RE: OEM permissions

From: <Stephen.Lee_at_DTAG.Com>
Date: Thu, 18 Dec 2003 06:24:28 -0800
Message-ID: <F001.005DA513.20031218062428@fatcity.com>

Wouldn't this allow viewing DBA_USERS?
I haven't tried this myself, but it seems that I could set up another oracle instance, create a user identified by values, then create database link.

> -----Original Message-----
>
> We have a new manager that wants his group to use OEM for development
> access, as an alternative to Toad. He has requested a special
> Oracle userid
> with the following grants:
> SELECT_CATALOG_ROLE
> SELECT ANY DICTIONARY
> SELECT ANY TABLE
>
> Does this seem reasonable for OEM? The manager is responsible
> for the data
> in the database, so I don't see a problem with him viewing
> the data. There
> are few database links, and I'll be reviewing them. Any ideas on what
> mischief could occur? Thanks.
>
> Dennis Williams
> DBA
> Lifetouch, Inc.
> dwilliams_at_lifetouch.com
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: DENNIS WILLIAMS
> INET: DWILLIAMS_at_LIFETOUCH.COM
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: <Stephen.Lee_at_DTAG.Com
  INET: Stephen.Lee_at_DTAG.Com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Thu Dec 18 2003 - 08:24:28 CST