Insufficient privilege: Not authorized at ptime/query/checker/query_check.cc on hdbsequence

Hi All,
I am currently trying to create a table (TOPIC) and a sequence (SEQ_TOPIC_ID) in HCP, and a XSJS service on top of it to insert a entry to the table.
In my XS project, I placed a TOPIC.hdbtable and SEQ_TOPIC_ID.hdbsequence in it. Both table and sequence are generated correctly in my trial account schema in the hana db.
Then,in order to grant the access to the table and sequence , I also placed a file model_access.hdbrole in the project folder.
The content looks like follow:
role i065831trial.bubuwork.TopicCenter::model_access {
    application privilege: i065831trial.bubuwork.TopicCenter::Basic;
    sql object i065831trial.bubuwork.TopicCenter::TOPIC : SELECT,INSERT;
    sql object i065831trial.bubuwork.TopicCenter::SEQ_TOPIC_ID : SELECT, DROP;
The issue is, when I call the XSJS service from the web url, I will facing below error:
Error while executing query: [dberror(Connection.prepareStatement): 258 - insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:2547]
the role has been granted to my account, and I am able to insert to the table TOPIC without sequence with above role setting, but If I try to read the SEQ_TOPIC_ID, an insufficient privilege will shown up.
My question is: Is following line correct to grant the privilege to a role for sequence ? It does not seem to work for sequence  !
sql object i065831trial.bubuwork.TopicCenter::SEQ_TOPIC_ID : SELECT, DROP;
Thanks very much!

Thanks Thomas for your reply, firstly I tried to embed my sequence in the insert SQL, as the problem happened. I pulled out the sequence into a single query string, like blow:
var select_topic_next_val = "select \"i065831trial.bubuwork.TopicCenter::SEQ_TOPIC_ID\".nextval as seqid from dummy";
function close(closables) {
    var closable; 
    var i; 
    for (i = 0; i < closables.length; i++) { 
              closable = closables[i]; 
              if(closable) { 
                        closable.close(); 
function insertTopic(xargs){
    var connection = $.db.getConnection(); 
    var statement = null;
    var resultSet = null;
    try{
        //get next sequence id
        statement = connection.prepareStatement(select_topic_next_val);
        resultSet = statement.executeQuery();
        while(resultSet.next()){
            var seqId = resultSet.getString(1);
            break;
//        statement = connection.prepareStatement(insert_topic_sql);
//        statement.setString(1,seqId);
//        statement.setString(2,xargs.owner);
//        statement.setString(3,xargs.approver);
//        statement.setString(4,xargs.name);
//        statement.setString(5,xargs.status);
//        statement.setString(6,xargs.description);
//        //statement.setTimestamp(6,xargs.lastModify);
//        statement.setTimestamp(7,null);
//        statement.setDate(8,xargs.begda);
//        statement.setDate(9,xargs.endda);
//        statement.setString(10,xargs.keyword);
//        statement.executeUpdate();
    }finally { 
        close([resultSet, statement, connection]); 

Similar Messages

  • AMDP syntax call to external procedure: "SQLScript message: insufficient privilege: Not authorized"

    I am getting the message "SQLScript message: insufficient privilege: Not authorized" in the syntax check in SE24 for an AMDP call to an external procedure which is not located in the default schema (located in schema MYSCHEMA).
    With DB_DBUSER & DB_DBSCHEMA I have confirmed the default user and schema to both be SAPHANAABAP.
    In HANA Studio the owner of schema MYSCHEMA has granted the following privileges:
    grant debug  on schema MYSCHEMA to SAPHANAABAP;
    grant select on schema MYSCHEMA to SAPHANAABAP;
    grant update on schema MYSCHEMA to SAPHANAABAP;
    grant delete on schema MYSCHEMA to SAPHANAABAP;
    grant insert on schema MYSCHEMA to SAPHANAABAP;
    grant attach debugger to SAPHANAABAP;
    What is the missing piece in this puzzle?

    Thanks

  • SAP DBTech JDBC: [258]: insufficient privilege: Not authorized - SAP HANA

    Dear All,
    We are getting the below error when we tried to call procedure ART_PROC using the SYSTEM user in SAP HANA Studio,
    Could not execute 'call "TESTECC"."ART_PROC"'
    SAP DBTech JDBC: [258]: insufficient privilege: Not authorized
    Kindly provide your suggestions on the same.
    Thanks
    Arun R

    Hello Arun,
    Firstly it is **not** recommended to use SYSTEM for anything other than management tasks.
    My Assumptions
    * the procedure ART_PROC was not created by the SYSTEM user
    Solution : you need to give EXECUTE privileges on the procedure to SYSTEM
    How: Only the user who created the procedure or who has been give grant privilege can give the EXECUTE privilege. SYSTEM cannot give itself this privilege
    For the Grant command check out sec 1.8.6.17 of the http://help.sap.com/hana/SAP_HANA_SQL_Script_Reference_en.pdf
    OR
    in the HANA Studio
    in the System tab expand the system with the log in user as the owner/grantor of the privilege
    here you will see a node called Security.
    Right-click and choose 'Find User/Role'
    Type System in the search dialog that opens - double click on SYSTEM user displayed below
    System user opens up - Navigate to Object Privileges tab
    here using the green '+' button  search for ART_PROC and then on the right side tick the 'Execute' checkbox
    click on save.
    Warm regards
    aadi

  • SAP DBTech JDBC: [258]: insufficient privilege: Not authorized

    I am using SAP HANA Cloud Trial; I created Analytic View based on two table dimension table and fact table, I can display content from both tables, but I can not display data preview from my Analytic View, getting authorization message;SAP DBTech JDBC: [258]: insufficient privilege: Not authorized.

