Delete_catalog_role Missing Delete Privileges On AUD$ Table in 12c DB

(Doc ID 2296065.1)

Last updated on AUGUST 18, 2017

Applies to:

Oracle Database - Enterprise Edition - Version 12.1.0.2 and later
Information in this document applies to any platform.

Goal

In 12c DB,  delete privilege on AUD$ and FGA_LOG$ tables are missing from Delete_catalog_role role.
But in 11g DB, Delete_catalog_role role have delete privilege on AUD$ and FGA_LOG$ tables.

In 12c DB:

SQL*Plus: Release 12.1.0.2.0 Production on Wed Jul 19 14:43:30 2017
Copyright (c) 1982, 2014, Oracle. All rights reserved.
Connected to:
Oracle Database 12c Enterprise Edition Release 12.1.0.2.0 - 64bit Production
With the Partitioning, OLAP, Advanced Analytics and Real Application Testing options

SQL> select GRANTEE,TABLE_NAME,PRIVILEGE from dba_tab_privs where GRANTEE='DELETE_CATALOG_ROLE';
no rows selected


In 11G DB:

Connected to:
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
With the Partitioning, OLAP, Data Mining and Real Application Testing options

SQL> select GRANTEE,TABLE_NAME,PRIVILEGE from dba_tab_privs where GRANTEE='DELETE_CATALOG_ROLE';

GRANTEE TABLE_NAME
------------------------------ ------------------------------
PRIVILEGE
----------------------------------------
DELETE_CATALOG_ROLE FGA_LOG$
DELETE

DELETE_CATALOG_ROLE AUD$
DELETE
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms