Home » RDBMS Server » Security » DBUSER rights and role (Oracle 10.2.0.4.0 ,windows 2003 32 Bits)
DBUSER rights and role [message #584867] Mon, 20 May 2013 02:01 Go to next message
nilesh_pawaskar
Messages: 16
Registered: April 2012
Location: Mumbai
Junior Member
Dear all,

I used to find out locked table and session from database with the help of below mention query with SYS user but i want to hand over the user session kill role to location level IT person so i have created one user in database named as rab and i have given "select any table,alter session and Grant dba to that rab user,but with the help of that user they wiil drop and delete any table also (as with this user they have to only find the locked object and kill that sesion) ,so can you pls help me as which rights and role i have to gave for this user.

Pls find the mentioned query

col owner format a12
col object_name format a25
col ORACLE_USERNAME format a15
col OS_USER_NAME format a15
col OBJECT_TYPE format a15
set lines 140

select l.OBJECT_ID,o.owner,o.OBJECT_NAME,o.OBJECT_TYPE,SESSION_ID,ORACLE_USERNAME,OS_USER_NAME,LOCKED_MODE
from v$locked_object l,dba_objects o
where l.OBJECT_ID=o.OBJECT_ID

Regards,
NIlesh
Re: DBUSER rights and role [message #584868 is a reply to message #584867] Mon, 20 May 2013 02:08 Go to previous messageGo to next message
Michel Cadot
Messages: 58954
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
1/ It is not clear what privileges you want or actions you want to do.
2/ It is not clear what is your problem; locks are normal in databases.
3/ Do NOT use SYS for something that can be done with another account. SYSTEM or, better, and dba account can execute your query, so use them not SYS.

Regards
Michel
Re: DBUSER rights and role [message #593336 is a reply to message #584868] Thu, 15 August 2013 12:50 Go to previous messageGo to next message
8939513598$
Messages: 103
Registered: July 2013
Location: chennai
Senior Member
Hi Michel, Whether granting DBA role to non-sys user is a risk?
Re: DBUSER rights and role [message #593340 is a reply to message #593336] Thu, 15 August 2013 13:00 Go to previous message
Michel Cadot
Messages: 58954
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator
Yes it is, just have a look at the privileges granted to DBA role.

Regards
Michel
Previous Topic: about exp_full_database
Next Topic: user_history$ view
Goto Forum:
  


Current Time: Mon Sep 01 17:48:27 CDT 2014

Total time taken to generate the page: 0.05794 seconds