    Hi,
    Please post this issue under SAP HANA Cloud Platform space. The platform experts should be able to help with that.
    Regards,
    Ifat.

  • AMDP call to Procedure: "SQLScript message: insufficient privilege: Not authorized"

    Hi!
    the syntax check in SE24 reports an error in line 1 in method MY_HANA_PROCEDURE (pls see first screenshot below). If I remove the call to procedure ZTEST in line 247 the syntax check is successfull. Development in SE24 is performed by user ABAPDEVELOPER whilst the procedure ZTEST has been created by user HANADEVELOPER which has been assigned the schema (the procedure is not in schema HANADEVELOPER) to which the procedure belongs the procedure being called (ZTEST) to the 'Object Privileges' (pls see second screenshot below).
    Any ideas out there?

    Hi,
    please check if all necessary authorizations have been granted to SAP<SID> using report RS_AMDP_SICK.
    Is the procedure you want to execute in the catalog, i.e. "_SYS_BIC" schema? Otherwise, you will have to grant the necessary authorizations to SAPHANAABAP (the DB user) for the schema.
    Best,
    Jasmin

  • Error in running a query in XSJS - column store error: [2950] user is not authorized :  at ptime/session/dist/RemoteQueryExecution.cc:1354]

    Hi All,
    I get the below error when i load my xsjs file in browser,
    Error while executing query: [dberror(PreparedStatement.executeQuery): 2048 - column store error: column store error: [2950] user is not authorized : at ptime/session/dist/RemoteQueryExecution.cc:1354]
    I am able to execute the same query in  HANA SQL editor
    Please note that ,No Analytical privileges are applied to the view.
    Could you please help solving this issue.
    Regards,
    Logesh Kumar.

    Hay,
    are you using the same Database user for both SQL Editor and XSJS ?
    try the following.
    Before executing the query , display it and copy the same from browser and execute in SQL editor.
    Put the statement in  a try catch block and analyse the exception .
    Sreehari

  • ORA-01031: insufficient privileges - NOT TRUE

    Oracle: 10.2.0.2.0
    Os: Solaris 10 (10/08 s10x_u6wos_07b X86)
    When I try to connect to db with sqlplus and not indicating SID it connets OK.
    -bash-3.00$ sqlplus sys/qaz123 as sysdba
    SQL*Plus: Release 10.2.0.2.0 - Production on Wed Jun 2 00:53:34 2010
    Copyright (c) 1982, 2005, Oracle.  All Rights Reserved.
    Connected to:
    Oracle Database 10g Release 10.2.0.2.0 - Production
    SQL>...but if I indicate SID name it returns me error: ORA-01031: insufficient privileges
    -bash-3.00$ sqlplus sys/qaz123@eric1 as sysdba
    SQL*Plus: Release 10.2.0.2.0 - Production on Wed Jun 2 00:44:13 2010
    Copyright (c) 1982, 2005, Oracle.  All Rights Reserved.
    ERROR:
    ORA-01031: insufficient privilegesSo it cant be insufficient privileges because, as u all see above, sys is able to connect. So whats wrong ?
    Edited by: user639256 on Jun 1, 2010 3:57 PM

    Hi Hemant,
    You didn't specify SID, you specified the TNS connection. A SYS (SYSDBA) connection via TNS is a REMOTE_LOGIN that requires additional configuration -- viz REMOTE_LOGIN_PASSWORDFILE.
    Please lookup the documentation.
    Hemant K Chitaleare sure this is true for connecting on local server?
    SQL> conn / as sysdba
    Connected.
    SQL> show parameter remote
    NAME                                 TYPE        VALUE
    remote_archive_enable                string      true
    remote_dependencies_mode             string      TIMESTAMP
    remote_listener                      string
    remote_login_passwordfile            string      EXCLUSIVE
    remote_os_authent                    boolean     FALSE
    remote_os_roles                      boolean     FALSE
    SQL> conn sys/oracle@orcl as sysdba
    Connected.
    SQL> alter system set remote_login_passwordfile=none;
    alter system set remote_login_passwordfile=none
    ERROR at line 1:
    ORA-02095: specified initialization parameter cannot be modified
    SQL> alter system set remote_login_passwordfile=none scope=spfile;
    System altered.
    SQL> startup force
    ORACLE instance started.
    Total System Global Area 1073741824 bytes
    Fixed Size                  1253124 bytes
    Variable Size             251658492 bytes
    Database Buffers          813694976 bytes
    Redo Buffers                7135232 bytes
    Database mounted.
    Database opened.
    SQL> show parameter remote
    NAME                                 TYPE        VALUE
    remote_archive_enable                string      true
    remote_dependencies_mode             string      TIMESTAMP
    remote_listener                      string
    remote_login_passwordfile            string      NONE
    remote_os_authent                    boolean     FALSE
    remote_os_roles                      boolean     FALSE
    SQL> conn sys/oracle@orcl as sysdba
    Connected.
    SQL> conn sys/oracle@navneet as sysdba
    Connected.
    SQL>Regards

