Privileges require for a user to create CONTEXT indexes

Hi all,
   RDBMS: 11.2.0.3
   SO.......: OEL 6.3
   What are the necessary privileges that have to be granted to a user to be able to create CONTEXT Indexes, for example. I have granted the CTXAPP to my user, but when i tryied to create the CONTEXT Index with the command bellow, i got an "insufficient privilege" error message.
   CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01 ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO) INDEXTYPE IS CTXSYS.CONTEXT PARAMETERS ('SYNC (ON COMMIT)');

It depends on whether the user is trying to create the index on his own table in his own schema or on somebody else's table in somebody else's schema.  The following demonstrates minimal privileges (quota could be smaller) for user usr_docs to create the index on his own table in his own schema and for my_user to create the index on usr_docs table in usr_docs schema.
SCOTT@orcl> -- version:
SCOTT@orcl> SELECT banner FROM v$version
  2  /
BANNER
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
PL/SQL Release 11.2.0.1.0 - Production
CORE    11.2.0.1.0    Production
TNS for 64-bit Windows: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
5 rows selected.
SCOTT@orcl> -- usr_docs privileges:
SCOTT@orcl> CREATE USER usr_docs IDENTIFIED BY usr_docs
  2  /
User created.
SCOTT@orcl> ALTER USER usr_docs QUOTA UNLIMITED ON users
  2  /
User altered.
SCOTT@orcl> GRANT CREATE SESSION, CREATE TABLE TO usr_docs
  2  /
Grant succeeded.
SCOTT@orcl> -- my_user privileges:
SCOTT@orcl> CREATE USER my_user IDENTIFIED BY my_user
  2  /
User created.
SCOTT@orcl> GRANT CREATE SESSION, CREATE ANY INDEX TO my_user
  2  /
Grant succeeded.
SCOTT@orcl> -- user_docs:
SCOTT@orcl> CONNECT usr_docs/usr_docs
Connected.
USR_DOCS@orcl> CREATE TABLE tab_documentos (documento  CLOB)
  2  /
Table created.
USR_DOCS@orcl> INSERT ALL
  2  INTO tab_documentos VALUES ('test data')
  3  INTO tab_documentos VALUES ('other stuff')
  4  SELECT * FROM DUAL
  5  /
2 rows created.
USR_DOCS@orcl> CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01
  2  ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO)
  3  INDEXTYPE IS CTXSYS.CONTEXT
  4  PARAMETERS ('SYNC (ON COMMIT)')
  5  /
Index created.
USR_DOCS@orcl> DROP INDEX usr_docs.idx_ctx_tab_documentos_01
  2  /
Index dropped.
USR_DOCS@orcl> -- my_user:
USR_DOCS@orcl> CONNECT my_user/my_user
Connected.
MY_USER@orcl> CREATE INDEX USR_DOCS.IDX_CTX_TAB_DOCUMENTOS_01
  2  ON USR_DOCS.TAB_DOCUMENTOS(DOCUMENTO)
  3  INDEXTYPE IS CTXSYS.CONTEXT
  4  PARAMETERS ('SYNC (ON COMMIT)')
  5  /
Index created.

Similar Messages

  • Permissions required for an user to create a View in Oracle 10.2.0.1.0

    Hi,
    I am facing one serious issue with Oacle 10.2.0.1.0.
    I have an user (Atlas) created with below permissions.
    grant connect to atlas;
    grant resource to atlas;
    grant create public synonym to atlas;
    grant select any dictionary to atlas;
    grant query rewrite to atlas;
    I will create my database schema on this user Atlas. All my scripts are executing properly with Oracle 9i and 10g version 10.1.0.2.0. But when it comes to Oracle 10g version 10.2.0.1.0 the views creation is throwing an error saying that Insufficient Priviliges.
    I didn't get why this error is coming.
    What previliges does an user should require for creating a view in Oracle 10.2.0.1.0 version?
    I have installed Enterprise version of Oracle 10.2.0.1.0. Please suggest me with this.
    Thanks
    Rao

    CREATE VIEW was taken away from connect or resouce in 10.2.x. It has to be explicity granted... Not sure what this has to do with XML per-se :)

  • Which rights are required for a user to create a new database instance

    Hi,
    Which user can create a database instance? Is it Admin or any user? or Is it must to have admin rights on the <oracle_home> folder in order to create a new database instance?
    Please let me know what rights the user should have for creating a new database instance.
    Regards,
    venkat

    If I login to machine as a Guest user or I am not a owner of Oracle software then in the both cases I couldn't able to create a new database instance. Am I right?
    Please suggest me.
    Regards,
    Venkat

  • Privileges required for a user to run a form with menu security with ROLES?

