Oracle-L: RE: Question related to security

From: Jay Hostetter <jhostetter_at_decommunications.com>
Date: Wed, 05 Mar 2003 06:19:17 -0800
Message-ID: <F001.005608FA.20030305061917@fatcity.com>

Why don't you use the trick for restoring the password?

select 'alter user APPUSER identified by values '''||password||''';' from sys.dba_users
where username = 'APPUSER';

Now, change the password for your third part vendor app, login as the user, grant the select on the tables (preferably to a role), log out, and change the password back to what it was.

Jay

>>> BoivinP_at_mar.dfo-mpo.gc.ca 03/05/03 07:34AM >>>
That would let the account see ANY table in the database, wouldn't it?

Pat.

-----Original Message-----
Sent: Tuesday, March 04, 2003 6:05 PM
To: Multiple recipients of list ORACLE-L

grant select any table to <your developer> /

Shouldn't this work?
Raj

Rajendra dot Jamadagni at espn dot com
Any views expressed here are strictly personal. QOTD: Any clod can have facts, having an opinion is an art !!

-----Original Message-----
Sent: Tuesday, March 04, 2003 4:05 PM
To: Multiple recipients of list ORACLE-L

Hi all -
I have an interesting problem at hand - we have a request from a developer that ask to access some tables owned by a user generated by third party app. Since I don't have the password for this user and system/sys do not have admin option on these tables, I can't grant select to the developer. Changing password for this app can be tricky and will be used as last resort. My question is is there anything else I can do to meet this request?

Thanks

Dennis

**DISCLAIMER
This e-mail message and any files transmitted with it are intended for the use of the individual or entity to which they are addressed and may contain information that is privileged, proprietary and confidential. If you are not the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received this communication in error, please notify the sender and delete this e-mail message. The contents do not represent the opinion of D&E except to the extent that it relates to their official business.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jay Hostetter
  INET: jhostetter_at_decommunications.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Wed Mar 05 2003 - 08:19:17 CST