Re: want ability to desc, but not select/insert/update/delete

In article <36a522a1.967350_at_192.86.155.100>,   tkyte_at_us.oracle.com wrote:
> A copy of this was sent to bdg_at_hotmail.com
> (if that email address didn't require changing)
> On Tue, 19 Jan 1999 21:16:21 GMT, you wrote:
>
> >Any security set-up recommendations which would allow a developer account to
> >describe a table in another schema, but not select/insert/update/delete?
> >
> >Ideally the developers would be able to use Oracle EM Schema Manager or a
> >reverse engineering tool to get at the full table definition (including
> >constraints), but not be able to write applications directly against that
> >schema. As background, we're modifying an existing database and the
> >developers need to reference a controlled original database version, but do
> >work on another version.
> >
>
> one way would be to create views of the base tables such as:
>
> create view emp_view as select * from emp where 1=0;
>
> and grant select on the views. If you set up another schema, you could even
> make the view names have the same names as the base tables....
>

At least through Oracle Enterprise Manager Schema Manager, the constraints on the underlying table are not available through a view on that table.

After posting this message, I experimented and found that by granting the "references" privilege, the table and associated constraints were visible through Schema Manager.

This will work. The "references" privilege apparently cannot be granted through a role. Also the describe does not work. On the plus side, the DML commands are disabled as desired.

Brian

> >Thanks,
> >Brian Gastineau
> >
> >-----------== Posted via Deja News, The Discussion Network ==----------
> >http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
>
> Thomas Kyte
> tkyte_at_us.oracle.com
> Oracle Service Industries
> Reston, VA USA

-----------== Posted via Deja News, The Discussion Network ==---------- http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own Received on Wed Jan 20 1999 - 08:30:52 CST