RE: Question related to security

[Jamadagni, Rajendra]

Title: RE: 9i OCP Upgrade Exam - Again

Pat,

 

You have two choices ...

 

1. either you log in as the schema and grant access to see selected tables

   This isn't possible (or is the last resort)

 

2. SELECT ANY

   Easy, but as you mention a potential security risk

 

When I have limited choices with a vendor app, I'd rather not mess with vendor code without their approval (please don't confuse this to my messing around with writing code to workaround Oracle bugs, thank you).

 

Raj

-------------------------------------------------------------
Rajendra dot Jamadagni at espn dot com
Any views expressed here are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !!

-----Original Message-----
From: Boivin, Patrice J [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 05, 2003 7:35 AM
To: Multiple recipients of list ORACLE-L
Subject: RE: Question related to security

That would let the account see ANY table in the database, wouldn't it?

 

Pat.

-----Original Message-----
From: Jamadagni, Rajendra [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 6:05 PM
To: Multiple recipients of list ORACLE-L
Subject: RE: Question related to security

grant select any table to <your developer>

/

 

Shouldn't this work?

Raj

-------------------------------------------------------------
Rajendra dot Jamadagni at espn dot com
Any views expressed here are strictly personal.
QOTD: Any clod can have facts, having an opinion is an art !!

-----Original Message-----
From: Meng, Dennis [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 4:05 PM
To: Multiple recipients of list ORACLE-L
Subject: Question related to security

Hi all -

I have an interesting problem at hand - we have a request from a developer that ask to access some tables owned by a user generated by third party app. Since I don't have the password for this user and system/sys do not have admin option on these tables, I can't grant select to the developer. Changing password for this app can be tricky and will be used as last resort. My question is is there anything else I can do to meet this request?

 

Thanks

 

Dennis

********************************************************************This e-mail 
message is confidential, intended only for the named recipient(s) above and may 
contain information that is privileged, attorney work product or exempt from 
disclosure under applicable law. If you have received this message in error, or are 
not the named recipient(s), please immediately notify corporate MIS at (860) 766-2000 
and delete this e-mail message from your computer, Thank 
you.*********************************************************************2