  • Insufficient privilege when Activating an attribute view (person responsible for package = SYSTEM)

    Insufficient privilege when Activating an attribute view (person responsible for package = SYSTEM)
    SAP HANA Studio
    Version: 1.0.33
    Build id: 201206301604 (363996)
    Playing with the efashion tutorial with HANA Studio.
    I am SYSTEM user by default when starting the studio.
    -Schema created
    -DDL created
    -Data loaded
    -Attribute views created
    Below an extract of the error log:
    <info>Create Attribute View failed: SQL: transaction rolled back by an internal error: insufficient privilege: Not authorized

    Hello Anooj and Sri,
    Thank you for your answers, I really appreciate your inputs.
    So I executed this:
    "GRANT SELECT ON SCHEMA SYSTEM TO _SYS_REPO WITH GRANT OPTION;"
    Under the Studio SQL GUI and I still have the same error when activating my very simple attribute view.
    I have installed a recent HANA + Studio + Client release on my laptop:
      SAP HANA Studio
    Version: 1.0.33
    Build id: 201207050531 (364183)
    And yes, this is a demo and yes I am logged as the SYSTEM user (default user when stating the studio). For now, I dont know how to connect to another user with the studio and I will search the doumentation.
    Below a copy/past of the error msg.
    Internal deployment of object failed;Repository: Encountered an error in repository runtime extension;Internal Error:Deploy Attribute View: SQL: transaction rolled back by an internal error: insufficient privilege: Not authorized (ptime/query/plan_executor/ddl/qx_cube.cc:1514) n
    Create view DDL statement: CREATE COLUMN VIEW "_SYS_BIC"."efashion/ATV_OUTLET_LOOKUP" TYPE JOIN WITH PARAMETERS ( joinIndex = "EFASHION_TUTORIAL"."OUTLET_LOOKUP", joinIndexType = 0, viewAttribute = ('SHOP_ID', "EFASHION_TUTORIAL"."OUTLET_LOOKUP", "SHOP_ID", '', 'default', 'attribute', '', 'efashion/ATV_OUTLET_LOOKUP$SHOP_ID'), viewAttribute = ('SHOP_NAME', "EFASHION_TUTORIAL"."OUTLET_LOOKUP", "SHOP_NAME", '', 'default', 'attribute', '', 'efashion/ATV_OUTLET_LOOKUP$SHOP_NAME'), viewAttribute = ('MANAGER', "EFASHION_TUTORIAL"."OUTLET_LOOKUP", "MANAGER", '', 'default', 'attribute', '', 'efashion/ATV_OUTLET_LOOKUP$MANAGER'), viewAttribute = ('ZIP_CODE', "EFASHION_TUTORIAL"."OUTLET_LOOKUP", "ZIP_CODE", '', 'default', 'attribute', '', 'efashion/ATV_OUTLET_LOOKUP$ZIP_CODE'), viewAttribute = ('CITY', "EFASHION_TUTORIAL"."OUTLET_LOOKUP", "CITY", '', 'default', 'attribute', '', 'efashion/ATV_OUTLET_LOOKUP$CITY'), view = ('V_OUTLET_LOOKUP', "EFASHION_TUTORIAL"."OUTLET_LOOKUP"), defaultView = 'V_OUTLET_LOOKUP', 'REGISTERVIEWFORAPCHECK' = '1' )nVersion: 48n
    Thank you.
    Patrick

  • Import data from local file: insufficient privilege

    As part of a project I'm working on, I have to load data (only a few thousand records) into a HANA Development instance on HCP. Last week I did this several times with no problem using File > Import from HANA Studio and choosing Data From Local File. Yesterday and today I get this message (most of the time, but not all the time): SAP DBTech JDBC: [258]: insufficient privilege: Not authorized.
    Does anybody know why this might be and what do to about it?
    Are there batch alternatives? I have not found any. The INPUT INTO statement also gives authorization problems.

    Thanks for Your replies.
    Jochen - I can't find schema.ini file and your link doesn't work - I mean that site is under construction
    Mahesh - I tried to changed cells' format in excel, but file is saved without changes (as csv).
    Pandey - I read about DTW but I can't find it anywhere. Is there a site where it could be downloaded from?
    Finally I solved this problem. After saving file as xls I could changed cells' format and save with changes. It helped - data '1-10-103' is imported correctly.
    Regards,
    Hmg

  • I have enabled itunes share on an authorized computer but transferring music give me an error - not authorized.  This is not the case.  What am I missing?

