> -----Original Message-----
> From: Wolfgang Breitling [mailto:[EMAIL PROTECTED]
> 
> The logon user needs to have granted "alter session" 
> privileges directly to 
> her, not just through a role.

I believe you that it's needed for DBMS_SESSION.SET_SQL_TRACE, but then why was I able 
to get a trace file by using DBMS_SUPPORT, creating the trigger as a user that did not 
have ALTER SESSION privilege?

My example was:
--- Jacques Kilchoer <[EMAIL PROTECTED]> wrote:
> What database version? What is your setting for
> O7_DICTIONARY_ACCESSIBILITY?
> I tried the following in an 8.1.7 database with
> O7_DICTIONARY_ACCESSIBILITY = FALSE
> 
> create user x identified by ... ;
> grant create session, create trigger to x ;
> 
> (logging on as SYSDBA)
> grant execute on sys.dbms_support to x ;
> 
> CONNECT X ...
> create trigger schema_trace
> after logon
> on schema
> begin
>    sys.dbms_support.start_trace (waits => false, binds => false) ;
> end ;
> /
> DISCONNECT
> 
> logon as user X:
> trace file created
> 
> logon as user Y:
> no trace file created
> 
> logon as user Y, say "alter sesssion set current_schema = X ;"
> no trace file created
> 
> No error messages in alert log 
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jacques Kilchoer
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to