Re: Changing Oracle Database Password

From: <dasidwel_at_us.spammenot.oracle.com>
Date: 1998/02/05
Message-ID: <34da38f2.15791388@news.us.oracle.com>#1/1

On 05 Feb 98 21:18:45 +0100, "Lothar Armbruester" <lothar.armbruester_at_rheingau.netsurf.de> wrote:

>Jonathan Trifts schrieb am 05-Feb-98 14:44:04
>zum Thema "Re: Changing Oracle Database Password":
>
>>John hagen wrote:
>>>
>>> I am looking for a GUI tools/program which will allow non-tech uses to
>>> change they own password on a oracle database. If anyone has one or
>>> knows of one please write me at
>>> john.hagen_at_digital.com
>>>
>>> Thank You
 

>>Why not just save a copy of the script:
 

>>alter user <username> identified by <new password>
 

>>No you'right...it's not GUI, but even a non-technical person can type
>>the sentence.
>
>This works only if the users have the 'alter user' privilege, which they
>should not!

No you are wrong! You only need ALTER USER privilege to issue the command against a user other than yourself or to perform a privileged operation (such as changing your default tablespace etc.). You can try the following:
create a new user with only connect role: SQL> GRANT CONNECT TO FRED IDENTIFIED BY FRED; Grant succeeded.

SQL> CONNECT FRED/FRED
Connected.

SQL> ALTER USER FRED IDENTIFIED BY NODDY; User altered.

SQL> ALTER USER FRED DEFAULT TABLESPACE TEMP; *
ERROR at line 1:
ORA-01031: insufficient privileges

SQL> ALTER USER SYSTEM IDENTIFIED BY NODDY; *
ERROR at line 1:
ORA-01031: insufficient privileges

SQL> SELECT * FROM SESSION_PRIVS; PRIVILEGE

---

CREATE SESSION
ALTER SESSION
CREATE TABLE
CREATE CLUSTER
CREATE SYNONYM
CREATE VIEW
CREATE SEQUENCE
CREATE DATABASE LINK 8 rows selected.

I think that proves my point.

>I wouldprefer this:
>
>grant connect to <username> identified by <password>;

Does not make any difference apart from the fact that this is pre-version 7 syntax.

>
>Hope that helps
>
>Lothar
>
>--
>Lothar Armbrüster | lothar.armbruester_at_rheingau.netsurf.de
>Schulstr. 12 | lothar.armbruester_at_t-online.de
>D-65375 Oestrich-Winkel |
>

David Sidwell
(disclaimer: views are mine and do not necessarily reflect those of my employer) Received on Thu Feb 05 1998 - 00:00:00 CST