Re: Minimum privileges for users
From: vsevolod afanassiev <vsevolod.afanassiev_at_gmail.com>
Date: Tue, 17 Nov 2009 04:11:08 -0800 (PST)
Message-ID: <d3681b62-ffcf-4201-82de-b7185b43a9fc_at_g10g2000pri.googlegroups.com>
CONNECT and RESOURCE are sufficient, you don;t need to grant anything else. Basically users need following privileges:
- CREATE SESSION (included in CONNECT)
Date: Tue, 17 Nov 2009 04:11:08 -0800 (PST)
Message-ID: <d3681b62-ffcf-4201-82de-b7185b43a9fc_at_g10g2000pri.googlegroups.com>
CONNECT and RESOURCE are sufficient, you don;t need to grant anything else. Basically users need following privileges:
- CREATE SESSION (included in CONNECT)
- CREATE TABLE (included in RESOURCE)
- Quota on the tablespace where tables are going to be created - RESOURCE has UNLIMITED TABLESPACE
So to grant bare minimum you need to do something like:
- CREATE USER ABC
- GRANT CREATE SESSION, CREATE TABLE TO ABC
- ALTER USER ABC QUOTA UNLIMITED on USERS