Re: Privileges

From: Rachel Carmichael <carmichr_at_hotmail.com>
Date: Tue, 07 Aug 2001 08:20:09 -0700
Message-ID: <F001.00362D14.20010807083630@fatcity.com>

this is documented, standard behavior....

you cannot use privileges granted via a role to write a stored procedure. Grant all on the table to user1 directly from owner1 and the procedure will run.

Or, probably better, would be to develop the procedure as owner1 and grant execute on it to user1, or to the role.

>From: "Burton, Laura L." <BurtonL_at_prismplus.com>
>Reply-To: ORACLE-L_at_fatcity.com
>To: Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
>Subject: Privileges
>Date: Tue, 07 Aug 2001 08:00:42 -0800
>
>I have granted 'all' to a table owned by owner1 to a role. I granted this
>role to user1. User1 can access this table via SQL*Plus and Developer.
>However, when developing a procedure/package in Procedure Builder under
>program units, and then dragging it down to the bottom as user1 procedures,
>an error stating 'insufficient privileges on owner1.tablename' is received.
>
>
>Any ideas?? I have researched the 'grant execute on procedure' privilege
>but I don't see why I would need to do this for the table owner. My
>understanding of this privilege is to grant another user access to the
>procedure and maintain security in this way, instead of having to grant
>access to each user individually.
>
>Laura

Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Rachel Carmichael
  INET: carmichr_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Tue Aug 07 2001 - 10:20:09 CDT