yep, that's what I meant :)

additionally, if you decide to create private synonyms for each user,
you still have the potential problem of forgetting a user when you add
a new synonym. Yes, I use SQL to generate the SQL I need but even so,
it's a lot easier to include "create public synonym" and "grant xyz to
role" in the object creation script


--- Jared Still <[EMAIL PROTECTED]> wrote:
> Tanel,
> 
> I'm fairly sure that Rachel was not implying that a role
> could own a synonym, public or private.
> 
> The point was that using role based privilege management,
> you either create private synonyms for each user, or create
> public synonyms.
> 
> Another alternative is a logon trigger that does an 
> 'alter session set current_schema=schema', though that
> might become unwieldy with a large number of users, or
> when forced to work with an app that connects/disconnects
> repeatedly.
> 
> Jared
> 
> On Sat, 2004-01-10 at 10:24, Tanel Poder wrote:
> > Hi!
> > 
> > > If you intend to use roles to simplify privilege management, you
> are
> > > almost forced to use public synonyms, as you cannot create a
> private
> > > synonym owned by a role. Your other alternative is to hard-code
> the
> > 
> > How can you create a public synonym OWNED by a role?
> > This is new to me, despite the knowledge that roles and usernames
> are kept
> > in the same base table...
> > 
> > Tanel.
> > 
> > 
> > 
> > 
> > -- 
> > Please see the official ORACLE-L FAQ: http://www.orafaq.net
> > -- 
> > Author: Tanel Poder
> >   INET: [EMAIL PROTECTED]
> > 
> > Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
> > San Diego, California        -- Mailing list and web hosting
> services
> >
> ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB ORACLE-L
> > (or the name of mailing list you want to be removed from).  You may
> > also send the HELP command for other information (like
> subscribing).
> > 
> 
> 
> -- 
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> -- 
> Author: Jared Still
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
> San Diego, California        -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).


__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Rachel Carmichael
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to