| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re[2]: AQ and Privs: Picky Picky
Don't you just LOVE third party crap!!!
Dick Goulet
____________________Reply Separator____________________Subject: Re: AQ and Privs: Picky Picky Author: "Joseph S. Testa" <teci_at_oracle-dba.com> Date: 12/11/2000 12:41 PM
Ha one i know from a downgrade, take a look at ORACLE_HOME/rdbms/admin/dbmsaqad.sql
there is a package to revoke those system privileges.
joe
> "Koivu, Lisa" wrote:
>
> Hello everyone,
>
> As a routine exercise during install of a third-party product, I
> checked privileges and (suprise) the schema owner has every single
> darn privilege granted to it. I asked the vendor for a specific list
> of necessary privileges in order for the app to execute and got the
> standard "I don't know, let me ask support" and no answer. So being
> the picky person I am, I revoked all privs and granted connect &
> resource. However there are a few system privs that I just can't
> revoke:
>
> ADMINISTER RESOURCE MANAGER
> DEQUEUE ANY QUEUE
> ENQUEUE ANY QUEUE
> MANAGE ANY QUEUE
>
> When I try to revoke them I get the errors below. I looked around in
> the documentation and it doesn't say anything about granting and
> revoking these privileges directly - all the AQ privs are part of a
> role and I found nothing specific about "resource manager".
>
> Any suggestions are appreciated. Thanks
>
> SQL> revoke dequeue any queue from imed;
> revoke dequeue any queue from imed
> *
> ERROR at line 1:
> ORA-00990: missing or invalid privilege
>
> SQL> revoke administer resource manager from imed;
> revoke administer resource manager from imed
> *
> ERROR at line 1:
> ORA-00990: missing or invalid privilege
>
> SQL>
>
> Lisa Rutland Koivu
> Oracle Database Administrator
> Qode.com
> 4850 North State Road 7
> Suite G104
> Fort Lauderdale, FL 33319
>
> V: 954.484.3191, x174
> F: 954.484.2933
> C: 954.658.5849
> http://www.qode.com
>
> "The information contained herein does not express the opinion or
> position of Qode.com and cannot be attributed to or made binding upon
> Qode.com."
-- Joe Testa http://www.oracle-dba.com No you can't fix an ORA-600 error, call Oracle Support. -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Joseph S. Testa INET: teci_at_oracle-dba.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You mayReceived on Mon Dec 11 2000 - 15:16:25 CST
 |
 |