Xref: alice comp.databases.oracle.server:39868
Path: alice!news-feed.fnsi.net!cyclone.i1.net!newsfeed.enteract.com!newsfeed.berkeley.edu!su-news-hub1.bbnplanet.com!news.gtei.net!spring.edu.tw!feeder.seed.net.tw!news.seed.net.tw!cdfiler
From: violin.hsiao@mail.pouchen.com.tw (Violin)
Newsgroups: comp.databases.oracle.server
Subject: A Security Manager Problem?
Date: 5 Feb 1999 05:50:26 GMT
Organization: SEEDNet News Service
Lines: 22
Message-ID: <36ba7f08.4642669@news.twsc.pouchen.com.tw>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Newsreader: Forte Agent 1.5/32.478
X-Original-NNTP-Posting-Host: 172.16.3.219
X-Admin: Demon

Hello,
I created 2 users:TEST and AP_TEST,
and I want to grant TEST's object privileges to AP_TEST.
(ex. grant select on account to AP_TEST;)
I wish to grant object privileges in the security manager....for convenient.

Now I do this for grant DBA role to TEST,login security manager  as TEST/pwd.
Then grant TEST's object privrluiges to AP_TEST.
But with DBA roles,TEST could alter/udpate/insert/delete/select any table.
......I think it's a little bad!

If  I grant TEST only CONNECT and RESOURCE roles,login security manager as TEST.
I couldn't select on DBA_USERS,ora-01031:insufficient privileges.

If I want to grant TEST's object privileges to AP_TEST in security manager,
what privileges should I grant to TEST first?

Really need help.....or I must do the grant command  in the SQL*Plus.
Thank you for any tips.

Violin.
vioin.hsiao@mail.pouchen.com.tw