    I have enabled iTunes shaing on an authorized computer.  Whenever I try to transfer a song from owner to a subdirectory on the authorized second computer
    It tells me it is not authorized.  Further query says it is.  What is the fix?  This is a rather aggravting situation.

    make sure on both computers it says autherized

  • ORA-01031: insufficient privileges in PL/SQL but not in SQL

    I have problem with following situation.
    I switched current schema to another one "ban", and selected 4 rows from "ed"
    alter session set current_schema=ban;
    SELECT * FROM ed.PS WHERE ROWNUM < 5;
    the output is OK, and I get 4 rows like
    ID_S ID_Z
    1000152 1
    1000153 1
    1000154 1
    1000155 1
    but following procedure is compiled with warning
    create or replace
    procedure proc1
    as
    rowcnt int;
    begin
    select count(*) into rowcnt from ed.PS where rownum < 5;
    end;
    "Create procedure, executed in 0.031 sec."
    5,29,PL/SQL: ORA-01031: insufficient privileges
    5,2,PL/SQL: SQL Statement ignored
    ,,Total execution time 0.047 sec.
    Could you help me why SELECT does work in SQL but not in PL/SQL procedure?
    Thanks.
    Message was edited by:
    MattSk

    Privs granted via a role are only valid from SQL - and not from/within stored PL/SQL code.
    Quoting Tom's (from http://asktom.oracle.com) response to this:I did address this role thing in my book Expert one on one Oracle:
    <quote>
    What happens when we compile a Definer rights procedure
    When we compile the procedure into the database, a couple of things happen with regards to
    privileges.  We will list them here briefly and then go into more detail:
    q    All of the objects the procedure statically accesses (anything not accessed via dynamic SQL)
    are verified for existence. Names are resolved via the standard scoping rules as they apply to the
    definer of the procedure.
    q    All of the objects it accesses are verified to ensure that the required access mode will be
    available. That is, if an attempt to UPDATE T is made - Oracle will verify the definer or PUBLIC
    has the ability to UPDATE T without use of any ROLES.
    q    A dependency between this procedure and the referenced objects is setup and maintained. If
    this procedure SELECTS FROM T, then a dependency between T and this procedure is recorded
    If, for example, I have a procedure P that attempted to 'SELECT * FROM T', the compiler will first
    resolve T into a fully qualified referenced.  T is an ambiguous name in the database - there may be
    many T's to choose from. Oracle will follow its scoping rules to figure out what T really is, any
    synonyms will be resolved to their base objects and the schema name will be associated with the
    object as well. It does this name resolution using the rules for the currently logged in user (the
    definer). That is, it will look for an object owned by this user called T and use that first (this
    includes private synonyms), then it will look at public synonyms and try to find T and so on.
    Once it determines exactly what T refers to - Oracle will determine if the mode in which we are
    attempting to access T is permitted.   In this case, if we as the definer of the procedure either
    owns the object T or has been granted SELECT on T directly or PUBLIC was granted SELECT, the
    procedure will compile.  If we do not have access to an object called T by a direct grant - the
    procedure P will fail compilation.  So, when the object (the stored procedure that references T) is
    compiled into the database, Oracle will do these checks - and if they "pass", Oracle will compile
    the procedure, store the binary code for the procedure and set up a dependency between this
    procedure and this object T.  This dependency is used to invalidate the procedure later - in the
    event something happens to T that necessitates the stored procedures recompilation.  For example,
    if at a later date - we REVOKE SELECT ON T from the owner of this stored procedure - Oracle will
    mark all stored procedures this user has that are dependent on T, that refer to T, as INVALID. If
    we ALTER T ADD  some column, Oracle can invalidate all of the dependent procedures. This will cause
    them to be recompiled automatically upon their next execution.
    What is interesting to note is not only what is stored but what is not stored when we compile the
    object. Oracle does not store the exact privilege that was used to get access to T. We only know
    that procedure P is dependent on T. We do not know if the reason we were allowed to see T was due
    to:
    q    A grant given to the definer of the procedure (grant select on T to user)
    q    A grant to public on T (grant select on T to public)
    q    The user having the SELECT ANY TABLE privilege
    The reason it is interesting to note what is not stored is that a REVOKE of any of the above will
    cause the procedure P to become invalid. If all three privileges were in place when the procedure
    was compiled, a revoke of ANY of them will invalidate the procedure - forcing it to be recompiled
    before it is executed again. Since all three privileges were in place when we created the procedure
    - it will compile successfully (until we revoke all three that is). This recompilation will happen
    automatically the next time that the procedure is executed.
    Now that the procedure is compiled into the database and the dependencies are all setup, we can
    execute the procedure and be assured that it knows what T is and that T is accessible. If something
    happens to either the table T or to the set of base privileges available to the definer of this
    procedure that might affect our ability to access T -- our procedure will become invalid and will
    need to be recompiled.
    This leads into why ROLES are not enabled during the compilation and execution of a stored
    procedure in Definer rights mode. Oracle is not storing exactly WHY you are allowed to access T -
    only that you are. Any change to your privileges that might cause access to T to go away will cause
    the procedure to become invalid and necessitate its recompilation. Without roles - that means only
    'REVOKE SELECT ANY TABLE' or 'REVOKE SELECT ON T' from the Definer account or from PUBLIC. With
    roles - it greatly expands the number of times we would invalidate this procedure. If some role
    that was granted to some role that was granted to this user was modified, this procedure might go
    invalid, even if we did not rely on that privilege from that role. ROLES are designed to be very
    fluid when compared to GRANTS given to users as far as privilege sets go. For a minute, let's say
    that roles did give us privileges in stored objects. Now, most any time anything was revoked from
    ANY ROLE we had, or any role any role we have has (and so on -- roles can and are granted to roles)
    -- many of our objects would become invalid. Think about that, REVOKE some privilege from a ROLE
    and suddenly your entire database must be recompiled! Consider the impact of revoking some system
    privilege from a ROLE, it would be like doing that to PUBLIC is now, don't do it, just think about
    it (if you do revoke some powerful system privilege from PUBLIC, do it on a test database). If
    PUBLIC had been granted SELECT ANY TABLE, revoking that privilege would cause virtually every
    procedure in the database to go invalid. If procedures relied on roles, virtually every procedure
    in the database would constantly become invalid due to small changes in permissions. Since one of
    the major benefits of procedures is the 'compile once, run many' model - this would be disastrous
    for performance.
    Also consider that roles may be
    q    Non-default: If I have a non-default role and I enable it and I compile a procedure that
    relies on those privileges, when I log out I no longer have that role -- should my procedure become
    invalid -- why? Why not? I could easily argue both sides.
    q    Password Protected: if someone changes the password on a ROLE, should everything that might
    need that role be recompiled?  I might be granted that role but not knowing the new password - I
    can no longer enable it. Should the privileges still be available?  Why or Why not?  Again, arguing
    either side of this is easy. There are cases for and against each.
    The bottom line with respect to roles in procedures with Definer rights are:
    q    You have thousands or tens of thousands of end users. They don't create stored objects (they
    should not). We need roles to manage these people. Roles are designed for these people (end users).
    q    You have far fewer application schema's (things that hold stored objects). For these we want
    to be explicit as to exactly what privileges we need and why. In security terms this is called the
    concept of 'least privileges', you want to specifically say what privilege you need and why you
    need it. If you inherit lots of privileges from roles you cannot do that effectively. We can manage
    to be explicit since the number of development schemas is SMALL (but the number of end users is
    large)...
    q    Having the direct relationship between the definer and the procedure makes for a much more
    efficient database. We recompile objects only when we need to, not when we might need to. It is a
    large efficiency enhancement.
    </quote>

