SAP Knowledge Base Article - Preview

2772939 - Alter table failed with error 10330 when granular permissions are enabled - ASE

Symptom

  1. A user is the DBA login which has full permission for the server including sa_role, for example:
     
    1> sp_displaylogin mysybsa
    2> go
    Suid: 58
    Loginame: mysybsa
    Fullname: Sybase Server maintenance user
    Configured Authorization:
    sa_role (default ON)
    sso_role (default ON)
    sybase_ts_role (default ON)
    replication_role (default ON)
    mon_role (default ON)
    Locked: NO
    Date of Last Password Change: Aug 24 20XX 6:34AM
    Password expiration interval: 0
    Password expired: NO
    Minimum password length: 8
    Maximum failed logins: 0
    Current failed login attempts:
    Login Password Encryption: SHA-256
    Last login date: Mar 22 20XX 12:42PM
    Exempt inactive lock: 0
    Login Profile: MY_PROFILE
    (return status = 0)
     
  2. Granular permission is on:

    1> sp_configure "granular permission"
    2> go
    Parameter Name Default Memory Used Config Value Run Value Unit Type
    --------------------------- ----------- ------------- -------------- ------------ ------ -------
    enable granular permissions 0 0 1 1 switch dynamic
     
  3. Alter table drop column is saying it needs "ALTER ANY TABLE" permission:
     
    1> alter table anotheruser.TABLE1 drop column1, column2
    2> go
    Msg 10330, Level 14, State 1
    Server 'MYSERVER', Line 1
    ALTER TABLE or ALTER ANY TABLE permission denied on object TABLE1, database MYDB, owner anotheruser

  4. Granted "alter any table" permission to login user didn't work

  5. Using "setuser anotheruser" then alter table, does work

Read more...

Environment

  • SAP Adaptive Server Enterprise 15.7
  • SAP Adaptive Server Enterprise 16.0

Product

SAP Adaptive Server Enterprise 16.0

Keywords

CR 818851,CR818851 , KBA , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , Product Enhancement

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.