOKE ALL ON < a.table_nm > to < b.user_nm >

[/ code]

Please suggest me to revoke the grant on the user table

Smile says:

[code]

REVOKE on of

Error: ORA-00990: missing or invalid privilege

[/ code]

A GRANT on table is assigned to a ROLE and that ROLE is assigned to the USER. So when you want to REVOKE a specific GRANT what is assigned to a user by ROLE. You must REVOKE any ROLE to the user or REVOKE the GRANTING OF THE ROLE.

Tags: Database

Similar Questions

  • Assignment of roles to the user when creating the user

    Hi all

    I gave a roll deposited (< dsp:input bean = "ProfileFormHandler.value.roles.role" maxsize = "30" size = "30" type = "text" / > on the registration page.) After registration, each field in db except role (table dps_role).
    Pls let me know what I am doing wrong.

    Thank you

    You should not assign roles to the user as 'ProfileFormHandler.value.roles.role' of 's profile. You can link formhandler property to which you can pass the name or id of the role that you want to assign role assignment must always route through safety ATG API in order to properly update the mappings of Homeland Security. Because of these dependencies, you should not try the role of simply call profile.setPropertyValue ('roles',...) The code cannot fail this way, but if you assign the role in this way then it may not work as expected when checking for role based privileges. Here's one possible way to do it:

    1. in your file properties formhandler declare a dependency on the directory of the default user, which by default points to the profile database:

    userDirectory = / atg/userprofiling/ProfileUserDirectory

    So, in the form Manager, you declare corresponding setUserDirectory() and getUserDirectory().

    2 then in the formhandler, get the DirectoryPrincipal objects associated with the user profile and the role you want to assign and then assign the role to the user:

    import atg.userdirectory.UserDirectory;
    import atg.userdirectory.DirectoryPrincipal;
    import atg.userdirectory.User;
    import atg.userdirectory.Role;
    import atg.userdirectory.DirectoryModificationException;
    
    import java.util.Collection;
    import java.util.Iterator;
    
    ..
    ..
    
    private boolean assignRoleToUser(String roleName, String userId) {
    
      UserDirectory userDirectory = getUserDirectory();
      DirectoryPrincipal userPrincipal = userDirectory.findUserByPrimaryKey(userId);
      DirectoryPrincipal rolePrincipal = userDirectory.getRoleByPath(roleName);
    
      User user = (User)userPrincipal;
    
      Collection collection = userDirectory.getRoles();
    
      boolean status = false;
    
      Iterator iter = collection.iterator();
      while(iter.hasNext())
      {
        Object obj = iter.next();
        if(obj instanceof Role) {
          Role role = (Role)obj;
          if(roleName.equals( role.getName() ) && user!=null) {
            try {
              status = user.assignRole(role);    //will return true if the role was added otherwise false
            }
            catch (DirectoryModificationException e) {
           //handle exception
            }
            break;
          }
        }
      }
      return status;
    }
    

    In the code above 'roleName' parameter is the name of the role to be assigned to the profile with the id as "userId". If you want to do the role assignment when creating the user, then you can do the things above in postCreateUser() so that you can get the Principal associated with the profile. For more information about the interfaces and classes used here, you can refer to the documentation of the API of the ATG.

    http://docs.Oracle.com/CD/E26180_01/platform.94/APIDoc/ATG/userDirectory/package-summary.html

  • What is the role that the user points?

    What is the role that the user points? Who can tell me

    Reoddy

    You will find the information here:

    http://en.community.Dell.com/Dell-groups/new-to-community/f/3511/t/19566154

    Bev.

  • On the role of the user of the VI

    Hello!

    Role of the user of the vi, I get a problem in get by powercli. I can get the information of account by the Get-VMHostAccount cmdlet

    but he did not provide the role information, so, how can I get role of vi and vi user mapping information?

    Other: I know something in the 'Description' filed by Get-VMHostAccount, and sometimes he shows me that the user is an "administrator."

