Newbie security question

Is it possible to set up a combination of object and/or system rights that does something like this:

"let a user select on all tables except for tables secret1, secret2 and secret3"

I tried a GRANT SELECT ANY TABLE TO USER; and then tried revoking SELECT rights to a specific table, Oracle the came back with "you can't revoke rights that you didn't grant...". Does that mean I can't do what I am trying? Or how could you achieve the same thing short of GRANTing SELECT to every table except the ones I don't want the user to see?

TIA Wor Received on Tue Mar 09 1999 - 05:16:08 CST