whether a role can have grants to do object create

From: <Heidi_Schmidt_at_gillette.com>
Date: Fri, 4 Aug 2000 16:11:09 -0400
Message-Id: <10579.113891@fatcity.com>

Hmmmm....

(thinking out loud...)
As the schema owner , it can grant privileges to a role Then that role can be assigned to a user who can then execute the privs given to said user.
Like...
create any table / create table
select any table / select on schema_owner.table_name

So the create table priv can be granted to a role. It is the ability to create an object...
 So I am not sure it is just because a role can't own the object. I don't think roles ever own any objects but they can be given the ability to create objects.

also...creation ability hinges on being granted "unlimited tablespace" Other wise you can grant people privs but they can't do a thing in their own schema until they are given the ability to have the space in which to do it. Really subtle (of the pain in the butt kind), but true.

Thanks

     Heidi

So what do people really mean by this question?

                                                                                           
                    "Rachel                                                                
                    Carmichael"          To:     Multiple recipients of list ORACLE-L      
                    <carmichr_at_hot        <ORACLE-L_at_fatcity.com>                            
                    mail.com>            cc:                                               
                    Sent by:             Subject:     Re: question on a "OCP reveiw        
                    root_at_fatcity.        question"                                         
                    com                                                                    
                                                                                           
                                                                                           
                    08/04/00                                                               
                    10:47 AM                                                               
                    Please                                                                 
                    respond to                                                             
                    ORACLE-L                                                               
                                                                                           
                                                                                           

Roles can't own objects. So a role cannot create an index....

>From: "Nechama Glasrot" <Nglasrot_at_co.palm-beach.fl.us>
>Subject: Re: question on a "OCP reveiw question"
>Date: Thu, 03 Aug 2000 15:15:25 -0800
>
>i believe the answer is correct because alter, delete, and insert are
>object privileges and are yours by default as owner of the object whereas
>you have to be granted index explicitly by the DBA as it is a system
>privilege ... any corrections will be appreciated
>
>thank you ...
>
>Nechama Glasrot
>DBA

> >>> "Guang Mei" <zlmei_at_hotmail.com> 08/03 12:35 PM >>>
>I am reading OCP CRAM_EXAM book (author: Michael Ault) . I am confused by
>the following practice question:
>
>Which privilege can only be granted to a user?
>a. Alter
>b. Delete
>c. Index
>d. Insert
>
>Book's answer is c.
>
>Could anyone tell me why? Are we taking about system privilege or object
>privilege here? I don't remember anything particular between granting
>privilege to a user or a role.
>
>Thanks.
>
>Guang
>________________________________________________________________________
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
>--
>Author: Guang Mei
> INET: zlmei_at_hotmail.com
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).
>
>--
>Author: Nechama Glasrot
> INET: Nglasrot_at_co.palm-beach.fl.us
>
>Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
>San Diego, California -- Public Internet access / Mailing Lists
>--------------------------------------------------------------------
>To REMOVE yourself from this mailing list, send an E-Mail message
>to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
>the message BODY, include a line containing: UNSUB ORACLE-L
>(or the name of mailing list you want to be removed from). You may
>also send the HELP command for other information (like subscribing).

---

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

--
Author: Rachel Carmichael
  INET: carmichr_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may

Received on Fri Aug 04 2000 - 15:11:09 CDT