Re: indexes in non-system tablespaces

From: Tony Jambu <aaj_at_cmutual.com.au>
Date: Wed, 31 Mar 1993 00:35:50 GMT
Message-ID: <1993Mar31.003550.19794_at_cmutual.com.au>


In article <C4nwIB.61K_at_news.iastate.edu>, GO.MSB_at_isumvs.iastate.edu writes:
> Oracle, tell me it isn't true:
>
> ANY USER CAN CREATE AN INDEX IN ANY TABLESPACE.
>
> Your default tablespace concept is excellent, the ability to give users
> RESOURCE only on specific tablespaces is great, but what about indexes???
> Aren't indexes resources? How can you be so d... stupid???
>
> (timidly, calmly: am I missing something?)
>
> Is this addressed in Ver. 7 ?? Since the default tablespace (for other
> than create tables ...) is SYSTEM, how does one keep users out of the
> SYSTEM tablespace???
>
> If this is a repeat complaint/question, I apologize for wasting the
> bandwidth. We are getting ready to open up an ULTRIX-based client/server
> operation for university staff and students and I just found this out.
>

Marvin,

Your email is going to look silly at the end of this email.

First of all the statement,

    'ANY USER CAN CREATE AN INDEX IN ANY TABLESPACE' is not totally true. It is only true if you let it be so. By this I mean that
you can prevent that from happening by:

  1. Do not let the user have DBA PRIVILEGE
  2. Do not use the following grant syntax, 'GRANT RESOURCE TO USER'. Use 'GRANT RESOURCE on TABLESPACE TO USER'

You or someone else must have setup the users using the above syntax. Try it out by creating a new user. If it is still occurs, then it is a 'feature' or a
bug with the port to your Op/Sys. I bet you this will not occur. Oracle may be slack but not that stupid.

To correct this mistake make sure you negate the original 'grant' command that was made. Have a look in your data dictionary.


 _____       ________ / ____ |Tony Jambu, Database Administrator
  /_  __       /_ __ /       |Colonial Mutual Invest Mgmt,Aust (ACN 004021809)
 /(_)/ ((_/ \_/(///(/_)/_(   |EMAIL:  TJambu_at_cmutual.com.au
 \_______/                   |PHONE:  +61-3-6418448       FAX:  +61-3-6076198
-- 
 _____       ________ / ____ |Tony Jambu, Database Administrator
  /_  __       /_ __ /       |Colonial Mutual Invest Mgmt,Aust (ACN 004021809)
 /(_)/ ((_/ \_/(///(/_)/_(   |EMAIL:  TJambu_at_cmutual.com.au
 \_______/                   |PHONE:  +61-3-6418448       FAX:  +61-3-6076198
Received on Wed Mar 31 1993 - 02:35:50 CEST

Original text of this message