Re: How to limit USERS ability to Create Tables

Martin Douglas wrote:
>
> Howdy,
>
> I have just run into a problem on my inquiry only system. I have a large
> Data Warehouse (100Gig) in which I have a user that just created his own table
> in his default tablespace "USER_TBS". I have granted all users one ROLE that
> I defined. This ROLE has 'connect' and 'select *' on views I developed. This
> user does have a default tablespace 'USER_TBS' and a default temporary
> tablespace 'TEMP', But he has '0k quota' on each of these tablespaces.
>
> How did he create this user defined table without me giving 'create table'
> privileges and how do prevent this in the future.
>
> Thanks for you time
>
> Martin Douglas
Martin,

In oracle 7.x, connect is a role having, among other privs, create ssession, create table .. system privs. If all you intend giving the user is a 'connection' privilege - revoke connect role and grant create session priv separately.

-- 
Cheers

Sridhar Subramaniam
Avion Consulting Services
Sydney - Australia
Email : avion_at_ozemail.com.au

Disclaimer : All opinions are truly and just mine.