Re: Impersonate a Oracle User

From: Martin <martino.pavone_at_cezannesw.com>
Date: Fri, 9 Sep 2005 17:12:01 +0200
Message-ID: <iGhUe.18424$nT3.16571@tornado.fastwebnet.it>

You got what I want.
I'm not an hacker, I just want to implement a business case.

Do you remember the command to switch to another user without knowing the password?

Thanks in advance.

Martin

"Mark D Powell" <Mark.Powell_at_eds.com> wrote in message news:1126194216.815098.165340_at_g14g2000cwa.googlegroups.com...
>I was thinking what Martin probably wants to do is switch to using
> another user id without knowing the password. A DBA has been able to
> do this from at least version 7 to 9.2 and probably in 10g and 6.
>
> I have posted on how to create users in a new database with their
> current passwords on metalink and I made a quick search here to see if
> I have posted this in the past. Instead I found where Tom Kyte posted
> the code.
>
> http://groups.google.com/group/comp.databases.oracle.misc/browse_frm/thread/c308416aad70a3eb/2cb363debd4d832c?lnk=st&q=change+user+group:comp.databases.oracle.*+author:Mark+author:D+author:Powell&rnum=3&hl=en#2cb363debd4d832c
>
> Only a DBA privileged user can do this so I do not think it is a
> significant security issue.
>
> HTH -- Mark D Powell --
>
Received on Fri Sep 09 2005 - 10:12:01 CDT