Oracle Security

[richl796]

Is there a way to lock down one schema and just have views into it from another user to the point where no one except the owner (including sys) can do a describe on the tables. Basically trying to hide the data model. Is there encryption or something to do this? Thanks!

[sree_sri]

Yes & No

You can create tables in one schema and create views on that tables and you can select public synonyms on that views and you can grant permissions on that.
So user only can select or update or delete that objects. You are not giving table_name and alter privs, So they can only access the public synonyms(on views) and access the data. So they don't know any thing on that table.

But

You can't stop the sys, As per oracle sys is super user. So he can select any object from the database. like

select scott.emp from all_tables;

As per my knowledge you can't stop the sys user.

[rsuri]

If you are creating view so that users can do select on those tables (irrespective of the synonyms) that means you have GRANTed them the SELECT privilege on the underlying table.
In that case they can DESCRIBE the table as well.

I really don't know how you can view the table data (thru views) and not do a DESCRIBE on that table.

- Rajeev