via ActiveDesigner/ActiveChangeManager...just click on
icon privileges and grant "truncate" only
ref: http://www.iraje.com/acc_changemanagermain.htm
Keith
Date: Mon, 06 May 2002 18:28:25 -0800
To: "Multiple recipients of list ORACLE-L"
<[EMAIL PROTECTED]>
Reply-to: [EMAIL PROTECTED]
Organizat
On Behalf Of "Kimberly Smith"
<[EMAIL PROTECTED]>
> Sent: Monday, May 06, 2002 10:28 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: ERD generation tool - Active SCM
>
> Hey, how do you give that truncate only privilege
>
>
>
--
Please
Hello Kieth
you wrote: It would have been better to give your developer "truncate" only
privileges,
You mean: grant truncate on owner.table to user.
No such grant.
The closest I could find is:
Create procedure that truncate the table as the owner and
grant execute on the procedure to the user.
02 10:28 PM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: ERD generation tool - Active SCM
>
> Hey, how do you give that truncate only privilege
>
>
>
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: [EMAIL PROTECTED]
Fa
Hey, how do you give that truncate only privilege
-Original Message-
Peterson
Sent: Monday, May 06, 2002 8:54 AM
To: Multiple recipients of list ORACLE-L
this is exactly my point.
It would have been better to give your developer
"truncate" only privileges, and that too only on a
Yechiel,
How did you give a "responsible person" the ability to truncate a
table without granting "delete any table". Very dangerious. There was a
long dicsussion on the list a while ago that displayed the dangers of
such a grant. I think it was followed up with an "update your resume"
statement
this is exactly my point.
It would have been better to give your developer
"truncate" only privileges, and that too only on a few
tables... but NEVER the Oracle schema owner password!
NEVER.
But, you too gave it away! you too Brutus! Even
though you are quite averse to doing so.
Think about it
Yechiel,
here is additional information:
white paper:
http://www.iraje.com/docs/ActiveSecureDesigner.htm
WEBCAMS (4-6 mins) and screenshots:
ActiveChangeManager:
http://www.iraje.com/ActiveChangeManager_viewlet.html
http://www.iraje.com/acommanbig.htm
ActiveCompare:
http://www.iraje.com/Active
nal Message-
> From: Yechiel Adar [SMTP:[EMAIL PROTECTED]]
> Sent: Sunday, May 05, 2002 7:48 AM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: ERD generation tool - Active SCM
>
> Well , just to keep things jumping.
>
> Last week I deviated from our rul
Well , just to keep things jumping.
Last week I deviated from our rule and gave a responsible user
that needed truncate on tables the password for the owner of the schema.
Guess what? Today he comes to me to recreate 2 tables that he dropped.
Go figure.
Yechiel Adar
Mehish
- Original Mes
cipients of list ORACLE-L
> Subject: Re: ERD generation tool - Active SCM
>
>
> Yechiel,
> Yes, I have been there, done that, over and over...
> But then, there is a "Toyota Corolla" solution and
> maybe a "Ferrari Testarosa" solution.
>
> If we can cont
Yechiel,
Yes, I have been there, done that, over and over...
But then, there is a "Toyota Corolla" solution and
maybe a "Ferrari Testarosa" solution.
If we can control "Dom Phoc" without tieing his hands
behind the back, wouldn't that would be the best:
white paper:
http://www.iraje.com/docs/Act
Parkway
Ft. Lauderdale, FL, USA 33063
> -Original Message-
> From: Yechiel Adar [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, May 02, 2002 3:49 PM
> To: Multiple recipients of list ORACLE-L
> Subject: Re: ERD generation tool - Active SCM
>
> Well Keith
>
> Our s
Well Keith
Our solution to the is:
Do not grant they rights to do any DDL either in test nor in prod.
The dab stuff does all the DDL work.
Sure it is an added chore, but after tracking down, a few times, tables that
were dropped
inadvertently by users (their tool did it by itself) we now use t
t; To: Multiple recipients of list ORACLE-L
> Subject: RE: ERD generation tool - Active SCM
>
> Lisa,
> There is only so much you can control via a model,
> since it remains a process away from the DB, and
> cannot be enforced via privileges, etc. So, we are
> always in the
Lisa,
There is only so much you can control via a model,
since it remains a process away from the DB, and
cannot be enforced via privileges, etc. So, we are
always in the hands of Dom Phoc (and their siblings),
who can do "stuff" even in the production database
with SQLPLus/TOAD/... Under this s
16 matches
Mail list logo
