Re: Can a DBA restrict privileges of a user that is the owner of a schema? We need to remove DDL privileges. Our DBA says it is impossible. Please help!

Home -> Community -> Usenet -> c.d.o.server -> Re: Can a DBA restrict privileges of a user that is the owner of a schema? We need to remove DDL privileges. Our DBA says it is impossible. Please help!

From: Matthias Hoys <anti_at_spam.com>
Date: Tue, 15 Aug 2006 23:06:16 +0200
Message-ID: <44e23749$0$5520$ba620e4c@news.skynet.be>

"Mistton" <mistonl_at_mail.com> wrote in message news:44e2342a$0$33408$bb4e3ad8_at_newscene.com...
> using 9.2.0.3.0 on Sun Unix 15k server (i know its old but that is what
> we
> have)
>
> we have following situation:
>
> User STEPH is the owner of schema WORK. as such he has full DML and DLL
> privileges.
>
> Due to production access direcitves from managment, we need to somehow
> restrict STEPH to have just DML on WORK schema. Our DBA said this is not
> possible, which means we would have to create a new user and change all
> our
> code that references STEPH.
>
> is it possible to restrict? is there some workaround?
>
> thanks in advance

You could use an after-logon trigger to check for DDL changes on the schema. Received on Tue Aug 15 2006 - 16:06:16 CDT