Hi Rocky,
>> so i granted dba role to user2 but i dont want user2 to have "drop" privilege on any objects except his own objects.
Bb default, a user can only drop their own objects!
The DBA role is a superuser, I've never tried to revoke anything from it . . . I have not tried this by see if this works:
CODE
create userx identified by xxx;
grant dba to userx;
revoke drop any table from userx;
Otherwise you will have to name the privileges one-at-a time . . . .
***********************************************************
>> i dont want user2 to have "drop" privilege on any objects except his own objects.
You could also try this:
CODE
create userx identified by xxx;
grant select any table to userx;
grant update any table to userx;
grant insert any table to userx;