osalvador / tePLSQL

PL/SQL Template engine
http://osalvador.github.io/tePLSQL/
MIT License
65 stars 18 forks source link

Can't run as ADMIN on ATP #38

Closed MikeKutz closed 4 years ago

MikeKutz commented 4 years ago

This is a note to be included in the README.md file

Environment

Oracle Cloud Free Tier Autonomous Transaction Processor (ATP).

It is (currently) a 19c EE database with some limitations (and 20GB of free space :) )

Setup

Test

As the ADMIN (your DBA account), use a simple 'Hello World' as your template.

Result

ORA-06598: insufficient INHERIT PRIVILEGES privilege

Reason

Unlike normal users, the INHERIT PRIVILEGES was revoked from PUBLIC for the user ADMIN.

As such, Invoker's Rights packages, like tePLSQL, will fail for the user ADMIN. This is a security feature of ATP.

Workaround

As a normal user, tePLSQL can run. BUT make sure your templates are referencing the ALL_% dictionary views ( and not DBA_% dictionary views.

Outside of adjusting the FAQ/README, this won't be fixed.