Re: How do you grant connection permission to a user?

Peter wrote:

> How do you grant connection permission to a user?
> By granting create session privilege?

<RANT>
Yes this is a rant so if you don't want to read it press the Back button now.

GRANT CONNECT TO user is not what allows a user to connect to the database. CONNECT is a role, not
a system privilege. The system privilege is CREATE SESSION.

The misunderstanding around the built-in roles CONNECT, RESOURCE, and DBA are great and my advice,
repeated below as I didn't see all of these answers is for DBAs to drop these three roles as soon as they have
the database installed. Dropping them should be as much a part of the installation as is changing the passwords for SYS and SYSTEM.

Take a good look at what you give to a use when you grant CONNECT and RESOURCE and ask yourself ...
Why would I want users to have all of these privileges?

I, for one, can't think of any reason I'd want end-users creating database links. I can, however, think of many reasons why I wouldn't want them to have that privilege. </RANT>

--
Daniel Morgan
http://www.outreach.washington.edu/extinfo/certprog/oad/oad_crs.asp
damorgan_at_x.washington.edu
(replace 'x' with a 'u' to reply)