Re: System Privileges - UNLIMITED TABLESPACE

From: Jonathan Gennick <gennick_at_worldnet.att.net>
Date: 3 Jan 1999 21:35:12 GMT
Message-ID: <3690dc2e.1187874@netnews.worldnet.att.net>

On 3 Jan 99 17:43:44 GMT, suisum_at_ecn.ab.ca () wrote:

>When I grant user with RESOURCE role, the user will automatically be
>granted with UNLIMITED TABLESPACE. But I don't know where the UNLIMITED
>TABLESPACE came from?

I just learned about this behavior the other day. It's a version 6 compatibility issue. To be backwards compatable, Oracle made it so that granting the RESOURCE role also grants the UNLIMITED TABLESPACE privilege. You can, and should, simply revoke it if you don't want the user to have it. For example:

	grant resource to some_user;
	revoke unlimited tablespace from some_user;

An alternative would be to create your own role to use instead of RESOURCE. Grant whatever privs you want to that role, and use it instead of RESOURCE.

regards,

Jonathan Gennick

p.s. I've heard that this "feature" of RESOURCE goes away with version 8 or 8i (one of those two). Received on Sun Jan 03 1999 - 15:35:12 CST