Re: Schema Owner

And I might add, it works very well.

I did the same thing at Enron to prevent the duhvelopers from changing account passwords.

Jared

                                                                                       
                        
                    Joe Testa                                                          
                        
                    <teci_at_the-test       To:     Multiple recipients of list ORACLE-L 
<ORACLE-L_at_fatcity.com>   
                    as.net>              cc:                                           
                        
                    Sent by:             Subject:     Re: Schema Owner                 
                        
                    root_at_fatcity.c                                                     
                        
                    om                                                                 
                        
                                                                                       
                        
                                                                                       
                        
                    12/05/01 07:15                                                     
                        
                    PM                                                                 
                        
                    Please respond                                                     
                        
                    to ORACLE-L                                                        
                        
                                                                                       
                        
                                                                                       
                        

You can't revoke the privilege from the schema owner but you CAN keep them from doing ddl and dml by using database triggers.

now the catch is this:

the trigger HAS to be owned by someone other than the schema owner AND the schema owner can't have the alter any trigger privilege(either direct or via a role).

so yes Virgina(since its the xmas season), you can keep the schema owner from altering data in its own schema.

joe

DENNIS WILLIAMS wrote:
>
> Hamid - this was discussed recently on this list and as I recall you
can't
> revoke the schema owner. Can you create a new userid and get them to use
> that? Then change the password on the schema owner. Barring that, you
could
> create a new schema, move the tables and indexes there, then grant select
to
> the original owner.
> Dennis Williams
> DBA
> Lifetouch, Inc.
> dwilliams_at_lifetouch.com
>
> -----Original Message-----
> Sent: Wednesday, December 05, 2001 1:15 PM
> To: Multiple recipients of list ORACLE-L
>
> May be odd question, but I realy need to do this, I want to revoke the
> privilege of the schema owner.
> I mean give only select priv to the schema owner.
> Thanks
>
> Hamid Alavi
> Office 818 737-0526
> Cell 818 402-1987
>
> The information contained in this message and any attachments is intended
> only for the use of the individual or entity to which it is addressed,
and
> may contain information that is PRIVILEGED, CONFIDENTIAL and exempt from
> disclosure under applicable law. If you have received this message in
error,
> you are prohibited from copying, distributing, or using the information.
> Please contact the sender immediately by return e-mail and delete the
> original message from your system.
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Hamid Alavi
> INET: hamid.alavi_at_quovadx.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: DENNIS WILLIAMS
> INET: DWILLIAMS_at_LIFETOUCH.COM
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing)

--
Joe Testa, Oracle DBA
Want to have a good time with a bunch of geeks? Check out:
http://www.geekcruises.com/standard_interface/future_cruises.html
I'm presenting, when registering drop my name :)

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Joe Testa
  INET: teci_at_the-testas.net

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).