| ORA_06512 [message #617756] |
Thu, 03 July 2014 06:31  |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi,
Need a help on the issue of:
Part of audit, we have to revoke below privielges from a backup user.
ALL_DB_LINKS
ALL_SOURCE
ALL_TAB_PRIVS
ALL_USERS
DBA_HIST_DATABASE_INSTANCE
DBA_HIST_SNAPSHOT
DBMS_WORKLOAD_REPOSITORY
V_$INSTANCE
CREATE ANY JOB
But the backup user is having the role of EXP_FULL_DATABASE and IMP_FULL_DATABASE through a ROLE.
After revoking those privs, we are are getting the below error message.
Thanks and regards
Muktha
|
|
|
|
|
|
| Re: ORA_06512 [message #617841 is a reply to message #617768] |
Thu, 03 July 2014 22:53  |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi Michel,
Sorry if i am wrong.
For exporting a full database, the required privileges are "EXP_FULL_DATABASE and IMP_FULL_DATABASE".
It had already been granted through a role.
After that only those above mentioned privileges are removed.
Kindly suggest.
Regards
Muktha
|
|
|
|
|
|
| Re: ORA_06512 [message #617855 is a reply to message #617849] |
Fri, 04 July 2014 01:34 |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi Michel,
I am really confused,
None of the above mentioned privileges are relevant to the EXPORT full database.
Then why it is not working, which privilege should I grant?
Thanks
Muktha
|
|
|
|
|
|
|
|
|
|
| Re: ORA_06512 [message #617868 is a reply to message #617863] |
Fri, 04 July 2014 02:49 |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi Michel,
1) We do take export backup everyday with the below mentioned commeand
expdp abc/.... directory=**** dumpfile=WPM_Export.dmp logfile=WPM_Export.log full=y
2) Part of a audit purpose, we need to revoke above mentioned privileges from this user.
3) After this step, we were not able to run the same command successfully, getting the error (mentioned above).
I hope none of those mentioned privileges are related to export a full backup.
Kindly help
Thanks
Muktha
|
|
|
|
| Re: ORA_06512 [message #617882 is a reply to message #617868] |
Fri, 04 July 2014 03:41 |
 |
Michel Cadot
Messages: 68728
Registered: March 2007
Location: Saint-Maur, France, https...
|
Senior Member
Account Moderator |
|
|
Here's the methodology to debug your problem:
1/ Try to export a table of the user with its account. Is it able to do it? No, the first problem is there, search why; yes, go to 2
2/ Create a new user, try to export it with its account, add the needed privileges and retry. When it's done, add the role, is it able to full export now?
|
|
|
|
|
|
| Re: ORA_06512 [message #618255 is a reply to message #617931] |
Thu, 10 July 2014 02:27 |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi Michel,
Sorry for the delay, actually fall in sick.
Actual problem I found is, the Priv "ALL_USERS".
It is required while exporting the full database, as it needed for referring all the user details.
Where I made mistake was removing the privilege "select on ALL_USERS" (part of auditing) after providing the role of EXP_FULL_DATABASE and IMP_FULL_DATABASE.
Now it is working fine,
Thanks
Muktha
|
|
|
|
|
|
| Re: ORA_06512 [message #618278 is a reply to message #618262] |
Thu, 10 July 2014 04:40 |
muktha_22
Messages: 527
Registered: December 2009
|
Senior Member |
|
|
Hi Michel,
Again, Because of audit purpose, we have removed that priv from public and granted to all the OPEN STATE users.
Regards
Muktha
|
|
|
|
| Re: ORA_06512 [message #618279 is a reply to message #618278] |
Thu, 10 July 2014 05:10 |
|
Michel Cadot
Messages: 68728
Registered: March 2007
Location: Saint-Maur, France, https...
|
Senior Member
Account Moderator |
|
|
You mean the audit leads to revoke SELECT on ALL_USERS to PUBLIC? I understand this, I even asked, many years ago, Oracle to change its view to show only users that can be seen in other views like ALL_OBJECTS (that is only users for which the current user has an access right on one of its objects).
But you have to know that Oracle does not support databases where privileges have been revoked from PUBLIC (but for a couple ones enumerated in a MOS] document).
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
