Re: OS User aliased as Oracle User

Terry Ball <terry_ball_at_csgsystems.com> writes:

> The best way to have a user who has the ability to create objects in another
> user's schema is to grant dba priviliges to the user. However, then they can
> create objects in ANY user's schema.

Ouch! While that will work, it will also grant a lot of privileges that user will likely not need. I suggest creating a role with the needed, limited, privileges and then granting that role to the user. That will be a lot safer.

                                 Rick

>
> Terry Ball
> Sr. DBA, CSG Systems
>
> Rick Wessman wrote:
>
> > "Eric Yu" <ericyu_at_centerprise.com> writes:
> >
> > > I would like to have a NT user (e.g. JSMITH) be registered as an
> > > OS-authenticated Oracle user (which I know how to do), but have the
> > > permission to create/access objects in a different schema? How can I do
> > > this?
> > >
> > > E.g., NT user JSMITH logs in and now wants to create APPUSER.tablename ...
> > >
> > > TIA, Eric
> > The Oracle user name must match the schema name. However, you could give the
> > user the ability to perform operations in another schema as one of his/her
> > default privileges.
> > --
>

--

                                        Rick
                                        Rick Wessman
                                        Security and Directory Technologies
                                        Server Technologies
                                        Oracle Corporation
                                        rwessman_at_us.oracle.com