Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: Table access

Re: Table access

From: Pete Finnigan <oracle_list_at_peterfinnigan.demon.co.uk>
Date: Sun, 18 Jan 2004 14:34:27 -0800
Message-ID: <F001.005DD2BD.20040118143427@fatcity.com> 





Not exactly what you want but i have a script that goes in the opposite
direction. You supply a user / schema name and decide whether to write
output to screen or file and run it. An example is for OUTLN is:



NAME OF USER TO CHECK   [ORCL]: OUTLN



OUTPUT METHOD           [S/F]: S



FILE NAME FOR OUTPUT   [priv.lst]: 


OUTPUT DIRECTORY          [/tmp]: 


old 162:        lv_file_or_screen:='&&output_method';
new 162:        lv_file_or_screen:='S';
old 164:                open_file('&&file_name','&&output_dir');
new 164:                open_file('priv.lst','/tmp');
old 166:        get_privs('&&user_to_find',lv_tabs);
new 166:        get_privs('OUTLN',lv_tabs);




..USER => OUTLN has ROLE CONNECT which contains =>

.....SYS PRIV =>ALTER SESSION grantable => NO

.....SYS PRIV =>CREATE CLUSTER grantable => NO

.....SYS PRIV =>CREATE DATABASE LINK grantable => NO

.....SYS PRIV =>CREATE SEQUENCE grantable => NO

.....SYS PRIV =>CREATE SESSION grantable => NO

.....SYS PRIV =>CREATE SYNONYM grantable => NO

.....SYS PRIV =>CREATE TABLE grantable => NO

.....SYS PRIV =>CREATE VIEW grantable => NO

..USER => OUTLN has ROLE RESOURCE which contains =>

.....SYS PRIV =>CREATE CLUSTER grantable => NO

.....SYS PRIV =>CREATE INDEXTYPE grantable => NO

.....SYS PRIV =>CREATE OPERATOR grantable => NO

.....SYS PRIV =>CREATE PROCEDURE grantable => NO

.....SYS PRIV =>CREATE SEQUENCE grantable => NO

.....SYS PRIV =>CREATE TABLE grantable => NO

.....SYS PRIV =>CREATE TRIGGER grantable => NO

.....SYS PRIV =>CREATE TYPE grantable => NO

..SYS PRIV =>EXECUTE ANY PROCEDURE grantable => NO

..SYS PRIV =>UNLIMITED TABLESPACE grantable => NO

..TABLE PRIV =>EXECUTE table_name => OUTLN_PKG grantable => NO




PL/SQL procedure successfully completed.



SQL> 


As you can see it gives hierarchical privileges through roles etc, for
roles, system privs, and object privs. Have a look at it, it may help
you. Its called find_all_privs.sql and is on my website at 
http://www.petefinnigan.com/tools.htm hope this helps



kind regards



Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Pete Finnigan
  INET: oracle_list_at_peterfinnigan.demon.co.uk

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


Received on Sun Jan 18 2004 - 16:34:27 CST












Original text of this message













  HOME |
  ASK QUESTION |
  ADD INFO |
  SEARCH |
  E-MAIL US