Found ORA-20072: insufficient privileges when run user package

Question

We use workspace manager
enable version table : FEED_ADMIN.FEED_SET
login with my username : KTEERAYUT that have dba privilege
If we run dbms_wm in sqlplus. It work properly.
KTEERAYUT@BKKXE > BEGIN
2 dbms_wm.Beginresolve('D_1_1');
3 dbms_wm.resolveconflicts('D_1_1','FEED_ADMIN.FEED_SET','','PARENT');
4 COMMIT;
5 dbms_wm.rollbackresolve('D_1_1');
6 COMMIT;
7 END;
PL/SQL procedure successfully completed.
Then try create as procedure with FEED_ADMIN owner.
create procedure feed_admin.test_resolveconflicts_wm(p_workspace_name varchar2)
as
begin
dbms_wm.Beginresolve(p_workspace);
dbms_wm.resolveconflicts(p_workspace,'FEED_ADMIN.FEED_SET','','PARENT');
COMMIT;
dbms_wm.rollbackresolve(p_workspace);
COMMIT;
END;
Then test run with KTEERAYUT
KTEERAYUT@BKKXE > BEGIN
2 feed_admin.test_resolveconflicts_wm('D_1_1');
3 end;
4 /
begin
ERROR at line 1:
ORA-20072: insufficient privileges on 'FEED_ADMIN.FEED_SET'
ORA-06512: at "WMSYS.LT", line 8615
ORA-06512: at "FEED_ADMIN.TEST_RESOLVECONFLICTS_WM", line 5
ORA-06512: at line 2
I already grant all on FEED_ADMIN.FEED_SET to KTEERAYUT but it's still error.
Anyway It work properly if connect and execute with FEED_ADMIN.
So Can I run the package with another username? Which privilege that it's required?

Answer 1

Hi Ben,
Thanks for reply. Version of workspace manager is 10.2.0.4.4 on oracle 10.2.0.4 platform is window server 2003 sp2
Below is more detail.
1. Grant workspace manager privs to both user (KTEERAYUT also have dba privs)
GRANT EXECUTE ON dbms_lock TO feed_admin;
GRANT ROLE WM_ADMIN_ROLE TO feed_admin;
GRANT SELECT ON DBA_WORKSPACE_SESSIONS TO feed_admin;
begin
dbms_wm.grantSystemPriv (
'ACCESS_ANY_WORKSPACE, ' ||
'MERGE_ANY_WORKSPACE, ' ||
'CREATE_ANY_WORKSPACE, ' ||
'REMOVE_ANY_WORKSPACE, ' ||
'ROLLBACK_ANY_WORKSPACE',
'feed_admin',
'YES');
END;
GRANT EXECUTE ON dbms_lock TO KTEERAYUT;
GRANT ROLE WM_ADMIN_ROLE TO KTEERAYUT;
GRANT SELECT ON DBA_WORKSPACE_SESSIONS TO KTEERAYUT;
begin
dbms_wm.grantSystemPriv (
'ACCESS_ANY_WORKSPACE, ' ||
'MERGE_ANY_WORKSPACE, ' ||
'CREATE_ANY_WORKSPACE, ' ||
'REMOVE_ANY_WORKSPACE, ' ||
'ROLLBACK_ANY_WORKSPACE',
'apex',
'YES');
END;
2. FEED_ADMIN create table FEED_SET and enable version for FEED_ADMIN.FEED_SET
CREATE TABLE feed_admin.feed_set
(feed_set_id NUMBER PRIMARY KEY,
feed_set_name VARCHAR2(30)
GRANT ALL ON feed_admin.feed_set TO kteerayut;
BEGIN
dbms_wm.enableversioning('feed_set','VIEW_WO_OVERWRITE');
END;
SELECT * FROM ALL_WM_VERSIONED_TABLES;
INSERT INTO feed_admin.feed_set
VALUES (1,'new feed set');
COMMIT;
3. KTEERAYUT create workspace name : WORK
BEGIN
dbms_wm.gotoworkspace('LIVE');
     COMMIT;
     dbms_wm.createworkspace('WORK_TEST');
     dbms_wm.gotoworkspace('WORK_TEST');
     COMMIT;
END;
SELECT * FROM feed_admin.feed_set;
FEED_SET_ID FEED_SET_NAME
1 new feed set
4. FEED_ADMIN create procedure name : TEST_REFRESH and grant execute privs to KTEERAYUT
create or replace procedure FEED_ADMIN.Test_refresh is
BEGIN
dbms_wm.Beginresolve('WORK');
dbms_wm.resolveconflicts('WORK','feed_admin.feed_set','','PARENT');
COMMIT;
dbms_wm.Commitresolve('WORK');
COMMIT;
dbms_wm.refreshworkspace('WORK');
end Test_refresh;
GRANT EXECUTE ON Test_refresh TO KTEERAYUT;
5. Login with KTEERAYUT.
5.1 test directly command via sql*plus
BEGIN
dbms_wm.Beginresolve('WORK');
dbms_wm.resolveconflicts('WORK','feed_admin.feed_set','','PARENT');
COMMIT;
dbms_wm.Commitresolve('WORK');
COMMIT;
dbms_wm.refreshworkspace('WORK');
END;
PL/SQL procedure successfully completed.
5.2 but it will fail when call via procedure
BEGIN
feed_admin.Test_refresh;
END;
ERROR at line 1:
ORA-20072: insufficient privileges on 'FEED_ADMIN.FEED_SET'
ORA-06512: at "WMSYS.LT", line 8615
ORA-06512: at "FEED_ADMIN.TEST_REFRESH", line 4
ORA-06512: at line 2
Regards.