    But how to know exactly what the "some user" user as a role of 'administrator '?

    Thanks in advance!

    The Get-VMHostAccount cmdlet returns the accounts defined in the COS of the ESX Server.

    The accounts used in permissions on entities of vCenter are local users on the server vCenter or AD accounst of the domain to which belongs the vCenter server.

    To see the accounts, look at the main property returned by the Get-VIPermission cmdlet.

    Get-VIPermission
    

    ____________

    Blog: LucD notes

    Twitter: lucd22

  • enumerate the user tables in oracle 9i database

    Hello

    IM new bi to database oracle,...

    Anyone give me the command to enumerate the user tables in the oracle 9i database. ??.

    IM using linux redhat 4.0... and oracle 9i database...

    Thank you
    Vasanth...

    Hello

    Select sesion.sid,
    sesion. Serial #.
    sesion. UserName,
    sesion.sql_id,
    sesion.sql_child_number,
    optimizer_mode,
    hash_value,
    address,
    sql_text
    v $ sqlarea sqlarea, sesion v$ session
    where sesion.sql_hash_value = sqlarea.hash_value
    and sesion.sql_address = sqlarea.address
    and sesion.username is not null;

    -Pavan Kumar N

  • Change the role of the user once authenticated LDAP authentication

    Hi forum,

    I do know that if it is possible, I have not found a solution so far

    I have a simple web application with LDAP authentication. We would like to use LDAP for authentication and store the information of user roles in the database. After authentication, LDAP assigns the role of "guest" to the user and the home page (the only page available for this role) is displayed.

    In this home page, the user must select a profile (the same user can have multiple profiles) in a list retrieved from the database. The profile of each user has an associated role. After selection, we want to change the role of the user "guest" to the role associated with the selected profile.

    I don't think that implementation of a custom plug-in fits my needs because the role assignment requires the participation of the user.

    Any suggestions?

    Thanks in advance,

    Tatiana.

    Hello

    Well, the problem is that you need to change the subject of the user authenticated, who's a JAAS thing to do. The only way this can work is indeed use a custom LoginModule and then access the user object to add a security principal that represents the role you want to add.

    Frank

  • Problem with the role and the user; the user cannot see the table

    Hello forum,.

    I created a role:

    Enr_service CREATE ROLE;
    GRANT CONNECT TO enr_service;
    GRANT ALL ON tenants TO enr_service;
    GRANT ALL ON enr_service TO user;
    GRANT ALL ON sportsmen TO enr_service;
    GRANT SELECT ON test TO enr_service;

    and also a user:

    CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED on USERS;
    GRANT enr_service to ENR1;
    ALTER USER ENR1 by DEFAULT ROLE enr_service;
    ALTER USER DEFAULT TABLESPACE USERS ENR1;

    I can connect to the database with this user, but when I try to query a table that has been granted access I get an error message:

    SELECT * ATHLETES;
    ORA-00942: table or view does not exist

    I don't see what I did wrong. Any help is appreciated.

    Sebastian

    user2019788 wrote:
    Hello forum,.

    I created a role:

    Enr_service CREATE ROLE;
    GRANT CONNECT TO enr_service;
    GRANT ALL ON tenants TO enr_service;
    GRANT ALL ON enr_service TO user;
    GRANT ALL ON sportsmen TO enr_service;
    GRANT SELECT ON test TO enr_service;

    and also a user:

    CREATE USER ENR1 IDENTIFIED BY password QUOTA UNLIMITED on USERS;
    GRANT enr_service to ENR1;
    ALTER USER ENR1 by DEFAULT ROLE enr_service;
    ALTER USER DEFAULT TABLESPACE USERS ENR1;

    I can connect to the database with this user, but when I try to query a table that has been granted access I get an error message:

    SELECT * ATHLETES;
    ORA-00942: table or view does not exist

    I don't see what I did wrong. Any help is appreciated.

