Re: Another 11gr2 oddity...
From: John Hurley <johnthehurley_at_gmail.com>
Date: Wed, 27 Jun 2012 17:09:29 -0700 (PDT)
Message-ID: <f4b089ea-2a18-4e81-bf54-528285715897_at_q2g2000vbv.googlegroups.com>
David:
Date: Wed, 27 Jun 2012 17:09:29 -0700 (PDT)
Message-ID: <f4b089ea-2a18-4e81-bf54-528285715897_at_q2g2000vbv.googlegroups.com>
David:
# For a long time now Oracle has hinted that RESOURCE was not the role
to be granting to people and that explicit grants or other roles
should be used.
Bingo ... long time back ... still does not stop one from being surprised when they finally do something though.
# I suppose this is one way to prod people into creating their own
general-purpose roles for basic privileges.
One could and probably should hypothesize that all user sessions connecting into the database only be granted roles that do not depend on any of the oracle created roles.
One could and probably should also contend that DBA and SYSDBA roles are so unique that granting access to those roles is an exception. Received on Wed Jun 27 2012 - 19:09:29 CDT