OraGenSec Throwing Error "Error while executing SQL: StmtType-G, Stmt-CREATE or Replace SYNONYM CI_MD_TAB_MOD FOR CISADM.CI_MD_TAB_MOD" While Applying Patch - Installing OUAF Version 4.4.0.0.0 (Doc ID 2704028.1)

Last updated on APRIL 13, 2023

Applies to:

Symptoms

On RMB v2.9.0.0.0,  IP - Installation Upgrade Proc

ACTUAL BEHAVIOR
---------------------
OraGenSec Throwing error while applying patch - Installing OUAF Version 4.4.0.0.0

While applying the patch Installing OUAF Version 4.4.0.0.0 getting below error

 - 2020-06-24 13:31:21,144 [main] ERROR (oem.install.OraGenSec) Error while executing SQL: StmtType-G, Stmt-CREATE or Replace SYNONYM CI_MD_TAB_MOD FOR CISADM.CI_MD_TAB_MOD
 - 2020-06-24 13:31:21,144 [main] ERROR (oem.install.OraGenSec) java.sql.SQLSyntaxErrorException: ORA-01031: insufficient privileges

This seems to be because of insufficient privileges' to CISREAD and CISUSER schema. What we have observed from Database Administration Guide 29000 that below mentioned additional grants need to be executed in order to successfully apply the patch.

GRANT CREATE SYNONYM TO CIS_USER;
GRANT CREATE SYNONYM TO CIS_READ;
GRANT EXECUTE on DBMS_UTILITY TO CISADM;

CISREAD and CISUSER should not have DDL access. We need to modify OraGenSec to create synonyms using CISADM privileges instead of CISREAD and CISUSER privileges. Issuing grants to CISREAD and CISUSER is becoming an audit issue for our organization. Kindly help us with the solution so that we could apply patches without these additional grants.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.