Re: Protecting tables and views?

From: Vladimir M. Zakharychev <bob_at_dpsp-yes.com>
Date: Thu, 4 Apr 2002 16:41:27 +0400
Message-ID: <a8hhj0$mm9$1_at_babylon.agtel.net>


You certainly can grant or revoke object privileges for your *own* objects. More than that, nobody except owner and those granted by owner WITH GRANT OPTION can grant or revoke object privileges for owner's objects (even DBA). And your data is already protected from all users except those having SELECT|INSERT|UPDATE|DELETE ANY TABLE system privilege (which only DBA should have), which still doesn't allow such users to grant access to your objects to other users. You can also use virtual private database (VPD) aka Fine Grained Access Control (FGAC) to control access to your data further on by applying filtering conditions to any adhoc query ran against your data.

-- 
Vladimir Zakharychev (bob_at_dpsp-yes.com)                http://www.dpsp-yes.com
Dynamic PSP(tm) - the first true RAD toolkit for Oracle-based internet applications.
All opinions are mine and do not necessarily go in line with those of my employer.


"GII" <gii_at_videotron.ca> wrote in message news:3CABA594.703_at_videotron.ca...

> Hi,
>
> Are there any other strategies or ways to protect data or tables in
> ORACLE besides the SQL GRANT statement? I would like to protect some
> tables and views in my ORACLE account but cannot use the GRANT statement
> because I don't have enough privileges, so I need another ways using
> SQL. Thanks a bunch...
>
> Gabriel
>
Received on Thu Apr 04 2002 - 14:41:27 CEST

Original text of this message