    Sebastian

    This is probably because ENR1 isn't any table named ATHLETES and he did not qualify the name of the table with the schema name...

  • Is it possible to have multiple tables of contents in webhelp output that can be chosen according to the role of the user/client?

    Our product is composed of several modules, for example, the modules-1 thru 8 - module.  We sold all 8 modules or some of them - in different combinations to different customers. I've developed help online in the same direction, that is, in the modules, help-1 to ' help-8. Each help module has its own table of contents.  According to the requirement for a particular client, I integrate the required modules, build the main table of contents using the mini-table of existing materials for each assistance, generate the sequence to browse and compile. This has been my routine until now.

    Now, the product development team would like to automate this process: for example, they want to give me the help of output for the 8 modules in integrated form, as well as tables of contents separate for a combination of different modules for different customers like, assistance, modules 1 to 8, 1-2-3, 1-5-6, etc..  They feel the moment this TOC fell in the output of aid, it should automatically start functioning - without compiling!

    I explained the process used to develop Robohelp projects, how TOCs are built, etc., but they want to know if there is a work around, so that when a customer asks for modules 3, 7 and 8, immediately, they can go down the table of contents (for 3-7-8) at the end of the project, and it should work - without compiling , or anything of that kind. I tried Google and Adobe Forum, but couldn't find something suitable.

    Do you have a solution? A solution to this problem?

    What you need is merged help.

    You generate a parent and all the child projects. You always install the parent and then any child projects, you need. OCD, search and index adjusts automatically. See the pages on my site.

    Note, however, that many people take another view for the development of your product. See all assistance and people then view information about something and realize that they need!

    See www.grainge.org for creating tips and RoboHelp

    @petergrainge

  • DBA role to the user OGGADM

    Hello
    I implement Oracle GoldenGate to repplication one-way between two databases Oracle 11 GR 2. I'm following this OBE tutorial: "Oracle GoldenGate on Linux: two-way replication of Oracle 11 GR 2 to Oracle 11 GR 2.
    I want to know if it is mandatory to assign the role DBA to oggadm user. The problem is that I'll set up a topology to many-to-one and some of the source databases are external to my environment, so we will not be allowed to assign the role dba for these databases.
    Thank you

    You can grant DBA user of GoldenGate. Treat the user as you would for any other account which has the role. Alternatively, just follow what is indicated in table 4-1 (the most recent releases, table 1 or 2 in some old documents) in the installation guide.

    Kind of been lost on directions - one statement said one-way, but you use the bidirectional tutorial.

  • Role of the user of "SQL Developer" rESTful services

    Hello

    I am following the tutorial ""REST Data Services Installation, Configuration and Development Guide " "

    But it seems that I can't create a user with the role of "Developer SQL". I am running the below command, I specify the password. Then called the credentials file is created.

    But I can not yet connect SQL Developer using development REST with this credential.

    java-jar ords.war user test_developer "SQL Developer"


    There is no such role when I manually search for in the database. How can I create it?


    Maybe I should create a thread separate, but my second question is, why I need for RESTful to work services have both apex_al.xml and apex_rt.xml conf files?

    For what I understand, it is not necessary to have installed to use the services of APEX RESTful?

    dmdamiyo wrote:

    I am following the tutorial 'REST Data Services Installation, Configuration and Development Guide.

    But it seems that I can't create a user with the role of "Developer SQL". I am running the below command, I specify the password. Then called the credentials file is created.

    But I can not yet connect SQL Developer using development REST with this credential.

    java-jar ords.war user test_developer "SQL Developer"

    There is no such role when I manually search for in the database. How can I create it?

    As mentioned by rwendel is not an Oracle database user / role you create, but it is specific to ADR.

    You can share the link in the documentation where you follow this step?

    If you want to install ADR using Oracle SQL Developer and use the various functions of the ADR 3.0, you can watch the following for quick information on ADR 3.0 sessions:

    Maybe I should create a thread separate, but my second question is, why I need for RESTful to work services have both apex_al.xml and apex_rt.xml conf files?

