Cannot Revoke System Privilige
DBAsupport.com Forums - Powered by vBulletin
Results 1 to 4 of 4

Thread: Cannot Revoke System Privilige

  1. #1
    Join Date
    Dec 1999
    Location
    Purgatory
    Posts
    346

    Angry

    Hi All,

    I have a user, and I don't want her to CREATE TABLEs in her schema.

    In order for her to connect to the DataBase, I've granted her the CONNECT role. Within the CONNECT role, there is an IMPLICIT system privilige for CREATE TABLE.

    So I tried 'REVOKE CREATE TABLE FROM MY_USER';

    and I got the error ORA-01952: system privileges not granted to 'MY_USER'

    She can still create tables, what do I do...........

  2. #2
    Join Date
    Jun 2001
    Location
    Helsinki. Finland
    Posts
    3,938
    Revoke connect and grant only create session. Would this be fine?

    Oracle Certified Master
    Oracle Certified Professional 6i,8i,9i,10g,11g
    email: ocp_9i@yahoo.com

  3. #3
    Join Date
    Dec 1999
    Location
    Purgatory
    Posts
    346

    Wink

    That seems to work, just have to wait for the fallout.........

    Cheers.

  4. #4
    Join Date
    Jan 2002
    Location
    Netherlands
    Posts
    1,587
    You cannot revoke the system priv in a role if it had a grant option, you must revoke the role and regrant the role without the priv. But since you don't need him/her to have create table priv....
    like julian said the create session will give him/her the ability to connect and then grant select on .. etc for specific access to select, or more as you want him/her to engage in the db.
    Tarry Singh
    I'm a JOLE(JavaOracleLinuxEnthusiast)
    TarryBlogging
    --- Everything was meant to be---

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  



Click Here to Expand Forum to Full Width