Role permissions for the same object more

Hello everyone,

I work in a large company with lots of data and Oracle DB base, specifically

the management of the security services account (accounts, roles, privileges, etc...).

In a few DB, we have a role named RO ALFA READ, with grant select on table TABLE_32.

The ROLE of ALPHA, or better, the ROLE ALFA users grant specifically also in the array of objects.

This is the final situation:

SQL > SELECT * FROM DBA_ROLE_PRIVS WHERE DEALER = "TIZIO";

DEALER GRANTED_ROLE SMA DEF

------------------------------ ------------------------------ --- ---

TIZIO CONNECT YES

TIZIO RESOURCE NO YES

TIZIO                          DBA                            NO  YES

TIZIO SELECT_CATALOG_ROLE NO YES

TIZIO AQ_ADMINISTRATOR_ROLE NO YES

TIZIO RO_ALFA_READ NO YES

SQL > c.role.tab

1 * SELECT * FROM DBA_tab_PRIVS WHERE DEALER = "TIZIO".

SQL > r

1 * SELECT * FROM DBA_tab_PRIVS WHERE DEALER = "TIZIO".

DEALERSHIP OWNER TABLE_NAME GRANTOR PRIVILEGE

------------------------------ ------------------------------ ------------------------------ --------------------------------

TIZIO                          SYS                            TABLE_32                       SYS                    SELECT

In your view, why the engineer decided to give this privilege 'double' on the table?

Thank you!

Perhaps because the privileges granted through a role are not used during the execution of a procedure:

[oracle@db11204 ~] $ sqlplus / as sysdba

SQL * more: Production of liberation 11.2.0.4.0 Thu Aug 20 23:48:31 2015

Copyright (c) 1982, 2013, Oracle.  All rights reserved.

Connected to:

Oracle Database 11 g Enterprise Edition Release 11.2.0.4.0 - 64 bit Production

With partitioning, OLAP, Data Mining and Real Application Testing options

SQL > create user t1 identified by t1.

Created by the user.

SQL > create user t2 identified by t2;

Created by the user.

SQL > grant connect, resource for t1, t2;

Grant succeeded.

SQL > create table t1.tt (ID);

Table created.

SQL > insert into t1.tt values (2);

1 line of creation.

SQL > commit;

Validation complete.

SQL > create role role1.

Created role.

SQL > grant select on t1.tt to role1.

Grant succeeded.

SQL > grant role1 at t2;

Grant succeeded.

SQL > conn t2/t2

Connected.

SQL > select * from t1.tt;

ID

----------

2

SQL > conn / as sysdba

Connected.

SQL > grant create procedure at t2;

Grant succeeded.

SQL > conn t2/t2

Connected.

SQL > create procedure p1 is

2 start

3 run immediately "select * from t1.tt';"

4 end;

5.

Created procedure.

SQL > set serveroutput on

SQL > exec p1

BEGIN p1; END;

*

ERROR on line 1:

ORA-00942: table or view does not exist

ORA-06512: at the 'T2 '. "P1", line 3

ORA-06512: at line 1

SQL > select * from t1.tt;

ID

----------

2

SQL > show user

The USER is 'T2 '.

SQL >

Tags: Database

Similar Questions

  • can I load the creative cloud on more than one computer for the same price.  I would like to put on our other computer.

    I have the creative cloud on my laptop, but find I would like to have on my desk where there is more room.  I can load it on a second computer for the same price and if so, how do I change the email address to download?

    Hello

    Creative desktop cloud applications can be downloaded and installed on multiple computers, regardless of the operating system. However, the activation is limited to two machines per person associated with membership. See terms of use for more information. Learn how to turn off a Creative License on a cloud machine.

    You can download creative cloud under the following link: -.

    https://helpx.Adobe.com/creative-cloud/help/download-install-app.html

  • Help! CC of PHOTOSHOP: I want to reproduce the same project more than once and to modify their dynamic objects linked separately as different projects - can you help me? Please

    I want to reproduce the same project more than once and to modify their dynamic objects linked separately as different projects - can you help me? Please

    If related files please consult are located next to the file that contains the duplicate folder and edit files duplicate so corresponding should translate into changed content in the file duplicate.

  • Same resource get assigned several times for the same account user IDM

    Hello
    I now see a strange scenario in IDM. We have a DB TAG and a scheduled task. When I ran the scheduled task, then it assigns the purpose of resource GTC to the respective accounts in IDM. When I run again the GTC, the same object resource GTC is created once more for the user account. Means, now the user account has two resources GTC in the profile of its resources. It should have been only object resource GTC and update should have been linked to this GTC RO. Purpose in my about his creation of another object of the resource.
    Now, I ran five times GTC and my user now has 5 resource. Please let me Kow what harm I do.


