Hi,
i am currently in the process to build some new repository roles which contain access to procedures from the user "SYS". Unfortunately i am having no luck with that.
What i am doing:
Role definition:
role MYCOMPANY.ROLES::MDGSEARCH { -- Privileges needed to run the search rules catalog sql object "SYS"."EXECUTE_SEARCH_RULE_SET": EXECUTE; catalog schema "_SYS_REPO": SELECT;
}When activating the role, i get the error:
error MYCOMPANY.ROLES::MDGSEARCH insufficient privilege: Not authorized at ptime/query/checker/query_check.cc:2547
Then i commented out the object from "SYS" and the role could be activated (_SYS_REPO was fine). So i tried some search here and found that the user _SYS_REPO should maybe have access to the target schema, so something like this:
GRANT SELECT ON SCHEMA "SYS" TO _SYS_REPO WITH GRANT OPTION;
Well that does not work as the user SYSTEM is now allowed to grant this and the user SYS cannot be activated (which could then be used to grant it to _SYS_REPO). Probably i misunderstood something, how could that be solved? Or is the only way to grant that privilege during runtime (which by the way works fine - just isn't really nice). I also tried granting access to that procedure to myself first, but that was not successful as well.
Thanks in advance!
Best Regards,
Uli