Re: Why can't SYS account grant privileges for other user's objects?

"Sybrand Bakker" <gooiditweg_at_nospam.demon.nl> wrote in message news:l5go9v4m1grs3v8pq9e72ihlm7jjtesvnp_at_4ax.com...
> On Tue, 15 Apr 2003 13:06:36 -0400, "Thomas T" <T_at_T> wrote:
>
> >I thought "sys as sysdba" was the all-powerful user?
>
> No it isn't. According to the ANSI SQL standard, only the owner of the
> schema has the privilege to administer grants for his own objects, but
> can delegate the authority (grant with admin). That is exactly what
> happened with all the precreated objects.
>
> Your point is moot though.
> First of all Oracle removed the restriction in 9i, and as you should
> upgrade in the near future anyway, I would try to live with the 8i
> functionality.
> It is also moot because you can easily create a one-line function in
> the affected schema;
> do_sql(sqlstr in varchar2) is
> begin
> execute immediate sqlstr;
> end;
>
> e presto!
> Just call it with <remoteuser>.do_sql('grant select....')
>
>
> Sybrand Bakker, Senior Oracle DBA
>
> To reply remove -verwijderdit from my e-mail address

Great, thanks for the explanation/info, SB!!

-Thomas Received on Mon Apr 21 2003 - 17:05:21 CDT