Trying to auto generate roles and privileges

Similar Questions

• Cannot run script queued for roles and privileges

  
  

  Hi all;

  
  

  I'm recreating a u1 user and also try to attempt to define the roles and privilege from the file put on hold.

  but I get the error message.
  

  
  

  $ cat f1.sql

  GRANT CONNECT to u1

  Grant RESOURCE to u1

  Grant CREATE SESSION to u1

  Grant UNLIMITED TABLESPACE to u1

  Grant CREATE TABLE to u1

  Grant CREATE ANY TABLE to u1

  Grant CREATE the CLUSTER to u1

  Grant CREATE SYNONYM to u1

  Grant CREATE VIEW to u1

  Grant CREATE SEQUENCE to u1

  Grant CREATE ANY SEQUENCE to u1

  Grant CREATE DATABASE LINK to u1

  Grant CREATE PROCEDURE for u1

  Grant CREATE TRIGGER to u1

  Grant CREATE TYPE U1

  GRANT CREATE OPERATOR to u1

  Grant CREATE INDEXTYPE U1

  SYS > create the u1 user identified by u1;

  Created by the user.

  SYS > @f1.sql;

  5

  DB version is 11.2.0.1 on redhat 4.7

  Thank you

  Where are you semicolons?  Each command must end with a semicolon.

  Hemant K Collette

• Roles and privileges, I'm really confused, 1st edition

  I'm having some trouble with the privileges assigned through roles. I read a few articles on the topic, but I'm still confused. I have actually some problems and I am speaking to them in two separate threads: this one and 'roles and privileges, I'm really confused, 2nd edition.
  
  To begin with, I am familiar with the following statement.
  

  , The owner of the schema containing the view must have the necessary privileges to either select, insert, update, or delete rows from all tables or views on which the opinion is based. The owner must be granted these privileges directly, rather than a role.

  Here's what's happening.
  
  I have a role, say ROLE1 has the privilege of system CREATE SEQUENCE (without the GRANT OPTION) are attributed to him. I then set ROLE1 User1 (it's just a dummy user and a role, if they conflict with reserved roles or accounts, they are not the real names of role and the user that I use). User1 has also created a package in its schema that calls a SEQUENCE to CREATE breast in a package procedure.
  
  When the user runs the package procedure we get an insufficient privileges error. When we do a SELECT * FROM SESSION_PRIVS the CREATE SEQUENCE privilege is listed; This should mean that the user can create a sequence, right? However, when the privilege is assigned directly to the user directly to the user, not by a role, the statement runs without error.
  
  I don't understand this. The user has the CREATE SEQUENCE privilege through the role, verified by the SESSION_PRIVS table (or view), but is not able to create the sequence, unless this privilege is assigned directly to the user - if this is true, that I seem to contradict the purpose of having roles.
  
  Anyway, anyone know how I can get it to work properly?

  DBelt wrote:
  We are talking about all rights of the DEFINER vs applicant rights. I won't use the rights of the appellant, I like the guarantee of the rights of the author. WO what should I do to get things to work with the rights of the author?

  Grant privilege explicitly to the user, not a role.

• A query involving roles and privileges.

  I am trying to create the following query:
  Given a table (or view) and a user, I wish that the query to list all the ways of the roles with which the user has been granted given privilege (for example "SELECT") to the selected table. The path will look something like
  TABLE = > ROLE1 = > ROLE2 = > 3 = > USER
  If the user only has the right to SELECT on the table that the query will return well on lines. If there is more than one path through which the user gets the privilege, then the query returns multiple lines.
  
  Can someone help please
  George

  Hi, Girard,.

