Integrating all individual privileges to a db role....

Question

Hi,
Assume that some individual privileges on db objects have been declared... sucha as:
grant insert on dept to user_a;
grant insert on emp to user_a;
grant select on emp to user_a ;
grant select on emp to user_b;
grant select on dept to user_b;
Is it possible to 'insert' these privileges in some newly created db role , by using objects of data dictionary.....???? For example , i want to create two roles user_a_role , user_b_role .. where:
user_a_role will contain all individual db privileges on db objects granted to user_a...e.t.c. How is the fastest way to do that...?????
After that , should i revoke these individual-atomic privileges defined ... as these written above...???
NOTE: I use Oracle 10g v.2
many thanks,
Simon

Answer 1

SQL> create role role_A;
Role created.
select 'grant '||privilege|| ' on ' || table_name || ' to role_A;' from dba_tab_privs where grantee='USER_A'
See the output
grant INSERT on DEPT to role_A;
grant SELECT on EMP to role_A;
grant INSERT on EMP to role_A;
do the same for user_b also
run the below command to revoke everything from user a and b;
for e.g...
select 'revoke ' || privilege || ' on ' || table_name || ' from ' || grantee ||';' from dba_tab_privs where grantee in ('USER_A', 'USER_B');
now once you revoke evrything, u can just simply assign a role to ur users.