DBA tables access

[Former Member]

i want to remove access from a user who has access to dba_* tables.

i tried the below and it does not work. any ideas?

revoke SELECT_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, DELETE_CATALOG_ROLE, SELECT ANY DICTIONARY from xxxxx;

ERROR at line 1:

ORA-01952: system privileges not granted to xxxxx

[Former Member]

it was in the role

[markus_doehr2]

> i want to remove access from a user who has access to dba_* tables.

Usually there shouldn't be another user to access the database "directly" but the users running the SAP system.

> i tried the below and it does not work. any ideas?

>

> revoke SELECT_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, DELETE_CATALOG_ROLE, SELECT ANY DICTIONARY from xxxxx;

>

> ERROR at line 1:

> ORA-01952: system privileges not granted to xxxxx

This means that the user xxxxx doesn't have the privileges and hence they can't be revoked.

Markus

[Former Member]

Re: Usually there shouldn't be another user to access the database "directly" but the users running the SAP system.

Understood

Re: This means that the user xxxxx doesn't have the privileges and hence they can't be revoked.

They do as I received output from dba_users and dba_profiles with a question.

[markus_doehr2]

> Re: Usually there shouldn't be another user to access the database "directly" but the users running the SAP system.

> Understood

Just for completeness:

Note 581312 - Oracle database: licensing restrictions

<...>

If other software is used, the following actions, among other things, are therefore forbidden at database level:

Creating database users

Creating database segments

Querying/changing/creating data in the database

Using ODBC or other SAP external access methods

<...>

So be aware of that

> Re: This means that the user xxxxx doesn't have the privileges and hence they can't be revoked.

> They do as I received output from dba_users and dba_profiles with a question.

If that use has assigned a role you might need to revoke that.

Markus

[Former Member]

I understand the licensing issue. there are bolton software that require a separate schema.

I will check the role