  Sorry, I can't reproduce the problem. I get ouptut like this:

  PATH
  --------------------------------------------------------------------------------
  DBA_TS_QUOTAS => SELECT_CATALOG_ROLE => DBA => FUBAR
  DBA_TS_QUOTAS => SELECT_CATALOG_ROLE => FUBAR
  DBA_TS_QUOTAS => SELECT_CATALOG_ROLE => EXP_FULL_DATABASE => DBA => FUBAR
  DBA_TS_QUOTAS => SELECT_CATALOG_ROLE => IMP_FULL_DATABASE => DBA => FUBAR
  DBA_TS_QUOTAS => SELECT_CATALOG_ROLE => OLAP_DBA => DBA => FUBAR
  

  Message from the query that you run in fact, even if you copied it just of my message. There may be an error in editing.
  All the names within quotation marks are correctly capitalized?
  This query works for any table and the user? Try on a few cases where you know exactly why (or at least a reason why) a certain user has privileges on a table of some.

  What system user privileges GEO2 there? View the results of

  SELECT  privilege
  FROM    dba_sys_privs
  WHERE   grantee  = 'GEO2'
  ;
  

  This doesn't apply right now, but remember that the name you may know a synonym. The view used in this query, dba_role_privs, and dba_tab_privs, only covers the real table names. DBA_SYS_PRIVS is a synonym, but it happens be the actual name of the display also, so, as I said, which is not causing your current problem. Just keep in mind if you use the data dictionary views that contain $ in their names.

  Published by: Frank Kulash, 17 December 2010 15:34

  I just saw your discussion with Justin; I see you have already posted the system privileges.
  I guess that any role GEO2 has, directly or indirectly, might have a privilege of system as SELECT ANY DICTIONARY.
  What happened to you?

  WITH     all_roles     AS
  (
       SELECT  granted_role
       ,     SYS_CONNECT_BY_PATH (granted_role, '/')     AS path
       FROM     dba_role_privs
       START WITH     grantee     = 'GEO2'
       CONNECT BY     grantee     = PRIOR granted_role
  )
  SELECT     r.granted_role
  ,     r.path
  ,     p.privilege
  FROM     all_roles     r
  JOIN     dba_sys_privs     p  ON     r.granted_role = p.grantee
  WHERE     privilege     LIKE 'SELECT ANY%'
  ;
  

  Published by: Frank Kulash, 17 December 2010 15:47

• roles and privileges

  I created a user and the roles to access the tables.

  SQL > create role trans_role;

  SQL > grant select, insert, delete, update on pmms.table1 to trans_role;

  SQL > grant select, insert, delete, update on pmms.table2 to trans_role;

  SQL > grant trans_role User1, User2.

  SQL > grant connect User1, User2.

  But there is error when user1, user2 connected and tried to select tables.

  SQL > select * from pmms.table1;
  Select * from pmms.table1
  *
  ERROR on line 1:
  ORA-00942: table or view does not exist

  
  SQL >

  Hello

  don123 wrote:

  ... I know that the password is case sensitive but I don't know if username is also case sensitive in oracle? ...

  Yes, the user names are case-sensitive in Oracle.  "User1" is not the same user name "user1".

  (Passwords are case-sensitive in Oracle 11.1 and upward, not in earlier versions.)

• Roles and privileges of the sys schema default APPS

  Dear all

  What are all the privileges system & roles should be there, and unlimited tablespace should be there?

  Guru cleared my doubt that DBA should not be there for apps schema. but I need information please.

  Thank you and best regards,

  Apps user must have quota access on the following storage spaces:

  APPS_TS_ARCHIVE

  APPS_TS_INTERFACE

  APPS_TS_MEDIA

  APPS_TS_NOLOGGING

  APPS_TS_QUEUES

  APPS_TS_SEED

  APPS_TS_SUMMARY

  APPS_TS_TX_DATA

  APPS_TS_TX_IDX

  APPS_TS_TX_INTERFACE

  You can use this command for the applications of the user to have unlimited quotas on the tablesapces above - alter apps on unlimited user quota.

  Thank you

  Hussein

• vCenter roles and privileges to migrate virtual machines

  I created a custom role named 'Build VMs' that I have assigned to an ad group.  This role is assigned in the data centers, all spread and no. folder where elsewhere.  The role was designed to allow a specific group of users to manage virtual machines (create, move, delete, but not clone, etc.).