  • Oracle does not start automatically ORA-01031: insufficient privileges

    Hi,
    OS WS2008R2.
    ORACLE 11gR2.
    Oracle Instance does not start with oracle services but if i stop and restart the services it comes up clean.
    Moreover if i change service ownership to Domain\Administrator it again works well.
    Checked registery and all ok. No error in alert.log. Only clue found in Oradim.log.
    ORADIM.LOG....
    C:\Oracle\Ora11g\bin\oradim.exe -startup -sid ptdb -usrpwd * -log oradim.log -nocheck 0
    Thu Nov 15 15:16:15 2012
    ORA-01031: insufficient privileges
    Please help
    Thanks

    1- startup type- Auto
    2- Group to user- ORA_DBA
    3 - you can check log on tab in the service properties and set the username and password who responsible about this services
    As i already stated 3 works. but i want it to work under Local System and not under any user.
    Thanks

  • Check database with error "ORA-01031: insufficient privileges"

    Dear Gurus,
            I ran "Check database" in DB13 but I got error "ORA-01031: insufficient privileges"
    BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
    BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
    'PREPARE stmt_5 STATEMENT FROM'
    'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
    ORA-01031: insufficient privileges
    BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
           Note I try to execute sapdba_role.sql (with command "sqlplus /nolog @sapdba_role.sql SR3") as Note 134592 both login 'oradev' and 'devadm' but it seem to do nothing (not found sapdba_role.log)
          Please advice.
    Best regards,
    Choosak B.
    Ps.
    detailed log of /oracle/DEV/sapcheck/cecxekdh.chk
    BR0801I BRCONNECT 7.00 (40)
    BR0477I Oracle pfile /oracle/DEV/102_64/dbs/initDEV.ora created from spfile /oracle/DEV/102_64/dbs/spfileDEV.ora
    BR0805I Start of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.30.53
    BR0484I BRCONNECT log file: /oracle/DEV/sapcheck/cecxekdh.chk
    BR0101I Parameters
    Name                           Value
    oracle_sid                     DEV
    oracle_home                    /oracle/DEV/102_64
    oracle_profile                 /oracle/DEV/102_64/dbs/initDEV.ora
    sapdata_home                   /oracle/DEV
    sap_profile                    /oracle/DEV/102_64/dbs/initDEV.sap
    system_info                    devadm/oradev sapdev SunOS 5.10 Generic_142900-03 sun4v
    oracle_info                    DEV 10.2.0.4.0 8192 7465 94896497 sapdev UTF8 UTF8
    sap_info                       701 SAPSR3 0002LK0003DEV0011N11827599290015Maintenance_ORA
    make_info                      sun_64 OCI_102 Feb 21 2009
    command_line                   brconnect -u / -jid CHECK20100331123000 -c -f check
    alert_log                      /oracle/DEV/saptrace/background/alert_DEV.log
    BR0280I BRCONNECT time stamp: 2010-03-31 12.30.56
    BR0813I Schema owners found in database DEV:
    DBSNMP, DIP, OPS$DEVADM, OPS$ORADEV, OPS$SAPSERVICEDEV, ORACLE_OCM, OUTLN, SAPSR3*, SYS, SYSTEM,
    TSMSYS
    BR0118I Tablespaces and data files
    Tablespace     Status     File                                               Status     Id.        Size      MaxSize     IncrSize  BlkSize      Device  Type  Link
    PSAPSR3        ONLINE+    /oracle/DEV/sapdata2/sr3_1/sr3.data1               ONLINE+     4   2411732992  10485760000     20971520     8192    16777219  FILE  NOLINK
    SYSTEM         ONLINE+    /oracle/DEV/sapdata1/system_1/system.data1         SYSTEM+     1   1017126912  10485760000     20971520     8192    16777219  FILE  NOLINK
    BR0119I Redo log files
    File                                          Status  Group       Size       Device  Type  Link
    /oracle/DEV/origlogA/log_g11m1.dbf            INUSE      1    52429312     16777218  FILE  NOLINK
    /oracle/DEV/mirrlogA/log_g11m2.dbf            INUSE      1    52429312     16777218  FILE  NOLINK
    /oracle/DEV/origlogB/log_g12m1.dbf            INUSE      2    52429312     16777218  FILE  NOLINK
    /oracle/DEV/mirrlogB/log_g12m2.dbf            INUSE      2    52429312     16777218  FILE  NOLINK
    /oracle/DEV/origlogA/log_g13m1.dbf            INUSE      3    52429312     16777218  FILE  NOLINK
    /oracle/DEV/mirrlogA/log_g13m2.dbf            INUSE      3    52429312     16777218  FILE  NOLINK
    /oracle/DEV/origlogB/log_g14m1.dbf            INUSE      4    52429312     16777218  FILE  NOLINK
    /oracle/DEV/mirrlogB/log_g14m2.dbf            INUSE      4    52429312     16777218  FILE  NOLINK
    BR0120I Control files
    File                                                Size       Device  Type  Link
    /oracle/DEV/origlogA/cntrl/cntrlDEV.dbf         15024128     16777218  FILE  NOLINK
    /oracle/DEV/origlogB/cntrl/cntrlDEV.dbf         15024128     16777218  FILE  NOLINK
    /oracle/DEV/sapdata1/cntrl/cntrlDEV.dbf         15024128     16777219  FILE  NOLINK
    BR0982I Database disk volumes
    Directory / Raw disk                          Device      Total[KB]      Free[KB]    Used[%]   MaxNeed[KB]   MaxMiss[KB]
    /oracle/DEV/102_64                          16777218     480700086     404332206      15.89             0             0
