Title: RE: Question related to security

If I were the famous d'Artagnan, I would challenge you to a duel for insulting my honour, but since I'm a 21st century man I will instead thank you for teaching me something I didn't know.

-----Original Message-----
From: Pete Sharman [mailto:[EMAIL PROTECTED]]

Your first statement is no longer true for 9.2 and later (it still remains true for earlier releases).  In 9.2 the new system privilege, GRANT ANY OBJECT PRIVILEGE, allows users to grant and revoke privileges on objects on behalf of the object's owner to simplify the installation process.

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jacques Kilchoer

Only UserA can grant access on a table belonging to UserA (unless another user was granted access with admin option.)
However, UserB can create a procedure in the schema of UserA if UserB has CREATE ANY PROCEDURE system privilege.
The procedure created will run with the privileges of UserA, and will be able to grant access on tables belonging to UserA.

Reply via email to