yep, that's what I meant :)
additionally, if you decide to create private synonyms for each user,
you still have the potential problem of forgetting a user when you add
a new synonym. Yes, I use SQL to generate the SQL I need but even so,
it's a lot easier to include "create public synonym" and "grant xyz to
role" in the object creation script
- Jared Still <jkstill_at_cybcon.com> wrote:
> Tanel,
>
> I'm fairly sure that Rachel was not implying that a role
> could own a synonym, public or private.
>
> The point was that using role based privilege management,
> you either create private synonyms for each user, or create
> public synonyms.
>
> Another alternative is a logon trigger that does an
> 'alter session set current_schema=schema', though that
> might become unwieldy with a large number of users, or
> when forced to work with an app that connects/disconnects
> repeatedly.
>
> Jared
>
> On Sat, 2004-01-10 at 10:24, Tanel Poder wrote:
> > Hi!
> >
> > > If you intend to use roles to simplify privilege management, you
> are
> > > almost forced to use public synonyms, as you cannot create a
> private
> > > synonym owned by a role. Your other alternative is to hard-code
> the
> >
> > How can you create a public synonym OWNED by a role?
> > This is new to me, despite the knowledge that roles and usernames
> are kept
> > in the same base table...
> >
> > Tanel.
> >
> >
> >
> >
> > --
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > --
> > Author: Tanel Poder
> > INET: tanel.poder.003_at_mail.ee
> >
> > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > San Diego, California -- Mailing list and web hosting
> services
> >
> ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like
> subscribing).
> >
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Jared Still
> INET: jkstill_at_cybcon.com
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Rachel Carmichael
INET: wisernet100_at_yahoo.com
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Sat Jan 10 2004 - 14:34:32 CST
