Re: How to limit USERS ability to Create Tables

From: <dafis_at_ami500b_md.mpb.jccbi.gov>
Date: 1996/11/20
Message-ID: <NEWTNews.848513585.29293.dafis_at_ami500b_md.mpb.jccbi.gov>#1/1


In article <3292BE14.1739_at_ozemail.com.au>, <avion_at_ozemail.com.au> writes:
> Path: aac000nns.mpb.jccbi.gov!news.ou.edu!news.nodak.edu!netnews1.nwnet.net!netnews.nwnet.net!news.u.washington.edu!uw-beaver!cornellcs!newsstand.cit.cornell.edu!portc01.blue.aol.com!newsxfer2.itd.umich.edu!howland.erols.net!feed1.news.erols.com!uunet!in2.uu.net!OzEmail!OzEmail-In!news
> From: Sridhar Subramaniam <avion_at_ozemail.com.au>
> Newsgroups: comp.databases.oracle
> Subject: Re: How to limit USERS ability to Create Tables
> Date: Wed, 20 Nov 1996 19:15:16 +1100
> Organization: OzEmail Ltd - Australia
> Lines: 34
> Message-ID: <3292BE14.1739_at_ozemail.com.au>
> References: <NEWTNews.848470732.5062.dafis_at_ppp.test.jccbi.gov>
> NNTP-Posting-Host: 203.7.189.132
> Mime-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> X-Mailer: Mozilla 3.0 (WinNT; I)
> To: Martin Douglas <dafis_at_ppp.test.jccbi.gov>
>
> Martin Douglas wrote:
> >
> > Howdy,
> >
> > I have just run into a problem on my inquiry only system. I have a large
> > Data Warehouse (100Gig) in which I have a user that just created his own table
> > in his default tablespace "USER_TBS". I have granted all users one ROLE that
> > I defined. This ROLE has 'connect' and 'select *' on views I developed. This
> > user does have a default tablespace 'USER_TBS' and a default temporary
> > tablespace 'TEMP', But he has '0k quota' on each of these tablespaces.
> >
> > How did he create this user defined table without me giving 'create table'
> > privileges and how do prevent this in the future.
> >
> > Thanks for you time
> >
> > Martin Douglas
> Martin,
>
> In oracle 7.x, connect is a role having, among other privs, create
> ssession, create table .. system privs. If all you intend giving the
> user is a 'connection' privilege - revoke connect role and grant create
> session priv separately.
>
>
> --
> Cheers
>
> Sridhar Subramaniam
> Avion Consulting Services
> Sydney - Australia
> Email : avion_at_ozemail.com.au
>
> Disclaimer : All opinions are truly and just mine.
>
Thats a big help and thanks Sridhar

Martin Douglas Received on Wed Nov 20 1996 - 00:00:00 CET

Original text of this message