Home » RDBMS Server » Security » Please Suggest some privelege
Please Suggest some privelege [message #250630] Tue, 10 July 2007 13:01 Go to next message
harry07
Messages: 61
Registered: June 2007
Location: now york
Member
Hello Forum
One of my business user want to see the DDL of tables and indexes, so I granted him 'select catalog'. But with this privilege he is not able to extract DDL for indexes. Then I escalated the privelge to 'select any table'. This solved his problem about extracting DDL for indexes. But this privilege is too risky and he need some privelege between these two.

Can anybody please suggest something

Thanks a lot
Re: Please Suggest some privelege [message #250632 is a reply to message #250630] Tue, 10 July 2007 13:11 Go to previous messageGo to next message
Michel Cadot
Messages: 68624
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Ask him why does it need this.
I don't see any reason a business user has to see DDL.

Regards
Michel
Re: Please Suggest some privelege [message #250638 is a reply to message #250632] Tue, 10 July 2007 13:29 Go to previous messageGo to next message
harry07
Messages: 61
Registered: June 2007
Location: now york
Member
The tables are often created or modified in that database. So he need to take some dynamic decisions based on that structure.
Thas why he need to see the DDL of tables and indexes.

Thanks a lot
Re: Please Suggest some privelege [message #250639 is a reply to message #250630] Tue, 10 July 2007 13:31 Go to previous messageGo to next message
BlackSwan
Messages: 26766
Registered: January 2009
Location: SoCal
Senior Member
Write a small PL/SQL procedure owned by a schema with necessary privs & GRANT EXECUTE to BI_USER on SHOW_DDL procedure.
Re: Please Suggest some privelege [message #250641 is a reply to message #250639] Tue, 10 July 2007 13:34 Go to previous message
harry07
Messages: 61
Registered: June 2007
Location: now york
Member
Is there anyway we can solve this problem without jumping for procedure and just somehow trace a optimum privilege.

Thanks n advance.
Previous Topic: Create user using another user's password
Next Topic: Setting up the synonym
Goto Forum:
  


Current Time: Thu Mar 28 05:31:17 CDT 2024