bbreukelen_at_gmail.com wrote:
> First of all thank you all for the responses.
>
Hm
> The reason I want the new user too access the tablespace is security. I
You cannot. You can restrict (rather: grant) access to Oracle objects,
not the underlying physical structures. If a table is once created by
user A in table space B, you cannot restrict user A from accessing this
table.
> don't want to use the originat user because a have to embed the
> username/password into the PHP code and other people are able to see
> the code that are not allowed to enter the oracle dbase.
Then encrypt it.
> The Remedy dbase user has far to many privaliges to be out on the
> street.
The redesign it. Or lock the account.
>
> I wanted to restrict the user to the dbase only coming from localhost
Then don't start a listener.
> so people cannot use the account to connect to the dbase from remote
> computers but this is not very important if the restrictions are ok.
>
> I already created a user with the role connect and I found out that I
> can give the user permissions using eg. -GRANT SELECT ON
> "ARADMIN"."ARSCHEMA" TO "Webserver"-
>
> But I'd like to use something like -GRANT SELECT ON "ARADMIN"."%" TO
> "Webserver"- but this doesn't work.
Well, it does, but slightly different syntax... As you do not wish
to learn anything about Oracle, I will not be a partypooper and explain.
>
> About the last part, I'm not lazy. It's just that I looked up a lot of
> responses on similar questions and the answer always is 'Pickup a book
> and learn all about the oracle'.
>
> I can understand that but the project does not allow me to and this is
> the only thing I need to setup. The rest will simply be handled by the
> Remedy application so I feel like it's a waste of time for me.
Remedy, as in BMCRemedy? Or OGIT/WebPharao?
>
> I can imagine that some of you don't want to answer my question because
> of this reason. That's not a problem at all. Just don't waste you time
> by giving a response without an answer.
>
> Thanks again,
>
> Boudewijn van Breukelen
>
--
Regards,
Frank van Bortel
Received on Tue Jul 26 2005 - 14:36:29 CDT
