| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> RE: Schema Owner
True, but I really didn't get much personal gain from that trigger. :)
Jared
"Vergara,
Michael (TEM)" To: Multiple recipients of list ORACLE-L
<ORACLE-L_at_fatcity.com>
<mvergara_at_guid cc:
ant.com> Subject: RE: Schema Owner
Sent by:
root_at_fatcity.c
om
12/06/01 03:55
PM
Please respond
to ORACLE-L
..and look what's happened to Enron! :-0
And I might add, it works very well.
I did the same thing at Enron to prevent the duhvelopers from changing account passwords.
Jared
Joe Testa
<teci_at_the-test To: Multiple recipients of
list
as.net> cc:
Sent by: Subject: Re: Schema Owner
root_at_fatcity.c
om
12/05/01 07:15
PM
Please respond
to ORACLE-L
You can't revoke the privilege from the schema owner but you CAN keep them from doing ddl and dml by using database triggers.
now the catch is this:
the trigger HAS to be owned by someone other than the schema owner AND the schema owner can't have the alter any trigger privilege(either direct or via a role).
so yes Virgina(since its the xmas season), you can keep the schema owner from altering data in its own schema.
joe
DENNIS WILLIAMS wrote:
>
> Hamid - this was discussed recently on this list and as I recall you
can't
> revoke the schema owner. Can you create a new userid and get them to use
> that? Then change the password on the schema owner. Barring that, you
could
> create a new schema, move the tables and indexes there, then grant select
to
> the original owner.
> Dennis Williams
> DBA
> Lifetouch, Inc.
> dwilliams_at_lifetouch.com
>
> -----Original Message-----
> Sent: Wednesday, December 05, 2001 1:15 PM
> To: Multiple recipients of list ORACLE-L
>
> May be odd question, but I realy need to do this, I want to revoke the
> privilege of the schema owner.
> I mean give only select priv to the schema owner.
> Thanks
>
> Hamid Alavi
> Office 818 737-0526
> Cell 818 402-1987
>
-- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Vergara, Michael (TEM) INET: mvergara_at_guidant.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: INET: Jared.Still_at_radisys.com Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Thu Dec 06 2001 - 18:38:16 CST
 |
 |