Setting global privileges for a user

Related topics
Global privileges allow you to grant a privilege level to a user for all objects of a given type. For example, you might want to give a designer Manage privileges for all styles throughout Oracle Portal. If you want to grant the same global privileges to multiple users, you can set global privileges for a group. If you want a user to have privileges on only a particular instance of an object, rather than all objects of that type, you can do that by editing the object in question.
	You must have global Manage privileges on an object type to set global privileges on that object type for other users. Portal administrators have global Manage privileges on all objects types except schemas and shared components. Database administrator have global Manage privileges on all object types including schemas and shared components.

To set global privileges for a user:

In the Users portlet, enter the user name of the user whose global privileges you want to change in the Name field. If you are not sure of the user name, click and select from the list provided. By default, the Users portlet is located on the Oracle Portal home page's Administer tab. Click Edit. Click Privileges. Use the lists to select a privilege level for each object. Each privilege in the list includes all other privileges below it. For example, if a user can manage page styles, he or she can also view, publish, and create page styles. The Manage privilege not only allows a user to manage objects of a given type, but also to grant global privileges on the object type to other users or groups. If the Create privilege for an object is not expressly granted to a user, either here or through the Groups portlet, the user will not be able to create an object of that type. The None privilege simply means that no privilege has been granted for this object type. Without it, each user or group would have to be granted a privilege for each object type, which is not desirable. Page Privileges Description All Pages Manage: Change the private or public version of the page in any way. Edit Contents: Change the private or public version of the page as follows: Add other portlets to the existing regions of the page Add or delete any portlets/tabs Hide or show portlets/tabs This user may not create or delete regions. Manage Style: Apply a new style to any page. Create and delete page styles. Customization (Full): Change the user's private version of the page only. Allowed to: Hide or show portlets placed there by the page's creator Add portlets to the page (which are not displayed to anyone else) Customization (Add-Only): Change the user's private version of the page. Allowed to: Add other portlets to the existing regions on the page (which are not displayed to anyone else) Delete only those portlets placed there by the user (as opposed to the page's creator) View: Look at any page in Oracle Portal. Create: Create a page. All Styles Manage: Edit any aspect of any page style. Create and delete page styles. View: Look at any page style. Publish: Make the page style public for others to use. Create: Create a page style. All Layouts Manage: Edit any aspect of any page layout. Create and delete page layouts. View: Look at any page layout. Publish: Make the page layout public for others to use. Create: Create a page layout. All Providers Manage: Display and refresh the portlet repository. Publish: Register portlet providers through the Local Provider and Node portlets. All Portlets Manage: Create and delete portlets. Publish: Publish any object as a portlet, which means it can be later included on a page. Content Area Privileges Description All Content Areas Manage: Perform any task the content area administrator can perform Manage Styles: Create, delete, and edit any folder style. View: View any folder in the content area. Make Public: Make any content area object public. Create: Create any content area object. May not create content areas. Application Privileges Description All Applications Manage: Create/delete components within an application, delete and export applications, assign privileges. Edit Contents: Edit or export components within an application. May not modify the application itself or its privileges. View Source: Look at the package specifications/body for a component and run the component. Intended primarily for users who may want to look at an application's source so they know how to call it. Customize: Run and customize all applications. Run: Run all applications. Create: Create a new application, Application creators are automatically granted the Manage privileges for that application. All Shared Components Manage: Create new shared components; grant access to shared components; view and copy any system shared component; view, copy, edit, delete, and export any user defined shared component. Create: Create new shared components; view and copy any system shared component; view, copy, edit, delete, and export user's own shared components; view other user's shared components. Administration Privileges Description All Users Manage: Edit any aspect of any user account. Create: Create new users. All Groups Manage: Edit any aspect of any group. Create: Create new groups. All Schemas Manage: Create, edit, drop, and grant privileges on any schema; create, edit, drop, and rename any database object in any schema; perform query, update, delete, and insert actions on any table/view in any schema; perform the compile action on any function/procedure/package/view in any schema; perform execute action on any function/procedure/package in any schema; grant privileges on any database object in any schema. Modify Data: Create new schemas; edit, drop, and grant access privileges on user's own schemas; perform query, update, delete, and insert actions on any table/view in any schema; perform compile action on any function/procedure/package/view in any schema; perform execute action on any function/procedure/package in any schema. Insert Data: Create new schemas; edit, drop, and grant access privileges on user's own schemas; perform query and insert actions on any table/view in any schema. View Data: Create new schemas; edit, drop, and grant access privileges on user's own schemas; perform query action on any table/view in any schema. Create: Create new schemas; edit, drop, and grant access privileges on user's own schemas. All Logs Manage: Edit or purge any logs; ability to grant this privilege to other users. Edit: Edit or purge any logs. View: View any logs. Click OK.

Related topics

Back to top