Revoke roles in the management of Oracle users

Similar Questions

• How to disable the password field in the management of Oracle users

  Hello
  
  How to customize the field password on the user - define the uneditable form? I tried customizing the forms on this field, but it did not work. Can we have an idea if this field can be customized at all
  
  Thank you in advance!

  See if it works for you. I tested and it's ok

  Raises the event - a TIME NEW POINT INSTANCE
  Trigger - USER object. USER_PASSWORD
  The two process - mode

  Action type - property
  Object Type - point
  Target - USER object. USER_PASSWORD
  Name of the property - ACTIVE (APPLICATIONS COVER)
  -False

  Save and open/close both forms. In the modes entry or query, whenever the user access the password field, it is disabled and cannot be changed.

  I hope that it works as expected. Just play :-)

• Revoke ROLE on the user table

  Hi team,

  I'm trying to revoke grant on the user table

  The Sub statement gives error saying

  [code]

  REVOKE < role_nm > on < a.table_nm > to < b.user_nm >

  Error: ORA 00990: missing or invalid privilege

  [/ code]

  But the following works fine

  [code]

  REVOKE ALL ON < a.table_nm > to < b.user_nm >

  [/ code]

  Please suggest me to revoke the grant on the user table

  Smile says:

  [code]

  REVOKE on of

  Error: ORA-00990: missing or invalid privilege

  [/ code]

  A GRANT on table is assigned to a ROLE and that ROLE is assigned to the USER. So when you want to REVOKE a specific GRANT what is assigned to a user by ROLE. You must REVOKE any ROLE to the user or REVOKE the GRANTING OF THE ROLE.

• Role of the Manager of GoldenGate

  What is the role of the GoldenGate Manager regarding the excerpt/replicat process?  If the Manager/extract/replicate all run, can I stop the Manager? Will be the excerpt/replicat continues to run or it will abend?   If the Manager does not work, can I start manually extract replicat of OS command line?

  Yes that's right, E/R built resilience to continue running and to reproduce even if the Manager is stopped, so this isn't a single point of failure. However, if the Manager does not work then some actions which only Manager to do cannot be done, for example, purge files path or start a dynamic process.

• Difference between Oracle user and security

  Hi all
  
  Can someone give me the difference between--> Oracle--> user and security-> system oracle apps R12 resp. administrator user.
  
  
  Thank you
  Mahesh.
  
  Published by: 991854 on March 12, 2013 01:49

  Can someone give me the difference between--> Oracle--> user and security-> oracle apps R12 resp. system administrator user.

  Security > Oracle > register:

  Use this window to register a username with Oracle E-Business Suite ORACLE. An ORACLE user name grants privileges to access the ORACLE database
  http://docs.Oracle.com/CD/E18727_01/doc.121/e12893/T174296T174305.htm

  Security > Oracle > DataSet:

  A data group defines the mapping between the products Oracle E-Business Suite and ORACLE database ID. A data group determines which accounts of liability forms, concurrent programs and reports Oracle database to connect to. see: Definition of data groups, the Oracle eBusiness Suite system administrator Guide - Configuration.
  http://docs.Oracle.com/CD/E18727_01/doc.121/e12843/T156458T156461.htm

  Security > user > define:

  This window allows to set user Oracle E-Business Suite. This user is an authorized user of Oracle E-Business Suite and is identified by a user name.
  http://docs.Oracle.com/CD/E18727_01/doc.121/e12843/T156458T156461.htm

  Thank you
  Hussein

• Can't remove the Manager field in AD by IOM 9.1

  Hello
  I'm removing the Manager for a user in the AD profile without changing the Manager ID in the profile of the IOM. I get error when I try to change the attribute Manager replacing a string NULL below.
  
  LDAP: code error 21-00000057: LdapErr: IDDM-OC090B8A, comment: error in the conversion of attribute operation, data 0, v1db1)
  
  
  I get the same error, even if I'm changing the Manager field in AD without changing the Manager field in the IOM.
  
  I try with the code below.
  
  BasicAttributes a = new BasicAttributes();
  at.put("Manager","");
  context.modifyAttribute(UserDN,2,at);
  
  What could be the reason for this error? Please help guys.
  
