RE: grants on a schema

From: Don Granaman <DonGranaman_at_solutionary.com>
Date: Mon, 14 Jan 2013 11:07:25 -0600
Message-ID: <FD98CB0EE75EEA438CAF4DA2E6071C42234EF2F652_at_MAIL.solutionary.com>



Privileges granted to a role are not inherited inside a definer-rights procedure - and definer-rights is the default, but not the only option. They are inherited inside an invoker rights procedure. The statement below that "PL/SQL needs explicit grants" is too general.

Don Granaman | Ph: 402-361-3073 | Cell: 402-960-6955 | Solutionary - Relevant | Intelligent | Security

-----Original Message-----
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Sriram Kumar Sent: Friday, January 11, 2013 7:59 PM
To: Brian.Zelli_at_roswellpark.org
Cc: oracle-l (oracle-l_at_freelists.org) Subject: Re: grants on a schema

Hi,
I can think of 2 options

option 1 :

extract the grants from an existing schema using dbms_metadata and repeat the scripts by changing the schema name

option 2:

presuming that you would want to grant same set of grants in the same db for multiple schemas.You could possibly create role and assign the grants to the role and grant the role. remember pl/sql needs explicit grants and this option would not work.

Best Regards

Sriram Kumar

On Sat, Jan 12, 2013 at 3:47 AM, Zelli, Brian <Brian.Zelli_at_roswellpark.org>wrote:

> I've googled this but can you do grants on a schema? I have a little
> proc that could loop thru and run the grant but I thought that maybe
> there was a one-liner to do it.....
> ciao,
> Brian
>
>
>
> This email message may contain legally privileged and/or confidential
> information. If you are not the intended recipient(s), or the
> employee or agent responsible for the delivery of this message to the
> intended recipient(s), you are hereby notified that any disclosure,
> copying, distribution, or use of this email message is prohibited. If
> you have received this message in error, please notify the sender
> immediately by e-mail and delete this email message from your computer. Thank you.
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>

--
http://www.freelists.org/webpage/oracle-l


--
http://www.freelists.org/webpage/oracle-l
Received on Mon Jan 14 2013 - 18:07:25 CET

Original text of this message