10g R2 problem: CREATE VIEW

Question

Hello,
I noticed with 10g R2 SE that the RESOURCE Role no longer contains the "CREATE VIEW" Privilege. On Standard Edition this is not that bad, cause we use user defined roles anyway. However since the GUI of XE is optimized for CONNECT/RESOURCE/DBA is really bad, that you cant create views as the RESOURCE user.
It helps to run
GRANT CREATE VIEW TO "RESOURCE";
Greetings
Bernd
Chief Architect (R&D) SEEBURGER AG - http://www.seeburger.com
German Personal IT-Blog http://itblog.eckenfels.net

Answer 1

Not sure if I get this right... but.
When going through the user creation wizard in the web gui there are three roles checkboxes to grant the user RESOURCE, CONNECT and DBA roles.
What is not listed is that the user will be granted a number of "plain" priviledges as well when the user logins in to HTMLDB the first time.
So even if the role CONNECT role lacks the "CREATE VIEW" priviledge the user will still be granted "CREATE VIEW", given that the user login to HTMLDB at one point.
I think Bernds' point is this;
When creating a user in sqlplus and granting the RESOURCE, CONNECT roles in 9i the user had the "CREATE VIEW" priv from the CONNECT role, however in 10g the user doesn't.
When creating a user in HTMLDB in XE the user do have the "CREATE VIEW" privilege (where the sysdba user only sees the RESOURCE and CONNECT roles as checkboxes, not the list of plain privileges granted).
-- Example scenario --
I use the HTMLDB Create user feature to create 'SALLY'.
In my ssh window running sqlplus I do:
SQL> select GRANTEE, PRIVILEGE from dba_sys_privs where grantee='SALLY';
GRANTEE PRIVILEGE
SALLY UNLIMITED TABLESPACE
Ok, all good.
Now I login to HTMLDB as Sally, just looking at the first screen, I do nothing else.
Back to my SSH window.
SQL> select GRANTEE, PRIVILEGE from dba_sys_privs where grantee='SALLY';
GRANTEE PRIVILEGE
SALLY CREATE TABLE
SALLY CREATE SEQUENCE
SALLY CREATE JOB
SALLY CREATE TRIGGER
SALLY CREATE PROCEDURE
SALLY CREATE CLUSTER
SALLY UNLIMITED TABLESPACE
SALLY CREATE MATERIALIZED VIEW
SALLY CREATE DIMENSION
SALLY CREATE INDEXTYPE
SALLY CREATE LIBRARY
SALLY CREATE DATABASE LINK
SALLY CREATE SYNONYM
SALLY CREATE ANY CONTEXT
SALLY CREATE TYPE
SALLY CREATE OPERATOR
SALLY CREATE VIEW
17 rows selected.
Why is Sally granted 16 roles just by logging in to HTMLDB?
This this a feature or a bug? ;)