Jayesh Acharya
asked on
oracle 10g privileges
I have a database with 3 users
ACME_PRCS
ACME_MSC
ACME_OUT
DEF_PRCS
DEF_MSC
DEF_OUT
I need to grant create object prividges to ACME_PRCS that will enable it to create objects only in ACME_MSC , ACME_OUT and ACME_PRCS but not in and of the DEF schemas ...
can you help me in trying to work out what grants I need to provide ACME_PRCS ...
ACME_PRCS
ACME_MSC
ACME_OUT
DEF_PRCS
DEF_MSC
DEF_OUT
I need to grant create object prividges to ACME_PRCS that will enable it to create objects only in ACME_MSC , ACME_OUT and ACME_PRCS but not in and of the DEF schemas ...
can you help me in trying to work out what grants I need to provide ACME_PRCS ...
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Even though you've already selected an answer I feel the need to make a point.
You should NEVER grant 'create any'. The ANY privilege allows a user perform this granted task to, well, ANY schema.
This user will not be able to create tables in the SYS and SYSTEM schemas or any other.
You really shouldn't have general users creating objects in other schemas. If you MUST do this, create a DDL trigger that will allow or disallow the correct statements.
You should NEVER grant 'create any'. The ANY privilege allows a user perform this granted task to, well, ANY schema.
This user will not be able to create tables in the SYS and SYSTEM schemas or any other.
You really shouldn't have general users creating objects in other schemas. If you MUST do this, create a DDL trigger that will allow or disallow the correct statements.
ASKER