privileges and synonyms and dblinks

From: Adams, Matthew (GEA, MABG, 088130) <MATT.ADAMS_at_APPL.GE.COM>
Date: Wed, 26 Jun 2002 08:02:37 -0800
Message-ID: <F001.00488A4B.20020626080237@fatcity.com>

All of a sudden this is not making sense to me.

Oracle 8.1.7.3 on HP-UX 11i

I have a public db link (link1)

I have a user (user1) who creates a PRIVATE synonym.
(user1.syn1) that points to a table on the other database
using the dblink.

User2, having ONLY the CONNECT role, cannot do a describe of user1.syn1, but CAN
issue a 'select * from user1.syn1' and get data back. I know that since the db link is public with a account/password, he could get the data anyway by, but what I can figure out is why it resolves the synonym at all when it is private?

Am I missing something here?

---

Matt Adams - GE Appliances - matt.adams_at_appl.ge.com "Doing linear scans over an associative array is like trying to club someone to death with a loaded Uzi."

• Larry Wall (creator of Perl)

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Adams, Matthew (GEA, MABG, 088130)
  INET: MATT.ADAMS_at_APPL.GE.COM

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).

Received on Wed Jun 26 2002 - 11:02:37 CDT