How tough can I be for the user PUBLIC?

[Gary]

Hello guys!

Bear with me,I am newbie.

I am trying to limit the privileges of the user PUBLIC has as toughly
as possible which means I want to go as far as I can then leave those
MUST-HAVE privileges for user PUBLIC. The question is how far I can
go?

My expectation is once I have done this and I am asked to let my Data
Warehouse users to access the database with only select privileges on
some tables, what I need to do will be creating a role "USER_READ"
with
1. CREATE SESSION and ALTER SESSION system privileges
2. Select privilege on certain user tables as object privileges
then I put all those users in this role.

So, what should I have least for privileges of user PUBLIC then, if I
ask the question in another way?

Cheers!

Gary

[sybrandb@yahoo.com]

Re: How tough can I be for the user PUBLIC?

rooty_hill2002@ yahoo.com.au (Gary) wrote in message news:<171bd226. 0309112038.548e 6e5e@posting.go ogle.com>...

Hello guys!
>
Bear with me,I am newbie.
>
I am trying to limit the privileges of the user PUBLIC has as toughly
as possible which means I want to go as far as I can then leave those
MUST-HAVE privileges for user PUBLIC. The question is how far I can
go?
>
My expectation is once I have done this and I am asked to let my Data
Warehouse users to access the database with only select privileges on
some tables, what I need to do will be creating a role "USER_READ"
with
1. CREATE SESSION and ALTER SESSION system privileges
2. Select privilege on certain user tables as object privileges
then I put all those users in this role.
>
So, what should I have least for privileges of user PUBLIC then, if I
ask the question in another way?
>
Cheers!
>
Gary

PUBLIC isn't a real user, it is a dummy user. It is from the days
roles didn't exist. You can't connect as PUBLIC. Hence, if you don't
grant privilege to PUBLIC nothing will happen. I'd suggest you would
leave public alone. Simply don't grant privilege to public.

Sybrand Bakker
Senior Oracle DBA