Re: What can do a user (where can he do what ;-) ??)

From: Pete Finnigan <plsql_at_petefinnigan.com>
Date: Thu, 6 May 2004 10:41:56 +0100
Message-ID: <+3aTX6AkhgmARxHY@peterfinnigan.demon.co.uk>

Hi,

Have a look at my script find_all_privs.sql on my web site at http://www.petefinnigan.com/tools.htm - it shows all privileges for a user and shows roles, system and object privs and prints out the hierarchy via roles - here is an example for he user outln:

find_all_privs: Release 1.0.6.0.0 - Production on Thu May 06 10:40:47 2004
Copyright (c) 2004 PeteFinnigan.com Limited. All rights reserved.

NAME OF USER TO CHECK                 [ORCL]: outln
OUTPUT METHOD Screen/File                [S]: 
FILE NAME FOR OUTPUT              [priv.lst]: 

OUTPUT DIRECTORY [DIRECTORY or file (/tmp)]:

User => OUTLN has been granted the following privileges

---

        ROLE => CONNECT which contains =>
                SYS PRIV => ALTER SESSION grantable => NO
                SYS PRIV => CREATE CLUSTER grantable => NO
                SYS PRIV => CREATE DATABASE LINK grantable => NO
                SYS PRIV => CREATE SEQUENCE grantable => NO
                SYS PRIV => CREATE SESSION grantable => NO
                SYS PRIV => CREATE SYNONYM grantable => NO
                SYS PRIV => CREATE TABLE grantable => NO
                SYS PRIV => CREATE VIEW grantable => NO
        ROLE => RESOURCE which contains =>
                SYS PRIV => CREATE CLUSTER grantable => NO
                SYS PRIV => CREATE INDEXTYPE grantable => NO
                SYS PRIV => CREATE OPERATOR grantable => NO
                SYS PRIV => CREATE PROCEDURE grantable => NO
                SYS PRIV => CREATE SEQUENCE grantable => NO
                SYS PRIV => CREATE TABLE grantable => NO
                SYS PRIV => CREATE TRIGGER grantable => NO
                SYS PRIV => CREATE TYPE grantable => NO
        SYS PRIV => EXECUTE ANY PROCEDURE grantable => NO
        SYS PRIV => UNLIMITED TABLESPACE grantable => NO
        TABLE PRIV => EXECUTE object => SYS.OUTLN_PKG grantable => NO

PL/SQL procedure successfully completed.

For updates please visit http://www.petefinnigan.com/tools.htm

SQL> hth

kind regards

Pete

-- 
Pete Finnigan
email:pete_at_petefinnigan.com
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.

Received on Thu May 06 2004 - 04:41:56 CDT