create table command fails when user has create table privilege

Question

create table command fails when user has create table privilege

scb1776 (Programmer)

(OP)

10 Sep 13 19:12

selecting from dba_sys_privs shows the grantee with CREATE SESSION, CREATE TABLE, and UNLIMITED TABLESPACE permissions (the ADM column is NO)

The command :
create table s ( valkey varchar2(40), today float, primary key (valkey));
Fails with ORA-01031: insufficient privileges

What other privileges are necessary if CREATE TABLE is already granted?

yelworcm (MIS) · Answer 1 · 2013-09-11 09:46:56

What is the user's default tablespace? At a guess, I am thinking it is not the same as the tablespace he has unlimited permissions on.

SantaMufasa (TechnicalUser) · Answer 2 · 2013-09-11 11:27:07

SCB,

Here is my transcript that duplicates your scenario:

CODE

SQL> create user scb identified by scb;

User created.

SQL> grant create session, create table, unlimited tablespace to scb;

Grant succeeded.

SQL> conn scb/scb
Connected.
SQL> create table s ( valkey varchar2(40), today float, primary key (valkey));

Table created.

So, everything seems to work satisfactorily given your specifications. Do you see any differences between my creation/specification of my user "SCB" and yours?

santa Mufasa
(aka Dave of Sandy, Utah, USA)
“People may forget what you say, but they will never forget how you made them feel."

scb1776 (Programmer) · Answer 3 · 2013-09-19 14:21:02

Thanks all for your help. We ended up delegating the specific tasks needed to one user with DBA privilege.

SantaMufasa (TechnicalUser) · Answer 4 · 2013-09-19 15:22:24

But, SCB, given my CREATE USER statement, above, that table-creating user has only create session, create table, and unlimited tablespace privileges. A DBA should not be necessary to successfully CREATE TABLE. Can you or your DBA please troubleshoot the differences between my successful experience and your initial, unsuccessful experience?

santa Mufasa
(aka Dave of Sandy, Utah, USA)
“People may forget what you say, but they will never forget how you made them feel."

scb1776 (Programmer) · Answer 5 · 2013-09-19 16:10:29

This is being done for an existing user. As I am not the DBA I am not sure how the user was created, however using the DBA account :
setting current_schema to dvpp717

Session altered.

dvpp717> grant create session, create table, unlimited tablespace to ops$scb;

Grant succeeded.
Then, logging in as scb in a different xterm:
setting current_schema to dvpp717

Session altered.

dvpp717> create table s (valkey varchar2(40), today float, primary key (valkey));
create table s (valkey varchar2(40), today float, primary key (valkey))
*
ERROR at line 1:
ORA-01031: insufficient privileges

So although it appears that it should work my user still does not have sufficient privileges. I have also tried running the grant command without setting the current schema and that has the same results.

As the user who needs to be able to perform this task performs very specific functionality it was deemed acceptable to allow him DBA status which resolved the problem.

yelworcm (MIS) · Answer 6 · 2013-09-19 16:23:58

Can you toss in a

CODE

select user from dual;

in there, just for yuks and grins?

scb1776 (Programmer) · Answer 7 · 2013-09-19 16:34:33

Sure:

setting current_schema to dvpp717

Session altered.

dvpp717> select user from dual;

USER
------------------------------
OPS$SCB

karluk (MIS) · Answer 8 · 2013-09-19 16:39:04

Doesn't ops$scb need "create any table" privileges to create a table in the dvpp717 schema?

SantaMufasa (TechnicalUser) · Answer 9 · 2013-09-20 15:24:49

Ah, SCB, there's the rub...in your original post, you left out the teensy, tiny fact that user X was creating a table in the user Y schema. So, KarlUK is absolutely correct...if you wish to create a table in another schema, the creator needs the create any table privilege, which user OPS$SCB apparently does not have, even if s/he does successfully run the alter session set current_schema=dvpp717 command.

santa Mufasa
(aka Dave of Sandy, Utah, USA)
“People may forget what you say, but they will never forget how you made them feel."

Come Join Us!

Posting Guidelines

create table command fails when user has create table privilege