  For the most part, it works fine, but I have a problem: they cannot migrate powered off VMs.  vMotion is available and works, but I need to move a cluster virtual machines to a different (more old hw & 3.5 to new hw & 4.1).

  The role has the following privileges:

  Name                                Id
  ----                                --
  Anonymous System.Anonymous
  View System.View
  Read System.Read
  Create the folder Folder.Create
  Allocate space Datastore.AllocateSpace
  Update of virtual machine files Datastore.UpdateVirtualMachineFiles
  Configure Network.Config
  Affect the Network.Assign network
  Change DVSwitch.Modify
  Operation of DVSwitch.PortConfig port configuration
  Setting of port DVSwitch.PortSetting operation
  Change DVPortgroup.Modify
  Create the virtual machine Host.Local.CreateVM
  Reconfigure the virtual machine Host.Local.ReconfigVM
  Create new VirtualMachine.Inventory.Create
  Create existing VirtualMachine.Inventory.CreateF...
  Register VirtualMachine.Inventory.Register
  Delete VirtualMachine.Inventory.Delete
  Unregister VirtualMachine.Inventory.Unregister
  Move VirtualMachine.Inventory.Move
  Power VirtualMachine.Interact.PowerOn
  VirtualMachine.Interact.PowerOff power off
  Suspension VirtualMachine.Interact.Suspend
  Discount to zero VirtualMachine.Interact.Reset
  Question answer VirtualMachine.Interact.AnswerQu...
  Console interaction VirtualMachine.Interact.ConsoleI...
  Device connection VirtualMachine.Interact.DeviceCo...
  Configure support CD VirtualMachine.Interact.SetCDMedia
  Configure floppy media VirtualMachine.Interact.SetFlopp...
  VMware Tools install VirtualMachine.Interact.ToolsIns...
  Buy tickets to control comments VirtualMachine.Interact.GuestCon...
  Defragmentation of disks all VirtualMachine.Interact.Defragme...
  Turn on the VirtualMachine.Interact.CreateSe of fault tolerance...
  Disable VirtualMachine.Interact.TurnOffF of fault tolerance...
  Test failover VirtualMachine.Interact.MakePrimary
  Restarting the VM VirtualMachine.Interact.Terminat secondary...
  Disable VirtualMachine.Interact.DisableS of fault tolerance...
  Enable fault tolerance VirtualMachine.Interact.EnableSe...
  Record session on Machine virtual VirtualMachine.Interact.Record
  Review the session on virtual computer VirtualMachine.Interact.Replay
  Backup operation on a virtual machine VirtualMachine.Interact.Backup
  Create a screenshot VirtualMachine.Interact.CreateSc...
  Rename VirtualMachine.Config.Rename
  Add a disk existing VirtualMachine.Config.AddExistin...
  Add the new disk VirtualMachine.Config.AddNewDisk
  Remove the VirtualMachine.Config.RemoveDisk disc
  Raw device VirtualMachine.Config.RawDevice
  Host VirtualMachine.Config.HostUSBDevice USB device
  Change the number of CPU VirtualMachine.Config.CPUCount
  Memory VirtualMachine.Config.Memory
  Add or remove devices VirtualMachine.Config.AddRemoveD...
  Change the settings of the device VirtualMachine.Config.EditDevice
  Parameters VirtualMachine.Config.Settings
  Change resources VirtualMachine.Config.Resource
  Updating of the virtual hardware VirtualMachine.Config.UpgradeVir...
  Reset the VirtualMachine.Config.ResetGuest customer information...
  Advanced VirtualMachine.Config.AdvancedCo...
  Lease of disk VirtualMachine.Config.DiskLease
  Swapfile placement VirtualMachine.Config.SwapPlacement
  Extend the virtual disk VirtualMachine.Config.DiskExtend
  Change disk monitoring VirtualMachine.Config.ChangeTrac...
  Unlock the virtual machine VirtualMachine.Config.Unlock
  Queries files without owner VirtualMachine.Config.QueryUnown...
  Reloading the way VirtualMachine.Config.ReloadFrom...
  Compatibility VirtualMachine.Config.QueryFTCom of the fault tolerance of queries...
  Customize the VirtualMachine.Provisioning.Cust...
  Promote records VirtualMachine.Provisioning.Prom...
  Deploy the model of VirtualMachine.Provisioning.Depl...
  Clone model VirtualMachine.Provisioning.Clon...
  Mark as virtual machine VirtualMachine.Provisioning.Mark...
  Read about the customization VirtualMachine.Provisioning.Read...
  Edit the VirtualMachine.Provisioning.Modi customization specifications...
  Allow access to the disk VirtualMachine.Provisioning.Disk...
  Allow access to the read-only disc VirtualMachine.Provisioning.Disk...
  Assign the virtual machine resources... Resource.AssignVMToPool
  Migrate from Resource.HotMigrate
  Query vMotion Resource.QueryVMotion

