Re: Newbie question on user rights
From: gpadu99 <gpadu99_at_gmail.com>
Date: Thu, 19 Nov 2009 07:35:33 -0800 (PST)
Message-ID: <683aaeff-1594-411f-9c01-89e5769b161b_at_w19g2000yqk.googlegroups.com>
On Nov 19, 4:30 pm, gazzag <gar..._at_jamms.org> wrote:
> On 19 Nov, 14:24, gpadu99 <gpad..._at_gmail.com> wrote:
>
> > A user corresponds to a schema. I am working on a database in which
> > something strange happens: A user, can select or update records in
> > another schema. How can I be sure that, no user other than the one
> > with same name (as the schema name), can sonnect to that schema?
>
> > Thanks very much for answering this newbie question..
>
> You will find that the user has been granted SELECT and UPDATE
> privileges to objects in the other schema - this is not by default.
> You (the DBA) will have to revoke these rights if this is not what you
> want.
>
> Look in the Oracle documentation for the GRANT and REVOKE commands.
> The data dictionary view DBA_TAB_PRIVS is a view that will provide you
> with the relevant information.
>
> HTH
>
> -g
Date: Thu, 19 Nov 2009 07:35:33 -0800 (PST)
Message-ID: <683aaeff-1594-411f-9c01-89e5769b161b_at_w19g2000yqk.googlegroups.com>
On Nov 19, 4:30 pm, gazzag <gar..._at_jamms.org> wrote:
> On 19 Nov, 14:24, gpadu99 <gpad..._at_gmail.com> wrote:
>
> > A user corresponds to a schema. I am working on a database in which
> > something strange happens: A user, can select or update records in
> > another schema. How can I be sure that, no user other than the one
> > with same name (as the schema name), can sonnect to that schema?
>
> > Thanks very much for answering this newbie question..
>
> You will find that the user has been granted SELECT and UPDATE
> privileges to objects in the other schema - this is not by default.
> You (the DBA) will have to revoke these rights if this is not what you
> want.
>
> Look in the Oracle documentation for the GRANT and REVOKE commands.
> The data dictionary view DBA_TAB_PRIVS is a view that will provide you
> with the relevant information.
>
> HTH
>
> -g
Thanks for the quick answer. Is it normal that, the user that an application uses to connect to the database, has the DBA role? (I think not). Does this explain the fact that this user has access to another schema? Received on Thu Nov 19 2009 - 09:35:33 CST