It seems that Oracle is coming out with a product, called "Database Vault" in the next few months to "rein in the DBAs" that will work with 10GR2: http://news.com.com/Oracle+wants+to+rein+in+database+admins/2100-7355_3- 6065127.html Oracle is planning on charging $20,000/CPU or $400/user. Oracle is primarily trying to cash on the SARBOX type of security compliance measures. I believe that this product should be free of charge, just like database access privileges, roles, etc., and included in the core product.. Amir -- //www.freelists.org/webpage/oracle-l