Scope of privileges (and PLUSTRACE role) (merged) [message #433785] |
Fri, 04 December 2009 04:54 |
filiprus
Messages: 9 Registered: February 2009 Location: Singapore
|
Junior Member |
|
|
Hello,
I have a strong suspicion that this is a newbie question, so please bear with me!
I am trying to grant user QREMUSER the PLUSTRACE role so that he can run AUTOTRACE.
When I connect as sysdba "sqlplus sys as sysdba" and do "GRANT PLUSTRACE TO QREMUSER" I get "Grant succeeded".
Now, the role is visible in user_role_privs for QREMUSER, but ONLY when I connect using "sqlplus QREMUSER/PASS", but not when I connect to QREM's own database using "sqlplus QREMUSER/PASS@QREMDB".
I have tried connecting as sys into QREMDB (sqlplus QREMDB as sysdba) and granting QREMUSER the PLUSTRACE role from there, but it still doesn't impact QREMUSER's @ QREMDB privileges/roles as seen in user_role_privs, and effectively makes using AUTOTRACE impossible.
Can someone please explain the scope of privileges in oracle and/or point me to the solution? I would be most thankful!
Thanks and Regards,
Filip
|
|
|
|
|
|
Re: Scope of privileges (and PLUSTRACE role) (merged) [message #433836 is a reply to message #433813] |
Fri, 04 December 2009 08:10 |
joy_division
Messages: 4963 Registered: February 2005 Location: East Coast USA
|
Senior Member |
|
|
filiprus wrote on Fri, 04 December 2009 07:29yes, but shouldn't
sqlplus QREMDB as sysdba -> GRANT PLUSTRACE TO QREMUSER
and a subsequent
sqlplus QREMUSER/PASS@QREMDB[/email]
be referring to the same one?
No, why would you think that? the second one refers to a specific database QREMDB. In the first one, you are relying on environment variables as to which database you connect to.
It's analogous to the implicit conversion. If you don't tell Oracle specifically what you want, you are just playing Russian roulette.
|
|
|
|