RE: [Q] "execute any procedure" security risk?

From: Goulet, Dick <DGoulet_at_vicr.com>
Date: Wed, 2 Mar 2005 16:21:21 -0500
Message-ID: <4001DEAF7DF9BD498B58B45051FBEA65022E07EF@25exch1.vicorpower.vicr.com>

I do not grant execute any, select_catalog_role, or execute_catalog_role to anyone, PERIOD.=20

-----Original Message-----

From: dba1 mcc [mailto:mccdba1_at_yahoo.com]=20 Sent: Wednesday, March 02, 2005 3:36 PM
To: oracle-l_at_freelists.org
Subject: [Q] "execute any procedure" security risk?

I checked ORACLE database we have on 9ir2. I found several users have "execute any procedure" right. Can anyone tell me what kind of security risk for "execute any procedure"?

If I already grant "select_catalog_role" and "execute_catalog_role", do I need grant "execute any procedure" privilege?

Thanks.

=09

        =09

__________________________________=20

Celebrate Yahoo!'s 10th Birthday!=20
Yahoo! Netrospective: 100 Moments of the Web=20 http://birthday.yahoo.com/netrospective/
--

http://www.freelists.org/webpage/oracle-l
--

http://www.freelists.org/webpage/oracle-l Received on Wed Mar 02 2005 - 16:31:01 CST