    Thank you
    Kalpana.

    Make sure that this key field is mapped correctly in your recon field mappings. Also, check the areas of the reconciliation of the resource of the GTC.

  • I just signed up for the storage of more than my iPhone. I buy separately for my iPad?

    I have just signed up for the storage of more than my Iphone... I buy separately for my iPad?

    < re-titled by host >

    iCloud-storage can be used by multiple devices as long as they use the same identifier Apple to settings > iCloud. The main orientation of iCloud's for the synchronization of data between the devices.

  • I have 6 which weighed charges on my debit card for the same Netflix subscription.

    I tried to update my information to cc without success, I might add, and now I have 6 which weighed charges on my debit card for the same Netflix subscription. He has actually decreased my debit card that has sufficient funds, and I hope that I have that I extract only, the only time. Can anyone confirm if this has happened to them before?

    Thanks in advance!

    Whenever you add or change your payment information, you are likely to receive a temporary store operating load, your card issuer should remove in a few days or more: on the payment card's authorization in the iTunes Store - Apple Support

    If the card is still declined, then the subscription will be not have been paid for. You can check with the card issuer to see if they are declining, or try another card (a card have a chance to be accepted it must be registered with the same name and address (including the format and spacing etc) that you have on your iTunes account and have been issued by a bank in the country where you are and which is therefore the country on your iTunes account).

  • Permission of files and folders for the same user on multiple computers

    Is it possible to set permissions files and folders different for the same user when he connect on different computers in the same domain?

    Example:

    There is a folder named "Folder1".
    When "User1" enter this folder by "Computer1" must have "Read & Execute" permission
    When "User1" enter this folder in "Computer2" must have permission 'change '.

    Thank you

    Hello

    Your question is beyond the scope of this community.

    Please post your question on the TechNet forums:

    https://social.technet.Microsoft.com/forums/Windows/en-us/home

    Kind regards

  • Obsolete devices in the AutoPlay list & several entries for the same devices II (how to remove Iphone in Autoplay device)

    I read the article "obsolete devices in the AutoPlay list & multiple entries for the same features" and did what they said on the registry change, but I can't seem to find what I'm looking for.

    I had an iphone and he sold on ebay, now in my autoplay menu, there is my iphone device listed in DEVICES. I would like to remove it, but there is no option to do this. I looked everywhere in the 'managers' and 'eventhandlers' regedit, but I can't find the name of my iphone or whatever it is about the iphone in particular. So I hope that someone could lead me in the right direction and it would be very appreciated. Is there a specific code or name for the iphone in regedit?

    Hi arande1a,

    I would like to know what article you're talking about, please give the link for the same.

    I suggest you try the following steps:

    Step 1: Disable Autorun

     

    (1) open AutoPlay by clicking the Start button, clicking Control Panel, on material and audio and then click AutoPlay.

    (2) turn off the AutoPlay use for all media and devices check box, and then click Save.

    Restart the computer and check.

    Turn on AutoPlay

     

    (1) open AutoPlay by clicking the Start button, clicking Control Panel, on material and audio and then click AutoPlay.

    (2) select the game to use automatic for all media and devices check box, and then click Save.

     

    http://Windows.Microsoft.com/en-us/Windows-Vista/Change-AutoPlay-settings

    Let us know if you find iPhone mentioned in the following registry key location.

     

    HKEY_LOCAL_MACHINE
    \CurrentVersion\Explorer\AutoplayHandlers\
    device management

    Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:

    How to back up and restore the registry in Windows:

    http://support.Microsoft.com/kb/322756

    Thank you, and in what concerns:

    Ajay K

    Microsoft Answers Support Engineer

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • BlackBerry Smartphones why do I get multiple contacts for the same person

    Recently, when I add a new contact the 9700 creates several entries. When I delete these multiple inputs, then it leaves about 10 spaces. If I let multiple entries for the same person, the next person that I add only then indicates once

    Why they appear more than once?

    How can I delete multiple entries so they do not reappear when I create the following entry?

    Help, please

    Try a simple reboot and see if the empty entries remain.

    With the BlackBerry device powered time, remove battery for a few seconds and then reinsert the battery to restart.

