Yong, You said "It's not always easy to have a futuristic view to avoid potential problems. The developer probably shouldn't have granted anything to internal back then. But it wasn't obvious at that time that doing so could cause a problem later."
I totally disagree with you. Your quote implies that it is ok for developers to be using the SYS account - which is what Internal actually is. This is totally wrong. Sys/Internal is for creating/patching the database - for internal use only - never for application use. Tom Mercadante Oracle Certified Professional -----Original Message----- Sent: Tuesday, November 18, 2003 11:49 AM To: Multiple recipients of list ORACLE-L Barry, I suggest you open a Tar with Oracle, unless you're sure changing your application is easy. Oracle obviously missed this little detail by over-rejecting a previously legitimate role. If 9i's Release note doesn't say how to deal with this case, then Oracle support should open a bug. Tom, It's not always easy to have a futuristic view to avoid potential problems. The developer probably shouldn't have granted anything to internal back then. But it wasn't obvious at that time that doing so could cause a problem later. Yong Huang --- Barry Deevey <[EMAIL PROTECTED]> wrote: > This would explain why it worked when I tried it on oracle 8 then. > > The developers that originally created the application left quite a while > ago, so I don't think I'll be able to ask them why they did it this way. > But basically you're saying that it shouldn't have been done like this and > now it needs to be changed. > > Not the answer I was hoping for, but at least now I know!! > > Thanks for your help all. > > -----Original Message----- > Mercadante, Thomas F > Sent: 18 November 2003 14:54 > To: Multiple recipients of list ORACLE-L > > > Yong, > > It seems to me that you are missing the point here. The real point is that > you should not have granted "select on some table to internal" - ever. And > a new release caught you on this mistake. And now, you have to fix it. It > is not an Oracle problem, but a mis-use of an Oracle "internal" user. > > What you did implies that you are running sql statements while connected as > internal. Why in the world you would take this chance is beyond me - > strictly a no-no. > > Tom Mercadante > Oracle Certified Professional > > > -----Original Message----- > Sent: Tuesday, November 18, 2003 8:59 AM > To: Multiple recipients of list ORACLE-L > > > Tim, > > I checked v$reserved_words. At least in 9.2.0.1, INTERNAL is not in there. > Oracle should address this issue. > > When I trace the SQL GRANT SELECT ON SOMETABLE TO INTERNAL, it stops in > parsing. > > Nonetheless, it's confusing to say the least to create a role called > internal. > > Yong Huang > > --- Tim Gorman <[EMAIL PROTECTED]> wrote: > > Barry, > > > > Why make life difficult? It's just a role, not a data > > object referenced by applications (hopefully). Change it's > > name to something that is not a "reserved word" and move on. > > There is a list of "reserved words" in the SQL Language > > reference. > > > > Hope this helps... > > > > -Tim > > > > > > > Hello all, > > > > > > I'm attempting to import into 9.2.0.1.0 from 7.3.4 and I'm > > > getting loads of the same error: > > > > > > IMP-00017: following statement failed with ORACLE error > > > 9275: > > > "GRANT SELECT ON "DOWNLOAD_SEQ" TO "INTERNAL"" > > > IMP-00003: ORACLE error 9275 encountered > > > ORA-09275: CONNECT INTERNAL is not a valid DBA connection > > > > > > I'm aware that connect internal does not exist in 9i, but > > > 'internal' is a role. > > > > > > So as a test I dropped the role, recreated it and then > > > manually tried to grant it something - The same error > > > occurred: > > > SQL> select * from dba_roles where role like 'INTER%'; > > > > > > ROLE PASSWORD > > > ------------------------------ -------- > > > INTERNAL NO > > > > > > SQL> > > > SQL> drop role internal; > > > > > > Role dropped. > > > > > > SQL> create role internal; > > > > > > Role created. > > > > > > SQL> GRANT SELECT ON DOWNLOAD_SEQ TO INTERNAL; > > > GRANT SELECT ON DOWNLOAD_SEQ TO INTERNAL > > > * > > > ERROR at line 1: > > > ORA-09275: CONNECT INTERNAL is not a valid DBA connection > > > > > > SQL> > > > > > > This doesn't make any sense to me. Can anybody help to > > > shed any light on this?? > > > > > > TIA for any response, they're much appreciated. > > > > > > Cheers, > > > Barry > > __________________________________ > Do you Yahoo!? > Protect your identity with Yahoo! Mail AddressGuard > http://antispam.yahoo.com/whatsnewfree > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Yong Huang > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Mercadante, Thomas F > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Barry Deevey > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). __________________________________ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Yong Huang INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mercadante, Thomas F INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
