Restrict scope of administration for user
Assuming I have 5 schemas and I create a user (ADMINUSER) to administer all 5 schemas. ADMINUSER will be given the *ANY* privileges like CREATE ANY TABLE, CREATE ANY TRIGGER, DROP ANY TABLE, DROP ANY SEQUENCE, etc. How can I implement a control on ADMINUSER so that whenever it issues a DDL, the statement must be for only any of the 5 schemas? Can I use an DDL event trigger for this? If so, how can I check against the schema that the DDL will be fired against?
Thanks in advance.
0