Oracle Object Privileges

If we remove the public grants from a table, create a new group called
JDE_PUBLIC and re-add all privileges on the table to JDE_PUBLIC then when we
re-generate the table in JDE the grant is restored to PUBLIC and not
JDE_PUBLIC. Is there any way to change this? I've looked at document
OTI-00-0115 and I'm feeling kinda sceptical. Please tell me this isn't so.

Thanks

Colin

B7332 SP 17.1_I1
Intel/NT/2000/Oracle 8.1.7.1
FAT & WTS

Hi Colin
Unfortunately JDE grants everything to Public. I think whenever any objects is regenerated through JDE then JDE drops it and then recreate it( Drop means that all the priviledes related to the objects will also be gone and again granted to Public).

However it will no hurt application because application will be able to access the table now through Public instead of JDE_PUBLIC( However it hurts security of the database). There are 2 workaround to overcome this problem.

1. Whenever you generate the table. logon into the database and revoke all the privileges from *Public and grant it to JDE_PUblic.

2. Write a batch jobs ( You need access to Dba_tab_privs table) and check that if any table has been granted to Public then revoke and reassign it to JDE_Public.

Hope this help
Vivek Mohan

Thanks Vivek,

I was hoping this wasn't the case but we'll have to go ahead and create the
batch job to check the privileges. I did call JDE on this and it's a much
requested SAR (#3278331). Even still they're not putting it in B9 but did
say it would be in some 'later' release.

Colin Dawes