Re: sys gets a lot of its privs through roles?

SYS is granted the DBA role upon database creation.

The DBA role contains the entire set of system privileges. So SYS *does* have lots of system privileges, via that one roll. All of 'em, in fact.

Ownership of the data dictionary doesn't give you the right, per se, to create tables and tablespaces etc etc etc., so that doesn't obviate the need for privileges.

Regards
HJR "Joe Kazimierczyk" <joseph.kazimierczyk_at_bms.com> wrote in message news:3B581475.466254C9_at_bms.com...
> Doug C wrote:
> >
> > It appears to me that sys does not have an extremely large amount of
 directly
> > granted system privileges. Sys can grant itself anything of course, but
 quite a
> > few ditties come through roles. Just out of curiousity.. why is this?
 Why
> > doesn't it just have the whole enchilada?
>
>
> I'm just guessing, but since SYS owns the oracle dictionary
> tables and stored procedures, it just doesn't need system
> privileges. It can do almost anything to the database since
> it's the owner - it's other users who need privileges to do
> the same things. I see that it does have some of the 'ANY'
> privs so that sys can do things to objects owned by other
> users which makes sense.
Received on Thu Jul 26 2001 - 08:09:07 CDT