  • Help understand the Double billing for the same product on the same account

    Recently, I realized that I make double charge on my account from creative cloud for the same exact items charged to the exact same credit card. In addition, I must say that I had two accounts still somehow. It is because I have lost access to the associated e-mail account and do could not connect. When I talked to Adobe at this time there they notify that I have create a new account with a new email, I did. That being said, every month for almost a year I was charged $31,79 and the new account as well. (I admit I'm not very good about checking all my automatic subscriptions online monthly but supposed to Adobe as a company highly and popular, could do things). I called and the first representative I spoke with today understands the problem and transferred to me for a refund, however once transferred, the representative was not only do not understand but rude and gave me a refund for 6 months. As of today, they canceled the account I have not used and me be charged twice a month for but only paid 6 months more than 12 months of double billing. The representative tried to tell me he was doing me a favor because I wasn't in charge of normal early termination fees. It has become so confusing and so I did at that moment that I said I would get more help here in the forums...

    1. I'm trying to understand why in the world they would even charge me a cancellation fee when I was clearly NOT cancellation of an account, just to make a change, which was made according to the way which they charged me and, of course, who they do not now recognize?

    2. How can I reload the same exact account for exactly the same product with activation of the said product as a single computer, and no other user (not to mention that I just used the product)?

    Any help or advice would be appreciated!

    All first of all my apologies for the not so pleasant experience.

    The Adobe ID here in the forum has a CC bought in March 2016 with no cases registered.

    I understand that this is for another subscription CC, could you please me message in private closed, the file number or the number of order which you have been invoiced in duplicate.

    I can probably follow that.

    Concerning

    Stéphane

  • Lightroom CC "User permissions error" - cannot change the permissions for the folder Preferences

    I noticed that Lightroom was running slow so I thought it was time to take stock. (I was using Lightroom 5.7). Yesterday, I downloaded the last LR update, which is Lightroom CC [1067055]. I thought that Lightroom CC would replace 5 Lightroom but apparently they have downloaded as separate applications. When I tried to launch Lightroom CC I got an error message indicating "Lightroom has met permission issues. I followed the directions from this link met Lightroom user permissions problems. Bridge of Photoshop Lightroom crashes or hangs at the launch but it does not set itself (I did not take the final step which is - create a new user account). I was working off of Yosemite, so I hope that the error can be corrected if I updated my operating system. Today, I downloaded El Capitan and Lightroom CC will not always open - I get the same error. I went to manually update the read and write permissions for the folders listed, but some of them don't make changes. The preferences file gives me an error saying "the operation cannot be performed because you don't have the necessary authorization." I don't have the "Adobe" folder in this route Caches

    • /Users/ [user name] / Library/Caches/Adobe /.

    How can I solve this problem and get Lightroom CC to work?

    Screen Shot 2016-03-20 at 5.31.21 PM.pngScreen Shot 2016-03-20 at 5.44.38 PM.pngScreen Shot 2016-03-20 at 5.34.50 PM.pngScreen Shot 2016-03-20 at 5.42.53 PM.png

    @laurawielos,

    Try this:

    the Macintosh HD > users > [your user folder... click on 'Go' on the options bar at the top on the desktop (Menu bar) > then click on the 'option' key > mouse down to the selection of 'Library' that should appear > click on it to open the folder /Users/ [your user name] /Library/ ' "]

    You should now find the appropriate folders to change permissions. Just give your user name of the read/write permissions. I don't think you want to give everyone the read/write permission as some authors have claimed.

  • Difference in the number of records for the same date - 11 GR 2

    Guy - 11 GR on Windows2005 2, 64-bit.

    BILLING_RECORD_KPN_ESP - is a monthly partitioned table.
    BILLING_RECORD_IDX #DATE - is a local index on "charge_date" in the table above.

    SQL > select / * + index (BILLING_RECORD_KPN_ESP BILLING_RECORD_IDX #DATE) * /.
    2 (trunc (CHARGE_DATE)) CHARGE_DATE;
    3 count (1) Record_count
    4. IN "RATOR_CDR". "" BILLING_RECORD_KPN_ESP ".
    where the 5 CHARGE_DATE = January 20, 2013.
    Group 6 by trunc (CHARGE_DATE)
    5 m

    CHARGE_DATE RECORD_COUNT
    ------------------ ------------
    2401 20 January 13-> > some records here.

    -> > Here I can see only '2041' records for Jan/20. But in the query below, it shows "192610" for the same date.

    Why is this difference in the number of records?

