Home » RDBMS Server » Server Utilities » ORA_06512 (oracle 10.2.0.4 - Windows server 2003)
ORA_06512 [message #617756] Thu, 03 July 2014 06:31 Go to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi,

Need a help on the issue of:

Part of audit, we have to revoke below privielges from a backup user.


ALL_DB_LINKS
ALL_SOURCE
ALL_TAB_PRIVS
ALL_USERS
DBA_HIST_DATABASE_INSTANCE
DBA_HIST_SNAPSHOT
DBMS_WORKLOAD_REPOSITORY
V_$INSTANCE
CREATE ANY JOB


But the backup user is having the role of EXP_FULL_DATABASE and IMP_FULL_DATABASE through a ROLE.

After revoking those privs, we are are getting the below error message.

/forum/fa/12003/0/

Thanks and regards
Muktha
Re: ORA_06512 [message #617768 is a reply to message #617756] Thu, 03 July 2014 07:58 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Grant back the necessary privileges or roles.

You don't need to post an image when you want to post some text, post the text itself and post it formatted.

Re: ORA_06512 [message #617841 is a reply to message #617768] Thu, 03 July 2014 22:53 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

Sorry if i am wrong.

For exporting a full database, the required privileges are "EXP_FULL_DATABASE and IMP_FULL_DATABASE".
It had already been granted through a role.

After that only those above mentioned privileges are removed.

Kindly suggest.

Regards
Muktha
Re: ORA_06512 [message #617849 is a reply to message #617841] Fri, 04 July 2014 01:18 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Suggest what to do what?

Re: ORA_06512 [message #617855 is a reply to message #617849] Fri, 04 July 2014 01:34 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

I am really confused,

None of the above mentioned privileges are relevant to the EXPORT full database.
Then why it is not working, which privilege should I grant?

Thanks
Muktha
Re: ORA_06512 [message #617859 is a reply to message #617855] Fri, 04 July 2014 01:48 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

What does the documentation say?

Re: ORA_06512 [message #617861 is a reply to message #617859] Fri, 04 July 2014 01:55 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

It says, EXP_FULL_DATABASE and IMP_FULL_DATABASE roles are enough.

Muktha
Re: ORA_06512 [message #617863 is a reply to message #617861] Fri, 04 July 2014 02:08 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

And which command are you trying to execute (I'm amazed that you still don't know you have to post what you're trying to execute when you get an error)?

Re: ORA_06512 [message #617868 is a reply to message #617863] Fri, 04 July 2014 02:49 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

1) We do take export backup everyday with the below mentioned commeand
expdp abc/.... directory=**** dumpfile=WPM_Export.dmp logfile=WPM_Export.log full=y


2) Part of a audit purpose, we need to revoke above mentioned privileges from this user.

3) After this step, we were not able to run the same command successfully, getting the error (mentioned above).

I hope none of those mentioned privileges are related to export a full backup.

Kindly help

Thanks
Muktha
Re: ORA_06512 [message #617882 is a reply to message #617868] Fri, 04 July 2014 03:41 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Here's the methodology to debug your problem:
1/ Try to export a table of the user with its account. Is it able to do it? No, the first problem is there, search why; yes, go to 2
2/ Create a new user, try to export it with its account, add the needed privileges and retry. When it's done, add the role, is it able to full export now?

Re: ORA_06512 [message #617931 is a reply to message #617882] Fri, 04 July 2014 09:57 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

What are the results of your experiments?

Re: ORA_06512 [message #618255 is a reply to message #617931] Thu, 10 July 2014 02:27 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

Sorry for the delay, actually fall in sick.

Actual problem I found is, the Priv "ALL_USERS".
It is required while exporting the full database, as it needed for referring all the user details.

Where I made mistake was removing the privilege "select on ALL_USERS" (part of auditing) after providing the role of EXP_FULL_DATABASE and IMP_FULL_DATABASE.

Now it is working fine,

Thanks
Muktha
Re: ORA_06512 [message #618262 is a reply to message #618255] Thu, 10 July 2014 02:53 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

You should not to grant this privilege, all users (PUBLIC) is granted this privilege by default.
You should investigate why this privilege is no more granted to PUBLIC.

Re: ORA_06512 [message #618278 is a reply to message #618262] Thu, 10 July 2014 04:40 Go to previous messageGo to next message
muktha_22
Messages: 527
Registered: December 2009
Senior Member
Hi Michel,

Again, Because of audit purpose, we have removed that priv from public and granted to all the OPEN STATE users.

Regards
Muktha
Re: ORA_06512 [message #618279 is a reply to message #618278] Thu, 10 July 2014 05:10 Go to previous message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

You mean the audit leads to revoke SELECT on ALL_USERS to PUBLIC? I understand this, I even asked, many years ago, Oracle to change its view to show only users that can be seen in other views like ALL_OBJECTS (that is only users for which the current user has an access right on one of its objects).
But you have to know that Oracle does not support databases where privileges have been revoked from PUBLIC (but for a couple ones enumerated in a MOS] document).

Previous Topic: SQL LOADER issue upon loading CSV records
Next Topic: NLS_DATE_FORMAT in init.ora
Goto Forum:
  


Current Time: Thu Mar 28 11:09:05 CDT 2024