Re: How do you grant connection permission to a user?

Peter,

GRANT CREATE SESSION TO user <to give them the ability to log on>;

ALTER USER x QUOTA y ON <whatever their default tablespace is so they can create tables - optional>;

GRANT some roles TO user <so they can see tables to query against>; *or*

GRANT SELECT ON table TO user <if you want direct grants - not necessarily reccomended for large sites>;

ALTER USER DEFAULT ROLE ALL <in case they had a role added without it being a default role and you WANT them to have all their role privs>;

Another good thing to check for - make sure no users have their default or temporary tablespaces set to SYSTEM tablespace, like so:

SELECT username, default_tablespace, temporary_tablespace FROM dba_users
where default_tablespace = 'SYSTEM'
or temporary_Tablespace='SYSTEM'
order by 1;

Since if the have default tablespace of SYSTEM, the can create objects there, and if temporary = 'SYSTEM', they will sort there. Both of these are bad since it can squeeze the data dictionary out and destabalize the instance.

hth,

Jack Silvey
warehouse dba in Texas

Peter <peter_at_nomorenewsspammin.ca> wrote in message news:<s9p3dvotmmarhun3cng44d59mgifsl4eqj_at_4ax.com>...
> How do you grant connection permission to a user?
> By granting create session privilege?
Received on Mon May 26 2003 - 19:04:01 CDT