And the next logical question is... If the user can't be trusted around the tables,
why was he given the dba role at all. Just give him the specific priveledges he needs.
>>> B N RAMAMOHAN <[EMAIL PROTECTED]> 03/01/01 02:35AM >>>
Hi Chuan,
You can not revoke Just drop any table from DBA Role,
since drop any tables is not granted explicitly.
What you can do is create a copy of DBA role and from
that role reovke drop any table table priv. Use this
new role to grant DBA without Drop any table priv.
Regards,
Mohan
On Wed, 28 Feb 2001, Chuan Zhang wrote:
> Hi, All,
>
> I have granted DBA role to an user. But I don't want him holding the
> "Drop Any Table" system privilege.
>
> I did as follows:
>
> 1. Connect as sysdba.
> 2. revoke drop any table from ABC-user;
>
> And I got the error:" ORA-01952: system privileges not granted to
> 'ABC-user'".
>
> Could anyone help me out?
>
> Thanks,
>
> Chuan
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: B N RAMAMOHAN
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: William Beilstein
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
