Thanks, Jacques.
I stand corrected.
We leave O7_DICTIONARY_ACCESSIBILITY to FALSE in all 9i databases, and I did not test the
connectivity with it set to TRUE prior to my post.
Now, I will remember that !!
Cheers!
- Kirti
- Jacques Kilchoer <Jacques.Kilchoer_at_quest.com> wrote:
> The O7_DICTIONARY_ACCESSIBILITY parameter DOES affect database =
> connectivity.
> If O7_DICTIONARY_ACCESSIBILITY =3D TRUE,
> then I can say
> connect sys/password without the "as sysdba"
> If O7_DICTIONARY_ACCESSIBILITY =3D FALSE, then I CANNOT
> connect sys/password without the "as sysdba"
>
> See example on SunOS 9.2
>
> SQL> connect system
> Enter password:=20
> Connected.
> SQL> select a.instance_name, b.name as database_name
> 2 from v$instance a, v$database b ;
> INSTANCE_NAME DATABASE_
> ---------------- ---------
> sdu2920a SDU2920A
> SQL> show parameter O7_DICTIONARY_ACCESSIBILITY
> NAME TYPE VALUE
> ------------------------------------ ----------- =
> ------------------------------
> O7_DICTIONARY_ACCESSIBILITY boolean FALSE
> SQL> connect sys
> Enter password:=20
> ERROR:
> ORA-28009: connection to sys should be as sysdba or sysoper
> Warning: You are no longer connected to ORACLE.
> SQL> exit
>
> irvspcu01 # export ORACLE_SID=3Dsdu2920b
> irvspcu01 # sqlplus /nolog
> SQL*Plus: Release 9.2.0.4.0 - Production on Thu Feb 5 10:40:13 2004
> Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
> SQL> connect system
> Enter password:=20
> Connected.
> SQL> select a.instance_name, b.name as database_name
> 2 from v$instance a, v$database b ;
> INSTANCE_NAME DATABASE_
> ---------------- ---------
> sdu2920b SDU2920B
> SQL> show parameter O7_DICTIONARY_ACCESSIBILITY
> NAME TYPE VALUE
> ------------------------------------ ----------- =
> ------------------------------
> O7_DICTIONARY_ACCESSIBILITY boolean TRUE
> SQL> connect sys
> Enter password:=20
> Connected.
> SQL>=20
>
> > -----Original Message-----
> > Kirtikumar Deshpande
> >=20
> > Sorry, I could not follow what's said here, but it is FALSE !! ;) =20
> >=20
> > That parameter only affects 'select any table' system=20
> > privilege, which, btw, defaults to FALSE in=20
> > to prevent users with 'select any table' from accessing SYS=20
> > owned tables. Setting it to TRUE is
> > required if such access is to be allowed.=20
> >=20
> > It does not affect database connectivity. =20
> >=20
> >=20
Do you Yahoo!?
Yahoo! Finance: Get your refund fast by filing online.
http://taxes.yahoo.com/filing.html
Please see the official ORACLE-L FAQ:
http://www.orafaq.com
To unsubscribe send email to: oracle-l-request_at_freelists.org
put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Received on Fri Feb 06 2004 - 10:26:16 CST
