Oracle-L: RE: Question related to security

From: Toepke, Kevin M <ktoepke_at_trilegiant.com>
Date: Wed, 05 Mar 2003 09:44:59 -0800
Message-ID: <F001.00560EE1.20030305094459@fatcity.com>

If you are a DBA you can

SELECT password FROM dba_users WHERE username = 'XXXXX; ALTER USER XXXXX identified BY temp_pass; CONNECT XXXXX/temp_pass
ALTER USER XXXXX IDENTIFIED BY VALUES 'zzzzz'; --Replace zzzzz with value from SELECT
GRANT SELECT ON ... If you script the alters & the connect the password should be changed for under 0.1 seconds!

Kevin

-----Original Message-----
Sent: Tuesday, March 04, 2003 4:05 PM
To: Multiple recipients of list ORACLE-L

Hi all -
I have an interesting problem at hand - we have a request from a developer that ask to access some tables owned by a user generated by third party app. Since I don't have the password for this user and system/sys do not have admin option on these tables, I can't grant select to the developer. Changing password for this app can be tricky and will be used as last resort. My question is is there anything else I can do to meet this request?

Thanks

Dennis

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Toepke, Kevin M
INET: ktoepke_at_trilegiant.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Wed Mar 05 2003 - 11:44:59 CST