    /oracle/DEV                                 16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/mirrlogA                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/mirrlogB                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/origlogA                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/origlogB                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/sapdata1                        16777219     591212116     404332206      31.61     240019884             0
    /oracle/DEV/sapdata2                        16777219     591212116     404332206      31.61     240019884             0
    /oracle/DEV/sapdata3                        16777219     591212116     404332206      31.61     240019884             0
    /oracle/DEV/sapdata4                        16777219     591212116     404332206      31.61     240019884             0
    /oracle/DEV/saparch                         16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/sapbackup                       16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/sapcheck                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/sapreorg                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/saptrace                        16777218     480700086     404332206      15.89             0             0
    /oracle/DEV/oraarch                         16777218     480700086     404332206      15.89             0             0
    BR0280I BRCONNECT time stamp: 2010-03-31 12.31.29
    BR0814I Number of tables in schema of owner SAPSR3: 74582
    BR0836I Number of info cube tables found for owner SAPSR3: 49
    BR0814I Number of tables/partitions in schema of owner SYS: 625/189
    BR0814I Number of tables/partitions in schema of owner SYSTEM: 134/27
    BR0280I BRCONNECT time stamp: 2010-03-31 12.32.28
    BR0815I Number of indexes in schema of owner SAPSR3: 89159
    BR0815I Number of indexes/partitions in schema of owner SYS: 678/199
    BR0815I Number of indexes/partitions in schema of owner SYSTEM: 175/32
    BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
    BR0816I Number of segments in schema of owner DBSNMP: 25
    BR0816I Number of segments in schema of owner OPS$DEVADM: 1
    BR0816I Number of segments in schema of owner OUTLN: 9
    BR0816I Number of segments/LOBs in schema of owner SAPSR3: 168369/2314
    BR0816I Number of segments/LOBs in schema of owner SYS: 1831/87
    BR0816I Number of segments/LOBs in schema of owner SYSTEM: 353/22
    BR0816I Number of segments in schema of owner TSMSYS: 4
    BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
    BR0961I Number of conditions found in DBCHECKORA: 118
    BR0983I Tablespace fragmentation
    Tablespace    Files   Tables  Indexes    Extents     Total[KB]   Used[%]     Free[KB]   FreeExt.   MaxSize[KB]   MaxAlloc[KB]   Used[%]       Free[KB]       Largest[KB]
    PSAPSR3          16    74248    88689     209864     54138880     94.51      2970752        240     163840000+     109701120+    31.23+     112671872+       9246720:7966720:7946240:7905280:7905280+
    PSAPSR3701       14        0        0          0     54466560      0.00     54465664         20     143360000+      88893440+     0.00+     143359104+       9021440:8192000:8192000:8192000:8192000+
    PSAPSR3701X       4      310      445      12190     68342784     94.20      3962240          7      68342784              0     94.20        3962240        1298432:1191936:979968:163776:163776
    PSAPSR3USR        1       24       25         51        51200      6.50        47872          1      10240000+      10188800+     0.03+      10236672+      10188800+:47872:0:0:0
    PSAPTEMP          1        0        0          0      1433600      0.00      1433600          0      10240000+       8806400+     0.00+      10240000+       8806400+:0:0:0:0
    PSAPUNDO          1        0        0          0      7823360      0.00      7823296        406      10240000+       2416640+     0.00+      10239936+       2416640+:2041792:1814464:1433536:603072
    SYSAUX            1      254      284       2059       307200     93.35        20416         16      10240000+       9932800+     2.80+       9953216+       9932800+:13248:3072:1024:640
    SYSTEM            1      505      569       2926       993280     98.91        10816          2      10240000+       9246720+     9.59+       9257536+       9246720+:10176:640:0:0
    Total:           39    75341    90012     227090    187556864     62.29     70734656        692     426742784      239185920     27.38      309920576       60157952:19463744:18936384:17695616:16864768
    BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
    BR0301E SQL error -1031 at location BrDbdiffRead-1, SQL statement:
    'PREPARE stmt_5 STATEMENT FROM'
    'SELECT OBJNAME FROM "SAPSR3".DBDIFF WHERE DBSYS IN ('ORACLE', ' ') AND OBJTYPE = 'TABL' AND DIFFKIND IN ('02', '61', '99') ORDER BY OBJNAME'
    ORA-01031: insufficient privileges
    BR0806I End of BRCONNECT processing: cecxekdh.chk 2010-03-31 12.37.00
    BR0280I BRCONNECT time stamp: 2010-03-31 12.37.00
    BR0804I BRCONNECT terminated with errors