    For what I understand, it is not necessary to have installed to use the services of APEX RESTful?

    Yes, Oracle APEX is not necessary for the accommodation of RESTful Web Services with ADR 3.0, it was necessary in pre ADR 3.0 versions.

    Reference:

    The 'apex_al.xml' is the configuration user DB APEX_LISTENER and 'apex_rt.xml' matches the configuration of the APEX_REST_PUBLIC_USER DB user. You don't have to configure these users (if you do not want to use Oracle APEX). These users are necessary only if you want to use the RESTful Services with Oracle APEX.

    Reference: http://docs.oracle.com/cd/E56351_01/doc.30/e56293/config_file.htm#BABHAJDE

    If you do not want to use Oracle APEX, then just configure the users ORDS_PUBLIC_USER and ORDS_METADATA.

    Reference: http://docs.oracle.com/cd/E56351_01/doc.30/e56293/install.htm#CHDGACJC

    Kind regards

    Kiran

  • What a privilege it must compare the roles and the users of the model

    Hi all

    I want to compare the roles that I created in the model and the roles I have in the database,
    I want to know if is posible to compare objects that you have granted to roles between the model and the database.


    the problem is perhaps because the user I selected for the connection to the database has no privilege enough,
    could you tell me, please
    what privileges needs of the user of the connection in order to compare with the roles, packages and other objects in the physical model?

    Thanks in advance

    Hello

    I'm afraid, it is not possible to compare users, roles, or packages at the moment.

    David

  • Get the information of the user to the users table

    Basically, what I'm trying to do is a helpdesk application.

    When a user trys to submit a ticket. It will prompt you with a user authentication screen, this authentication is based on a DATABASE of the USERS (which has all the details about the users, including the password). Once the authentication of the user is posted it will be redirected to the form of recording the show. This form was username, userid, useremail text field. All these form of text fields be pre-filled with the detaiils user appropriate to the user who is logged.

    Please can someone help me how to do it.

    Thank you
    Hary

    Hello

    Apex built in the variable to contain the username APP_USER
    http://download.Oracle.com/docs/CD/E14373_01/AppDev.32/e11838/concept.htm#sthref214

    Application of calculation should be something like

    SELECT user_id FROM my_user_table WHERE user_name = :APP_USER
    

    Replace the column and table names accordingly (user_id, my_user_table and user_name)

    Kind regards
    Jari

  • Revoke roles in the management of Oracle users

    Hi people,
    I have a question to Management (UMX) Oracle user.
    Is there an API to revoke the UMX user roles. Or can we write our custom code for revoke?

    All thought expertise or how managing the current implementations?

    Thank you
    Jannat

    Hello

    Please see (Note: 373369.1 - how to assign and revoke the role and responsibility of a user using the standard API?).

    Kind regards
    Hussein

  • Cannot grant the privilege on the column the user through role?

    Hello:

    From what I read in the docs I should be able to create a role that has privileges to UPDATE a column in a table and then assign this role to a user, that should be able to update the column in the table. I get "insufficient privileges" when I try which, although it works as advertised if I book directly to the user. I read the docs wrong?

    WATCH session:
    CREATE TABLE "GAFF"."FOO2" 
    
       (    "F1" NUMBER, 
    
        "F2" NUMBER, 
    
        "F3" VARCHAR2(50), 
    
        "F4" NUMBER, 
    
         CONSTRAINT "FOO2_PK" PRIMARY KEY ("F1")
    
    /
    
    
    
    create role foo2_u_f2;
    
    
    
    grant update (f2) on foo2 to foo2_u_f2 ;
    
    
    
    grant select on gaff.foo2 to play ;
    
    
    
    grant foo2_u_f2 to play ;
    GAME session:
    update gaff.foo2 set f2 = 1 where f1 = 1
    ORA-01031: insufficient privileges

    Probably foo2_u_f2 role is not a default role to the user's game. Initially, when the user is created the default role is set to ALL. Later, it can be changed to NONE or set of roles. Log in as a game and question:

    select * from session_roles
    /
    

    I bet that you won't see any foo2_u_f2. Then the question:

    select granted_role,default_role from user_role_privs
    /
    

    This will give you a list of the user default set roles. Another question, you can:

    set role foo2_u_f2
    /
    

    This will allow the role of foo2_u_f2 in the current session. Or you can identify you as privileged user and issue AMENDED the USER default ROLE..., foo2_u_f2.

