Version: 2019.4.3

User rights

SQL​

todo​

Oracle​

This document describes which Oracle system privileges are required for the inPoint server.

System privileges for inPoint default schema (without multischema support)​

User who is defined as the default schema for inPoint should have the following system privileges in Oracle:

  • CREATE SESSION
  • CREATE TABLE
  • CREATE PROCEDURE
  • CREATE SEQUENCE
  • CREATE SYNONYM
  • CREATE TRIGGER
  • CREATE VIEW
  • INSERT ANY TABLE
  • UPDATE ANY TABLE
  • UNLIMITED TABLESPACE
  • CREATE ANY CONTEXT

Execute the following statements to grant these rights to the user:

  • GRANT CREATE SESSION TO <inPoint default schema>;
  • GRANT CREATE TABLE TO <inPoint default schema>;
  • GRANT CREATE PROCEDURE TO <inPoint default schema>;
  • GRANT CREATE SEQUENCE TO <inPoint default schema>;
  • GRANT CREATE SYNONYM TO <inPoint default schema>;
  • GRANT CREATE TRIGGER TO <inPoint default schema>;
  • GRANT CREATE VIEW TO <inPoint default schema>;
  • GRANT INSERT ANY TABLE TO <inPoint default schema>;
  • GRANT UPDATE ANY TABLE TO <inPoint default schema>;
  • GRANT UNLIMITED TABLESPACE TO <inPoint default schema>;
  • GRANT CREATE ANY CONTEXT TO <inPoint default schema>;

, where <inPoint default schema> is replaced with the inPoint default schema.

Additional system privileges for inPoint default schema for multischema support​

For multischema support the following additional system privileges are required for the default schema of the inPoint server:

  • SELECT ANY TABLE
  • SELECT ANY SEQUENCE
  • CREATE ANY TABLE
  • CREATE ANY INDEX
  • CREATE ANY SEQUENCE
  • CREATE ANY SYNONYM
  • CREATE ANY TRIGGER
  • CREATE ANY VIEW
  • ALTER ANY TABLE
  • ALTER ANY INDEX
  • ALTER ANY SEQUENCE
  • ALTER ANY TRIGGER
  • DROP ANY TABLE
  • DROP ANY INDEX
  • DROP ANY SEQUENCE
  • DROP ANY SYNONYM
  • DROP ANY TRIGGER
  • DROP ANY VIEW
  • ALTER ANY PROCEDURE
  • CREATE ANY PROCEDURE
  • DROP ANY PROCEDURE
  • EXECUTE ANY PROCEDURE

Execute the following statements to grant these rights to the user:

  • GRANT SELECT ANY TABLE TO <inPoint default schema>;
  • GRANT SELECT ANY SEQUENCE TO <inPoint default schema>;
  • GRANT CREATE ANY TABLE TO <inPoint default schema>;
  • GRANT CREATE ANY INDEX TO <inPoint default schema>;
  • GRANT CREATE ANY SEQUENCE TO <inPoint default schema>;
  • GRANT CREATE ANY SYNONYM TO <inPoint default schema>;
  • GRANT CREATE ANY TRIGGER TO <inPoint default schema>;
  • GRANT CREATE ANY VIEW TO <inPoint default schema>;
  • GRANT ALTER ANY TABLE TO <inPoint default schema>;
  • GRANT ALTER ANY INDEX TO <inPoint default schema>;
  • GRANT ALTER ANY SEQUENCE TO <inPoint default schema>;
  • GRANT ALTER ANY TRIGGER TO <inPoint default schema>;
  • GRANT DROP ANY TABLE TO <inPoint default schema>;
  • GRANT DROP ANY INDEX TO <inPoint default schema>;
  • GRANT DROP ANY SEQUENCE TO <inPoint default schema>;
  • GRANT DROP ANY SYNONYM TO <inPoint default schema>;
  • GRANT DROP ANY TRIGGER TO <inPoint default schema>;
  • GRANT DROP ANY VIEW TO <inPoint default schema>;
  • GRANT ALTER ANY PROCEDURE TO <inPoint default schema>;
  • GRANT CREATE ANY PROCEDURE TO <inPoint default schema>;
  • GRANT DROP ANY PROCEDURE TO <inPoint default schema>;
  • GRANT EXECUTE ANY PROCEDURE TO <inPoint default schema>;

System privileges for different schema​

Each user included into the "multischema support" must have the following system privileges:

  • CREATE SESSION
  • UNLIMITED TABLESPACE
  • CREATE TABLE
  • CREATE PROCEDURE
  • CREATE SEQUENCE
  • CREATE SYNONYM
  • CREATE TRIGGER
  • CREATE VIEW
  • EXECUTE ANY PROCEDURE
  • SELECT ANY TABLE
  • DELETE ANY TABLE

Execute the following statements to grant these rights to the user:

  • GRANT CREATE SESSION TO <different schema>;
  • GRANT UNLIMITED TABLESPACE TO <different schema>;
  • GRANT CREATE TABLE TO <different schema>;
  • GRANT CREATE PROCEDURE TO <different schema>;
  • GRANT CREATE SEQUENCE TO <different schema>;
  • GRANT CREATE SYNONYM TO <different schema>;
  • GRANT CREATE TRIGGER TO <different schema>;
  • GRANT CREATE VIEW TO <different schema>;
  • GRANT EXECUTE ANY PROCEDURE TO <different schema>;
  • GRANT SELECT ANY TABLE TO <different schema>;
  • GRANT DELETE ANY TABLE TO <different schema>;

, where <different schema> is replaced with the requested schema.