Re: ROLES, PRIVILEGES

From: Michel Cadot <micadot_at_netcourrier.com>
Date: Mon, 25 Oct 1999 18:30:48 +0200
Message-ID: <7v20mg$6gf$1@oceanite.cybercable.fr>

keso <keso_at_hep.tel.fer.hr> a écrit dans le message : 7v1tna$cls$1_at_bagan.srce.hr...
> DBA's, here's one question that should be easy for you:
>
> What roles & privileges shuld be granted to user that can look but not
> modify all objects (procedure code, table definition and data etc.) that are
> in another (specific or all) shema(s)?
> So, to put it briefly, what roles/privileges should be granted to make:
> 1) specific user can look all schema's objects (but not modify)

"SELECT ANY TABLE" privilege to see all the datas. "EXECUTE ANY PROCEDURE" privilege if you want he can execute the procedures but remember procedures can modify datas.

> 2) specific user can look specific schema's objects (but not modify)
>

The owner of the schema have to grant SELECT privilege on each of his objects, there is no system privilege to read all the datas of a specific schema.

--
Have a nice day
Michel Received on Mon Oct 25 1999 - 11:30:48 CDT