I *mostly* agree. If I had to create and maintain 10,000 identical users
though I might be tempted to do something similar to what the OP wants and
grant execute on that procedure to the corporate helpdesk, though I think
I'd probably just grant the appropriate rights to a role and let the
helpdesk have user accounts with that role granted. For the record though we
have never had a database where anyone other than the dba's had create user
privs.
--
Niall Litchfield
Oracle DBA
Audit Commission UK
*****************************************
Please include version and platform
and SQL where applicable
It makes life easier and increases the
likelihood of a good answer
******************************************
"Sybrand Bakker" <postbus_at_sybrandb.demon.nl> wrote in message
news:uc92aa248ovs07_at_corp.supernews.com...
>
> "Niall Litchfield" <n-litchfield_at_audit-commission.gov.uk> wrote in message
> news:3cc43bc2$0$233$ed9e5944_at_reading.news.pipex.net...
> > That grant execute to .. does not confer the underlying privileges. so
the
> > user can be allowed to create users through the stored procedure without
> > having dba access to the system.
> >
> >
> > --
> > Niall Litchfield
> > Oracle DBA
> > Audit Commission UK
> > *****************************************
> > Please include version and platform
> > and SQL where applicable
> > It makes life easier and increases the
> > likelihood of a good answer
> >
>
>
> You are correct, but if you have to administer this db, don't you think
you
> are loosing ALL control if you are allowing end-users to do this?
>
> Regards
>
> --
> Sybrand Bakker
> Senior Oracle DBA
>
> to reply remove '-verwijderdit' from my e-mail address
>
>
Received on Tue Apr 23 2002 - 03:12:00 CDT
