cancel
Showing results for 
Search instead for 
Did you mean: 

AMDP problem. SQL message from the database: "insufficient privilege: Not authorized"

former_member185511
Active Participant
0 Kudos

Hi all,

Just before running my AMDP via SE24, i get this error ;

    SQL code of the database: 258 SQL message from the database: "insufficient

     privilege: Not authorized"

Everyting is working fine in development envrionment but it keep failing on production after transport.

I give all select/execute authrozation to my SAPXXX user and _SYS_BIC schemas but still failing,

here is the trace file;

27542]{463464}[537/-1] 2015-12-14 16:24:35.637787 i Authorization    SQLFacade.cpp(01222) : UserId(150731) is not authorized because invalid privilege 27 on ObjectId(6,0,oid=5137569)

[27542]{463464}[537/-1] 2015-12-14 16:24:35.637862 i Authorization    SQLFacade.cpp(01750) :

    schemas and objects in schemas :

    SCHEMA-150732-SAPXXX : {CREATE_PROCEDURE} , {}

    SCHEMA-139816-_SYS_BIC : {} , {EXECUTE}

        PROCEDURE/FUNCTION-5137569-ZPROCEDURE_TEST : {EXECUTE} , {}

[27542]{463464}[537/-1] 2015-12-14 16:24:35.637888 i Authorization    query_check.cc(03287) : User SAPXXX tried to execute 'create procedure

  "ZPROCEDURE_TEST=>RUN"

language sqlscript  sql security invoker                            as begin

call "_SYS_BIC"."ZPROC_TEST"(:I_VAL);

end; '

i checked the object from OBJECTS table and it is under_SYS_BIC schema.;

Select * from objects where object_oid = '5137569'

Which authrozation do i need to give ?

Accepted Solutions (1)

Accepted Solutions (1)

former_member185511
Active Participant
0 Kudos

after trying total 21512312 number of combinations finally i did by executing

GRANT CREATE ANY ON SCHEMA SAPXXX TO _SYS_REPO WITH GRANT OPTION


NOTE TO HISTORY:

Logged with : SAPXXX user

Executed under SYSTEM schema.



Answers (1)

Answers (1)

pfefferf
Active Contributor
0 Kudos

Hello Bilen,

does your SAPXXX user have the rights to create procedures in the "ABAP" schema?

When a new or changed AMDP is executed a procedure is created for it in the "ABAP" schema.

According to the messages it seems, that the user does not have the rights to create the procedure.

Best Regards,

Florian

former_member185511
Active Participant
0 Kudos

yea it looks like that but i gave select/execute/create auth for SAPXXX over _SYS_BIC.

I am still looking which auth i need to check.

my ABAP schema/user is SAPXXX.

XXX is the instance of my sap server.

pfefferf
Active Contributor
0 Kudos

Ok, but for schema _SYS_BIC it is not necessary for that specific case, cause the procedures are created in the "ABAP" schema.

former_member185511
Active Participant
0 Kudos

yea thx i was also thinking same it was just related to creating but i didin't think we need a create auth. for sys_repo .

thanks for the replies take care bro.