Re: Getting available roles and members

Thank you both for your responses. I will play around with the scenario to see what I can do.

Cheers!
Bryan

<catherinedevlin_at_girlgeekmail.com> wrote in message news:9ooaqc$taf$1_at_news.netmar.com...
>
> Hi, Bryan!
>
> Easy answer first.
>
> 2. user_role_privs, or session_roles
>
> As for #1, I don't think there are any other views to show you this.
You'll
> have to let TEST2 peek at DBA_ROLES and DBA_ROLE_PRIVS somehow.
>
> Since you managed to get DBA privileges for TEST1, you must have some pull
> with your DBA (or you are your DBA). You'll have to either -
> - Get SYS to GRANT SELECT ON DBA_ROLES and DBA_ROLE_PRIVS to TEST1. Then
> TEST1 can create a view pointing to those views and give TEST2 select
> permission on the view. Or,
> - Get GRANT SELECT ON DBA_ROLES and DBA_ROLE_PRIVS directly for TEST2.
>
> Good luck!
> - Catherine
> http://profiles.yahoo.com/arcticturtle
>
> In article <etKq7.7291$L47.1956925_at_news0.telusplanet.net>, BD
<BD_at_nowhere.com>
> writes:
> >I am trying to implement a security object into one of our applications
and
> >have the following scenario:
> >
> >User TEST1 owns all the tables that contain the application's data.
> >Roles TestRole1 and TestRole2 exist in the database.
> >User TEST2 exists in the database and is a member of role TestRole1 but
not
> >TestRole2 (and also belongs to the connect role).
> >
> >When I am connected as sser TEST2, how can I:
> >1) See all the available roles in the database?
> >2) See which roles I (as user TEST2) belong to?
> >
> >When I'm connected as Test1 (who has DBA privs), I can use the DBA_ROLES
and
> >DBA_ROLE_PRIVS views. But as Test2, I don't have access to those views.
> >Also, as Test1, I cannot grant select to those views to any of these
roles.
> >
> >Does anyone else have any ideas on how to get the information that I'm
> >after?
> >
> >Thanks,
> >Bryan
> >
> >
>
>
> ----- Posted via NewsOne.Net: Free (anonymous) Usenet News via the
eb -----
> http://newsone.net/ -- Free reading and anonymous posting to 60,000+
groups
> NewsOne.Net prohibits users from posting spam. If this or other posts
> made through NewsOne.Net violate posting guidelines, email
abuse_at_newsone.net Received on Tue Sep 25 2001 - 07:28:02 CDT