Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: System applying grants

RE: System applying grants

From: <com.banilejas_at_codetel.net.do>
Date: Sat, 20 Apr 2002 10:58:19 -0800
Message-ID: <F001.0044A45A.20020420105819@fatcity.com>

Thank you Jared,

I was confused, thought that the GRANT ANY PRIVILEGE ROLE, would allow that !!!

Tks

-----Original Message-----

From:	"root_at_fatcity.com" <root_at_fatcity.com> on behalf of	"Jared Still" <jkstill_at_cybcon.com>
Sent:	Saturday, April 20, 2002 1:28 AM
To:	"Multiple recipients of list ORACLE-L" <ORACLE-L_at_fatcity.com>
Subject:	Re: System applying grants


That won't give SYS the privileges you think it does.

For any user, including SYS, to be allowed to grant direct privileges on another users objects, that user must have explicity direct grants with the 'with grant option'.

e.g. to allow SYS to grant privileges on the table EMP owned by SCOTT, you must log in as SCOTT and issue this command:

GRANT ALL ON EMP TO SYS; The user SYS will now be able to grant privilege on SCOTT.EMP to other users.

Jared

On Friday 19 April 2002 19:23, com.banilejas_at_codetel.net.do wrote:
> Hi gurus,
>
> I created a script to assign some grants automatically to some roles and
> users.
>
> As the user sys, I assigned to user system the GRANT ANY PRIVILIGE, GRANT
> ANY ROLE, roles and when run the script get the error of insufficient
> privileges.
>
> What I dont want is to connect to each user to apply the grants.
>
> How can achieve that ?
>
> TIA
>
> Ramon

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jared Still
  INET: jkstill_at_cybcon.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: com.banilejas_at_codetel.net.do

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Sat Apr 20 2002 - 13:58:19 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US