I thought about that. Unfortunately the business rules developed by
non-Oracle-literate individuals specifically prohibit this. Each site
has an unknown number of 3rd party tools which their users can use to
connect with. Most regular lusers have access only to a "secure view"
which constrains the data that they can see. I have invariably found
several cartesian products when direct select permissions have been
granted. Damagement wants anyone to be able to use any tools that make
them happy (for the uninitiated - this is a bad idea for sensitive
data).
Why you ask are they now wanting a select through another view (which
may violate this prohibition anyway)?
You got me. The minds of beaurocrats are not for mere mortals to play
in...
That and my creativity is at an all time low due to lack of sleep.
Thanks,
Scott
"Hillman, Alex" wrote:
>
> another user should have select privileges for underlying table directly,
> not thru the role.
>
> Alex Hillman
>
> -----Original Message-----
> Sent: Friday, July 27, 2001 1:31 PM
> To: Multiple recipients of list ORACLE-L
>
> I have RTFM'd re: the following problem in HPUX11, Oracle 7.3.3:
>
> --I have user1 who has select privileges on another schema's table
> (user2.tab) through "Select Any Table" privilege.
>
> --user1 creates a view on user2.tab and grants select on the view to
> other users (user3..n) through a shared role.
>
> --When user3, et al tries to select from the view they get the infamous
> "ORA-1720 - Grant option does not exist for xxx.xxx" error.
>
> --I know you I can grant select on user2.tab with grant option to user1
> and solve this, but I would rather not do that if at all possible.
>
> --Also, I could create the view as user2 and not have the problem. The
> issue here is user1 needs to create the above type of views on the fly
> (please! I didn't design it!!!), and with 30 sites to support, there is
> no way to keep up if I have to create the views one by one.
>
> Is there any way around the situation besides the "select with grant
> option" clause to user1 (view owner)?
> Am I an idiot?
> Are sheep considered dates in TX?
> HELP
>
> Thanks,
>
> Scott Shafer
> San Antonio, TX
_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Scott Shafer
INET: [EMAIL PROTECTED]
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
San Diego, California -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
