Return-Path: Delivered-To: 2-oracle-l@orafaq.com Received: (qmail 32740 invoked from network); 8 Aug 2007 12:24:24 -0500 Received: from freelists-180.iquest.net (HELO turing.freelists.org) (206.53.239.180) by 69.64.49.119 with SMTP; 8 Aug 2007 12:24:23 -0500 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id BFFA4720C44; Wed, 8 Aug 2007 13:22:05 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 24509-03-3; Wed, 8 Aug 2007 13:22:05 -0400 (EDT) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id DDDA0720D9C; Wed, 8 Aug 2007 13:22:02 -0400 (EDT) Received: with ECARTIS (v1.0.0; list oracle-l); Wed, 08 Aug 2007 12:39:27 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 85E7D723AC6 for ; Wed, 8 Aug 2007 12:39:27 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 14308-04-4 for ; Wed, 8 Aug 2007 12:39:27 -0400 (EDT) Received: from mx01.mailboxcop.com (mx01.mailboxcop.com [206.125.223.71]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id A60B47240AD for ; Wed, 8 Aug 2007 12:39:26 -0400 (EDT) Received: from secure9.apollohosting.com (secure9.apollohosting.com [206.125.217.251]) by mx01.mailboxcop.com (8.13.1/8.13.1) with ESMTP id l78GffAO031266 for ; Wed, 8 Aug 2007 11:41:43 -0500 Received: (qmail 9674 invoked from network); 8 Aug 2007 11:40:41 -0500 Received: from unknown (HELO ?172.20.10.81?) (tim@12.109.229.8) by nat-westbankuk.com with ESMTPA; 8 Aug 2007 16:40:40 -0000 Message-ID: <46B9F1C0.7060402@evdbt.com> Date: Wed, 08 Aug 2007 10:39:28 -0600 From: Tim Gorman Organization: Evergreen Database Technologies, Inc. User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: andrew.kerber@gmail.com CC: wjohnsto@fccj.edu, srinivasanram2004@gmail.com, oracle-l@freelists.org Subject: Re: Can we revoke select priv from all_users tables?? References: <9fc1ae810708071448t453a381es636dac111d351989@mail.gmail.com> In-Reply-To: Content-Type: text/html; charset=ISO-8859-1 X-Bayes-Prob: 0.0001 (Score 0) X-Spam-Score: 0.00 () [Hold at 6.00] HTML_MESSAGE,MIME_HTML_ONLY X-CanItPRO-Stream: outgoing (inherits from default) X-Canit-Stats-ID: Bayes signature not available X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.168.15.3 X-archive-position: 422 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-to: oracle-l-bounce@freelists.org X-original-sender: tim@evdbt.com Precedence: normal Reply-to: tim@evdbt.com List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: oracle-l X-List-ID: oracle-l List-subscribe: List-owner: List-post: List-archive: X-list: oracle-l X-Virus-Scanned: Debian amavisd-new at localhost.localdomain Reminds me of the old JD Edwards "while paper" that stated that the Oracle parameter "SPIN_COUNT" should be set to a value derived from the number of disk drives on which the database is housed multipled by the RPM of those drives. For example, if your database is situated on eight hard drives of 10,000 rpm apiece, then the Oracle parameter "SPIN_COUNT" (later "_SPIN_COUNT") should be set to 80,000.

When I worked at Oracle Consulting in the 1990s, I worked for the "commercial" consulting group that dealt with non-government, non-military customers -- governmental or military organizations were the province of the "federal" consulting group. One day, one of the practice managers from the "federal" group stopped by to get something off his chest. He asked us why our group was dealing with "Federal Express" and why the "federal" group wasn't handling that customer? Ummm.... hmmmm.... where to start? I'm surprised he didn't ask why we were dealing with "General Motors", as well... too bad he didn't ask about "corporal punishment"... :-)

You just can't make this stuff up. <shake-of-head>

Andrew Kerber wrote:

I recently received a copy of a 'best practices' document that says that users should not have access to any 'all_' views. Its a really stupid idea, I suspect that whoever put it in the document thinks that all actually looks at all, as opposed to just what the user has access to.

On 8/8/07, JOHNSTON, WAYNE <wjohnsto@fccj.edu> wrote:

Ram,

It may be just my nature, but I have to ask why you want to do this? Is there some audit requirement that a user not query all_tables to see the tables he has been granted access to?

Wayne Johnston

Adabas Database Administrator

Oracle Database Administrator

FCCJ: 904-997-2907

CELL: 904-607-1889

No one shall be subjected to arbitrary arrest, detention or exile.

Article 9. United Nations Universal Declaration of Human Rights, December 10, 1948

From: oracle-l-bounce@freelists.org [mailto: oracle-l-bounce@freelists.org] On Behalf Of Ram Srinivasan
Sent: Tuesday, August 07, 2007 5:49 PM
To: oracle-l@freelists.org
Subject: RE: Can we revoke select priv from all_users tables??

All:

I am creating a user as:

create user test1 identified by fannymayofomaha

default tablespace def001

temporary tablespace temp01;

This user test1 has access to all the user_ tables and all_ tables. I believe that when a user is created he automatically receives the select priv to these all_ and user_ tables.

Is there a way to REVOKE the select priv from the all_ tables for this user?

Thanks for your input.

--
Sincerely
Ram Srinivasan
Charlottesville, VA.

--
Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

-- http://www.freelists.org/webpage/oracle-l