Hi Pete, Thanks for your links - some useful material here. I like your comment: "The whole process requires planning and forethought not quick fixes". This is exactly not what I've got here! Management tell me "I just need to tick a box to make my Excel spreadsheet read-only" and wonder why I can't just do the same for the database. - Charlotte On Thu, 16 Dec 2004 19:49 , Pete Finigan oracle_list@xxxxxxxxxxxxxxxxxxxxxxxx sent: Hi Charlotte, I don't know if these are of use to you or not but I wrote a few entries in my Oracle security weblog on this subject and similar. These are the links: "Creating read only users" - http://www.petefinnigan.com/weblog/archives/00000009.htm "creating read only tables" - http://www.petefinnigan.com/weblog/archives/00000033.htm "Allowing a user read-only access to stored procedure source code" - http://www.petefinnigan.com/weblog/archives/00000052.htm "Another good paper by Howard Rogers on read-only tables" - http://www.petefinnigan.com/weblog/archives/00000063.htm hth kind regards Pete -- Pete Finnigan (email:pete@xxxxxxxxxxxxxxxx) Web site: http://www.petefinnigan.com - Oracle security audit specialists Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html Book:Oracle security step-by-step Guide - see http://store.sans.org for details. -- //www.freelists.org/webpage/oracle-l --------------------------------- Do you Yahoo!? Send holiday email and support a worthy cause. Do good. -- //www.freelists.org/webpage/oracle-l