Re: privilege create session problem

Comments embedded

On 4 Apr 2005 13:20:03 -0700, ariel.mendieta_at_gmail.com (Ariel Mendieta) wrote:

>Hi
>
>I have a following problem
>
>1. i have a 101 tables created in a regtec schema
>2. i create public synonym for all tables in regtec's schema
>3. i created an new user xyz, and i give it create session and select
>privilege on all public synonyms of the regtec's schema
You can't grant privilege on a synonym.
>4. when the xyz user log in at the database between sqlnavigator, this
>user can see all the regtec's tables and he can do an extract DDL of
>the all the tables, including views, synonyms, etc...so it can be a
>security problem,
>
>how can i do if i want to anybody cannot perform an extract ddl

Stop using relational databases.

>
>do you know if this is a security bug.. just i give the user create
>session and select on the public synonyms

It is NOT a security bug. If you grant it access, you grant it access.

>
>i'm using a Oracle9i Enterprise Edition Release 9.2.0.4.0
>
>thank you for your suggestions

--
Sybrand Bakker, Senior Oracle DBA