RE: grant access to another user's objects?

If you are not up to 9i R2, you can always resort to the brute force method that we always had to use.

As part of our initial DB Creates for a new project at a previous job, I used to log have to log on as the object owner and perform grants to our DBA's with the Grant option. We used to do this before any application was allowed out to public. This way we could do the grants from any of our DBA's accounts. (Of course, this sucks when you have to change the grants if your DBAs change, since you can't do the Grant Option to a role) It was a pain, but we had it down to an automated script that was used to build a script that did the grants.... made it as painless as possible.

-----Original Message-----
Sent: Monday, June 10, 2002 4:09 PM
To: Multiple recipients of list ORACLE-L

9i R2 allows "DBA's" to do GRANTS on objects in other schemas.

Jack Silvey wrote:
>
> All,
>
> We have a new info security group that is going to do
> all the object grants on our warehouse. I don't want
> them to login as schema owners to do this.
>
> Until this time, I have been granting access to other
> user's object by logging in as a dba, creating a
> procedure in the owner's schema with the EXECUTE
> immediate statement, and passing it the 'grant select
> on table a' statement for execution. That way, the
> grant actually executes as the object owner, but can
> be issued from a DBA account.
>
> Short of having a custom SP in each user's schema for
> this type of grant, can anyone think of another way?
>
> thx,
>
> jack silvey
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Jack Silvey
> INET: jack_silvey_at_yahoo.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).

-- 
Charlie Mengler                           Maintenance Warehouse  
charliem_at_mwh.com                          10641 Scripps Summit Ct.
858-831-2229                              San Diego, CA 92131    
Am I sure? Of course I'm sure. I could be wrong, but I'm sure for now!
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Charlie Mengler
  INET: charliem_at_mwh.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Kevin Lange
  INET: kgel_at_ppoone.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).