    The Scenario
    I granted role DBA to SCOTT.
    I connected to SCOTT.
    I create a database role MANAGER.
    I GRANT ALL ON EMP TO MANAGER.
    I create a new user TEST
    I granted CONNECT,RESOURCE,MANAGER to TEST.
    I created a menu module and wrote MANAGER in its MODULE
    ROLES property and set its USE SECURITY property to yes
    I created a menu in it.
    I created a menu item in it.
    In Item Roles Property I selected the role MANAGER.
    I set DISPALY WITHOUT PRIVILEGE to NO.
    I created form module based on EMP.
    In Form Module properties, I gave Path of the menu module
    as C:\Folder1\emp_menu.mmx in its MENU MODULE property
    I wrote MANAGER in its MENU ROLE property.
    Now connected to TEST when run this FORM MODULE I get
    error ORA-00942 table or view does not exist and then
    FRM-41810 Error Creating Menu.
    But when connected to SCOTT it didn't gave the error.
    And when i revoke DBA from SCOTT there was the same error.
    Then I created a synonym EMP for SCOTT.EMP but the same
    problem.
    I think there will be some privilege which comes with role
    DBA and user not having role DBA problems.
    I urgently needs its solution. Please help me.

    Hi,
    I read that you need to run
    <racle_home>\tools\db\forms60\frm60sec.sql for Forms 6i and grant users access to this table. Since this needs to be run as system/admin I guess that you did this but didn't grant privileges to the users.
    Frank

  • What are the minimum db user privileges required for CDC?

    What are the minimum privileges required for the source data server user in order to to successfully implement CDC
    Currently I'm getting an "Insufficient privileges" error when trying to start a CDC journal on a model. The error is happening on the step that creates a trigger on the table in the source schema.
    Here's the situation:
    The data server uses the user "ODI_TEMP" for its connection. ODI_TEMP has been granted select privileges on the desired tables in the source schema. When starting the CDC journal on the model for the source schema, ODI tries to create a trigger on the source tables. This fails since the ODI_TEMP user can't create triggers on anything outside of it's own schema. For obvious fundamental security reasons, we cannot give the ODI_TEMP user the CREATE ANY TRIGGER system privilege on the data source.
    Journalizing is set up using JKM Oracle Consistent. ODI is 11g, DB is 11g.

    Hi,
    You can go for this
    Grant CREATE ANY TRIGGER system privilege to ODI_TMP
    Start the Journal , it will create triggers in ODI_TMP schema for the tables present in your source schema.
    Now revoke CREATE ANY TRIGGER system privilege from ODI_TMP.
    It will continue to work .. only when you are restarting the journal (due to adding or removing some tables in CDC) , you will be requiring CREATE ANY TRIGGER privilege.
    Thanks,
    Sutirtha

  • Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in oracle and yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

    Hi All, We are in to Release 11.5.10.2.There is a specific requirement to Prevent users from creating Manual Sales Orders in Oracle and  yet users should be able to book the Sales Orders Imported from CRM system into Orcale.Please advise.

    Thanks for your advise.
    However, I missed to mention that we have two set of users  One is for Finished Goods and another for Spares.
    Only Spares users need to be prevented from creating Direct/Manual Sales Orders in Oracle.
    As you suggested, if this will be done at Form level, that may Disallow FG users also to create Manula Sales Orders which should not be the case.
    Further, I tried to test one scenario through Processing Constraints but it did not work.
    Application
    OM
    Validation Type
    Entity
    Temp
    Short Name
    TBL
    Validation Semantics
    Created By
    Equal To
    User(Myself)
    Processing Cosntraint
    Application
    OM
    Entity
    Order Header
    Constraint
    Operation
    User Action
    Create
    Not Allowed
    Conditions
    Group
    Scope
    Validation Entity
    Record Set
    Validation Template
    101
    Any
    Order Header
    Order
    Above Created
    Please advise.

  • WHY  PGA  IS  REQUIRED  FOR  EVERY USER  ?

    Good Morning Everyone ;
    I have a question  about PGA.
    WHY  PGA IS REQUIRED FOR  EVERY USER ?
    What i got from google ..
    Even though the parse information for SQL or PL/SQL may already be available in library cache of shared pool,
    the value upon which the user want to execute the select or update statement cannot be shared.
    I cant realize it   Can anyone show clear  example , if  possible ?
    DB Version is  10.2.0.4.0
    OS : oracle linux 5.5
    Thanks in advance ..

