Oracle-L: RE: privileges and synonyms and dblinks

From: Deshpande, Kirti <kirti.deshpande_at_verizon.com>
Date: Wed, 26 Jun 2002 10:30:15 -0800
Message-ID: <F001.004890A4.20020626103015@fatcity.com>

Matt,
We have run in to this issue.
There are some bugs related to this.
Pl review docs on Metalink # 159051.1, # 144114.1.

Kirti

-----Original Message-----
Sent: Wednesday, June 26, 2002 11:03 AM
To: Multiple recipients of list ORACLE-L

All of a sudden this is not making sense to me.

Oracle 8.1.7.3 on HP-UX 11i

I have a public db link (link1)

I have a user (user1) who creates a PRIVATE synonym.
(user1.syn1) that points to a table on the other database
using the dblink.

User2, having ONLY the CONNECT role, cannot do a describe of user1.syn1, but CAN
issue a 'select * from user1.syn1' and get data back. I know that since the db link is public with a account/password, he could get the data anyway by, but what I can figure out is why it resolves the synonym at all when it is private?

Am I missing something here?

Matt Adams - GE Appliances - matt.adams_at_appl.ge.com "Doing linear scans over an associative array is like trying to club someone to death with a loaded Uzi."

Larry Wall (creator of Perl)

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Deshpande, Kirti
  INET: kirti.deshpande_at_verizon.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L


(or the name of mailing list you want to be removed from).  You may

also send the HELP command for other information (like subscribing).

Received on Wed Jun 26 2002 - 13:30:15 CDT