restricted session
DBAsupport.com Forums - Powered by vBulletin
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: restricted session

  1. #1
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    anyone know why a user with the DBA role, and more specifically the 'Alter system' system privilege, is unable to issue:

    SQL> alter system enable restricted session;
    alter system enable restricted session
    *
    ERROR at line 1:
    ORA-01031: insufficient privileges

    Rgds,


  2. #2
    Join Date
    Aug 2001
    Location
    Waterloo, On
    Posts
    547
    Restricted session is a special privilege given only to sysdba or internal user.
    A user with restricted session privilege can restrict access to all other users of the database during the period of the session. That explains the sensitive nature (and hence special privilege required) for 'Alter system enable restricted session'.

    Raminder Singh

    Oracle Certified DBA: Oracle 8i, 9i


    Mail me at raminderahluwalia@rediffmail.com.

  3. #3
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    Raminder,

    I don't agree.

    The restricted session privilege is part of the DBA role.
    It allows users to connect to a database that has restricted session enabled.

    The user I wish to use to 'alter system enable restricted session'; has the DBA role and restricted session privilege already but gets the above error.

    Why?? I can run it as System no problem!

    TIA

  4. #4
    Join Date
    Jun 2001
    Location
    Helsinki. Finland
    Posts
    3,938
    If you create an user LION and grant DBA to LION, then LION is able to connect to the DB and issue successfully alter system enable restricted session;

  5. #5
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    Yes I know this Julian.

    I want to know what has been taken away from my user to stop him performing this SQL.


  6. #6
    Join Date
    Jun 2001
    Location
    Helsinki. Finland
    Posts
    3,938
    Originally posted by oddster
    Yes I know this Julian.

    I want to know what has been taken away from my user to stop him performing this SQL.

    What do you get when you run the following:

    select * from dba_role_privs where GRANTEE = 'LION'




  7. #7
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    GRANTEE GRANTED_ROLE ADM DEF
    ------------------------------ ------------------------------ --- ---
    LION DBA NO YES


    that is all I granted him!

    I have viewed roles and prvs through TOAD

    As I said, my user HAS DBA ROLE and restricted session privilege, what does he not enough (i.e. taken away)!!

    Many thanks for your efforts.



  8. #8
    Join Date
    Nov 2000
    Posts
    245

    try
    grand "alter session " to xxx

  9. #9
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    The user has 'Alter session' privilege.

  10. #10
    Join Date
    Feb 2001
    Location
    Adelaide, Australia
    Posts
    159
    just to let you know,

    I implicitly granted 'Alter system' to my user and it worked!

    The wierd and wonderful world of Oracle eh?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Click Here to Expand Forum to Full Width