Re: How tough can I be for the user PUBLIC?

rooty_hill2002_at_yahoo.com.au (Gary) wrote in message news:<171bd226.0309112038.548e6e5e_at_posting.google.com>...
> Hello guys!
>
> Bear with me,I am newbie.
>
> I am trying to limit the privileges of the user PUBLIC has as toughly
> as possible which means I want to go as far as I can then leave those
> MUST-HAVE privileges for user PUBLIC. The question is how far I can
> go?
>
> My expectation is once I have done this and I am asked to let my Data
> Warehouse users to access the database with only select privileges on
> some tables, what I need to do will be creating a role "USER_READ"
> with
> 1. CREATE SESSION and ALTER SESSION system privileges
> 2. Select privilege on certain user tables as object privileges
> then I put all those users in this role.
>
> So, what should I have least for privileges of user PUBLIC then, if I
> ask the question in another way?
>
> Cheers!
>
> Gary

PUBLIC isn't a real user, it is a dummy user. It is from the days roles didn't exist. You can't connect as PUBLIC. Hence, if you don't grant privilege to PUBLIC nothing will happen. I'd suggest you would leave public alone. Simply don't grant privilege to public.

Sybrand Bakker
Senior Oracle DBA Received on Fri Sep 12 2003 - 12:59:33 CEST