# Enhancement request to remove public grants

**URL:** <https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237>\
**Category:** Toad for Oracle & DevOps Toolkit\
**Created:** [November 22, 2024, 9:24pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237 "2024-11-22T21:24:11Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Dave\_H2](https://sea1.discourse-cdn.com/quest/user_avatar/forums.toadworld.com/dave_h2/32/17724_2.png) [@Dave\_H2](https://forums.toadworld.com/u/Dave_H2)\
**Post date:** [November 22, 2024, 9:24pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237/1 "2024-11-22T21:24:11Z")

</div>

Hello All,

When creating toad feature objects the script will have public grants.  
Can there be an option to include or exclude them?  
I dont think it should be on the program to have toad list roles you want to list the grants too but I will always have to remember to remove them in the script when running it.

I know its little but Im sure you noticed I am needy.

Thanks  
Dave

---

<div class="post-metadata">

**Author:** ![JohnDorlon](https://sea1.discourse-cdn.com/quest/user_avatar/forums.toadworld.com/johndorlon/32/9997_2.png) [@JohnDorlon](https://forums.toadworld.com/u/JohnDorlon)\
**Post date:** [November 22, 2024, 9:36pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237/2 "2024-11-22T21:36:05Z")

</div>

Which Toad feature objects are you referring to?

I think we have an option for public grants on some of them....

---

<div class="post-metadata">

**Author:** ![Dave\_H2](https://sea1.discourse-cdn.com/quest/user_avatar/forums.toadworld.com/dave_h2/32/17724_2.png) [@Dave\_H2](https://forums.toadworld.com/u/Dave_H2)\
**Post date:** [November 25, 2024, 1:09pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237/3 "2024-11-25T13:09:02Z")

</div>

The Space manager and I am setting up Team coding and it was going to do public grants.

---

<div class="post-metadata">

**Author:** ![JohnDorlon](https://sea1.discourse-cdn.com/quest/user_avatar/forums.toadworld.com/johndorlon/32/9997_2.png) [@JohnDorlon](https://forums.toadworld.com/u/JohnDorlon)\
**Post date:** [December 3, 2024, 6:40pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237/4 "2024-12-03T18:40:48Z")

</div>

Hi Dave,

I can see why you might want this for space manager.

Next beta will allow you to specify who to grant to (or nobody)

 ![image](https://global.discourse-cdn.com/quest/original/3X/e/6/e62bdb228c1be3a8a35300636f0f4009d409153a.png)

But....why wouldn't you want public grants for Team Coding? If Team Coding objects aren't granted to some users, then those users would effectively not have Team Coding installed, which kind of defeats the purpose of using Team Coding at all. What am I missing?

---

<div class="post-metadata">

**Author:** ![Dave\_H2](https://sea1.discourse-cdn.com/quest/user_avatar/forums.toadworld.com/dave_h2/32/17724_2.png) [@Dave\_H2](https://forums.toadworld.com/u/Dave_H2)\
**Post date:** [December 4, 2024, 12:52pm UTC](https://forums.toadworld.com/t/enhancement-request-to-remove-public-grants/60237/5 "2024-12-04T12:52:20Z")

</div>

Hey John,  
For team coding, I see it being on the person or team installing Team Coding ensure the users that need access have access and the ones that dont do not have access.  
This may be limited to specific organizations but any privs granted to public is a STIG violation.

* * *

## **Rule Title:** Object permissions granted to PUBLIC must be restricted. Fix Text: Revoke any privileges granted to PUBLIC for objects that are not owned by Oracle product accounts.

Its easy enough to remove them after building the objects or not grant them out the gate.

These are all a 1 time thing when building them so its not a I need this.

Thanks  
Dave