Re: DBA role - Grant/Admin option

From: Anthony Hogan <ahogan-nospam-_at_iespana.es>
Date: Tue, 18 Jun 2002 10:20:28 +0000
Message-ID: <3D0F096C.80EFAAFB@iespana.es>

If you check out the DBA role you will find that one of the system privileges it includes is: GRANT ANY ROLE.

regards,
Anthony Hogan

Epicentre Team B Annecy wrote:
>
> Hello,
>
> I've noticed that it was possible to grant the DBA, RESOURCE roles from a
> simple user
> whereas this role hadn't been granted with ADMIN or GRANT OPTION!!
> This is what I tested: I created 2 users, TEST1 and TEST2, with only CONNECT
> role, and granted to TEST1
> the DBA role (from SYS), without the ''WITH GRANT OPTION'' clause.
> Then, I've been able to grant the DBA role to TEST2 from TEST1!!!
>
> Does anyone know why?
>
> Thanks.
> --
> Celine Armanet
> EPICENTRE
> carmanet_at_epicentre.fr
> Tel. : +33 04 50 09 7000
Received on Tue Jun 18 2002 - 05:20:28 CDT