Return-Path: <root@fatcity.cts.com>
Received: from newsfeed.cts.com (newsfeed.cts.com [209.68.248.164])
 by naude.co.za (8.11.2/8.11.2) with SMTP id g5R1fS122782
 for <oracle-l@naude.co.za>; Wed, 26 Jun 2002 21:41:28 -0400
Received: from fatcity.UUCP (uucp@localhost)
 by newsfeed.cts.com (8.9.3/8.9.3) with UUCP id KAA87470;
 Wed, 26 Jun 2002 10:40:03 -0700 (PDT)
Received: by fatcity.com (26-Feb-2001/v1.0g-b71/bab) via UUCP id 004890A4; Wed, 26 Jun 2002 10:30:15 -0800
Message-ID: <F001.004890A4.20020626103015@fatcity.com>
Date: Wed, 26 Jun 2002 10:30:15 -0800
To: Multiple recipients of list ORACLE-L <ORACLE-L@fatcity.com>
X-Comment: Oracle RDBMS Community Forum
X-Sender: "Deshpande, Kirti" <kirti.deshpande@verizon.com>
Sender: root@fatcity.com
Reply-To: ORACLE-L@fatcity.com
Errors-To: ML-ERRORS@fatcity.com
From: "Deshpande, Kirti" <kirti.deshpande@verizon.com>
Subject: RE: privileges and synonyms and dblinks
Organization: Fat City Network Services, San Diego, California
X-ListServer: v1.0g, build 71; ListGuru (c) 1996-2001 Bruce A. Bergman
Precedence: bulk
Mime-Version: 1.0
Content-Type: multipart/alternative;	boundary="----_=_NextPart_001_01C21D35.ED8E18A0"
------_=_NextPart_001_01C21D35.ED8E18A0
Content-Type: text/plain;
 charset="iso-8859-1"

Matt,
 We have run in to this issue. 
 There are some bugs related to this. 
 Pl review docs on Metalink # 159051.1, # 144114.1. 
 
- Kirti 

-----Original Message-----
Sent: Wednesday, June 26, 2002 11:03 AM
To: Multiple recipients of list ORACLE-L



All of a sudden this is not making sense to me. 

Oracle 8.1.7.3 on HP-UX 11i 

I have a public db link (link1) 

I have a user (user1) who creates a PRIVATE synonym. 
(user1.syn1) that points to a table on the other database 
using the dblink. 

User2, having ONLY the CONNECT role, cannot 
do a describe of   user1.syn1, but CAN 
issue a 'select * from user1.syn1' and get data 
back.  I know that since the db link is public with 
a account/password, he could get the data anyway by, 
but what I can figure out is why it resolves the synonym 
at all when it is private? 

Am I missing something here? 



---- 
Matt Adams - GE Appliances - matt.adams@appl.ge.com 
"Doing linear scans over an associative array is like 
trying to club someone to death with a loaded Uzi." 
    - Larry Wall (creator of Perl) 


------_=_NextPart_001_01C21D35.ED8E18A0
Content-Type: text/html;
 charset="iso-8859-1"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>privileges and synonyms and dblinks</TITLE>

<META content="MSHTML 5.00.3105.105" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN 
class=701122017-26062002>Matt,</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN 
class=701122017-26062002>&nbsp;We have run in to this issue. 
</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN 
class=701122017-26062002>&nbsp;There are some bugs related to this. 
</SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN 
class=701122017-26062002>&nbsp;Pl review docs on Metalink # 159051.1, # 
144114.1. </SPAN></FONT></DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN 
class=701122017-26062002></SPAN></FONT>&nbsp;</DIV>
<DIV><FONT color=#0000ff face=Arial size=2><SPAN class=701122017-26062002>- 
Kirti </SPAN></FONT></DIV>
<BLOCKQUOTE style="MARGIN-RIGHT: 0px">
  <DIV align=left class=OutlookMessageHeader dir=ltr><FONT face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> Adams, Matthew (GEA, MABG, 
  088130) [mailto:MATT.ADAMS@APPL.GE.COM]<BR><B>Sent:</B> Wednesday, June 26, 
  2002 11:03 AM<BR><B>To:</B> Multiple recipients of list 
  ORACLE-L<BR><B>Subject:</B> privileges and synonyms and 
  dblinks<BR><BR></DIV></FONT>
  <P><FONT size=2>All of a sudden this is not making sense to me.</FONT> </P>
  <P><FONT size=2>Oracle 8.1.7.3 on HP-UX 11i</FONT> </P>
  <P><FONT size=2>I have a public db link (link1)</FONT> </P>
  <P><FONT size=2>I have a user (user1) who creates a PRIVATE synonym.</FONT> 
  <BR><FONT size=2>(user1.syn1) that points to a table on the other 
  database</FONT> <BR><FONT size=2>using the dblink.</FONT> </P>
  <P><FONT size=2>User2, having ONLY the CONNECT role, cannot</FONT> <BR><FONT 
  size=2>do a describe of&nbsp;&nbsp; user1.syn1, but CAN </FONT><BR><FONT 
  size=2>issue a 'select * from user1.syn1' and get data</FONT> <BR><FONT 
  size=2>back.&nbsp; I know that since the db link is public with</FONT> 
  <BR><FONT size=2>a account/password, he could get the data anyway by,</FONT> 
  <BR><FONT size=2>but what I can figure out is why it resolves the 
  synonym</FONT> <BR><FONT size=2>at all when it is private?</FONT> </P>
  <P><FONT size=2>Am I missing something here?</FONT> </P><BR><BR>
  <P><FONT size=2>----</FONT> <BR><FONT size=2>Matt Adams - GE Appliances - 
  matt.adams@appl.ge.com</FONT> <BR><FONT size=2>"Doing linear scans over an 
  associative array is like</FONT> <BR><FONT size=2>trying to club someone to 
  death with a loaded Uzi."</FONT> <BR><FONT size=2>&nbsp;&nbsp;&nbsp; - Larry 
  Wall (creator of Perl) </FONT></P></BLOCKQUOTE></BODY></HTML>

------_=_NextPart_001_01C21D35.ED8E18A0--
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Deshpande, Kirti
  INET: kirti.deshpande@verizon.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru@fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

