Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: oracle grants/roles v sql server

Re: oracle grants/roles v sql server

From: Brian Peasland <dba_at_nospam.peasland.net>
Date: Mon, 24 Jul 2006 20:45:30 GMT
Message-ID: <J2xDo4.EJv@igsrsparc2.er.usgs.gov>


> Before taking James' advice be aware that the word "database"
> means something very different in Oracle than it does in SQL Server.
> In Oracle granting this privilege is a monstrous security breach.

To the OP, granting SELECT ANY TABLE in Oracle is *nearly* equivalent to granting db_datareader on *all* databases in SQL Server. Hopefully, now you can see why this is not typically done in Oracle databases.

Follow Daniel's advice and grant privileges on each table. Use roles to facilitate your approach to security. Additionally, take some time to read the Oracle documentation on Security:

http://download-east.oracle.com/docs/cd/B19306_01/network.102/b14266/toc.htm

While you're at it, consider reading the Oracle Concepts Guide to get a feel for how Oracle is different than SQL Server:

http://download-east.oracle.com/docs/cd/B19306_01/server.102/b14220/toc.htm

HTH,
Brian

-- 
===================================================================

Brian Peasland
dba_at_nospam.peasland.net
http://www.peasland.net

Remove the "nospam." from the email address to email me.


"I can give it to you cheap, quick, and good.
Now pick two out of the three" - Unknown
Received on Mon Jul 24 2006 - 15:45:30 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US