headers
Duncan Groenewald | 21 Jun 2007 08:28
Picon

Granting access to SYSTEM_MAKE_BACKUP() function

Hi, can I use the GRANT function to grant access to this function  
for  user ?  If not how can I grant permission to execute this  
function to a user ?

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |
headers
Tobias Downer | 22 Jun 2007 18:16

Re: Granting access to SYSTEM_MAKE_BACKUP() function

Hi Duncan,

The command to grant a user access to the SYSTEM_MAKE_BACKUP function 
would be,

   grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username];

Provided this is run by an admin user, it will create a grant to use 
that function by the user.

Toby.

Duncan Groenewald wrote:
> Hi, can I use the GRANT function to grant access to this function  for  
> user ?  If not how can I grant permission to execute this  function to a 
> user ?
> 

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |
headers
Duncan Groenewald | 23 Jun 2007 13:53
Picon

Re: Granting access to SYSTEM_MAKE_BACKUP() function

I just tried this but get the following error:

Backup Database
"Exception executing query"
"User not permitted to call: SYSTEM_MAKE_BACKUP"

is there any way I can check whether permissions have been created ?

On 23/06/2007, at 4:16 AM, Tobias Downer wrote:

 grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]


Permalink | Reply |
headers
Tobias Downer | 27 Jun 2007 03:48

Re: Granting access to SYSTEM_MAKE_BACKUP() function

Hi,

The following query may help you,

   SELECT * FROM SYS_INFO.sUSRGrant;

Look for "SYS_INFO.SYSTEM_MAKE_BACKUP" under the param column, the 
grantee should be " <at> PUBLIC".  You may need to restart the database after 
grants are altered.

Toby.

Duncan Groenewald wrote:
> I just tried this but get the following error:
> 
> Backup Database
> "Exception executing query"
> "User not permitted to call: SYSTEM_MAKE_BACKUP"
> 
> is there any way I can check whether permissions have been created ?
> 
> On 23/06/2007, at 4:16 AM, Tobias Downer wrote:
> 
>>  grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]
>>
> 

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |
headers
Duncan Groenewald | 27 Jun 2007 13:22
Picon

Re: Granting access to SYSTEM_MAKE_BACKUP() function

I don't get grantee  <at> PUBLIC.  How would I manage to get this ?

On 27/06/2007, at 1:48 PM, Tobias Downer wrote:

> Hi,
>
> The following query may help you,
>
>   SELECT * FROM SYS_INFO.sUSRGrant;
>
> Look for "SYS_INFO.SYSTEM_MAKE_BACKUP" under the param column, the  
> grantee should be " <at> PUBLIC".  You may need to restart the database  
> after grants are altered.
>
> Toby.
>
> Duncan Groenewald wrote:
>> I just tried this but get the following error:
>> Backup Database
>> "Exception executing query"
>> "User not permitted to call: SYSTEM_MAKE_BACKUP"
>> is there any way I can check whether permissions have been created ?
>> On 23/06/2007, at 4:16 AM, Tobias Downer wrote:
>>>  grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]
>>>
>
>
>
> ---------------------------------------------------------------
> Mckoi SQL Database mailing list  http://www.mckoi.com/database/
> To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
>

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |
headers
Tobias Downer | 30 Jun 2007 00:25

Re: Granting access to SYSTEM_MAKE_BACKUP() function

I apologize.  I just checked the code and the user must belong to the 
"secure access" group to be able to call the backup procedure, so you 
need to add the user to this group if you wish for them to use the 
backup function.  The simplest way to do this is by using the following 
command;

   insert into SYS_INFO.sUSRUserPriv ( UserName, PrivGroupName ) values 
( '[username]', 'secure access' );

Toby.

Duncan Groenewald wrote:
> I don't get grantee  <at> PUBLIC.  How would I manage to get this ?
> 
> On 27/06/2007, at 1:48 PM, Tobias Downer wrote:
> 
>> Hi,
>>
>> The following query may help you,
>>
>>   SELECT * FROM SYS_INFO.sUSRGrant;
>>
>> Look for "SYS_INFO.SYSTEM_MAKE_BACKUP" under the param column, the  
>> grantee should be " <at> PUBLIC".  You may need to restart the database  
>> after grants are altered.
>>
>> Toby.
>>
>> Duncan Groenewald wrote:
>>
>>> I just tried this but get the following error:
>>> Backup Database
>>> "Exception executing query"
>>> "User not permitted to call: SYSTEM_MAKE_BACKUP"
>>> is there any way I can check whether permissions have been created ?
>>> On 23/06/2007, at 4:16 AM, Tobias Downer wrote:
>>>
>>>>  grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]
>>>>

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |
headers
Duncan Groenewald | 3 Jul 2007 13:38
Picon

Re: Granting access to SYSTEM_MAKE_BACKUP() function

Looking at the Database.java code could I modify the method below to 
check if the user has SELECT permission ?

