Re: sqlplus small doubt

If you are saying that all the end users will connect to the database using the same account, and that account is the owner of the tables used by that application ? If so, then your strategy is not very safe, and you should consider changing it.

e.g.
One account to own the tables - data_owner perhaps

data_owner then grants select, insert, update, delete on all his tables to a role 'end_user' say.

The role end_user also has the 'create session' privilege. The TEST1 account should then be created as:

    create user test1 identified by XXX;     grant end_user to test1;

HOWEVER - I think you are saying you have a set-up similar to the above: i.e. the account the users use does NOT own the application tables. If this is the case then they will not be able to drop the tables owned by another user unless you give them a privilege that allows them to do so.

Hint: It is a common error in almost all Oracle 7 and 8 installation to make use of the obsolete CONNECT, RESOURCE and DBA roles when creating Oracle accounts. You should review the requirements of your site and create roles which are relevant.

Jonathan Lewis
Yet another Oracle-related web site: www.jlcomp.demon.co.uk

kvsraju_at_usa.net wrote in message <78ro5s$sed$1_at_nnrp1.dejanews.com>...
>I have my Oracle 8.0.3.0 database running on windows nt platform.
>All my users,they will be connected to database using an account,say TEST1
>Now i want to make sure that all the users cann't drop tables.
>How is it possible?
>there is no command called DROP TABLE to disable the user.
>so i want to control through sql*plus
>How is it possible.
>I came to know that we have change user product profile file.But i am not
sure
>about it
>
>-----------== Posted via Deja News, The Discussion Network ==----------
>http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
Received on Fri Jan 29 1999 - 09:32:37 CST