Re: 10gR2, problem about Resource role

From: Alex Gorbachev <gorbyx_at_gmail.com>
Date: Tue, 31 Oct 2006 23:48:05 -0500
Message-ID: <c2213f680610312048x4f76fbccx75bfe834e65497f3@mail.gmail.com>

Alternatively, just revoke UNLIMITED TABLESPACE after that. Also, have you ever wonder why CONNECT role contains more that just CREATE SESSION privilege?

SQL> select privilege from dba_sys_privs where grantee='CONNECT';

PRIVILEGE

---

CREATE VIEW
CREATE TABLE
ALTER SESSION
CREATE CLUSTER
CREATE SESSION
CREATE SYNONYM
CREATE SEQUENCE
CREATE DATABASE LINK On 10/31/06, David Sharples <davidsharples_at_gmail.com> wrote:
> not a bug and definietly not a phenomena. It has been this way for years.
> When you grant the resource role, you explicitly get granted the unlimited
> tablespace privelege.
>
> Documented, known and understood, if you dont like it - dont assign anyone
> resource
>
>
>
> On 31/10/06, ?? ? <jerrysun1981_at_hotmail.com> wrote:
> >
> > problem comes out, why and when the "UNLIMITED TABLESPACE" privilege was
> > granted to user "TEST", i am sure that the "UNLIMITED TABLESPACE" here
> > derive from "RESOURCE" role, anybody has any idea about this phenomena? is
> > this a oracle bug ?
> >
> > thanks in advance, and sorry for my poor english
> >
>

-- 
Best regards,
Alex Gorbachev

The Pythian Group
Sr. Oracle DBA

http://www.pythian.com/blogs/author/alex/
http://blog.oracloid.com
--
http://www.freelists.org/webpage/oracle-l

Received on Tue Oct 31 2006 - 22:48:05 CST