DBMS_NETWORK_ACL_ADMIN.CHECK_PRIVILEGE Returns Invalid Results if Previous Command NOT COMMITTED (Doc ID 790208.1)

Last updated on NOVEMBER 05, 2015

Applies to:

Oracle Database - Enterprise Edition - Version 11.1.0.6 to 11.1.0.7 [Release 11.1]
Information in this document applies to any platform.
This problem can occur on any platform.

Symptoms

After creating an ACL list and granting privileges on the ACL to a user, the DBMS_NETWORK_ACL_ADMIN.CHECK_PRIVILEGE query returns the privileges as being denied to that user:

As seen in the following sequence of events, the privilege appears in the end as being denied and not granted.

create user test identified by test;
/

begin
dbms_network_acl_admin.drop_acl ('test_acl.xml');
end;
/

begin
dbms_network_acl_admin.create_acl (
acl => 'test_acl.xml',
description => 'Permissions for my network',
principal => 'TEST',
is_grant => true,
privilege => 'resolve'
);
end;
/

select dbms_network_acl_admin.check_privilege('test_acl.xml','TEST','resolve') from dual;
/

DBMS_NETWORK_ACL_ADMIN.CHECK_PRIVILEGE('TEST_ACL.XML','TEST','RESOLVE')
-----------------------------------------------------------------------
                                                                      0

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms