Re: Oracle 12 : ORA-01950: no privileges on tablespace 'USERS'

Thanks Mark!

I humbly confess that I haven't checked 12c version. After 11G I am no longer relying on the RESOURCE role.

Regards

On 2/25/19 2:06 PM, Powell, Mark wrote:
> All,  Resource still has the traditional privileges except for
> UNLIMITED Tablespace.  On 11.2 CONNECT was reduced to only create session.
>
> MPOWEL01> _at_db/version
>
>
> Per dbms_utility.db_version the Version = 12.1.0.2.0 Compatibility =
> 12.1.0.2.0
>
>
> MPOWEL01> select privilege from dba_sys_privs where grantee =
> 'RESOURCE' order by 1;
>
> PRIVILEGE
> ----------------------------------------
> CREATE CLUSTER
> CREATE INDEXTYPE
> CREATE OPERATOR
> CREATE PROCEDURE
> CREATE SEQUENCE
> CREATE TABLE
> CREATE TRIGGER
> CREATE TYPE
>
> 8 rows selected.
>
>
> Per 12.1 Security manual UNLIMITED was removed and it is suggested you
> create your own roles.
> https://docs.oracle.com/database/121/DBSEG/authorization.htm#DBSEG004
>
>
> Mark Powell
> Database Administration
> (313) 592-5148
>
>
> ------------------------------------------------------------------------
> *From:* oracle-l-bounce_at_freelists.org <oracle-l-bounce_at_freelists.org>
> on behalf of Mladen Gogala <gogala.mladen_at_gmail.com>
> *Sent:* Saturday, February 23, 2019 9:39 PM
> *To:* oracle-l_at_freelists.org
> *Subject:* Re: Oracle 12 : ORA-01950: no privileges on tablespace 'USERS'
> No. They got rid of it in version 10. Since version 10, the "RESOURCE"
> role was granted no privileges. 11G continued this nice tradition.
>
> On 2/21/19 7:35 AM, Kim Berg Hansen wrote:
> > I'm guessing your scripts have a GRANT RESOURCE role to the users?
> > Before version 12 this would also grant them unlimited tablespace,
> > which could be a bad thing.
>
> Yes, I agree. Usually, it was a horrific disaster but it could be only a
> bad thing.
>
>
> --
> Mladen Gogala
> Database Consultant
> Tel: (347) 321-1217
>
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>
> DXC Technology Company - Headquarters: 1775 Tysons Boulevard, Tysons,
> Virginia 22102, USA.
> DXC Technology Company -- This message is transmitted to you by or on
> behalf of DXC Technology Company or one of its affiliates. It is
> intended exclusively for the addressee. The substance of this message,
> along with any attachments, may contain proprietary, confidential or
> privileged information or information that is otherwise legally exempt
> from disclosure. Any unauthorized review, use, disclosure or
> distribution is prohibited. If you are not the intended recipient of
> this message, you are not authorized to read, print, retain, copy or
> disseminate any part of this message. If you have received this
> message in error, please destroy and delete all copies and notify the
> sender by return e-mail. Regardless of content, this e-mail shall not
> operate to bind DXC Technology Company or any of its affiliates to any
> order or other contract unless pursuant to explicit written agreement
> or government initiative expressly permitting the use of e-mail for
> such purpose. --.

-- 
Mladen Gogala
Database Consultant
Tel: (347) 321-1217


--
http://www.freelists.org/webpage/oracle-l