Drop Table [message #395216] |
Tue, 31 March 2009 14:29 |
marcossantos
Messages: 123 Registered: June 2008
|
Senior Member |
|
|
Hi,
I have a question:
1. why the user of oracle has privilege
to drop table in your schema only
with grant of connect and create session?
Thanks,
Marcos Santos
|
|
|
|
Re: Drop Table [message #395218 is a reply to message #395216] |
Tue, 31 March 2009 14:45 |
marcossantos
Messages: 123 Registered: June 2008
|
Senior Member |
|
|
Yes.
The user was not able TO CREATE a table
but was able to DROP the table in
your schema.
Your privilege are only TO CONNECT.
The DROP is more dangerous.
I think this illogical.
Thanks,
|
|
|
|
Re: Drop Table [message #395220 is a reply to message #395216] |
Tue, 31 March 2009 14:56 |
marcossantos
Messages: 123 Registered: June 2008
|
Senior Member |
|
|
I dont understand.
I create a user in oracle.
I grant privilege to CONNECT for this user.
Only CONNECT.
1. Can this user create a table in your schema?
2. If I create a table with user SYS for this user,
Can he DROP this table?
Thanks,
|
|
|
|
Re: Drop Table [message #395222 is a reply to message #395216] |
Tue, 31 March 2009 15:05 |
marcossantos
Messages: 123 Registered: June 2008
|
Senior Member |
|
|
Hi,
steps:
1.sql>create user user1 identified by pass;
2.sql> grant connect to user1;
My questions:
1. can user1 to create tables in your schema;
2. can user1 to drop tables in your schema;
Thanks,
|
|
|
|
|
|
|
|
|
|
|
Re: Drop Table [message #395536 is a reply to message #395233] |
Wed, 01 April 2009 16:10 |
panchino
Messages: 1 Registered: April 2009 Location: Caceres
|
Junior Member |
|
|
Hi
If you create user "any1" and give the "ROLE CONNECT", only he can connect to database, if the user "any1" do not have got grant to "create table" or "delete table" or "delete any table" the user can not do it.
And if the user "any1" don't have quota in any tablespace the user will can not create any object
|
|
|
|
Re: Drop Table [message #395656 is a reply to message #395653] |
Thu, 02 April 2009 02:57 |
|
Michel Cadot
Messages: 68694 Registered: March 2007 Location: Nanterre, France, http://...
|
Senior Member Account Moderator |
|
|
gentlebabu wrote on Thu, 02 April 2009 09:51 | If you want to protect then write database trigger.
|
Better lock the user and don't use it as application user but just as object container.
And DON'T use SYS even for a demonstration, you can use a DBA user of your own.
Remember doing something with SYS never proves anything for another user.
Regards
Michel
[Updated on: Thu, 02 April 2009 02:58] Report message to a moderator
|
|
|
|
|
|
|
|
|
|
Re: Drop Table [message #396042 is a reply to message #396011] |
Fri, 03 April 2009 10:39 |
|
Michel Cadot
Messages: 68694 Registered: March 2007 Location: Nanterre, France, http://...
|
Senior Member Account Moderator |
|
|
marcossantos wrote on Fri, 03 April 2009 16:29 | Hi,
Is there a method to prevent that some
user DROP objects in own schema?
Thanks,
Marcos Santos
|
Database trigger on the schema.
Regards
Michel
|
|
|