Ygthkb

Is it possible to detect 100% of SQLi with a simple regex?

Dealing with an internal ScriptKiddie

Why do single electrical receptacles exist?

Is layered encryption more secure than long passwords?

Why does a single AND gate need 60 transistors?

In the Lost in Space intro why was Dr. Smith actor listed as a special guest star?

Protagonist constantly has to have long words explained to her. Will this get tedious?

Sing Baby Shark

Tikz: Perpendicular FROM a line

How do I fight with Heavy Armor as a Wizard with Tenser's Transformation?

What do "compile" , "fit" and "predict" do in Keras sequential models?

Minimum Viable Product for RTS game?

Is "accuse people to be racist" grammatical?

Is Screenshot Time-tracking Common?

How do I narratively explain how in-game circumstances do not mechanically allow a PC to instantly kill an NPC?

Is it possible to set values for a list of variables using a for loop?

Was there a pre-determined arrangment for division of Germany in case it surrendered before any Soviet forces entered its territory?

Using time travel without creating plot holes

Can you say "leftside right"?

How to know if I am a 'Real Developer'

Is there a way to pause a running process on Linux systems and resume later?

Boss asked me to sign a resignation paper without a date on it along with my new contract

Is it really OK to use "because of"?

Why write a book when there's a movie in my head?

Insufficient privilege

ORA-00942: table or view does not exist while creating synonymHow do I allow users to see grants, view definitions, PL/SQL, etc in a database without granting them access to change those objectsHow to connect multiple users/schemas in Oracle 11g?Privileges needed for Oracle TextPermissions on sys.sysloginsPerformance of VIEWs with UNIONs in different databasesHow to control access security in databaseORA-00942: table or view does not exist while creating synonymPUBLIC privilege potential security threat - Oracle databaseWhy can I execute this query but not see its execution plan?Can I not add VIEW SERVER STATE to a role?

1

We are using oracle 11g

I am replicating production db for dev environment.
I Have a user named CST2 and CST0 where CST0 contains all tables and view and public synonyms for the same. I have provided same set of privileges for CST2 in dev env as in production.

There is a view named Product(based on product_info and product_ainfo) in CST0 which can be accessed by CST2 in production(Did select). but doing the same in replicated dev env is giving the error insufficient privilege.

I checked following means from which the user can get privileges.

1. the roles assigned are same and privileges for that roles are also same.


2. usr_tab_privs are same


3. usr_sys_priv are same

I cant find out how the CST2 in prod is able to access view 'product' in CST0 as it got no privilege through roles or tab_privs.

Am I missing any other way by which CST2 in prod got privilege which I do grant in dev.?

oracle view permissions

share|improve this question

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

bumped to the homepage by Community♦ 3 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What DB engine please?
  
  – gbn
  Dec 5 '14 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @gbn sorry for that.. its oracle
  
  – Vishwanath gowda k
  Dec 5 '14 at 9:53
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I assume that you already have compared the public synonyms and the synonyms of the CST02 user and the roles granted to roles (if there are such roles) and have not found any differences. You should try to create another user on the production system with the same privileges as CST2 and revoke successively the grants to find out what is responsible for accessing the view. How is the production replicated to dev?
  
  – miracle173
  Dec 7 '14 at 5:42
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @miracle I don not have permission on prod system to do as you suggested.
  
  – Vishwanath gowda k
  Dec 7 '14 at 5:50
  

  
  
  
  

add a comment | 

1

We are using oracle 11g

I am replicating production db for dev environment.
I Have a user named CST2 and CST0 where CST0 contains all tables and view and public synonyms for the same. I have provided same set of privileges for CST2 in dev env as in production.

There is a view named Product(based on product_info and product_ainfo) in CST0 which can be accessed by CST2 in production(Did select). but doing the same in replicated dev env is giving the error insufficient privilege.

I checked following means from which the user can get privileges.

1. the roles assigned are same and privileges for that roles are also same.


2. usr_tab_privs are same


3. usr_sys_priv are same

I cant find out how the CST2 in prod is able to access view 'product' in CST0 as it got no privilege through roles or tab_privs.

Am I missing any other way by which CST2 in prod got privilege which I do grant in dev.?

oracle view permissions

share|improve this question

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

bumped to the homepage by Community♦ 3 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  What DB engine please?
  