  It is the main thing I thought it would take to a simple move of a virtual machine while it is turned off:

  Name                                Id
  ----                                --
  Move VirtualMachine.Inventory.Move

  I gave to create a folder because some of the permissions were not yet allowing the creation of virtual machines, even though it probably isn't necessary.

  Any ideas?

  ~ Luc
  http://thephuck.com

  What happens if you add resources > permission to move?

• problem users, roles and privileges!

  Hello world
  I use oracle 10.2.0.
  
  I have a (dba1) user who is the owner of the tables in my database. I have connected to sqlplus as sysdba and created the admin role < b > < /b > and granted the admin privileges.
  

  SQL> grant all privileges to admin;
  
  Grant succeeded.
  
  SQL>

  Then I gave the admin < /b > < b > user dba1 role:
  

  SQL> grant admin to dba1;
  
  Grant succeeded.

  I created another role, sel_role and gave privileges to select tables. For example:
  

  SQL> grant select on kund to sel_role;
  
  Grant succeeded.

  Now, I created another user, Anton and gave this user the sel_role role:

  grant sel_role to Anton;
  
  Grant succeeded.

  Now when I try to login as anton and try to use the select statement that is given to Anton by sysdba, using the sel_role, to select the kund table, I get an error:
  

  SQL> connect anton/oracle
  Connected.
  
  SQL> select * from kund;
  select * from kund
                *
  ERROR at line 1:
  ORA-00942: table or view does not exist

  What could be the solution to this problem?
  Thanks in advance

  Oops, has nothing to do with provoleges. Kund table is not owner by user anton, right? Therefore, you must perfix with the owner, that is, based on "I have a (dba1) user who is the owner of the tables in my database", dba1. Then issue:

  Select * from dba1.kund;

  SY.

• Trying to auto generate an assignment set using an API

  Hello guys, I have several games of transfer for employees based on their job. Unfortunately, there are many of them and payroll officer think it's too much work to generate transfer games before each pay run. I came up with a way to run the formula by using the oracle APIs, but I get an error message. Can someone help me understand this?
  The message says:
  
  
  Set serveroutput on
  ORA-20001: data not found ASG_JOB at line 6 of the STNL_JUNIOR_STAFF
  
  Cause: A SQL SELECT statement, obtained from the dictionary of the application, returned no rows during execution.
  
  Action: Please consult with your local technical support representative.
  
  
  
  Here's the quick formula STNL_JUNIOR_STAFF
  
  
  by default ASG_JOB is 'null '.
  