    Hi,
           It solved after change permission of directory that sapdba_role.sql kept to oradev:dba after that it can write sapdba_role.log.
          Thank you for your guideline.
          Now, I can ran 'Check database' via DB13 without that error.
    Best regards,
    Choosak B.

  • ORA-01031: insufficient privileges and shared memory realm does not exist

    Hi all,
    I came to a dead end to start oracle 10.2 database. I have searched on google and this forum, none of these solutions work for me. PS, I have installed 11g on my machine too.
    I have set up ORACLE_SID,ORACLE_HOME to 10.2 database based on the tnsnames.ora.
    follow is error message:
    sqlplus sys as sysdba
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:09:54 2013
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    Enter password:
    ERROR:
    ORA-01031: insufficient privileges
    sqlplus /nolog
    SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:10:55 2013
    Copyright (c) 1982, 2005, Oracle. All rights reserved.
    SQL> conn / as sysdba
    ERROR:
    ORA-01031: insufficient privileges
    SQL> conn scott/tiger
    ERROR:
    ORA-01034: ORACLE not available
    ORA-27101: shared memory realm does not exist
    Linux-x86_64 Error: 2: No such file or directory
    First I thought the instance has been start yet, but since I can't login with sysdba. I don't know what other options.
    For 10.2, the tnsnames.ora
    ORA102 =
    +(DESCRIPTION =+
    +(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
    +(CONNECT_DATA =+
    +(SERVER = DEDICATED)+
    +(SERVICE_NAME = ora102)+
    +)+
    +)+
    LISTENER_ORA102 =
    +(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
    EXTPROC_CONNECTION_DATA =
    +(DESCRIPTION =+
    +(ADDRESS_LIST =+
    +(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))+
    +)+
    +(CONNECT_DATA =+
    +(SID = PLSExtProc)+
    +(PRESENTATION = RO)+
    +)+
    +)+
    listener.ora:
    SID_LIST_LISTENER =
    (SID_LIST =
    (SID_DESC =
    (SID_NAME = PLSExtProc)
    (ORACLE_HOME = /data/oracle/ora102)
    (PROGRAM = extproc)
    LISTENER =
    (DESCRIPTION_LIST =
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))
    (ADDRESS = (PROTOCOL = TCP)(HOST =XXXXX)(PORT = 1523))
    EXTPROC_CONNECTION_DATA =
    (DESCRIPTION =
    (ADDRESS_LIST =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
    (CONNECT_DATA =
    (SID = PLSExtProc)
    (PRESENTATION = RO)
    )

    try do this steps on server side:
    1) sqlplus sys as sysdba
    2) select open_mode from v$database;
    show result 2 step

  • Insufficient privileges on  11.2.03 but not 11.2.0.1?

