Re: some sys tables available to all users?

Hello,

Please see what privileges and roles are granted to PUBLIC. Is there SELECT ANY TABLE? Are there grants on SYS tables?

Analyze what applications require those grants before removing them. F.e. TOAD may require access to SYS tables. Try to give those applications the grants and

remove them from PUBLIC.

Starting from V8 there is a parameter O7_DICTIONARY_ACCESSIBILITY. When set to FALSE, the SYS tables cannot be seen even if a user has SELECT ANY TABLE. Karen.

Verna Legaspi wrote:

> Hello,
>
> I created a new user which I intend to only have SELECT privs on a view of a
> table on another schema. I then just granted this user create session and
> select to the view. However, when I do a
> SELECT owner, table_name
> FROM all_tables;
>
> I see more than I expected to. As this supposedly limited user, I can do
> selects on sys.system_privilege_map, sys.audit_actions, etc. I also use
> TOAD and notice this user can also see some of the TOAD user's tables such
> as toad_plan_table.
>
> Is this normal? Is this safe?
>
> TIA,
> Verna
Received on Fri Jul 21 2000 - 00:00:00 CDT