  
  IF ASG_JOB = "auxiliary"
  THEN INCLUDE_FLAG = 'Y '.
  ELSE INCLUDE_FLAG = ' don't
  
  
  RETURN INCLUDE_FLAG
  
  
  Here is the code I use:
  
  declare
  cursor c_set is
  Select * from hr_assignment_sets
  where - assignment_set_name like '% _JUNIOR_STAFF % '.
  assignment_set_name = "STNL_JUNIOR_STAFF";
  v_set c_set % ROWTYPE;
  v_formula_name varchar2 (5000);
  -the effective_date for the formula
  date of v_effective_date;
  -context values
  date of v_date_earned;
  v_job_name varchar2 (500);
  -entry and exit forms
  v_inputs ff_exec.inputs_t;
  v_outputs ff_exec.outputs_t;
  Start
  dbms_output. Enable (null);
  -context of the audit date
  Select v_date_earned (last_day (sysdate)-5)
  Double;
  -Open assignment set cursor
  Open c_set;
  loop
  extract the c_set in v_set;
  When the output c_set % NOTFOUND;
  -get the formula name, and date of entry in
  Select formula_name, effective_start_date
  in v_formula_name, v_effective_date
  from ff_formulas_f where formula_id = v_set.formula_id;
  -get assignments by current payroll deductions
  declare
  TYPE AssignmentCursorType IS REF CURSOR;
  c_ass AssignmentCursorType;
  v_ass PER_ALL_ASSIGNMENTS_F % ROWTYPE;
  sql_stmt VARCHAR2 (5000);
  sql_condition VARCHAR2 (500): = ' and pj.job_name! = "junior officer"';
  Start
  If v_set.assignment_set_name not like '% NON_JUNIOR_STAFF %' then
  sql_condition: = ' and pj.name = "junior officer"';
  end if;
  sql_stmt: = 'select pf.* from per_all_assignments_f pf, per_jobs pj.
  || 'where sysdate between pf.effective_start_date and pf.effective_end_date'.
  "and pj.job_id = pf.job_id and pf.payroll_id =: p_payroll_id' |" sql_condition;
  Open the c_ass for sql_stmt using v_set.payroll_id;
  loop
  extraction of c_ass in v_ass;
  When the output c_ass % NOTFOUND;
  -get the name of the job
  Select hr_general.decode_job (v_ass.job_id) v_job_name
  Double;
  -initialization formula
  ff_exec.init_formula (v_set.formula_id, v_effective_date, v_inputs, v_outputs);
  -loop and set the context
  for the NTC in v_inputs.first... loop of v_inputs. Last
  If v_inputs (cnt) .name = "ASSIGNMENT_ID" then
  v_inputs (cnt) .value: = v_ass.assignment_id;
  end if;
  If v_inputs (cnt) .name = "DATE_EARNED" then
  v_inputs (cnt) .value: = v_date_earned;
  end if;
  If v_inputs (cnt) .name = "ASG_JOB" then
  v_inputs (cnt) .value: = v_job_name;
  end if;
  end loop;
  -then run the formula
  ff_exec.run_formula (v_inputs, v_outputs);
  end loop;
  close c_ass;
  end;
  end loop;
  close c_set;
  exception
  while others then
  dbms_output.put_line (SQLERRM);
  end;

  Absolutely, if the new emp assignment at the time gained is and meets the criteria of employment as at date - earned, he or she will be included! The rule is evaluated at the time of execution of the process that uses the rule.

  Clive

• Export and privileges

  Hi, I am using db oracle 10g, sql developer 4.0.2

  I create a user called "MED" and he has granted privileges "Role DBA, ALTER SYSTEM, SELECT ON V_$ SESSION."

  I export it and then import it again, it will have these privileges or any other privilege I granted him his?

  -I do not understand because each user you create, you must grant "create session and select,..." etc", but when I tried after him granting the privileges above,.

  I found it can establish a connection and can choose, but cannot select session $ v for example (as I remember)!

  What is the role here please? and what do I do to import the user with privileges, I give him?

