Message-Id: <25920.337658@fatcity.com> From: "Jamadagni, Rajendra" Date: Mon, 14 Jul 2003 07:50:41 -0400 Subject: RE: Privileges and PL/SQL code This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------=_NextPartTM-000-7b912388-5e83-4c28-ab4a-ed9ae9649d6e Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C349FE.26702D34" ------_=_NextPart_001_01C349FE.26702D34 Content-Type: text/plain; charset="iso-8859-1" If you don't want to do that, create your pl/sql code under schema A and grant execute on those to B and C. Sorry ... that's the only way to go ... Raj ---------------------------------------------------------------------------- ---- Rajendra dot Jamadagni at nospamespn dot com All Views expressed in this email are strictly personal. QOTD: Any clod can have facts, having an opinion is an art ! -----Original Message----- From: Stefan Jahnke [mailto:Stefan.Jahnke@bov.de] Sent: Monday, July 14, 2003 8:31 AM To: Multiple recipients of list ORACLE-L Subject: Privileges and PL/SQL code Hi list I was wondering if there is any way to get the following to work: User A owns all tables, users B,C own PL/SQL code to access A's tables. To work with A's tables from user B and C, I would like to create a role to contain all the object privileges and grant these to B and C. Didn't use to work, since PL/SQL is not particularly interested in grants received through roles. But I don't really want to grant all privileges directly to B and C (and many more users). Is there a way in 9i that works better ? Any improvements I missed out on ? Thanks in advance, Stefan -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Stefan Jahnke INET: Stefan.Jahnke@bov.de Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). ------_=_NextPart_001_01C349FE.26702D34 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: Privileges and PL/SQL code

If you don't want to do that, create your pl/sql code = under schema A and grant execute on those to B and C.

Sorry ... that's the only way to go ...

Raj
---------------------------------------------------------------= -----------------
Rajendra dot Jamadagni at nospamespn dot com
All Views expressed in this email are strictly = personal.
QOTD: Any clod can have facts, having an opinion is = an art !


-----Original Message-----
From: Stefan Jahnke [mailto:Stefan.Jahnke@bov.de]
Sent: Monday, July 14, 2003 8:31 AM
To: Multiple recipients of list ORACLE-L
Subject: Privileges and PL/SQL code


Hi list

I was wondering if there is any way to get the = following to work:

User A owns all tables, users B,C own PL/SQL code to = access A's tables.
To work with A's tables from user B and C, I would = like to create a role to
contain all the object privileges and grant these to = B and C.

Didn't use to work, since PL/SQL is not particularly = interested in grants
received through roles.
But I don't really want to grant all privileges = directly to B and C (and
many more users).

Is there a way in 9i that works better ? Any = improvements I missed out on ?

Thanks in advance,
Stefan



 
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Stefan Jahnke
  INET: Stefan.Jahnke@bov.de

Fat City Network Services    -- = 858-538-5051 http://www.fatcity.com
San Diego, = California        -- Mailing list = and web hosting services
---------------------------------------------------------------= ------
To REMOVE yourself from this mailing list, send an = E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of = 'ListGuru') and in
the message BODY, include a line containing: UNSUB = ORACLE-L
(or the name of mailing list you want to be removed = from).  You may
also send the HELP command for other information = (like subscribing).

------_=_NextPart_001_01C349FE.26702D34-- ------=_NextPartTM-000-7b912388-5e83-4c28-ab4a-ed9ae9649d6e Content-Type: text/plain; name="ESPN_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="ESPN_Disclaimer.txt" ********************************************************************This e-mail message is confidential, intended only for the named recipient(s) above and may contain information that is privileged, attorney work product or exempt from disclosure under applicable law. If you have received this message in error, or are not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 and delete this e-mail message from your computer, Thank you.*********************************************************************2