[Q] "execute any procedure" security risk?

From: dba1 mcc <mccdba1_at_yahoo.com>
Date: Wed, 2 Mar 2005 12:36:00 -0800 (PST)
Message-ID: <20050302203600.12495.qmail@web60801.mail.yahoo.com>

I checked ORACLE database we have on 9ir2. I found several users have "execute any procedure" right. Can anyone tell me what kind of security risk for "execute any procedure"?

If I already grant "select_catalog_role" and "execute_catalog_role", do I need grant "execute any procedure" privilege?

Thanks.                          

---

Celebrate Yahoo!'s 10th Birthday!
Yahoo! Netrospective: 100 Moments of the Web http://birthday.yahoo.com/netrospective/

--
http://www.freelists.org/webpage/oracle-l

Received on Wed Mar 02 2005 - 15:39:11 CST