From: "robertgilland" <robert_gilland@...>

> >
> > It's not as bad as it probably seems to log everyone in as someone
> > else. You can still use a surrogate name and still connect everyone
> > through that user. You will need to issue a batch of grant
> statements
> > but I would think there is otherwise little if any code change.
> >
> > Adam
> >
>
> This is frightening. This means we have to write a procedure, that
> checks if the new user exists, if not add him, then go through all
> current Metadata objects and add GRANT access to the new user.
>
> On top of this whenever we create a new Metadata object we have to add
> GRANT to the new user as well.
>
> If I don't run these GRANT commands. Does this mean the new user
> cannot read/write to any Tables/Views?

It's not as bad as it seems. It doesn't seem like you are too concerned with
granting certain rights to certain users, so I would just grant all to
public and be done with it. That way, all current and new users have rights
without having to do anything else.

Woody (TMW)