Scheduler privileges in trigger

Question

My database version is 10.2.0.3.
I have created a trigger which attempts to schedule a job for x minutes time when a batch starts in our application.
The trigger is created under the SYSTEM user which has the DBA role and consequently the MANAGE_SCHEDULER and SCHEDULER_ADMIN roles.
The table is also currently in the SYSTEM schema - although will be moved in the future.
The code for the trigger is as follows:
create or replace
TRIGGER BATCH_ALERTS
AFTER UPDATE
OF STATUS_NVCH
ON BPM_BATCH_RUN_DIARY_T REFERENCING NEW AS NEW OLD AS OLD
FOR EACH ROW
WHEN (
old.batch_id_num in (1000,2000,10140) and old.status_nvch = 'NOTSTARTED' and new.status_nvch='RUNNING')
declare
alert_job_name varchar2(30);
alert_time date;
check_batch_id_num number;
begin
select job_name, SYSDATE + alert_after_minutes/1440, check_batch_id_num
into alert_job_name, alert_time, check_batch_id_num
from CHECK_BATCH_COMPLETE_PARMS where batch_id_num = :old.batch_id_num;
DBMS_SCHEDULER.CREATE_JOB(job_name => alert_job_name,
program_name => 'CHECK_BATCH_COMPLETE_PRG',
start_date => alert_time,
enabled => FALSE,
auto_drop => TRUE);
end;
(lines have been removed for clarity)
If I run the CREATE_JOB statement as an anonymous block, the statement runs successfully.
However, when I run the update that causes the trigger to run, I get the following error.
ORA-27486: insufficient privileges
ORA-06512: at "SYS.DBMS_ISCHED", line 99
ORA-06512: at "SYS.DBMS_SCHEDULER", line 386
ORA-06512: at "SYSTEM.BATCH_ALERTS", line 10
ORA-04088: error during execution of trigger 'SYSTEM.BATCH_ALERTS'
I have tried using PRAGMA AUTONOMOUS_TRANSACTION in the trigger.
I have tried moving the offending line to a separate procedure and including
AUTHID DEFINER
or
AUTHID CURRENT_USER
(I have had similar problems before where in particular AUTHID CURRENT_USER has fixed it).
When using a separate procedure with AUTHID CURRENT_USER, the procedure has worked correctly when called from an anonymous block, but failed when called from the trigger.
Can anyone please suggest what may be causing this failure and suggest a way round it.
Thanks in advance.

Answer 1

PL/SQL code ignore privileges granted throught roles. You must grant necessary privileges directly tu user.
Edited by: spajdy on Oct 4, 2010 1:24 PM