Thank you Jared, 

I was confused, thought that the GRANT ANY PRIVILEGE ROLE, would allow that  !!!

Tks


-----Original Message-----
From:   "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> on behalf of      "Jared Still" 
<[EMAIL PROTECTED]>
Sent:   Saturday, April 20, 2002 1:28 AM
To:     "Multiple recipients of list ORACLE-L" <[EMAIL PROTECTED]>
Subject:        Re: System applying grants


That won't give SYS the privileges you think it does.

For any user, including SYS, to be allowed to grant direct
privileges on another users objects, that user must have 
explicity direct grants with the 'with grant option'.

e.g.  to allow SYS to grant privileges on the table EMP 
owned by SCOTT, you must log in as SCOTT and issue
this command:  

GRANT ALL ON EMP TO SYS;

The user SYS will now be able to grant privilege on SCOTT.EMP
to other users.

Jared

On Friday 19 April 2002 19:23, [EMAIL PROTECTED] wrote:
> Hi gurus,
>
> I created a script to assign some grants automatically to some roles and
> users.
>
> As the user sys, I assigned to user system the GRANT ANY PRIVILIGE, GRANT
> ANY ROLE, roles and when run the script get the error of insufficient
> privileges.
>
> What I dont want is to connect to each user to apply the grants.
>
> How can achieve that ?
>
> TIA
>
> Ramon
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jared Still
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to