Re: Question about revoking select from PUBLIC



bontemps wrote:
All of our tables have PUBLIC synonyms and of course PUBLIC has SELECT
privileges on all of them. How can I make some of them visible ONLY to
certain users?

You'll have to revoke SELECT access from PUBLIC and then grant SELECT access only to those that need to see the table.

> If I drop the PUBLIC synonyms, nobody except the owner
can see them.

Actually, if you drop the public synonym, they will still be able to access the table. That is because PUBLIC has been granted SELECT access on the table. They will just need to use schema-dot notation to access the table, i.e. they need to prepend the table name with the owner and a period as in SCOTT.EMP.

> If I keep the PUBLIC synonyms everyone sees them. We
know that we can drop the synonym and include the schema owner when
referencing the table name but we dont want to rewrite the application
to insert them.

The PUBLIC syn does not let them query the table. The SELECT priv (object privilege) does.

HTH,
Brian


--
===================================================================

Brian Peasland
dba@xxxxxxxxxxxxxxxxxxx
http://www.peasland.net

Remove the "nospam." from the email address to email me.


"I can give it to you cheap, quick, and good.
Now pick two out of the three" - Unknown

--
Posted via a free Usenet account from http://www.teranews.com

.



Relevant Pages

  • Re: Question about revoking select from PUBLIC
    ... You'll have to revoke SELECT access from PUBLIC and then grant SELECT ... > If I drop the PUBLIC synonyms, nobody except the owner ... cannot REVOKE privileges you did not ...
    (comp.databases.oracle.misc)
  • Re: Question about revoking select from PUBLIC
    ... You'll have to revoke SELECT access from PUBLIC and then grant SELECT ... > If I drop the PUBLIC synonyms, nobody except the owner ... cannot REVOKE privileges you did not ...
    (comp.databases.oracle.misc)
  • Re: user does not have access privileges
    ... "User does not have access privileges" ... my documents, all users, administrator, and owner. ... >> Suppose there are users - Tom, ... >> "User does not have access privileges" <User does not have access ...
    (microsoft.public.word.docmanagement)
  • Re: LINECALLPRIVILEGE_OWNER
    ... "Kalpesh Modha" schrieb im Newsbeitrag ... Regardless of this setting you start to be always owner of outgoing call YOU ... You may change every call privileges via lineSetCallPrivileges. ... Microsoft MVP for TAPI / Windows SDK ...
    (microsoft.public.win32.programmer.tapi)
  • Re: DBMS_STATS "Missing expression"
    ... > some of the sys owned objects were invalid or the public synonyms ... granting appropriate privileges for PLAN_TABLE to public. ... Oracle 10g Certified Professional ...
    (comp.databases.oracle.server)