ORA-01031 insufficient privileges error when selecting from a view

Question

OK I think this might be a dumb question but I can't figure it out:
User John has been granted SELECT privilege (directly, not through a database role) to schema FRED.table1;
User John can issue select * from FRED.table1; and it works just fine.
User John has then been granted SELECT privilege (directly, not via a database role) to schema
MARK.view1;
MARK.view1 only selects from FRED.table1. No other tables are in the view1.
Schema MARK can successfully query the views. SELECT * FROM VIEW1 returns results.
I also checked the MARK schema to ensure that it has been granted SELECT on FRED.table1 directly which it has.
Now, when logged into schema John, I try SELECT * FROM MARK.VIEW1; and I get ORA-01031 insufficient privileges error.
I'm not sure how to troubleshoot this. If John is granted SELECT ANY TABLE, it of course works but I don't want John to have that powerful priv.
To recap, John has SELECT on both MARK.VIEW1 and the table which VIEW1 selects from (FRED.TABLE1).
John can select from FRED.TABLE1 no problem but receives a privilege error even though John has SELECT on MARK.VIEW1.
Any thoughts?
Oh, Oracle EE 10.2.0.4

Answer 1

JSebastian wrote:
OK I think this might be a dumb question but I can't figure it out:
User John has been granted SELECT privilege (directly, not through a database role) to schema FRED.table1;
User John can issue select * from FRED.table1; and it works just fine.
User John has then been granted SELECT privilege (directly, not via a database role) to schema
MARK.view1;
MARK.view1 only selects from FRED.table1. No other tables are in the view1.
Schema MARK can successfully query the views. SELECT * FROM VIEW1 returns results.
I also checked the MARK schema to ensure that it has been granted SELECT on FRED.table1 directly which it has.
Now, when logged into schema John, I try SELECT * FROM MARK.VIEW1; and I get ORA-01031 insufficient privileges error.
I'm not sure how to troubleshoot this. If John is granted SELECT ANY TABLE, it of course works but I don't want John to have that powerful priv.
To recap, John has SELECT on both MARK.VIEW1 and the table which VIEW1 selects from (FRED.TABLE1).
John can select from FRED.TABLE1 no problem but receives a privilege error even though John has SELECT on MARK.VIEW1.
Any thoughts?
Oh, Oracle EE 10.2.0.4Are you certain John has been granted select on Mark.view1 ? In order for that to work Mark would have to have been given select on Fred.table1 WITH GRANT OPTION ... otherwise the grant would fail and then John would not be able to select from the view because the grant was never successfully issued.
Here's a basic test case (which i think conforms to what you've outlined) to get it working.
drop user u1 cascade;
drop user u2 cascade;
drop user u3 cascade;
create user u1 identified by u1;
grant connect, resource to u1;
create user u2 identified by u2;
grant connect, resource, create view to u2;
create user u3 identified by u3;
grant connect, resource to u3;
connect u1/u1@orcl
create table test1 (col1 number);
grant select on test1 to u2 with grant option; --> this is the important part
grant select on test1 to u3;
connect u2/u2@orcl
create view test2 as select * from u1.test1;
grant select on test2 to u3;
connect u3/u3@orcl
select * from u2.test2;