Re: Question about revoking select from PUBLIC

bontemps wrote:
> All of our tables have PUBLIC synonyms and of course PUBLIC has SELECT
> privileges on all of them. How can I make some of them visible ONLY to
> certain users?

You'll have to revoke SELECT access from PUBLIC and then grant SELECT access only to those that need to see the table.

 > If I drop the PUBLIC synonyms, nobody except the owner
> can see them.

Actually, if you drop the public synonym, they will still be able to access the table. That is because PUBLIC has been granted SELECT access on the table. They will just need to use schema-dot notation to access the table, i.e. they need to prepend the table name with the owner and a period as in SCOTT.EMP.

 > If I keep the PUBLIC synonyms everyone sees them. We
> know that we can drop the synonym and include the schema owner when
> referencing the table name but we dont want to rewrite the application
> to insert them.

The PUBLIC syn does not let them query the table. The SELECT priv (object privilege) does.

HTH,
Brian

-- 
===================================================================

Brian Peasland
dba_at_nospam.peasland.net
http://www.peasland.net

Remove the "nospam." from the email address to email me.


"I can give it to you cheap, quick, and good.
Now pick two out of the three" - Unknown

-- 
Posted via a free Usenet account from http://www.teranews.com