Re: User Privileges

From: ratcheer <timcuth_at_bellsouth.net>
Date: Wed, 13 Mar 2002 19:08:35 -0600
Message-ID: <_HSj8.68419$Nn6.3477880_at_e3500-atl2.usenetserver.com>


[Quoted] In addition to what Daniel said, it will be easier to maintain if you create a role and grant the object privileges to that role. Grant the role to each user.

Later on, if there is a new table, you just grant the privileges to the role and all of the users automatically get it.

Tim

"damorgan" <damorgan_at_exesolutions.com> wrote in message news:3C8F7480.D4DAF211_at_exesolutions.com...
> Forget #1. That is the equivalent of granting DBA to PUBLIC.
>
> Use #2 ... but instead of doing it manually invest an hour and write a
stored
> procedure to get object names from xxx_OBJECTS and grant the object
> privileges using native dynamic SQL. Write once ... use many times ... you
> could even run it nightly under DBMS_JOB if you are really nervous about
> this.
>
> Daniel Morgan
>
>
>
> Mytskidis Georgios wrote:
>
> > Hello
> >
> > I've a user named MAINUSER which owns a variety of objects
> > (tables,sequences,...). I need to create a few other users (i.e.
> > USER1,USER2,...) who need to have FULL ACCESS on every object that the
> > MAINUSER owns. I see two ways for doing so :
> > 1). Grant DBA role to all (USER1,USER2,...); not very elegant or safe
> > 2). Grant SELECT,INSERT,UPDATE,DELETE ON <MAINUSER.object> TO
> > USER1,USER2,...; this approach has the risk that an object might be
> > forgotten or when a new object is created to run the above Grant for
that
> > new object.
> >
> > Is there any other more elegant-fast way ?
> >
> > Thanks in advance for your reply
> >
> > --
> > --
> >
> > Best Regards
> >
> > MYTSKIDIS GEORGIOS
> > Mytskidis_G_at_GI-Net.Gr
>
Received on Thu Mar 14 2002 - 02:08:35 CET

Original text of this message