Re: Restricting CREATE priviliges

From: Jim Smith <jim_at_jimsmith.demon.co.uk>
Date: 1997/01/14
Message-ID: <NY1HSBASq+2yEwhJ_at_jimsmith.demon.co.uk>#1/1


In article <853180401.9788_at_dejanews.com>, jshiruru_at_att.com writes
>Hi all,
>
>Is it possible to restrict CREATE/DROP priviliges to only certain type
>of operations ?
>For example: A programmer may not have permissions to CREATE/DROP tables
>or views, however, he/she might want to CREATE stored procedures/triggers.
>Is there a way where one can be granted CREATE permissions for stored
>procedures but not tables ?

Oracle supports individual CREATE xxxxx privileges including but not limited to the following

create cluster
create index
create procedure
create profile
create [public] database link
create role
create rollback segment
create session (needed to log on)
create sequence
create snapshot
create synonym
create table
create tablespace
create trigger
create view.

Some of these are included in the default RESOURCE role.

You can achieve considerable flexibility by defining your own roles using these privileges.

-- 
Jim Smith
Received on Tue Jan 14 1997 - 00:00:00 CET

Original text of this message