Is there a privilege that can be assigned to one schema to allow it to modify, or drop and recreate a synonym in another schema?
If more detail is needed, it is a little convoluted, but here goes:
A developer created a schema for an 24 X 7 application. For security reasons, I have been asked to create another schema that has all the necessary roles and privileges to use these objects, without having complete control to drop all objects.
One of the objects created by the developer is a set of tables, say ConfigTable1 and ConfigTable2. On occaision, they need to update this table with a large data load. Since this is an always live system, and since they are worried about being able to fall back to the previous version of the data in case of error, that is the reason for ConfigTable1 and ConfigTable2.
While the application is using ConfigTable1, they can empty and load ConfigTable2, and then cutover to the new data. This cutover is done using a synonym called ConfigTable that points to the current version of the table for the application to use.
The problem goes back to the security issue and creating the user account. I am looking for a permission or privilege that can be granted to this "user" account that will allow it to drop and then recreate the synonym that is an object of the application owner account.
Told you it was convoluted. Any suggestions?
Terry
**************************
* General Disclaimer - Please read *
**************************
Please make sure your post is in the CORRECT forum, has a descriptive title, gives as much detail to the problem as possible, and has examples of expected results. This will enable me and others to help you faster...
If more detail is needed, it is a little convoluted, but here goes:
A developer created a schema for an 24 X 7 application. For security reasons, I have been asked to create another schema that has all the necessary roles and privileges to use these objects, without having complete control to drop all objects.
One of the objects created by the developer is a set of tables, say ConfigTable1 and ConfigTable2. On occaision, they need to update this table with a large data load. Since this is an always live system, and since they are worried about being able to fall back to the previous version of the data in case of error, that is the reason for ConfigTable1 and ConfigTable2.
While the application is using ConfigTable1, they can empty and load ConfigTable2, and then cutover to the new data. This cutover is done using a synonym called ConfigTable that points to the current version of the table for the application to use.
The problem goes back to the security issue and creating the user account. I am looking for a permission or privilege that can be granted to this "user" account that will allow it to drop and then recreate the synonym that is an object of the application owner account.
Told you it was convoluted. Any suggestions?
Terry
**************************
* General Disclaimer - Please read *
**************************
Please make sure your post is in the CORRECT forum, has a descriptive title, gives as much detail to the problem as possible, and has examples of expected results. This will enable me and others to help you faster...