  Published by: User_OIM on December 27, 2012 19:06

  Create so first BasicAttribute object and then pass it inside the method could

  BasicAttributes a = new BasicAttributes();
  BasicAttribute ba = new BasicAttribute("manager");
  at.put (BA);
  context.modifyAttribute(UserDN,3,at);

• Roles really simplify the management of users?

  I am trying to establish a role where I can add users to become members of the role to execute select statements on another scheme of.
  
  I cut the code to generate the "Grant Select on table_xxx to < new_role >" and run it. The 1600 various odd given that all appear on the new role. I give membership to a user of vanilla with nothing except create session to this role. And the user can select count (*) by means of a simple test.
  
  However, if I directly grant the same access to a table, the user can make a selection in the schema? What gives.
  
  Can you please explain what is happening here or help with what I'm missing here. See you soon.
  
  
  PS: If the granting of 1600 odd selects (for each of the objects) for EACH user is the answer, why anyone would use roles? Still reeling from the discovery that after 11 iteration of Oracle, there are still NO grant select on < schema > < user >.

  You need to activate your role before you start using it.
  Run this query and check:
  Select * from session_roles;

  If the output of the above query is 'no rows selected', this means that you don't have any active role.

  You have two options in this case:
  (1) role play OR
  (2) Alter user role default all;

• Managing roles using the solution of the OIM/OAM/OID

  Dear members

  I am faced with confusion while providing the solution about the OAM and OID.

  We have the portal WC system where authentication solution implemented using OAM 11 g. We expect authentication based on roles with the help of OID/IOM.

  I hear, by authentication based on roles, we're essentially the user roles will find in these roles. So they have will go through SSO system and their landing page will be the same. But the controls and links will be displayed according to their role.

  We do not use oracle role manager then manage it using OID.

  Is there a possible solution. Please help me its urgent.

  Thanks in advance.

  
  

  Concerning

  Arun Kumar Singh
  

  Hi Arun,

  In OAM, you can define authorization policies that allow or deny access to resources based on a value of attribute (of the logged in user). For example, you might allow access to the url/admin only to users who have a value of 'Administrator' in an attribute. Another approach is simply to set the attribute as a Variable for header (this is also defined in an OAM authorization policy) so that it is passed to the receiving application, which can then query the value of the attribute and take appropriate action.

  In these cases, OAM is only using the values of the attribute or send them to another application. To manage the values (put them properly for users/applications etc.) you would use a tool like the IOM to ensure that they are properly sized.

  Kind regards

  Colin

• Assignment of roles to the user when creating the user

  Hi all
  
  I gave a roll deposited (< dsp:input bean = "ProfileFormHandler.value.roles.role" maxsize = "30" size = "30" type = "text" / > on the registration page.) After registration, each field in db except role (table dps_role).
  Pls let me know what I am doing wrong.
  
  Thank you

  You should not assign roles to the user as 'ProfileFormHandler.value.roles.role' of 's profile. You can link formhandler property to which you can pass the name or id of the role that you want to assign role assignment must always route through safety ATG API in order to properly update the mappings of Homeland Security. Because of these dependencies, you should not try the role of simply call profile.setPropertyValue ('roles',...) The code cannot fail this way, but if you assign the role in this way then it may not work as expected when checking for role based privileges. Here's one possible way to do it:

  1. in your file properties formhandler declare a dependency on the directory of the default user, which by default points to the profile database:

  userDirectory = / atg/userprofiling/ProfileUserDirectory

  So, in the form Manager, you declare corresponding setUserDirectory() and getUserDirectory().

  2 then in the formhandler, get the DirectoryPrincipal objects associated with the user profile and the role you want to assign and then assign the role to the user:

  import atg.userdirectory.UserDirectory;
  import atg.userdirectory.DirectoryPrincipal;
  import atg.userdirectory.User;
  import atg.userdirectory.Role;
  import atg.userdirectory.DirectoryModificationException;
  
  import java.util.Collection;
  import java.util.Iterator;
  
  ..
  ..
  
  private boolean assignRoleToUser(String roleName, String userId) {
  
    UserDirectory userDirectory = getUserDirectory();
    DirectoryPrincipal userPrincipal = userDirectory.findUserByPrimaryKey(userId);
    DirectoryPrincipal rolePrincipal = userDirectory.getRoleByPath(roleName);
  
