A role is automatically getting DML privileges for tables under a schema even though the current and future privileges are revoked

404

nekkanti009

posted on 06 Mar 20

Enjoy great content like this and a lot more !

Signup for a free account to write a post / comment / upvote posts. Its simple and takes less than 5 seconds




nVector09-Mar-20

Were you able to find out what’s causing this ?

nekkanti00916-Mar-20

Yes, i was able to figure the root cause for this. I was revoking the privileges at database level but the dml privileges were granted to a role at schema level a while back and looks like schema level privileges take precedence compared to database level privileges and hence the objects were getting dml privileges when a new table/view is created. Once i revoked those current & future dml grants at schema level, the issue was taken care of.

nVector16-Mar-20

Interesting. Thank you for posting the answer. It will be helpful to the community

nekkanti00917-Mar-20

My pleasure, learned it hard that way but am glad to be able to figure out.