  /**
   * Returns true if the user is allowed to execute the given stored procedure.
   */
  public boolean canUserExecuteStoredProcedure(DatabaseQueryContext context,
                  User user, String procedure_name) throws DatabaseException {
    // Currently you can only execute a procedure if you are a member of the
    // secure access priv group.
    return userHasSecureAccess(context, user);
  }


  /**
   * Returns true if the user is allowed to execute the given stored procedure.
   */
  public boolean canUserExecuteStoredProcedure(DatabaseQueryContext context,
                  User user, String procedure_name) throws DatabaseException {
    if (userHasSchemaGrant(context, user,
                  table.getSchema(), 
                    Privileges.PROCEDURE_EXECUTE_PRIVS)) {
      return true;
    }
    // Currently you can only execute a procedure if you are a member of the
    // secure access priv group.
    return userHasSecureAccess(context, user);
  }



On 30/06/2007, at 10:25 AM, Tobias Downer wrote:

I apologize.  I just checked the code and the user must belong to the "secure access" group to be able to call the backup procedure, so you need to add the user to this group if you wish for them to use the backup function.  The simplest way to do this is by using the following command;

  insert into SYS_INFO.sUSRUserPriv ( UserName, PrivGroupName ) values ( '[username]', 'secure access' );

Toby.

Duncan Groenewald wrote:
I don't get grantee <at> PUBLIC.  How would I manage to get this ?
On 27/06/2007, at 1:48 PM, Tobias Downer wrote:
Hi,

The following query may help you,

  SELECT * FROM SYS_INFO.sUSRGrant;

Look for "SYS_INFO.SYSTEM_MAKE_BACKUP" under the param column, the  grantee should be " <at> PUBLIC".  You may need to restart the database  after grants are altered.

Toby.

Duncan Groenewald wrote:

I just tried this but get the following error:
Backup Database
"Exception executing query"
"User not permitted to call: SYSTEM_MAKE_BACKUP"
is there any way I can check whether permissions have been created ?
On 23/06/2007, at 4:16 AM, Tobias Downer wrote:

 grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]



---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com


Permalink | Reply |
headers
Duncan Groenewald | 3 Jul 2007 13:09
Picon

Re: Granting access to SYSTEM_MAKE_BACKUP() function

Is there any way I can 'hack' this without doing too much damage ?  I  
don't want users to have any special privileges, just the ability to  
run a backup.  Would it be possible to modify the code to allow  
normal users to run this procedures is they have USAGE permission on  
the function ?  I realise you probably don't want to modify your  
version of the code but could you point me to where I might modify my  
own version ?

Thanks

On 30/06/2007, at 10:25 AM, Tobias Downer wrote:

> I apologize.  I just checked the code and the user must belong to  
> the "secure access" group to be able to call the backup procedure,  
> so you need to add the user to this group if you wish for them to  
> use the backup function.  The simplest way to do this is by using  
> the following command;
>
>   insert into SYS_INFO.sUSRUserPriv ( UserName, PrivGroupName )  
> values ( '[username]', 'secure access' );
>
> Toby.
>
> Duncan Groenewald wrote:
>> I don't get grantee  <at> PUBLIC.  How would I manage to get this ?
>> On 27/06/2007, at 1:48 PM, Tobias Downer wrote:
>>> Hi,
>>>
>>> The following query may help you,
>>>
>>>   SELECT * FROM SYS_INFO.sUSRGrant;
>>>
>>> Look for "SYS_INFO.SYSTEM_MAKE_BACKUP" under the param column,  
>>> the  grantee should be " <at> PUBLIC".  You may need to restart the  
>>> database  after grants are altered.
>>>
>>> Toby.
>>>
>>> Duncan Groenewald wrote:
>>>
>>>> I just tried this but get the following error:
>>>> Backup Database
>>>> "Exception executing query"
>>>> "User not permitted to call: SYSTEM_MAKE_BACKUP"
>>>> is there any way I can check whether permissions have been  
>>>> created ?
>>>> On 23/06/2007, at 4:16 AM, Tobias Downer wrote:
>>>>
>>>>>  grant all on SYS_INFO.SYSTEM_MAKE_BACKUP to [username]
>>>>>
>
>
> ---------------------------------------------------------------
> Mckoi SQL Database mailing list  http://www.mckoi.com/database/
> To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
>

---------------------------------------------------------------
Mckoi SQL Database mailing list  http://www.mckoi.com/database/
To unsubscribe, send a message to mckoidb-unsubscribe <at> mckoi.com
Permalink | Reply |

Gmane