Hmm.. As I posted in my original post, I've already used the qualified table name when user2 tried to select from user1's table.

select * from user1.table1;

but it still doesn't work. Any idea?

Also, can you answer the other part of my question? i.e. How do I check what kind of priviledges have been granted to a role?

Thanks!