  Thank you

  Hello

  Export will retrieve roles and privileges of access granted to a user. However, it will not extract direct subsidies to the system objects. So in your case, all will be loaded by import outside the selection on v_$ session

  see you soon,

  rich

• Adding roles and permissions

  Hello

  I am trying to install a role and authorization in vCenter 4.1 so that another user of vCenter 'read only' access can display CapacityIQ. Documents say to seek a role capacity IQ, but I have not found one. By the documentation.

  Procedure
  1. reboot the vSphere Client.
  2. Add the global privilege CapacityIQ in a new or existing role.
  3 right click on the folder root of the server vCenter in the inventory tree and select Add permission.
  4 in the dialog box assign permissions, assign the new role or existing user that accesses CapacityIQ.

  The global privilege CapacityIQ there simply isn't. How can I add this to so I can grant the necessary access?

  Thoughts anyone?

  Best regards

  Edward L. Haletky

  Host communities, VMware vExpert,

  Author: VMware vSphere and Virtual Infrastructure Security,VMware ESX and ESXi in the 2nd business edition

  Podcast: the Podcast for security virtualization of resources: the virtual virtualization library

  Hey Ed,.

  I see my Caron, there is a privilege 'CapacityIQ' in the category 'Global' of roles. What do you see in your environment? I do not see a role 'default' created by Caron, so think you must associate a user with this privilege. I'm running the 1.5.0 last version of Caron, if this can help

• Dump the roles and permissions

  I want to empty the roles and privileges for my virtual Center for audit purposes. How can I do this? Sorry for not not googling and asking questions here directly.

  Get-PSSnapin -Registered | Add-PSSnapin -ErrorAction SilentlyContinue
  Connect-VIServer -Server myVC.fqdn -User myUser -Password myPass
  
  $si = Get-View ServiceInstance
  $am = Get-View $si.Content.AuthorizationManager
  
  $am.RoleList | % {
   $_.Name
   $_.Privilege | Sort | % { "`t" + $_ }
  } | Out-File c:\dumpRole.txt | Notepad c:\dumpRole.txt
  

• Just DLd CD player. Now, nothing will be printed. I also get error app for Windows (0xc0000022) whenever I start CD player. I uodated download of the last update and tried an auto repair. Using Win 7 Pro 64 bit machine.

  Just DLd CD player. Now, nothing will be printed. I also get error app for Windows (0xc0000022) whenever I start CD player. I uodated download of the last update and tried an auto repair. Using Win 7 Pro 64 bit machine. I tried several printers and I can test printing from other applications such as Outlook and Wordpad.

  None of this has worked. I have to get rid of the error (0 x 000022) and he got good printing. I did clean the Adobe Reader DC machine, reinstalled drive XI 11.0.10 and in the preferences to disabled Adobe protected in Security (Enhanced) Mode and set "view documents I have PDF/A mode" forever in the Documents tab...

  It seems that each player version as it becomes more complex (with the "features enhanced security") gets more unstable.

  I'll try Adobe Reader DC when I eventually have to WIN 10 which is never if all goes well.

• I'm trying to sign several documents and I have my saved signature under "fill &amp; sign" the organization that generated the forms highlighted the signature lines and when I try to put my signature, it is pushed outside the signature.

  I'm trying to sign several documents and I have my saved signature under "fill & sign" the organization that generated the forms highlighted the signature lines and when I try to put my signature, it is pushed outside the signature.

  Hi katepell,

  You can simply drag the signature to the desired place by holding it with the mouse.

  Thank you

  Abhishek

• Re: Script to retrieve vCenter roles and responsibilities

  Hello guys,.

  I need a script to do the following

  The script should generate the following details in a csv format: vCenter roles and responsibilities-> AD groups assigned to this role-> privileges assigned to this role.

  vCenter roles name (List of all roles)

  Details on using (Inscription on the groups or users added to the particular role)

  List each of the role privilege. For example: data center-> Global etc...

  Thank you

  VK

  Hello

  Always try to LucD scripts, it is one of the best scripter, check below one of his screenplay

  http://communities.VMware.com/message/1642302

  Thank you