Re: DBA role - Grant/Admin option

Hello Celine,

the DBA role contains the GRANT ANY ROLE privilege. The ability of TEST1 to grant the DBA role is based on this system privilege. So there is no need for the grant option.

Martin

Epicentre Team B Annecy wrote:
>
> Hello,
>
> I've noticed that it was possible to grant the DBA, RESOURCE roles from a
> simple user
> whereas this role hadn't been granted with ADMIN or GRANT OPTION!!
> This is what I tested: I created 2 users, TEST1 and TEST2, with only CONNECT
> role, and granted to TEST1
> the DBA role (from SYS), without the ''WITH GRANT OPTION'' clause.
> Then, I've been able to grant the DBA role to TEST2 from TEST1!!!
>
> Does anyone know why?
>
> Thanks.
> --
> Celine Armanet
> EPICENTRE
> carmanet_at_epicentre.fr
> Tel. : +33 04 50 09 7000
Received on Wed Jul 03 2002 - 08:14:22 CDT