Re: DBA - Question - USER privilegs

Nandakumar wrote:

> What are the privileges that one user (yyy) should possess if he has to
> ONLY VIEW certain tables and views (owned by user xxx) and execute some
> sub programs?.
>
> 1) User yyyy should not be able to create any table in the DB.
>
> 2) User should not be able to use any DML except select.
>
> 3) Some of the user-defined sub programs (owned by xxxx) that 'yyyy'
> will invoke, use dynamic pl/sql. So 'yyyy' should be able to execute
> some of the sub programs from oracle standard packages, like DBMS_SQL
> etc.

1. Create a role for the priviledges that you want to give yyyy.
2. Grant that role to yyyy.
3. Give select grants to the role on the tables you wish to expose to yyyy.
4. Give execute grants to the role for the pl/sql objects that you wish to allow yyyy to run.