    Thanks aman and heok.
    My Question :
    Your explanation is clear. I think i am getting little bit confused.
    Could you please clarify little more ?
    >> session 1 :
    user is HR
    SQL>select * from tab1  ORDER BY name;
    >> session 2 :
    user is scott
    SQL>select * from tab1 where ORDER BY name;
    >> session 3 :
    user is USER1
    SQL>select * from TAB1 where ORDER BY name;
    >> session 4 :
    user is USER2
    SQL>select * from TAB1 where ORDER BY name;
    IS this right aman ?
    Already sql statements are avail in SGA ,Even though all above users needs same information.
    Oracle does sorting operation in PGA. If PGA exceeds , oracle will use temporary tablespace .
    Thanks heok and aman.

  • I have created a user in oracle BPM but it is not reflected in system-jazn-data.xml file and I am unable to authenticate that user to create context as needed in workflow client

    I have created a user in oracle BPM but it is not reflected in system-jazn-data.xml file and I am unable to authenticate that user to create context as needed in workflow client

    weblogic credentials are different.
    and using thode credentials I am able to login to weblogic server
    the users I am talking about is the process users defined in realm.
    in realm those users are defined as Default authenticator and OID authenticator.
    and I am trying to authenticate one of those users defined in realm using java api so that I an access a process defined In Oracle BPM 11g

  • When a new user is created on the Server Computer,Why profile for the user is created as computername.username?

    When a new user is created on the Server Computer,Why profile for the user is created as computername.username?

    This is done if there are domain users with the same name. For example, if there is a domain user named 'test' who has logged in on the server, he will get the profile 'test'. If you then create a local user named 'test', the profile 'test' already exists
    and the computer will create the profile 'computername.test'

  • Why I can't create ConText index?

    Hi everyone.
    I install Oracle9i(v9.0.1.1) in my computer.
    I create a table, insert a xml document into it, but I can't create ConText index
    on it.
    How can I solve this problem ?
    Thank you.
    SQL> create table xtest(doc sys.xmltype);
    SQL> insert into xtest values (sys.xmltype.createxml('<A>simple</A>'));
    SQL> alter session set query_rewrite_enabled = true;
    SQL> alter session set query_rewrite_integrity = trusted;
    SQL> create index xtestx on xtest(doc)
    2 indextype is ctxsys.context;
         ORA-29855: An error occur when execute ODCIINDEXCREATE
         ORA-20000: Oracle Text error:
         DRG-50857: oracle error in drixtab.create_index_tables
         ORA-01031: insufficient privileges
         ORA-06512: in "CTXSYS.DRUE", line 157
         ORA-06512: in "CTXSYS.TEXTINDEXMETHODS", line 176

    I've solve this problem.
    I ues PL/SQL Developer. When I connect as SYSDBA, create index fail.
    But if I connect as normal, it succeed!

  • Privileges required for database backup with RMAN

    Hello,
    We have 10g R2 on Solaris box. We use RMAN for backup and use the SYS account on the database to connect and take the backup.
    Are there specific privileges that are required to take the database backup , so that I do not use the SYS account or the syspassword in the RMAN script.
    I want to create an account and give only the privileges required to take the database backup and recover .
    Thanks

    I think RMAN needs the SYSDBA privilege, so you won't gain much by switching from SYS to another user.
    You don't need to store sys/password in a script. You can just :-
    rman target / catalog xxx/yyy@catalog

  • Grant privileges and permission to user, to create user and database in 10g

    Hi,
    I'm very much new to Oracle 10g database and after all my search, I think this forum will help me to solve my puzzle. Installed Oracle 10g database and during installation created a Global database "TestDB". I created an user "user1" in sqlplusw, by logging in as system.
    Now I need to know, what privileges and permissions should be given to this "user1", so that I can create new users and create database by logging as "user1". I don't want to Inherit all the sytem privileges of SYSTEM or SYSDBA or SYS or SYSOPER.
    Is there a way where I could achieve this by explicitly granting the required privileges and permissions

    You may need to know all the views to get the privilege information.
    SQL> conn /as sysdba
    SQL> select table_name from dict where table_name like '%PRIV%';
    And also, take a look into below Oracle Documentations.
    http://download.oracle.com/docs/cd/B19306_01/server.102/b14200/statements_9013.htm#SQLRF01603
    Regards,
    Sabdar Syed.

  • Privilege to allow a user to create a view in another user's schema

    Hello,
    I need to allow a user to create a view in another user's schema.
    Say, to connect as USER_A and run statement: 'create view USER_B_SCHEMA.myview as select...'
    Is there any way to accomplish that without granting USER_A privilege to CREATE ANY VIEW? I want to keep USER_A at the lowest profile possible.
    Thanks!

