Re: Making a user 'read only'

Alex wrote:
>
> Hi,
>
> I'm looking for a way to revoke all object privileges except SELECT on a
> user's *own* objects.
> Or for some other way to produce the same effect: that a user, although
> able to log in and read
> data from their tables, is unable to write. This is for an 8.0.5 server.
>
> I need to be able to do this at a user level -- so making the database
> read only isn't an option,
> nor is making their tablespace read only possible, as many users share a
> tablespace.
>
> I thought this would be a facile operation but, unless I'm missing the
> blindingly obvious[1], this doesn't
> appear to be the case.

You would need to look into Trusted Oracle (a high-security version of Oracle) to do this. A better option is to simply avoid giving the user rights to create any tables, create the tables under another schema, and give the user select rights on these tables. Of course, YMMV,
Cheers,
GC Received on Mon Mar 12 2001 - 18:57:49 CST