GUILLERMO -- Thanks for the question regarding "AVOID SELECT TABLES WHEN THEY HAVE SELECT TO PUBLIC GRANT", version 10.1.5

You Asked

Hi,
I have five diferents schemas, every one has tables, but some tables have SELECT TO PUBLIC grant;
I have to create an user and this user must be able to access only twelve tables, my problem is that when I create the user it has access to the other tables !!!
I did this query using the new user:

SELECT COUNT(*), GRANTOR
FROM all_tab_privs
WHERE grantee = 'PUBLIC'
GROUP BY GRANTOR;

I can select the most tables !!!
How can avoid that new user read the other tables even when the most tables have SELECT TO PUBLIC grant ???

Thank you

and we said...

stop using the "public" grant????

I mean - think about it.

If someone grants to public, they are saying "anyone has access to this, EVERYONE has access to this"

the only way to restrict things is to - well, not be so permissive with the grants in the first place.

So, the only answer is to rethink your approach to security in this database.

Reviews
May 4, 2007 - 3pm Central time zone Bookmark | Bottom | Top Reviewer: A reader    May 4, 2007 - 3pm Central time zone Bookmark | Bottom | Top Reviewer: A reader    May 4, 2007 - 3pm Central time zone Bookmark | Bottom | Top Reviewer: A reader

---

Write a Review