Oracle回收权限报错ORA-01952

Oracle操作回收权限时，报错ORA-01952: system privileges not granted to CRM

解决记录：

查询发现系统存在crm与CRM用户，所以当回收crm权限时需要添加双引号，否则系统会报ORA-01952错误。
1、查询crm具有哪些 dba_role 与 dba_sys 权限

SQL> select * from dba_role_privs where GRANTEE='crm';
no rows selected

SQL> select * from dba_sys_privs where GRANTEE='crm';
GRANTEE 		       PRIVILEGE				ADM
------------------------------ ---------------------------------------- ---
crm			       ALTER ANY SEQUENCE			NO
crm			       CREATE SESSION				NO

2、查询CRM具有哪些 dba_role 与 dba_sys 权限

SQL> select * from dba_role_privs where GRANTEE='CRM';
GRANTEE 		       GRANTED_ROLE		      ADM DEF
------------------------------ ------------------------------ --- ---
CRM			       RESOURCE 		      NO  YES
CRM			       CONNECT			      NO  YES

SQL> select * from dba_sys_privs where GRANTEE='CRM';
GRANTEE 		       PRIVILEGE				ADM
------------------------------ ---------------------------------------- ---
CRM			       UNLIMITED TABLESPACE			NO
CRM			       DROP PUBLIC SYNONYM			NO
CRM			       CREATE VIEW				NO
CRM			       CREATE PUBLIC SYNONYM			NO

3、回收crm权限错误操作

SQL> revoke CREATE SESSION from crm;
revoke CREATE SESSION from crm
*
ERROR at line 1:
ORA-01952: system privileges not granted to 'CRM'


SQL> revoke ALTER ANY SEQUENCE from crm;
revoke ALTER ANY SEQUENCE from crm
*
ERROR at line 1:
ORA-01952: system privileges not granted to 'CRM'

4、回收crm权限正确操作如下

SQL> revoke CREATE SESSION from "crm";
Revoke succeeded.
SQL> revoke ALTER ANY SEQUENCE from "crm";
Revoke succeeded.
SQL> grant connect,resource to "crm";
Grant succeeded.
SQL> grant create view to "crm";
Grant succeeded.
SQL> grant create public synonym to "crm";
Grant succeeded.
SQL> grant drop public synonym to "crm";
Grant succeeded.
SQL> grant unlimited tablespace to "crm";
Grant succeeded.

5、再次查询crm具有哪些 dba_role 与 dba_sys 权限

SQL> select * from dba_role_privs where GRANTEE='crm';
GRANTEE 		       GRANTED_ROLE		      ADM DEF
------------------------------ ------------------------------ --- ---
crm		       RESOURCE 		      NO  YES
crm		       CONNECT			      NO  YES
SQL> select * from dba_sys_privs where GRANTEE='crm';
GRANTEE 		       PRIVILEGE				ADM
------------------------------ ---------------------------------------- ---
crm		       CREATE PUBLIC SYNONYM			NO
crm		       CREATE VIEW				NO
crm		       DROP PUBLIC SYNONYM			NO
crm		       UNLIMITED TABLESPACE			NO