"niz" <niz_at_infidel.freeserve.co.uk> wrote in message
news:fc69f921.0404230158.2affc441_at_posting.google.com...
> i am user SLIME, owning objects in SLIME schema.
>
> i would like user LEMON to have the ability to "grant
> [select|insert|delete|update] on" any object in my SLIME schema to
> LEMON (and only LEMON if possible).
>
> note i am NOT saying that LEMON should have
> select|insert|delete|update privileges on all my SLIME objects, just
> that he should, with the LEMON user, be able to "grant XXX on
> SLIME.YYY to LEMON" or "revoke XXX from SLIME.YYY to LEMON".
>
> what would be the best way to achieve this, without making LEMON a
> too-powerful user?
I would consider writing a pl/sql routine to do this and grant lemon execute
on that procedure. I'd probably reject it in favour of having SLIME control
his own destiny but there you go.
--
Niall Litchfield
Oracle DBA
Audit Commission UK
http://www.niall.litchfield.dial.pipex.com/
Received on Fri Apr 23 2004 - 06:45:48 CDT