    SY.

  • the query - 2 tables, the user id help

    Here's my situation...

    have 2 tables.

    Table 1 = users
    Table 2 projects =


    IM selection of several columns in table 2 as project name, project id, etc...
    Table 2 contains several columns that store user IDs,
    I want to get the user name in table 1 for each id in table 2 (they will be different from the ID in table 2)

    so... example...

    Select a.projectname, a.projectid, a.user_id_1, a.user_id2, a.user_id2, b.user (each will be a different user id)
    projects a, b of users
    where user_id_1 = b.user_id (that takes care of user_id_1)
    but now how can I get the username for the other user id?

    Jay wrote:
    CREATE TABLE 'USERS '.
    (
    USER_ID VARCHAR2 (15 BYTE) NOT NULL,
    VARCHAR2 (150 BYTE) USER_NAME
    );

    CREATE TABLE 'PROJECTS '.
    (
    PROJECT_NAME VARCHAR2 (500 BYTE),
    VARCHAR2 (15 BYTE) PROJECT,
    CREATED_BY_USER_ID VARCHAR2 (15 BYTE),
    UPDATED_BY_USER_ID VARCHAR2 (15 BYTE),
    MODIFIED_BY_USER_ID VARCHAR2 (15 BYTE)
    );

    Paul - there is also a table that is linked, but this always brings the same problem, I have I need to pull in users 'NAME' for each of the id

    IM pullilng data of projects, but it also includes user_ids, and I like to shoot in the user_names of the users table for each user_id of the projects table.
    If the final result should be

    NAME OF THE PROJECT. PROJECT | USER_ID_1 | USER_ID_2 | USER_ID_3
    test project | 12345 | Bob jones | Suzy smith | Steve johnson

    Published by: Jay on March 6, 2012 08:23

    Ah, now that we see the design of the table, the more sensible multiple user ID, however, what is the difference between "updated by" and "modified by"?

    select p.project_name
    ,        p.project_id
    ,        uc.user_name
    ,        uu.user_name
    ,        um.user_name
    from projects p
    ,      users uc
    ,      users uu
    ,      users um
    where uc.userid = p.createed_by_user_id
    and     uu.userid = p.updated_by
    and     um.userid = p.modified_by ...
    

Maybe you are looking for

  • How to manually upwards Apple Mail? What files are essential?

    Now, I need to back up my Mac mini on a combination of the key USB and DVD. What Apple Mail files are essential to back up? How can I find them? I can compress the ~ library > Mail folder? Mail downloads? I lost the mail before and I don't want to lo

  • My laptop is not connecting wireless. It seems that the map network drive is missing.

    My wi fi driver seems to have disappeared my laptop doesn't, t connect to wifi when I looked to solve this it seems that my driver is missing

  • HP All In One Printer 5520: invalid checksum

    Buy a new MAC for Christmas.  Went online and downloaded the drivers for my 5520.  When I go to open the software on MAC, it does not open and gives me a message "invalid checksum".  Any ideas?

  • How to get the key to RIM

    Hi, am new to development. I received the debugging token (bbidtoken.csk). Please someone help how to get the keys to the RIM (.csj key). Give me the link to register for the key LSB. Thank you...

  • IPS two devices with the same UUID

    I have two Sourcefire\Cisco IPS sensors deployed and which have been identified as having the same UUID. As you can imagine, this is causing all sorts of questions. Has he never been seen before, and if so is there a solution? -------------------[ SE