Oracle-L: RE: ORA-01031: insufficient privileges

From: Conboy, Jim <Jim.Conboy_at_trw.com>
Date: Fri, 18 Oct 2002 14:19:02 -0800
Message-ID: <F001.004EDE2B.20021018141902@fatcity.com>

Wow. That is a perfectly logical and amazingly simple explanation I would never have thought of. I am in awe.

Jim

Chris,

The answer may be in what occurs below the water. Remember that RESOURCE is a bit special (here for Oracle 5 compatibility reasons), that it is one of the two (I think) 'roles' which cannot be granted to a role and that the reason I suspect it cannot be is that it grants 'unlimited tablespace' underhand. An hypothesis might be that RESOURCE was granted and then UNLIMITED TABLESPACE revoked by a DBA unwilling to see the user pollute any tablespace.

It behaves like what you witnessed :

SQL> create user demo identified by demo;

User created.

SQL> grant create session to demo;

Grant succeeded.

SQL> grant resource to demo with admin option;

Grant succeeded.

SQL> create user demo2 identified by demo2;

User created.

SQL> revoke unlimited tablespace from demo;

Revoke succeeded.

SQL> connect demo/demo
Connected.
SQL> grant resource to demo2;
grant resource to demo2
*
ERROR at line 1:
ORA-01031: insufficient privileges

--

Regards,

Stephane Faroult
Oriole Software
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Stephane Faroult
INET: sfaroult_at_oriole.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Conboy, Jim
INET: Jim.Conboy_at_trw.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------