| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: ORA-01720 while trying to grant select on a view
See the Metalink Note below
Subject: grant select on view with grant option
RDBMS Version: 81511
Operating System and Version: nt 4 sp 5
Error Number (if applicable): ora-1720
Product (i.e. SQL*Loader, Import, etc.):
Product Version:
grant select on view with grant option
I am having a problem with a grant. Here is the scenario.
User A has created view V in user A's schema. View V is based on table T in schema B. User A and C have select privs on table T in schema B via ROLE R. User A tries to grant select on view V to user C and gets the following error:
ORA-01720 grant option does not exist for 'B.T'
It is true that user A does not have select on B.T with grant option, but user C already has select privs on table T. I do want to grant with grant option to users as it is to much maintenance. Is there another way to deal with this kind of a situtation?
From: Ramesh Bala 12-Jul-01 22:42
Subject: Re : grant select on view with grant option
Hi Jonathan,
If your view is based on an underlying table from one schema just like what you described, you can create the view in the same schema and grant select on the view to users. That is create View V in schema B instead of user A and grant select on view V to both A & C.
If your view depends on tables from multiple schemas (like View V is based on B.T1 and D.T2) then you may be better off creating this view in an administrative user's schema which has privileges to both B.T1 and D.T2. Then grant view V to users A & C from the admin user who owns this view. In this case, only the admin user needs to have grant option for the underlying tables.
From: Oracle, Reem Munakash 13-Jul-01 18:57 Subject: Re : grant select on view with grant option
If userA wants to grant userC access to it's view, it will need 'with grant option' on the base table. This is even true if the table grant is made to PUBLIC. When userA goes to issue the grant, all we do is see if he has the privilges, we don't make that extra check to see if the grantee already has access to the object.
There is no way around this unless you have UserB create the view.
Reem Munakash
Electronic Support
From: Chan McMurray 13-Jul-01 19:36
Subject: Re : grant select on view with grant option
thank you, Reem. that confirms what I found.
-----Original Message-----
From: Ranganath, Krishnaswamy [mailto:rangak_at_tanning.com]
Sent: 09 November 2001 09:35
To: Multiple recipients of list ORACLE-L
Subject: ORA-01720 while trying to grant select on a view
Hi DBA Gurus,
I am getting the below error while trying to grant select privileges
on a view owned by a user by name GCSS to another user by name etldev:
ORA-01720: grant option does not exist for 'SYS.V_$INSTANCE'
I even granted select on sys.v_$instance to etldev. Still the
problem persists. What could be the problem? Anybody can throw some light
on this?
Thanks and Regards,
KR
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Ranganath, Krishnaswamy INET: rangak_at_tanning.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). ********************************************************************** This email and any attachments may be confidential and the subject of legal professional privilege. Any disclosure, use, storage or copying of this email without the consent of the sender is strictly prohibited. Please notify the sender immediately if you are not the intended recipient and then delete the email from your inbox and do not disclose the contents to another person, use, copy or store the information in any medium. **********************************************************************Received on Fri Nov 09 2001 - 07:17:53 CST
 |
 |