Re: import to different user with the new correct grant doesn't work

I agree with you that this is a big security issue. However in my case as the dumps are only needed for development I'm only concerned by the "feature". This behaviour of imp is not natural.

• I overcame the bug by getting via SQL all the objects privilege for the concerned schemas and I generate revoke and grant statements accordingly.

Then I just have to run the generated output. However this method only works if it is runned as sys and if the grantee still exists.

• If the original schema doesn't exist then we can use some regex to format the log file with the correct statement.

Running those stuff in a shell script can automatize the whole process.

Well I hope this answer will help the next ones

DA Morgan a écrit :

> Bryce wrote:
> > Hi,
> >
> > I have a problem with the import util from oracle (Import: Release
> > 10.2.0.1.0 - Production on Fri Dec 15 14:45:49 2006).
> >
> > I would like to import from 2 schemas to 2 different schema, and the
> > import tool works fine exept for the grantas that it sets to the
> > original user.
> >
> > adminuser (grants select, insert, etc to realuser)
> > realuser (got grants from adminuser)
> >
> > imp userid=sys/sys fromuser=adminuser,realuser
> > touser=testadminuser,testuser
> >
> > All the schemas are on the same database server.
> >
> > And once my import is done, testuser didn't get anygrant to
> > TESTADMINUSER objects while REALUSER now have grants from ADMINUSER and
> > from TESTADMINUSER)
> >
> > Is there a way to import related schemas into the same schemas named
> > differently.
>
> Not of which I am aware. Were what you want possible I'd be more
> likely to call it a security problem than a feature.
> --
> Daniel A. Morgan
> University of Washington
> damorgan_at_x.washington.edu
> (replace x with u to respond)
> Puget Sound Oracle Users Group
> www.psoug.org
Received on Mon Dec 18 2006 - 10:19:24 CST