Oracle-L: RE: Revoking permissions for public tables

From: Deshpande, Kirti <kirti.deshpande_at_verizon.com>
Date: Wed, 07 May 2003 09:47:29 -0800
Message-ID: <F001.005929D9.20030507094729@fatcity.com>

Even if they can access these publicly available views, they can only see contents they have access to. Actual Application data will not be visible, though.

Probably user education (not use anything owned by PUBLIC when linking ACCESS to Oracle) would solve whatever the problem is.

Kirti

-----Original Message-----
Sent: Wednesday, May 07, 2003 10:02 AM
To: Multiple recipients of list ORACLE-L

Hi everyone there,

I need some help with permission policies. We are running Baan ERP under Oracle 8.0.6. To make tables accesible to Microsoft Access users we have given SELECT privileges on some tables so they can link to Oracle tables from within Access databases using ODBC.

The problem is that among the list of linkable tables appear the following as well:

	PUBLIC.ALL_ALL_TABLES
	PUBLIC.ALL_ARGUMENTS
	PUBLIC.ALL_CATALOG
	PUBLIC.ALL_CLUSTER_AND_HASH_EXPRESSIONS
	PUBLIC.ALL_CLUSTERS

	and dozens like this. Users can link to this tables and view their contents. I'd like to revoke access to this tables, but I do not know how. I have tried:

	revoke select on PUBLIC.ALL_ALL_TABLES from taller;

	but it says table does not exist. I know this are dictionary views, so how do I do this? I only gave the connect role to the user and from then on I typed 'grant select on baan.<table_name> to taller;' for each table I wanted to make accesible to users. But this 'public' tables were accesible from the very begining.

	Thank you for your help, it IS a newbie question!

..............................................

Fermin Bernaus Berraondo
Dpto. de Informatica
SAMMIC, S.A.
fbernaus_at_sammic.com
http://www.sammic.com
Telf. +34 - 943 157 331
Fax +34 - 943 151 276

..............................................

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Deshpande, Kirti
INET: kirti.deshpande_at_verizon.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed May 07 2003 - 12:47:29 CDT