Re: Creator of a role gets what rights?

On Tue, 24 Jun 2003 15:19:18 GMT, Hans Forbrich <forbrich_at_telusplanet.net> wrote:

I am just talking about what rights the creator of a ROLE will get automatically, not sys vs object privileges. If you create a role of course you can grant it to someone. Another way of putting this question is this:

When you grant a role that you own to another person, can you include "with admin option" or the "with grant option" in the statement?

The difference that this will make is, of course, when the role is revoked, will there may be cascading effects. "with admin option" will not cause any cascading effects.

Thanks a lot

>Peter wrote:
>
>> Does the creator of a ROLE get
>> "with admin option" privilege or the "with grant option" priviilege?
>
>Peter,
>
>When looking for explanations of syntax, I recommend you start in the
>SQL Reference manual.
>
>In this case, the GRANT command is relevant. Details are available in
>http://otn.oracle.com/docs/products/oracle9i/doc_library/release2/server.920/a96540/statements_912a.htm#2062195
>
>According to that, should your user need to pass on the capability being
>granted:
>- IF this command is a SYSTEM privilege, then you use the WITH ADMIN
>OPTION but
>- IF this is an OBJECT privilege, then you use the WITH GRANT OPTION
>
>If you can not determine whether the capability is an object or a system
>priivilege, then (according to the document) you can look at table 17-1
>on the same section.
>
>To the observant, an easy way to determine whether this is a SYSTEM or
>and OBJECT privilege is to look for the keyword "ON" followed by an
>object identifier - if that exists it is because you are granting the
>capability on an OBJECT to a user.
>
>[3 .... 4 .... 5]
>/Hans
Received on Tue Jun 24 2003 - 13:05:42 CDT