And I might add, it works very well.

I did the same thing at Enron to prevent the
duhvelopers from changing account passwords.

Jared



                                                                                       
                        
                    Joe Testa                                                          
                        
                    <teci@the-test       To:     Multiple recipients of list ORACLE-L 
<[EMAIL PROTECTED]>   
                    as.net>              cc:                                           
                        
                    Sent by:             Subject:     Re: Schema Owner                 
                        
                    [EMAIL PROTECTED]                                                     
                        
                    om                                                                 
                        
                                                                                       
                        
                                                                                       
                        
                    12/05/01 07:15                                                     
                        
                    PM                                                                 
                        
                    Please respond                                                     
                        
                    to ORACLE-L                                                        
                        
                                                                                       
                        
                                                                                       
                        




You can't revoke the privilege from the schema owner but you CAN keep
them from doing ddl and dml by using database triggers.

now the catch is this:

the trigger HAS to be owned by someone other than the schema owner AND
the schema owner can't have the alter any trigger privilege(either
direct or via a role).

so yes Virgina(since its the xmas season), you can keep the schema owner
from altering data in its own schema.

joe

DENNIS WILLIAMS wrote:
>
> Hamid - this was discussed recently on this list and as I recall you
can't
> revoke the schema owner. Can you create a new userid and get them to use
> that? Then change the password on the schema owner. Barring that, you
could
> create a new schema, move the tables and indexes there, then grant select
to
> the original owner.
> Dennis Williams
> DBA
> Lifetouch, Inc.
> [EMAIL PROTECTED]
>
> -----Original Message-----
> Sent: Wednesday, December 05, 2001 1:15 PM
> To: Multiple recipients of list ORACLE-L
>
> May be odd question, but I realy need to do this, I want to revoke the
> privilege of the schema owner.
> I mean give only select priv to the schema owner.
> Thanks
>
> Hamid Alavi
> Office 818 737-0526
> Cell    818 402-1987
>
> The information contained in this message and any attachments is intended
> only for the use of the individual or entity to which it is addressed,
and
> may contain information that is PRIVILEGED, CONFIDENTIAL and exempt from
> disclosure under applicable law. If you have received this message in
error,
> you are prohibited from copying, distributing, or using the information.
> Please contact the sender immediately by return e-mail and delete the
> original message from your system.
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: Hamid Alavi
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> San Diego, California        -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing).
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author: DENNIS WILLIAMS
>   INET: [EMAIL PROTECTED]
>
> Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
> San Diego, California        -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from).  You may
> also send the HELP command for other information (like subscribing)

--
Joe Testa, Oracle DBA
Want to have a good time with a bunch of geeks? Check out:
http://www.geekcruises.com/standard_interface/future_cruises.html
I'm presenting, when registering drop my name :)

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Joe Testa
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to