    ON Oracle 11.2.0.1
    User dropped.
    User dropped.
    User dropped.
    BANNER                                                                         
    Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production   
    PL/SQL Release 11.2.0.1.0 - Production                                         
    CORE 11.2.0.1.0 Production                                                     
    TNS for 64-bit Windows: Version 11.2.0.1.0 - Production                        
    NLSRTL Version 11.2.0.1.0 - Production                                         
    User created.
    Grant succeeded.
    User created.
    Grant succeeded.
    User created.
    Grant succeeded.
    Grant succeeded.
    Connected.
    Grant succeeded.
    Connected.
    Grant succeeded.
    SQL> exit
    ON Oracle 11.2.0.3
    drop user installuser cascade
    ERROR at line 1:
    ORA-01918: user 'INSTALLUSER' does not exist
      drop user receiveuser
    ERROR at line 1:
    ORA-01918: user 'RECEIVEUSER' does not exist
      drop user grantuser
    ERROR at line 1:
    ORA-01918: user 'GRANTUSER' does not exist
    BANNER
    Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - Production         
    PL/SQL Release 11.2.0.3.0 - Production
    CORE 11.2.0.3.0 Production
    TNS for 32-bit Windows: Version 11.2.0.3.0 - Production
    NLSRTL Version 11.2.0.3.0 - Production
    'Create user installuser'
    User created.
    Grant succeeded.
    'Create user receiveuser'
    User created.
    Grant succeeded.
    'Create user grantuser'
    User created.
    Grant succeeded.
    'grant execute on utl_raw to installuser with grant option'
    Grant succeeded.
    'connect as installuse
    Connected.
    'grant execute on utl_raw to grantuser with grant option;'
    Grant succeeded.
    'connect to grantuser'
    Connected.
    'grant execute on utl_raw to receiveuser'
    grant execute on utl_raw to receiveuser
    ERROR at line 1:
    ORA-01031: insufficient privileges
    And the script:
    spool test.log
    drop user installuser cascade;
    drop user receiveuser;
    drop user grantuser;
    select * from v$version;
    Prompt 'Create user installuser'
    create user installuser identified by installuser;
    grant connect, resource, dba to installuser;
    Prompt 'Create user receiveuser'
    create user receiveuser identified by receiveuser;
    grant connect, resource to receiveuser;
    Prompt 'Create user grantuser'
    create user grantuser identified by grantuser;
    grant connect, resource to grantuser;
    Prompt 'grant execute on utl_raw to installuser with grant option'
    grant execute on utl_raw to installuser with grant option;
    Prompt 'connect as installuser'
    connect installuser/installuser;
    prompt 'grant execute on utl_raw to grantuser with grant option;'
    grant execute on utl_raw to grantuser with grant option;
    prompt 'connect to grantuser'
    connect grantuser/grantuser;
    prompt 'grant execute on utl_raw to receiveuser'
    grant execute on utl_raw to receiveuser;
    exit;

    Looks like it has already been logged as a bug...
    Granting The Execute Privilege On SYS Owned Packages Fails With ORA-01031 On 11.2.0.3.0 (Doc ID 1393228.1)
    Regards,
    Bob

Maybe you are looking for

  • Error while refreshing aw object from a job

    Hello, I'm trying to make the refresh of the objects (dimensions + measures) in an analytic workspace, programmed in time using jobs. If I execute the statements of the job manually in a Sql*Plus session, everything is right. But if I execute the sam

  • [svn] 2312: CursorManager: New functionality and a fix for SDK-15029

    Revision: 2312 Author: [email protected] Date: 2008-06-30 17:24:01 -0700 (Mon, 30 Jun 2008) Log Message: CursorManager: New functionality and a fix for SDK-15029 * NEW: When the mouse leaves a window/stage where a cursor is set, the cursor no longer s

  • Hotspot on rollover image

    Hi there, I have an image rollover and I'd like to put a couple of hotspots linking to other pages on the rollover image. e.g. on this page http://pixeld.99k.org/comics.htm, I'd like to have hotspots over 'part 1' and 'part 2' on the rollover image f

  • Package migration from SSIS 2008 R2 to SQL server 2012

    hi guys:   My company has decided to use Sql server 2012 for the database service, Integration service as well as analysis service   The first question is which tool I should install to run packages ? in SQL Server 2008 R2, I've installed BIDS which

  • Need help for upgrading to lion OS i India without going to istore

    i want to know the steps by which i can upgrade to lion os without going to istore. currently  using OS 10.6