Re: Revoke system privilege from user

And the next logical question is... If the user can't be trusted around the tables, why was he given the dba role at all. Just give him the specific priveledges he needs.

>>> B N RAMAMOHAN <ramamohan.bn_at_tatainfotech.com> 03/01/01 02:35AM >>> Hi Chuan,

You can not revoke Just drop any table from DBA Role, since drop any tables is not granted explicitly.

What you can do is create a copy of DBA role and from that role reovke drop any table table priv. Use this new role to grant DBA without Drop any table priv.

Regards,
Mohan

On Wed, 28 Feb 2001, Chuan Zhang wrote:

> Hi, All,
>
> I have granted DBA role to an user. But I don't want him holding the
> "Drop Any Table" system privilege.
>
> I did as follows:
>
> 1. Connect as sysdba.
> 2. revoke drop any table from ABC-user;
>
> And I got the error:" ORA-01952: system privileges not granted to
> 'ABC-user'".
>
> Could anyone help me out?
>
> Thanks,
>
> Chuan

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com 
-- 
Author: B N RAMAMOHAN
  INET: ramamohan.bn_at_tatainfotech.com 

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: William Beilstein
  INET: BeilstWH_at_obg.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).