ORA-28115 with EXEMPT ACCESS POLICY privilege

  • From: Paul Baumgartel <paul.baumgartel@xxxxxxxxx>
  • To: oracle-l@xxxxxxxxxxxxx
  • Date: Tue, 1 Mar 2005 13:53:57 -0500

List,

A user USER1 has been granted select, insert, update, delete on all
tables of an application schema (USER2) that uses row-level security.
The RLS policies cover select, insert, update, and delete, and have
check option enabled. USER1 has also been granted EXEMPT ACCESS POLICY
system privilege.

Each table in the USER2 schema has a trigger that causes insertion of
a row into an audit table whenever DML is performed. When USER1
performs DML on a USER2 table, the operation fails with

ORA-28115: policy with check option violation
Cause: Policy predicate was evaluated to FALSE with the updated values.

The error stack shows that the error occurs in the trigger's INSERT
into the audit table.

USER2 is able to insert into the audit table directly with no error.

Does EXEMPT ACCESS POLICY not apply to recursive (e.g., motivated by
trigger) SQL?

Thanks in advance!
--
//www.freelists.org/webpage/oracle-l

Other related posts:

  • » ORA-28115 with EXEMPT ACCESS POLICY privilege