Enhancement request to remove public grants

Toad for Oracle
1

Hello All,

When creating toad feature objects the script will have public grants.
Can there be an option to include or exclude them?
I dont think it should be on the program to have toad list roles you want to list the grants too but I will always have to remember to remove them in the script when running it.

I know its little but Im sure you noticed I am needy.

Thanks
Dave

2

Which Toad feature objects are you referring to?

I think we have an option for public grants on some of them....

3

The Space manager and I am setting up Team coding and it was going to do public grants.

4

Hi Dave,

I can see why you might want this for space manager.

Next beta will allow you to specify who to grant to (or nobody)

image
image975×704 44.5 KB

But....why wouldn't you want public grants for Team Coding? If Team Coding objects aren't granted to some users, then those users would effectively not have Team Coding installed, which kind of defeats the purpose of using Team Coding at all. What am I missing?

5

Hey John,
For team coding, I see it being on the person or team installing Team Coding ensure the users that need access have access and the ones that dont do not have access.
This may be limited to specific organizations but any privs granted to public is a STIG violation.

Rule Title:
Object permissions granted to PUBLIC must be restricted.
Fix Text:
Revoke any privileges granted to PUBLIC for objects that are not owned by Oracle product accounts.

Its easy enough to remove them after building the objects or not grant them out the gate.

These are all a 1 time thing when building them so its not a I need this.

Thanks
Dave

1 Like