    SQL > select / * + index (BILLING_RECORD_KPN_ESP BILLING_RECORD_IDX #DATE) * /.
    (trunc (CHARGE_DATE)) CHARGE_DATE,
    2 count (1) Record_count
    3. FOR "RATOR_CDR." "" BILLING_RECORD_KPN_ESP ".
    "4 where CHARGE_DATE > 20 January 2013."
    Group of 5 by trunc (CHARGE_DATE)
    6 order by trunc (CHARGE_DATE)
    5 m

    CHARGE_DATE RECORD_COUNT
    ------------------ ------------
    192610 20 January 13-> > more records here
    JANUARY 21, 13 463067
    JANUARY 22, 13 520041
    23 JANUARY 13 451212
    JANUARY 24, 13 463273
    JANUARY 25, 13 403276
    JANUARY 26, 13 112077
    27 JANUARY 13 10478
    28 JANUARY 13 39158

    Thank you!

    Because in the second example you also select rows that have a nonzero component.

    The first example selects only rows that are 00:00:00

    (by the way, you should ask questions like this in the forum SQL)

  • Multiple aliases for the same subject?

    Hello world

    In OPM, is it possible to use several aliases for the same subject?

    I try to maintain the isomorphism of my wording of the policy.

    For example, my wording of the policy uses the words "person", hereinafter the "applicant" and "beneficiary" refers to the same person.

    I like to use "person", hereinafter the "applicant" and "the beneficiary" in my rules, but have the OPM recognize that whenever I write 'applicant' or 'the beneficiary', I'm actually referring to "the person".

    Is there a way to do this in OPM?

    An easy way to do this is to map through the underlying attributes in the rule itself.

    So you you would end up with rules such as (assuming that the entity is called 'the person'):

    the applicant is eligible if
      the applicant is aged over 18 years
         the person's age > 18
    

    It has not built based on synonym, as in most cases, the rules are more transparent without them.

    Published by: Davin Fifield, 12/07/2010 15:48

  • Several numbers of cell for the same person

    Is it possible to store multiple numbers of cell for the same person in my contacts? For example: I have a contact with two phone numbers, these are all cell phones, but in the contacts that they marked as the default cell and home numbers. When I am trying to change home to cell number and record this is not registered. It is always the cell and home numbers. So my question is: how to change all the numbers to cell Type?

    When you change the contact, press the label, scroll and choose custom label. You can't have two identical labels, but you can have labels custom as mobile2, mobile3, etc.

  • How I find myself with two passwords to iCloud for the same account?

    How I find myself with two passwords to iCloud for the same account?

    For security reasons, I only use iCloud for Contacts and "find my iPhone".

    Several months ago Apple forced me to change my password to iCloud.  So I did this.   In the last months, I used successfully the new password to 10 or 12 times when asked without problem.

    However, I received a notification of a software update for my Apple Watch. I did the update without problem. However, after completing the update my iPhone asked me to connect to my iCloud account. When I did this, she rejected my password. I made 4 attempts typing very slowly and with care for you sure I did it right.

    Then, operating under a hunch, I decided to enter my old password to iCloud. It worked?  I'm confused about this, any ideas would be appreciated.

    I had a similar problem last year. I had to call Apple. Contact is a bottom of this page.

Maybe you are looking for

  • I can't access my e-mail account (hotmail) like maintaining ping message could not connect.

    : I hope you can help I can't access my e-mail account (hotmail) like maintaining ping message could not connect. When I look for details, he said "p/s server has changed.  Input new password.  As I count years I don't remember the password.  It star

  • get a new copy of the DVD?

    Hello A damaged my Developer Suite (DVD 1 of 4) (3rd quarter 2008).Could I get a new one as soon as POSSIBLE. Olympia, WA 98516-3434. U.S.. Tel: 360-252-2737. Thank you Jun OS: Windows XPCustomer information: Jun WE [email protected]

  • Windows XP with an error message

    I have Windows XP with an error message The application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem. Because I don't know how to fix. Can I upgrade to Windows 7 if it still

  • Unwanted additions to the list of Contacts

    It seems that names and addresses are added to my Contacts list when I open or reply to messages from people not already on my list.  I use VISTA and Windows Mail.  FOT the most, I don't want or need these additions.  How can I stop this from happeni

  • How to use a drop down menu to post a link internal

    I use Acrobat Pro DC. I want to use a drop down menu to post an internal link in my PDF document. I think its possible, and the solution is probably with JavaScript. I am very new to JS. I have the drop down created through forms, but nothing I have