Proxy Granted But Unable to Modified a Table owned by the Proxy Account [message #674121] |
Fri, 04 January 2019 13:54 |
wtolentino
Messages: 413 Registered: March 2005
|
Senior Member |
|
|
i created an account dtest to replicate a problem that our developers is having issue with proxy.
i granted the dtest proxy to account CCFAPP.
alter user ccfapp grant connect through dtest;
now i login using dtest and tried this command:
SQL> show user;
USER is "DTEST"
SQL> comment on column ccfapp.tcodes.prog_type is 'program types';
comment on column ccfapp.tcodes.prog_type is 'program types'
*
ERROR at line 1:
ORA-01031: insufficient privileges
please help. thank you.
|
|
|
|
|
|
|
Re: Proxy Granted But Unable to Modified a Table owned by the Proxy Account [message #674133 is a reply to message #674121] |
Sat, 05 January 2019 09:49 |
Solomon Yakobson
Messages: 3284 Registered: January 2010 Location: Connecticut, USA
|
Senior Member |
|
|
wtolentino wrote on Fri, 04 January 2019 14:54i created an account dtest to replicate a problem that our developers is having issue with proxy.
yes i tried that
connect dtest[ccfapp]
SQL> show user;
USER is "DTEST"
This doesn't add up. If you login as dtest[ccfapp] you are logging as ccfapp through dtest and therefore SHOW USER should return CCFAPP, not DTEST. For example, I create user U1 and grant it proxy access as scott:
SQL> drop user u1 cascade;
User dropped.
SQL> create user u1 identified by u1 default tablespace users;
User created.
SQL> grant create session to u1;
Grant succeeded.
SQL> grant select on emp1 to u1;
Grant succeeded.
SQL> connect u1@pdb1sol122/u1
Connected.
SQL> comment on column scott.emp1.ename is 'employee name';
comment on column scott.emp1.ename is 'employee name'
*
ERROR at line 1:
ORA-01031: insufficient privileges
SQL> connect scott@pdb1sol122
Enter password: *****
Connected.
SQL> alter user scott grant connect through u1;
User altered.
SQL> connect u1[scott]@pdb1sol122/u1
Connected.
SQL> show user
USER is "SCOTT"
SQL> comment on column scott.emp1.ename is 'employee name';
Comment created.
SQL>
As you can see, SHOW USER returns SCOTT, not U1.
SY.
|
|
|
|
|
|
|