Comments in-line
cheers,
Norman.
--
-----------------------------------------------------------------
Norman Dunbar (at home on Linux)
Oracle_at_mssqlBountifulSolutions.co.uk
(Delete a Microsoft database name to reply - clue, mssql !)
-----------------------------------------------------------------
-----Original Message-----
From: Peter [mailto:peter_at_nomorenewsspammin.ca]
Posted At: Monday, June 23, 2003 8:22 AM
Posted To: server
Conversation: System vs object privileges
Subject: System vs object privileges
>> Why is an alter on the definition of a table or a sequence an object
>> privilege?
>> According to the manual, "alter any table" and "alter any sequence"
>> are system privileges. Most other "alter" privileges are system
>> privileges.
The emphasis should be 'alter ANY table' or 'alter ANY sequence'. This
allows you to change tables/sequences belonging to OTHER schemas, hence
it is/should be a system priv. An object priv acts on an object (which
you own, or have ADMIN privs on).
>> The "create table" privilege also includes the "create index" system
>> privilege.
>> So why is creating an index on a table an object privilege, when
>> "create any index" a system privilege?
"create index" <> "create ANY index"
You can connect as SCOTT and create indexes on SCOTT's tables.
You cannot connect as SCOTT and start adding (or dropping) indexes from
HR's tables, for example.
The ANY is the difference.
HTH
Norman.
--
-----------------------------------------------------------------
Norman Dunbar (at home on Linux)
Oracle_at_mssqlBountifulSolutions.co.uk
(Delete a Microsoft database name to reply - clue, mssql !)
-----------------------------------------------------------------
Thanks
Received on Mon Jun 23 2003 - 04:38:55 CDT
