Steps to reproduce on 12.1 (same issue in 11.6 generated file using 11.6).1. Do DB to DB comparison of just grants and create a schema snapshot file. My sample grants identical on both sides:
GRANT SELECT ON SCOTT.TABLE TO ROLE_VIEWER;
GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER;
Observe no diffs in the results
Change source to newly generated snapshot file.
Compare and diffs report GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER
Thanks. It’s a bug. It will be fixed in the next beta. The column level grants are making it into the file from Toad, they just aren’t making it into
Toad from the file.
From: chazamania [mailto:bounce-chazamania@toadworld.com]
Sent: Thursday, February 13, 2014 1:45 PM
Subject: [Toad for Oracle - Discussion Forum] Schema Comparison from SDXML Source Cannot do Column Level Grants
Schema Comparison from SDXML Source Cannot do Column Level Grants
Thread created by chazamania
Steps to reproduce on 12.1 (same issue in 11.6 generated file using 11.6).1. Do DB to DB comparison of just grants and create a schema snapshot file. My sample grants identical on both sides:
GRANT SELECT ON SCOTT.TABLE TO ROLE_VIEWER;
GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER;
Observe no diffs in the results
Change source to newly generated snapshot file.
Compare and diffs report GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER
To reply, please reply-all to this email.
Stop receiving emails on this subject.
Or
Unsubscribe from Toad for Oracle - General notifications altogether.
Toad for Oracle - Discussion Forum
Flag
this post as spam/abuse.
So my production 11.6 captured sdxml can be compared to a locally generated sdxml from my dev environment on my “off-this-network” beta box. Makes my life much easier with the bug not in the sdxml files.
Question on grant comparisons. Is it possible to exclude some roles in the comparison? Scenario - production site has added a few roles to our apps to support some of their monitoring apps and they all are named '%LOCAL%. I’m getting 900+ hits on grants and about 5% are legit and the others are all on the LOCAL grants. As a workaround, I dumped them all to excel and used the filtering there to get it right and then re-compared and added them to the exclusion list. I can put this in the Idea Pond if this is really an enhancement. Just wanted to check since I’m knee deep in grants in this thread.
Hm, yeah there really isn’t a way to filter the SDXML file other than uncheck the object types that you’re not interested in.
If I added a wildcard feature to the exclusion file, would that help you?
That should do it if I could a single wildcard on the LOCAL in the samples of my mega-exclusion file. Something like: “Grant: %TO%LOCAL%” so it applies just to grants and a role/user vs an object with local in the name.
current samples:
Grant:ADMIN TO LOCAL_DBAPPS
Grant:ADMIN TO LOCAL_TOAD_CDA_TABLES
Grant:ADMIN TO LOCAL_TOAD_USER_TABLES
OK, this will be in the next beta. Wildcards can apply to any object type.
All of these will work:
Grant: %TO%LOCAL%
Grant: TOLOCAL*
LOCAL
The column level grant comparisons from SDXML files and the exclusion filters worked like a champ. Thanks again.
I’m glad to hear it. You’re welcome.