    You have the option to create an stored procedure, here a test case (no optimized, no bug free):
    SYS@orcl > create user sp_owner identified by sp_owner;
    SYS@orcl > grant create any view to sp_owner;
    SYS@orcl> create procedure sp_owner.create_view (
      2  view_name varchar2, view_sql varchar2 ) is
      3  begin
      4    execute immediate 'create view '||view_name||' as '||view_sql;
      5  end;
      6  /
    Procedure created.
    SYS@orcl > create user test identified by test;
    SYS@orcl > grant create session to test;
    SYS@orcl > grant execute on sp_owner.create_view to test;
    TEST@orcl> execute sp_owner.create_view('scott.emp_vw','select * from scott.emp')
    PL/SQL procedure successfully completed.HTH
    Enrique
    PS. If your problem was solved, consider marking the question as answered.

  • Authorization Required for RFC user  in R/3-APO system.

    Could you please help regarding one authorization issue. I want to know the authorization required for one RFC user. Now this RFC user used for RFC connection of SAP R/3 - SAP APO system. user type is given dialog type and SAP_ALL profile has been given to this user  id. Now I have to remove SAP_ALL from this user id in R/3 and APO system and  provide the required the authorization in R/3 and APO system.
    Regard
    Auroshikha

    The RFC authorisation depends completely on what the user is doing (ALEREMOTE?).  We can't tell you what RFC auths your connection requires. 
    There is a guide to doing this here: https://wiki.sdn.sap.com/wiki/display/Security/BestPractice-HowtoanalyzeandsecureRFC+connections

  • Default Privilege Level for ASA users authenticated by Radius or TACACS when using ASDM

    Hello,
    I'm trying to figure out what the default privilege level is for users that are authenticated to the ASA via a remote authentication server when using the ASDM.
    the command "aaa authentication http console TACACS+ LOCAL" is used in the ASA config.
    The remote server is NOT setting any privilege levels for users.  There are also no aaa authorization commands present in the config.
    So what privilege level do the users receive when they login with the ASDM?  I'm being told that the users receive admin access which includes config write, reboot, and debug.  But I cannot find any documentation stating hte default level.
    Please advise.  And providing links to cisco documentation would be great too.
    Thanks,
    Brendan

    Hi Berendan,
    Hope the below exerpt from document clarifies your query. also i have provided the link to refer.
    About Authorization
    Authorization controls access per user after users authenticate. You can configure the security appliance to authorize the following items:
    •Management commands
    •Network access
    •VPN access
    Authorization controls the services and commands available to each authenticated user. Were you not to enable authorization, authentication alone would provide the same access to services for all authenticated users.
    If you need the control that authorization provides, you can configure a broad authentication rule, and then have a detailed authorization configuration. For example, you authenticate inside users who attempt to access any server on the outside network and then limit the outside servers that a particular user can access using authorization.
    The security appliance caches the first 16 authorization requests per user, so if the user accesses the same services during the current authentication session, the security appliance does not resend the request to the authorization server.
    http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/asdm60/user/guide/usrguide/aaasetup.html
    Regards
    Karthik

Maybe you are looking for

  • I am a new learner i am getting an error while running a sample welcome pag

    hi , i am able to crate a package and also a page but when i run that page i am getting the follow error messages, i am using jdeveloper version 10.1.3.3.0.3 and also please help me how to create a business component package in this version. Validati

  • PS and LR bundle. Do I pay both fees if I upgrade to full Creative Cloud?

    Hi I am considering purchasing the PS and LR bundle. However, I might wish to upgrade to full CC ($49.99 p.m) before the annual contract term of the initial bundle expires. How will this work. Would I still have to pay for the initial bundle AND the

  • Cisco ISE - CWA AD Authentication

    Hello, I'm using a Cisco ISE on 1.3 and have a CWA portal setup for AD Auth. When a user connects to a particular SSID (from a WLC) that is setup for mac filtering, it redirects to a CWA via the Auth Policy. the CWA is disabled, they login, the devic

  • Stubborn Build Path errors

    I created a new Java project in Eclipse from an existing folder. I am getting errors like - Unbound classpath variable: 'JRE_LIB_CORE' in project 'RFT' Unbound classpath variable: 'JRE_LIB_GRAPHICS' in project 'RFT' Unbound classpath variable: 'JRE_L

  • Tables VDBEPP, VDBEKI y VDBEPI TRM Loan Management

    HI Gurus,, Actually i working with Loan Management, and of course there are many tables as: VDARL VZZKOKO y VZZKOPO VDZV VTBZV VDBEPP, VDBEKI y VDBEPI i have 3 doubts: 1. I really appreciate if you let me know what is the meaning or use of the tables