| Security: Roles [message #58074] |
Tue, 29 July 2003 09:53  |
Ken Reaves
Messages: 3
Registered: April 2003
|
Junior Member |
|
|
|
I'm interested in creating a role that allows the select only object priviledge for all tables in a schema. I've created a role called REPORT_ROLE, granted this role to a test user called TEST, and granted SELECT on SCHEMA.TABLENAME to REPORT_ROLE. When I log onto the database as TEST, I'm still able to issue a DELETE statement against the table with the grant SELECT. If I issue ALTER USER TEST DEFAULT ROLE REPORT_ROLE, shouldn't I be able to select rows only from SCHEMA.TABLENAME? I'm open to suggestions.
|
|
|
|
|
|
|
|
] 
Blog
Search
Help
Members
Register
Login
Home