    User user = (User)userPrincipal;
  
    Collection collection = userDirectory.getRoles();
  
    boolean status = false;
  
    Iterator iter = collection.iterator();
    while(iter.hasNext())
    {
      Object obj = iter.next();
      if(obj instanceof Role) {
        Role role = (Role)obj;
        if(roleName.equals( role.getName() ) && user!=null) {
          try {
            status = user.assignRole(role);    //will return true if the role was added otherwise false
          }
          catch (DirectoryModificationException e) {
         //handle exception
          }
          break;
        }
      }
    }
    return status;
  }
  

  In the code above 'roleName' parameter is the name of the role to be assigned to the profile with the id as "userId". If you want to do the role assignment when creating the user, then you can do the things above in postCreateUser() so that you can get the Principal associated with the profile. For more information about the interfaces and classes used here, you can refer to the documentation of the API of the ATG.

  http://docs.Oracle.com/CD/E26180_01/platform.94/APIDoc/ATG/userDirectory/package-summary.html

• Roles and responsibilities of dba oracle in the development team

  What should be the role and responsibilities of dba oracle in the development team?
  
  Application dba should have identification information of the oracle db box on user?

  Hi, working as a Application DBA as production s/n, while the resolution of problem ALS would not apply to them. Apart from this change in the pressure of the team will be there.

  These are points to remember.
  Test Db creation for the environmental testing,
  Replication of schema of POC
  replication of the DB for the installation of the interface.
  User, space management.
  Roles and security management
  Space of prediction - this will be useful when you estimate for storage
  you will need to give application implemented for the Production DBA with correct specification.
  store schema changes
  Ensure that shas good script to provide the DBA of Production team.
  Deployment of the application.
  performance optimization...

  All the environment memory /CPU statistisc need to check at regular intervals. If issues to escalte the INFRASTRUCTURE team

  HTC

  Tippu

• ASM and SCAN listener running of the Oracle user not user network

  Hi all

  Greetings for the day!

  In one of my new customer environment, I see that ASM and SCAN are running oracle user not user network, although the ORACLE_HOME is on the grid software. I read somewhere that we should run ASM and SCAN from grid not Oracle. Please let me know if I'm right and if there are consequences of the performer of the Oracle user.

  OS: Red Hat Enterprise Linux Server 6.5 (Santiago) 64-bit release

  Oracle RDBMS: 11204

  Oracle GI: 11204

  CAR Info: 2 node cluster.

  Thank you very much.

  AbbDBA

  The important word is expected here. It is suggested that 11.2, that the separation of roles, a non-oracle account must be used for the GI. But this is not essential, and certainly not wrong to use Oracle db and IM account as long as you do not use ASM according to security features. So nothing to worry about. You're good.

  Aman...

• Another user has modified the line containing oracle.jbo.Key primary key

  Hello

  In jdev 12 c

  I have a jsf page in a BTF, and there is a display of master(A:readonly table)-detail(B1:readonly table)-detail(B2:editable form) this page

  The (readonly table) B1 and B2 (editable form) are created on the same data control. There is no other layout compicated or functions on this page.

  The B2 (editable form) was based on a VO whose id is a type of DBSequence, and the new value has been created by a database trigger.

  I put

  All the columns that are updated by a database trigger or a PL/SQL call, are enabled for "Refersh on Insert" (for the case of the insertion) or "Refresh update" (for the case of update) or both in the entity object xml file.

  But when I submit/validate the page (form B2), the error msg 'another user has changed the line containing oracle.jbo.Key primary key' was always held randonly.

  And after the error msg, I can commit the data successfully by press the button validate again.

  How can I solve this problem?

  Thank you.

  The problem is that you use the pl/sql code. It is run out of the box. When a change is made in a row in this way, the framework removes upward, neither knowing that the change was done rightly and throws an error message.

  The code (which I copied from the other thread for reference) intercepts the error and re executs the lock in the case of the specific error.

  /*** customizing locking management:

  * Because attribute values can change 'outside' ADF standard life cycle,

  * when optimistic locking executes, the exception "Another User Changed the Row" is thrown.

