Re: grant select on SCOTT.* to vewalluser;

From: Dennis Williams <oracledba.williams_at_gmail.com>
Date: Tue, 31 Oct 2006 11:53:15 -0600
Message-ID: <de807caa0610310953h4bcedb43g4643e23fe2e28a4@mail.gmail.com>

Roger,

The alternative is to grant select any table to that user. Someday an auditor will probably tell your boss you're incompetent, but take that as a badge of honor.

If you are really serious about this, Asktom provides a workaround: http://asktom.oracle.com/pls/ask/f?p=4950:8:::::F4950_P8_DISPLAYID:646423863863

Another thought is to use roles. Have a practice that whenever a new table is created, someone grants that table to the role. At least somebody has reviewed the grant, and it isn't "hidden".

Security is often the bane of convenience.

Dennis Williams

--
http://www.freelists.org/webpage/oracle-l

Received on Tue Oct 31 2006 - 11:53:15 CST