  – gbn
  Dec 5 '14 at 7:28
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @gbn sorry for that.. its oracle
  
  – Vishwanath gowda k
  Dec 5 '14 at 9:53
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I assume that you already have compared the public synonyms and the synonyms of the CST02 user and the roles granted to roles (if there are such roles) and have not found any differences. You should try to create another user on the production system with the same privileges as CST2 and revoke successively the grants to find out what is responsible for accessing the view. How is the production replicated to dev?
  
  – miracle173
  Dec 7 '14 at 5:42
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @miracle I don not have permission on prod system to do as you suggested.
  
  – Vishwanath gowda k
  Dec 7 '14 at 5:50
  

  
  
  
  

add a comment | 

We are using oracle 11g

I am replicating production db for dev environment.
I Have a user named CST2 and CST0 where CST0 contains all tables and view and public synonyms for the same. I have provided same set of privileges for CST2 in dev env as in production.

There is a view named Product(based on product_info and product_ainfo) in CST0 which can be accessed by CST2 in production(Did select). but doing the same in replicated dev env is giving the error insufficient privilege.

I checked following means from which the user can get privileges.

1. the roles assigned are same and privileges for that roles are also same.


2. usr_tab_privs are same


3. usr_sys_priv are same

I cant find out how the CST2 in prod is able to access view 'product' in CST0 as it got no privilege through roles or tab_privs.

Am I missing any other way by which CST2 in prod got privilege which I do grant in dev.?

oracle view permissions

share|improve this question

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

share|improve this question

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

share|improve this question

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

edited Dec 7 '14 at 14:23

miracle173

6,5371837

edited Dec 7 '14 at 14:23

miracle173

6,5371837

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

asked Dec 5 '14 at 3:41

Vishwanath gowda kVishwanath gowda k

11816

1 Answer
1

active

oldest

votes

0

An issue I found on a similar problem was that the ‘first’ grant on the object had to be done ‘with grant option’.

Eg for the issue above, this would therefore mean:

GRANT SELECT ON <underlying table owner>.<table_name> TO CST0 WITH GRANT OPTION;

Then running

GRANT SELECT ON <schema>.<view_name> TO CST0;

should work.

Note this this ‘foundation’ grant will need to be repeated for each of the underlying table owner>. which forms part of the view definition.

share|improve this answer

answered Dec 11 '14 at 16:30

SteliosStelios

201312

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "182"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fdba.stackexchange.com%2fquestions%2f84393%2finsufficient-privilege%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

An issue I found on a similar problem was that the ‘first’ grant on the object had to be done ‘with grant option’.

Eg for the issue above, this would therefore mean:

GRANT SELECT ON <underlying table owner>.<table_name> TO CST0 WITH GRANT OPTION;

Then running

GRANT SELECT ON <schema>.<view_name> TO CST0;

should work.

Note this this ‘foundation’ grant will need to be repeated for each of the underlying table owner>. which forms part of the view definition.

share|improve this answer

answered Dec 11 '14 at 16:30

SteliosStelios

201312

add a comment | 

0

An issue I found on a similar problem was that the ‘first’ grant on the object had to be done ‘with grant option’.

Eg for the issue above, this would therefore mean:

GRANT SELECT ON <underlying table owner>.<table_name> TO CST0 WITH GRANT OPTION;

Then running

GRANT SELECT ON <schema>.<view_name> TO CST0;

should work.

Note this this ‘foundation’ grant will need to be repeated for each of the underlying table owner>. which forms part of the view definition.

share|improve this answer

answered Dec 11 '14 at 16:30

SteliosStelios

201312

add a comment | 

An issue I found on a similar problem was that the ‘first’ grant on the object had to be done ‘with grant option’.

Eg for the issue above, this would therefore mean:

GRANT SELECT ON <underlying table owner>.<table_name> TO CST0 WITH GRANT OPTION;

Then running

GRANT SELECT ON <schema>.<view_name> TO CST0;

should work.

Note this this ‘foundation’ grant will need to be repeated for each of the underlying table owner>. which forms part of the view definition.

share|improve this answer

answered Dec 11 '14 at 16:30

SteliosStelios

201312

GRANT SELECT ON <underlying table owner>.<table_name> TO CST0 WITH GRANT OPTION;

GRANT SELECT ON <schema>.<view_name> TO CST0;

share|improve this answer

answered Dec 11 '14 at 16:30

SteliosStelios

201312

answered Dec 11 '14 at 16:30

SteliosStelios

201312

answered Dec 11 '14 at 16:30

SteliosStelios

201312