select * from dba_sys_privs
where grantee = ‘JOXEAN’
order by 2

When the privileged user selects the virtual column, SYS_CONTEXT(‘USERENV’,'CURRENT_USER’) is the table owner, not the privileged user. It behaves just like an invoker’s rights function invoked via a view, in that respect.

I’m on 11.2.0.1.

AskTom is correct: it isn’t that different to selecting data from a view. But, I had to try to find if privileges where not correctly handled for virtual columns.

@Matt

Interesting… Are you sure it works for you? I mean, do you scalate privileges by running DBMS_STATS.GATHER_STATS or the like? If your answer is yes, well, we have a new 0day

CREATE TABLE t2
(
col1 VARCHAR2(50),
col2 generated always AS (f1(col1)) virtual
);

instead, I believe it would have worked.

This blog post was referenced by a reader on Tom Kyte’s site. In the following URL, you will find the URL to this blog asked by a reader. The reader pasted this blogs URL in and asked Tom’s opinion on what you wrote here, http://asktom.oracle.com/pls/apex/f?p=100:11:0::::P11_QUESTION_ID:676611400346196844

Tom Kyte answered that question about this blog. Maybe you would want to join in the conversation by replying on that AskTom URL?

I’m just thinking whether the stats collection job would perform a select against the table so you might not even need a DBA to manually select it?

Just theorizing if the stats collection doesn’t ignore virtual columns.