Re: Priv Required to Create a View

From: Cristian Cudizio <cristian.cudizio_at_yahoo.it>
Date: 11 Apr 2007 02:09:26 -0700
Message-ID: <1176282566.436435.110160@w1g2000hsg.googlegroups.com>

On Apr 11, 4:33 am, Galen Boyer <galen_bo..._at_yahoo.com> wrote:
> On Tue, 10 Apr 2007, damor..._at_psoug.org wrote:
> > Michael42 wrote:
> >> Hello,
> >> In an Oracle 10g R2 database I created a user with CONNECT and
> >> RESOURCE roles. They can create their own tables in their schema but
> >> not views. What priviledge is required for a user to be able to
> >> create a view?
> >> Thanks,
> >> Michael
>
> > It is a bad policy to grant CONNECT and RESOURCE.
>
> > grant CREATE SESSION, CREATE TABLE, CREATE VIEW, etc. explicitly
> > and only as required.
>
> And usually it is good practice to grant privileges to a role then grant
> that role to different users.
>
> --
> Galen Boyer

it seems to me that using roles is advised and supported by Oracle and also a comfortable practice.
from version 10gR2 the role "CONNECT" does not have "CREATE VIEW" system privilege anymore
(you can see it querying ROLE_SYS_PRIVS). It is not so clear to me why and i will be grateful to who explain it to me .
Any way it simple or to create a new ROLE with the privileges you prefer
or manually grant "CREATE VIEW" explicitly with a user with DBA privileges.

Bye
Cristian Cudizio

http://cristiancudizio.wordpress.com/ Received on Wed Apr 11 2007 - 04:09:26 CDT