Re: DBA - Question - USER privilegs

Nandakumar пишет в сообщении <7puvbf$f76$1_at_nnrp1.deja.com> ...

>What are the privileges that one user (yyy) should possess if he has to
>ONLY VIEW certain tables and views (owned by user xxx) and execute some
>sub programs?.

connect DBAUser
-- 1) User yyyy should not be able to create any table in the DB. revoke create any table FROM yyy
revoke drop any table FROM yyy
-- 2) User should not be able to use any DML except select. revoke select any table FROM yyy
revoke insert any table FROM yyy
revoke update any table FROM yyy
revoke delete any table FROM yyy

• >ONLY VIEW certain tables and views (owned by user xxx) and execute some
• >sub programs?. connect xxx grant select ON xxx.need_view_name TO yyy
• ... AND other need view's and tables
  -->3) Some of the user-defined sub programs (owned by xxxx) that 'yyyy'
  -->will invoke, use dynamic pl/sql. So 'yyyy' should be able to execute
  -->some of the sub programs from oracle standard packages, like DBMS_SQL
  -->etc.
  grant execute ON xxx.stored_proc_name TO yyy
• ... AND other need stored proc
• This procedure will be executing out with the privileges of the creator

Best regards
Всех Благ
---
Origin ... Просто надо очень верить этим синим маякам... Romanov Alexander(Oracle e-certification http://www.tekmetrics.com/transcript.shtml?pid=13518) Alex_Romanov_at_mail.ru
ICQ 6220754 Received on Wed Aug 25 1999 - 07:04:23 CDT