 | |
Create view from DBA_ROLES for non-privileged users?
comp.databases.oracle.server comp.databases.oracle.server
 |
| | Thread Tools | Display Modes |
#1
 
| |||
| |||
|
Create view from DBA_ROLES for non-privileged users? -
06-12-2008
, 09:50 AM
#2
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#3
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#4
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#5
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#6
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#7
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#8
| |||
| |||
|
|
Is it possible to create a view based off DBA_ROLES so that a non-DBA user can keep track of which users belong to roles associated with his department? In this case, all roles associated with the specific department are named with a common prefix, e.g. ABC_<rest of role name>. I'm thinking of something like the following: CREATE VIEW ABC_USER_ROLES as SELECT USERNAME, GRANTED_ROLE FROM DBA_ROLES WHERE GRANTED_ROLE LIKE '%ABC_%'; Is there any technical or security issue in creating a view like this for the user. It would be a time-saver for all concerned to have the view (vs. generating static reports of what users are in which roles). |
privileged schema that could be invoked by PUBLIC might be a better choice.
#9
| |||
| |||
|
|
My reaction is that a stored procedure owned by some appropriately privileged schema that could be invoked by PUBLIC might be a better choice..- Hide quoted text - |
environment, but I will look into it.
Any other thoughts about the original approach? Why specifically might
your solution be preferable?
Thanks again.
Dana
#10
| |||
| |||
|
|
My reaction is that a stored procedure owned by some appropriately privileged schema that could be invoked by PUBLIC might be a better choice..- Hide quoted text - |
environment, but I will look into it.
Any other thoughts about the original approach? Why specifically might
your solution be preferable?
Thanks again.
Dana
|
« Previous Thread
|
Next Thread »
| Thread Tools | |
| Display Modes | |
Linear Mode
| |
Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.