Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Re: Create user with no privs but CREATE SESSION and he can see things in SYS?

Re: Create user with no privs but CREATE SESSION and he can see things in SYS?

From: Niall Litchfield <niall.litchfield_at_dial.pipex.com>
Date: Wed, 23 Aug 2006 18:49:55 +0100
Message-ID: <44EC9543.1000502@dial.pipex.com>


craig.drabik_at_gmail.com wrote:
> DA Morgan wrote:
>

>> Go with Frank's answer but you should grant CREATE SESSION, not CONNECT.
>> Also you not granted access to the TEMP tablespace which may be an issue
>> depending on what you are doing.

>
> Thanks. I know I need to specify a temp tablespace and shouldn't grant
> connect - done for this example for the sake of brevity.
>
> Thanks again for the answers.
>

The trouble with the sake of brevity here is that until 10gR2 (might be R1 but I don't think so) CONNECT is not the same as CREATE SESSION. The public grants are as Frank says the issue, but the example doesn't match the subject line
-- 

Niall Litchfield
Oracle DBA
http://www.orawin.info/services/
Received on Wed Aug 23 2006 - 12:49:55 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US