Object Level Security in Oracle 10g

Question

Hi gurus
Question regarding object level priviliges
1.Created a schema "TEST" and assigned following privileges
GRANT CREATE SESSION TO TEST;
GRANT CREATE ANY TABLE TO TEST;
2. created a table "Emp"
Able to alter the table without assigning ALTER ANY TABLE privilege to "TEST
Why?
3.Revoked CREATE ANY TABLE privilege
REVOKE CREATE ANY TABLE FROM TEST;
I am still able to alter the table "Emp" though not able to create any new table
Any thoughts on this please.
How can I restrict a user from ALTERing any of the existing tables?
Please help.
Thanks
newbie

Answer 1

Hi user570138!
I'm not sure about your problem with ALTER ANY TABLE but I think that in oracle the owner of a table is able to alter it and you can deny this. Therefor you can do the following:
1.) Create your TEST-Schema
2.) Create testtable in TEST-Schema
3.) Create a public synonym to testtable
4.) Give another user the privileges needed on testtable (e. g. SELECT, UPDATE, INSERT, DELETE)
Never let the owner account TEST-Schema work with testtable. This is the only way I know to prevent users altering tables.
Hope this helps!