about system privileges

[kalps]

What is the purpose of giving grant dba,connect,res ource to some user....

What is this actually do?

if i give this, is it necessary to grant select update privileges to that user or no need.....

and one more....how to revoke dba,connect and resource privileges from that user...

Kindly help...thanks

[debasisdas]

connect means the user can connect to the database ,u can also grant create session for the same purpose.

resource means the user has previlege on the default tablespace .So the user can create his own objects like tables ,views etc...

if you grant dba the user gets previleges on some of the data dictionaries , on which normal user does not have any previleges.

grant select ,insert ,update is different from the previous grant . these are object previleges ,means these are granted on specified objects . And only the owner of the object or any other user who have required previleges on those objects can grant these to others.

[kalps]

connect means the user can connect to the database ,u can also grant create session for the same purpose.

resource means the user has previlege on the default tablespace .So the user can create his own objects like tables ,views etc...

if you grant dba the user gets previleges on some of the data dictionaries , on which normal user does not have any previleges.

grant select ,insert ,update is different from the previous grant . these are object previleges ,means these are granted on specified objects . And only the owner of the object or any other user who have required previleges on those objects can grant these to others.

thanks..but how to revoke those system privileges after it has been granted

[frenzic]

Hi

revoke <1st priv>, <2nd priv> on <objectname> from <username>;

Hope this helps

[debasisdas]

to revoke the system previleges do not use object name as it is not on a object.

for ex
=========
[CODE=ORACLE]REVOKE CONNECT FROM SCOTT;[/CODE]