Re: Revoking permissions for public tables

At 09:01 AM 5/7/2003, Fermin Bernaus Berraondo wrote:

> Hi everyone there,
>
> I need some help with permission policies. We are running Baan
> ERP under Oracle 8.0.6. To make tables accesible to Microsoft Access
> users we have given SELECT privileges on some tables so they can link to
> Oracle tables from within Access databases using ODBC.
>
> The problem is that among the list of linkable tables appear the
> following as well:
>
> PUBLIC.ALL_ALL_TABLES
> PUBLIC.ALL_ARGUMENTS
> PUBLIC.ALL_CATALOG
> PUBLIC.ALL_CLUSTER_AND_HASH_EXPRESSIONS
> PUBLIC.ALL_CLUSTERS
>
> and dozens like this. Users can link to this tables and view
> their contents. I'd like to revoke access to this tables, but I do not
> know how.

The only way I'm aware is really, really ugly-- not something I would recommend. If you create a view in the Access user's schema called all_tables, which excludes the tables you don't want users to see, you can fool Access into not displaying them. Obviously, you're screwed if users that connect to this schema depend on all_tables resolving to the right thing, but if it's an Access only schema and the users can't be trained to ignore PUBLIC.* tables, it's an option.

Justin Cave
Distributed Database Consulting

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Justin Cave
  INET: jcave_at_cableone.net

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).