RE: Error while executing stored procedure as system user

[Christopher Spence]

When you use privileges in stored procedures, you need to have the privilege
explicitly.  In other words, you cannot get the privilege from a role.

If you do a grant create user to MyRole.
Grant myRole to myUser.

Then try to create user as myUser it will work, but if you try to create
user from a procedure as myUser it will fail.


Walking on water and developing software from a specification are easy if
both are frozen.

Christopher R. Spence
Oracle DBA
Fuelspot 



-Original Message-
Sent: Tuesday, May 29, 2001 6:50 AM
To: Multiple recipients of list ORACLE-L


Dear DBA Gurus,

I am able to execute the below code as an anonymous Pl/Sql block but when I
incorporate it in a stored procedure the procedure gets created but I am
getting the below errors while executing the procedure as system user:

Anonymous Pl/Sql block

Declare
name varchar2(4):='test';
BEGIN
   EXECUTE IMMEDIATE 'create user ' ||name||' '||'identified by '||name||'
'||
   'default tablespace users temporary tablespace temp';
   EXECUTE IMMEDIATE 'grant connect, resource to ' ||name;
   EXECUTE IMMEDIATE 'create table '||name||'.aaa(a number)';
   EXECUTE IMMEDIATE 'create table '||name||'.bbb(b number)';
END;

Stored Procedure

create or replace procedure create_user (name IN VARCHAR2)
IS
BEGIN
   EXECUTE IMMEDIATE 'create user ' ||name||' '||'identified by '||name||'
'||
   'default tablespace users temporary tablespace temp';
   EXECUTE IMMEDIATE 'grant connect, resource to ' ||name;
   EXECUTE IMMEDIATE 'create table '||name||'.aaa(a number)';
   EXECUTE IMMEDIATE 'create table '||name||'.bbb(b number)';
END;
/

Procedure Created.

Errors while executing the procedure

exec create_user('test');

ERROR at line 1:
ORA-01031: insufficient privileges
ORA-06512: at SYSTEM.CREATE_USER, line 4
ORA-06512: at line 1

What might be the reason for the errors?  Can anyone help me?

TIA and Regards,

Ranganath


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Ranganath K
  INET: [EMAIL PROTECTED]

Fat City Network Services-- (858) 538-5051  FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists

To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Christopher Spence
  INET: [EMAIL PROTECTED]

Fat City Network Services-- (858) 538-5051  FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists

To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

RE: Error while executing stored procedure as system user - Solved

[Ranganath K]

Dear DBA Gurus,

I solved the problem by incorporating the authid current_user clause.  I
didn't explicitly grant any roles or privileges to system user.  The
modified code is as
below:

create or replace procedure create_user (name IN VARCHAR2)
authid current_user
IS
BEGIN
   EXECUTE IMMEDIATE 'create user ' ||name||' '||'identified by '||name||'
'||
   'default tablespace users temporary tablespace temp';
   EXECUTE IMMEDIATE 'grant connect, resource to ' ||name;
   EXECUTE IMMEDIATE 'create table '||name||'.aaa(a number)';
   EXECUTE IMMEDIATE 'create table '||name||'.bbb(b number)';
END;

Thanks Amol Joshi for giving the suggestion to use auth_id current_user
clause in the stored procedure code.

Regards,

Ranganath


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Ranganath K
  INET: [EMAIL PROTECTED]

Fat City Network Services-- (858) 538-5051  FAX: (858) 538-5051
San Diego, California-- Public Internet access / Mailing Lists

To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).