Why SYSTEM cannot grant privs on tables owned by any schema
DBAsupport.com Forums - Powered by vBulletin
Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Why SYSTEM cannot grant privs on tables owned by any schema

  1. #1
    Join Date
    Jun 2000
    Location
    Bethel CT, USA
    Posts
    18

    Why SYSTEM cannot grant privs on tables owned by any schema

    Why does my SYSTEM account does not have sufficient privileges to grant SELECT on "xxx.table1" for user to "UUU" ???


    Thanks

    egavish@snet.net


  2. #2
    Join Date
    Dec 2000
    Location
    Ljubljana, Slovenia
    Posts
    4,439

    Re: Why SYSTEM cannot grant privs on tables owned by any schema

    Originally posted by egavish
    Why does my SYSTEM account does not have sufficient privileges to grant SELECT on "xxx.table1" for user to "UUU" ???
    Because your SYSTEM account is obviously not created in Oracle9i Release2, I would say. 9.2 is the first release in which DBA accounts are able to grant privileges on objects they don't own.

    In any earlier release, you'll be able to grant privileges on objects you don't own only if the object owner has granted you that same privilege WITH GRANT OPTION.
    Jurij Modic
    ASCII a stupid question, get a stupid ANSI
    24 hours in a day .... 24 beer in a case .... coincidence?

  3. #3
    Join Date
    Jun 2000
    Location
    Bethel CT, USA
    Posts
    18
    Great. So user XXX needs to grant access (with grant or admin) on table1 to SYSTEM on each additional table? Or is there a way to do do it for all tables at once?


    Thanks again

  4. #4
    Join Date
    Aug 2001
    Posts
    267
    What version are you using. Try "alter any table" or "select any table" roles.
    Raghu

  5. #5
    Join Date
    Aug 2001
    Posts
    267
    or try "EXP_FULL_DATABASE" role to system . Then any other user should get select any table privilege.
    Raghu

  6. #6
    Join Date
    Jun 2000
    Location
    Madrid, Spain
    Posts
    7,448
    raghud, no matter what you do a DBA Account cannot grant privileges on objects he does NOT own to others until Oracle 9.2 unless he has been previously granted privs with grant option as jmodic already pointed out

  7. #7
    Join Date
    Jun 2000
    Location
    Bethel CT, USA
    Posts
    18
    OK. But would 'select any' allow user UUU see all tables including the SYSTEM and SYS?

  8. #8
    Join Date
    Aug 2001
    Posts
    267
    got it
    Raghu

  9. #9
    Join Date
    Aug 2001
    Posts
    267
    Using dba account we can't grant access to others if the obejct is owned by other user. But if the dba account got "EXP_FULL_DATABASE" role dba account can select from any table. Correct me if I am wrong.
    Raghu

  10. #10
    Join Date
    Aug 2001
    Posts
    267
    egavish, You question can any body see objects owned by sys and system. You mean catalog tables and views . You need to assign "select catalog role" to a user. Other wise owner should grant privileges to other account no matter it is sys or system or UUU.
    Raghu

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width