RE: Schema Owner

...and look what's happened to Enron! :-0

And I might add, it works very well.

I did the same thing at Enron to prevent the duhvelopers from changing account passwords.

Jared  

                    Joe Testa

                    <teci_at_the-test       To:     Multiple recipients of list
ORACLE-L <ORACLE-L_at_fatcity.com>   
                    as.net>              cc:

                    Sent by:             Subject:     Re: Schema Owner

                    root_at_fatcity.c

                    om

 

 

                    12/05/01 07:15

                    PM

                    Please respond

                    to ORACLE-L

 

 

You can't revoke the privilege from the schema owner but you CAN keep them from doing ddl and dml by using database triggers.

now the catch is this:

the trigger HAS to be owned by someone other than the schema owner AND the schema owner can't have the alter any trigger privilege(either direct or via a role).

so yes Virgina(since its the xmas season), you can keep the schema owner from altering data in its own schema.

joe

DENNIS WILLIAMS wrote:
>
> Hamid - this was discussed recently on this list and as I recall you
can't
> revoke the schema owner. Can you create a new userid and get them to use
> that? Then change the password on the schema owner. Barring that, you
could
> create a new schema, move the tables and indexes there, then grant select
to
> the original owner.
> Dennis Williams
> DBA
> Lifetouch, Inc.
> dwilliams_at_lifetouch.com
>
> -----Original Message-----
> Sent: Wednesday, December 05, 2001 1:15 PM
> To: Multiple recipients of list ORACLE-L
>
> May be odd question, but I realy need to do this, I want to revoke the
> privilege of the schema owner.
> I mean give only select priv to the schema owner.
> Thanks
>
> Hamid Alavi
> Office 818 737-0526
> Cell 818 402-1987
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Vergara, Michael (TEM)
  INET: mvergara_at_guidant.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).