  * In this case, we execute locking again, ignoring the exception

  */

  public void lock()

  {

  try

  {

    super.lock();

  } catch (oracle.jbo.RowInconsistentException e)

  {

    if (e.getErrorCode().equals("25014"))

    {

    super.lock();

    }

    else throw e;

  }

  }

  


  Timo

• User and role are the object?

  Dear all,

  1. There are many object as a TABLE, INDEX, VIEW...

  We can change to help change the ddl statement.

  So, can we say user is also a database object or not.

  because we can change the user using ddl statement and corresponding information stored in the data dictionary.

  2. we know that ALTER is a privilege of the object, and we can also change the DBA user. then we can say user is an object?

  3 is an object?

  Thanks in advance,

  Alain Coppey.

  1. There are many object as a TABLE, INDEX, VIEW...

  We can change to help change the ddl statement.

  So, can we say user is also a database object or not.

  because we can change the user using ddl statement and corresponding information stored in the data dictionary.

  2. we know that ALTER is a privilege of the object, and we can also change the DBA user. then we can say user is an object?

  3 is an object?

  Yes - users and roles are objects. But they are SYSTEM objects and not contained in a schema.

  See the section 'Introduction to schema objects' Oracle documentation

  http://docs.Oracle.com/CD/B28359_01/server.111/b28318/schema.htm#i22627

  The first section lists the schema objects - objects belonged to a schema

  The following section lists the system objects, or non-schema,

  Other types of objects are also stored in the database and can be created and manipulated with SQL, but are not contained in a schema:

  • Contexts
  • Directories
  • Settings files ( PFILE s) and server parameter files ( SPFILE s)
  • Profiles of school boards
  • Roles
  • Rollback segments
  • Storage spaces
  • Users

  You won't find the schema objects not listed in the views that display information of schema object, but there are other views system for them.

  So if it is an "interview" questions answers just YES and refer them to this link above. Or you can use this link for the 'sql elements' doc section if you prefer:

  http://docs.Oracle.com/CD/E11882_01/server.112/e41084/sql_elements007.htm

  Schema objects

  Other types of objects are also stored in the database and can be created and manipulated with SQL, but are not contained in a schema:

  Contexts

  Directories

  Editions

  Restore points

  Roles

  Rollback segments

  Storage spaces

  Users

  In this reference, each object type is described in the Chapter 10 , Chapter 19, in the section dedicated to the statement that creates the database object. These statements begin with the keyword CREATE . For example, for the definition of a cluster, see CREATE CLUSTER.

  In this link, unlike the other one, Oracle uses explicitly the terms "run things" and "objects" by referring to the items in the list above.

  A simple NET search for "objects nonschema oracle 11g" returns this link as the first result.

  The documentation is your friend! Some info may be harder to find, but the docs usually include information for ALL Oracle basic terms and functionality.

• What is this error represents "another user has changed the line containing oracle.jbo.Key [21 primary key]."

  Mr President.

  What is this error represents "another user has changed the line containing oracle.jbo.Key [21 primary key]."

  Concerning

  You get this exception quite often when you have a business in PL SQL layer, but you can safely ignore (suppress) it by substituting the lock() method in all implementation of your entity classes.

  /*** customizing locking management: 
  * Because attribute values can change 'outside' ADF standard life cycle, 
  * when optimistic locking executes, the exception "Another User Changed the Row" is thrown. 
  * In this case, we execute locking again, ignoring the exception 
  */ 
  public void lock() 
  { 
   try 
   { 
    super.lock(); 
   } catch (oracle.jbo.RowInconsistentException e) 
   { 
    if (e.getErrorCode().equals("25014")) 
    { 
    super.lock(); 
    } 
    else throw e; 
   } 
  }
  

• What is the difference between the role of support and the user role in the business group?

  I know there are a few differences between the role of support and the user role in the business as business group elements and Management group

  editable settings . But I can't find any document that introduces more precisely what they can do, what they can't.

  Are there any articles or documents or other means that can tell the specific differences between the Director, support and user group?

  If you have not taken a glance at this map permissions by GrantOrchard you should. It is very useful to know what permissions each user role. The big difference between the role of support and the user is that the user can only do things for themselves and user support can do things on behalf of other users. There is nothing quite as granular as you specified.