RE: Truncate another users table

  • From: "Goulet, Dick" <DGoulet@xxxxxxxx>
  • To: <lhahn_60@xxxxxxxxx>, "Bobak, Mark" <Mark.Bobak@xxxxxxxxxxxxxxx>, <Oracle-L@xxxxxxxxxxxxx>
  • Date: Fri, 3 Dec 2004 15:08:15 -0500

Well you could grant the user delete priviledges on the table.  If you
can delete from it you can truncate it.=20


Dick Goulet
Senior Oracle DBA
Oracle Certified 8i DBA
-----Original Message-----
From: Larry Hahn [mailto:lhahn_60@xxxxxxxxx]=20
Sent: Friday, December 03, 2004 3:01 PM
To: Bobak, Mark; Oracle-L@xxxxxxxxxxxxx
Subject: RE: Truncate another users table

Mark,

I agree that would work better and be more secure. But the
actual truncate code is buried in the vendors code. It is
part of a bigger process that I cant get changed at the
moment.=20

I am looking for a resolution in the mean time.

Larry

--- "Bobak, Mark" <Mark.Bobak@xxxxxxxxxxxxxxx> wrote:

> Larry,
>=20
> Synonyms don't work on DDL statements, as you discovered.
>=20
> However, rather than granting a user DROP ANY TABLE,
> which
> it seems to me could be easily misused or abused, why not
> do:
>=20
> As user1:
> create function truncate_the_table as
> begin
>   execute immediate 'truncate table this_table';
> end;
> /
> grant execute on truncate_the_table to user2;
>=20
> As user2:
>=20
> exec truncate_the_table;
>=20
> That may be a better solution for you....
>=20
>=20
> -Mark
>=20
> > -----Original Message-----
> > From: oracle-l-bounce@xxxxxxxxxxxxx
> > [mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of
> Larry Hahn
> > Sent: Friday, December 03, 2004 2:43 PM
> > To: Oracle-L@xxxxxxxxxxxxx
> > Subject: Truncate another users table
> >=20
> >=20
> > List,
> >=20
> > I am running version 8.1.7 on Sun.
> >=20
> > I am trying to allow a user (A) to truncate another
> users
> > (B) table. I have already given the DROP ANY TABLE
> right to
> > A, and made a public synonym for the table owned by B.=20
> >=20
> > I can't do the truncate if I just give the table name,
> but
> > if I put the owner first (truncate table A.<tablename>)
> it
> > works. What have I missed?
> >=20
> > Because the truncate command that I ultimately need to
> run
> > is buried in the vendors code, I am not able to create
> and
> > execute the stored procedure that I have seen suggested
> > here on the list in the past.=20
> >=20
> > Thanks in advance for any help.
> >=20
> > Larry Hahn
> >=20
> >=20
> >     =09
> > __________________________________=20
> > Do you Yahoo!?
> > Send holiday email and support a worthy cause. Do good.
> > http://celebrity.mail.yahoo.com
> > --
> > //www.freelists.org/webpage/oracle-l
> >=20
>=20


=3D=3D=3D=3D=3D



        =09
__________________________________=20
Do you Yahoo!?=20
Take Yahoo! Mail with you! Get it on your mobile phone.=20
http://mobile.yahoo.com/maildemo=20
--
//www.freelists.org/webpage/oracle-l
--
//www.freelists.org/webpage/oracle-l

Other related posts: