Q
Problem solve Get help with specific problems with your technologies, process and projects.

Revoking privileges from users

I have created a table 'tab1' and user 'user1'. Initially, the following are privileges granted to 'user1' by the DBA:

ALTER SESSION
CREATE ANY INDEX
CREATE ANY SEQUENCE
CREATE ANY SYNONYM
CREATE PROCEDURE
CREATE SEQUENCE
CREATE SESSION
CREATE SYNONYM
CREATE TRIGGER
CREATE TABLE
CREATE VIEW
No 'CONNECT' and 'RESOURCE' roles were granted. After some time, the DBA had revoked CREATE TABLE privileges. If the DBA wants to stop 'user1' from altering the existing tables, what privileges should be granted/revoked by DBA to/from 'user1'?


Once a user creates an object, there's not really any way that I know of to stop them from altering those objects. If you don't want the user to be able to access the objects at all, simply lock their account:

 ALTER USER user1 ACCOUNT LOCK;   
This will prohibit them from getting to anything while still keeping the objects created by the user available to others.

If you want to still allow the user to have access, you could also assign the users tables to another user. Use the export tool to dump the user's table(s), then use import with the FROMUSER and TOUSER parameters to import the tables as that other user.

For More Information

  • What do you think about this answer? E-mail the editors at editor@searchDatabase.com with your feedback.
  • The Best Oracle Web Links: tips, tutorials, scripts, and more.
  • Have an Oracle or SQL tip to offer your fellow DBAs and developers? The best tips submitted will receive a cool prize. Submit your tip today!
  • Ask your technical Oracle and SQL questions -- or help out your peers by answering them -- in our live discussion forums.
  • Ask the Experts yourself: Our SQL, database design, Oracle, SQL Server, DB2, metadata, object-oriented and data warehousing gurus are waiting to answer your toughest questions.

Dig Deeper on Oracle database security

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

SearchDataManagement

SearchBusinessAnalytics

SearchSAP

SearchSQLServer

TheServerSide.com

SearchDataCenter

SearchContentManagement

SearchHRSoftware

Close