Toad World® Forums

Schema Comparison from SDXML Source Cannot do Column Level Grants

Steps to reproduce on 12.1 (same issue in 11.6 generated file using 11.6).1. Do DB to DB comparison of just grants and create a schema snapshot file. My sample grants identical on both sides:

GRANT SELECT ON SCOTT.TABLE TO ROLE_VIEWER;
GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER;

  1. Observe no diffs in the results

  2. Change source to newly generated snapshot file.

  3. Compare and diffs report GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER

Thanks. It’s a bug. It will be fixed in the next beta. The column level grants are making it into the file from Toad, they just aren’t making it into
Toad from the file.

From: chazamania [mailto:bounce-chazamania@toadworld.com]

Sent: Thursday, February 13, 2014 1:45 PM

To: toadoracle@toadworld.com

Subject: [Toad for Oracle - Discussion Forum] Schema Comparison from SDXML Source Cannot do Column Level Grants

Schema Comparison from SDXML Source Cannot do Column Level Grants

Thread created by chazamania

Steps to reproduce on 12.1 (same issue in 11.6 generated file using 11.6).1. Do DB to DB comparison of just grants and create a schema snapshot file. My sample grants identical on both sides:

GRANT SELECT ON SCOTT.TABLE TO ROLE_VIEWER;

GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER;

  1. Observe no diffs in the results

  2. Change source to newly generated snapshot file.

  3. Compare and diffs report GRANT UPDATE (COL1) ON SCOTT.TABLE TO ROLE_VIEWER

To reply, please reply-all to this email.

Stop receiving emails on this subject.

Or
Unsubscribe from Toad for Oracle - General
notifications altogether.

Toad for Oracle - Discussion Forum

Flag
this post as spam/abuse.

So my production 11.6 captured sdxml can be compared to a locally generated sdxml from my dev environment on my “off-this-network” beta box. Makes my life much easier with the bug not in the sdxml files.

Question on grant comparisons. Is it possible to exclude some roles in the comparison? Scenario - production site has added a few roles to our apps to support some of their monitoring apps and they all are named '%LOCAL%. I’m getting 900+ hits on grants and about 5% are legit and the others are all on the LOCAL grants. As a workaround, I dumped them all to excel and used the filtering there to get it right and then re-compared and added them to the exclusion list. I can put this in the Idea Pond if this is really an enhancement. Just wanted to check since I’m knee deep in grants in this thread.

Hm, yeah there really isn’t a way to filter the SDXML file other than uncheck the object types that you’re not interested in.

If I added a wildcard feature to the exclusion file, would that help you?

That should do it if I could a single wildcard on the LOCAL in the samples of my mega-exclusion file. Something like: “Grant: %TO%LOCAL%” so it applies just to grants and a role/user vs an object with local in the name.

current samples:

Grant:ADMIN TO LOCAL_DBAPPS

Grant:ADMIN TO LOCAL_TOAD_CDA_TABLES

Grant:ADMIN TO LOCAL_TOAD_USER_TABLES

OK, this will be in the next beta. Wildcards can apply to any object type.

All of these will work:

Grant: %TO%LOCAL%

Grant: TOLOCAL*

LOCAL

The column level grant comparisons from SDXML files and the exclusion filters worked like a champ. Thanks again.

I’m glad to hear it. You’re welcome.