U00003590 UCUDB - DB error: 'OCIStmtExecute', 'ERROR ', '', 'ORA-01031: insufficient privileges

[P Verghese]

Dear All,

We are getting the following error in midst of 21.0.3 to 21.0.4 upgrade for Oracle/RHELsetup

IF UPDATING('AH_TimeStamp4') AND :NEW.AH_TimeStamp4 IS NOT NULL AND :OLD.AH_TIMESTAMP4 IS NULL THEN
INSERT INTO XEVENTS (XEVT_EventId, XEVT_Src, XEVT_Idnr, XEVT_Client, XEVT_OType, XEVT_OName, XEVT_EventType, XEVT_EventValue, XEVT_EventTime)
VALUES(SQ_XEVENTS_ID.NEXTVAL,'AH',:NEW.AH_Idnr,:NEW.AH_Client,:NEW.AH_OTyp'
20220918/060450.514 - U00003590 UCUDB - DB error: 'OCIStmtExecute', 'ERROR ', '', 'ORA-01031: insufficient privileges'
20220918/060450.514 - U00003590 UCUDB - DB error: 'OCIStmtExecute', 'ERROR ', '', 'ORA-01031: insufficient privileges'

The AUTOMIC user on Oracle DB has the following rights :

GRANT create table, create sequence, create session, create procedure, create trigger, execute any procedure, create public synonym, drop public synonym, create view, alter session, select any dictionary TO uc4;
GRANT execute ON dbms_lock TO uc4;
GRANT unlimited tablespace TO uc4;

Any ideas on what is required to fix this?

Regards
P Verghese

[Markus Embacher]

Hi,

please grant "create trigger" to the automic database user.

Regards, Markus

[P Verghese]

Hi,

The user has the "create trigger" right. The above issue with db load we are seeing first time in 21.0.3 -> 21.0.4 upgrade. It was not there in the past with exactly same rights as listed above.

Regards
P Verghese

[Markus Embacher]

Hi,
I will investigate internally and get back to you within the next few days.
Regards, Markus

[Markus Embacher]

Hi
,
please refer to 
https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/21.0.4/Automic%20Automation%20Guides/Content/_Common/ReleaseHighlights/WhatsNew_21_0_4.htm

The create trigger permission is required from 21.0.4 to create a new trigger in the database. This is for the AAI integration and is deactivated per default.

That requirement was also added to following page:
https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/21.0.4/Automic%20Automation%20Guides/Content/Installation_Manual/AE/SetUptheAEDatabase.htm?Highlight=oracle%20grant

Kindly double check if the user has the additional grant for CREATE TRIGGER. If it is still not possible to create the trigger please let me know.

Thank you!

Regards, Markus

[Keld Mollnitz]

Hi @Markus Embacher,

I found that the DB user also requires the CREATE VIEW privilege.​

/Keld.

[Markus Embacher]

Hi @Keld Mollnitz,

the CREATE VIEW privilege is listed as a required permission too.

https://docs.automic.com/documentation/webhelp/english/ALL/components/DOCU/21.0.4/Automic%20Automation%20Guides/Content/Installation_Manual/AE/SetUptheAEDatabase.htm#link3

Regards, Markus​

[Keld Mollnitz]

Hi @Markus Embacher,

yes, you are right.​ CREATE VIEW was also listed in the 12.3 documentation....
If the CREATE TRIGGER privilege was also mentioned in the 21.0.4 Release Notes, then customers could avoid the issue in the first hand....

[Dominic Irudayasamy]

Please make sure your AE DB user has the "APPL_ROLE and SELECT_CATALOG_ROLE " rights.

------------------------------
Dominic I
------------------------------

[Markus Embacher]

A KB article has been created:
https://knowledge.broadcom.com/external/article?articleId=250492