Re: V$ tables

From: Charlie Edwards <Charlie3101_at_hotmail.com>
Date: 28 Jun 2002 06:47:37 -0700
Message-ID: <db479d88.0206280547.6dea6ec1@posting.google.com>

"Hemant K Chitale" <hkchital_nospam_at_singnet_nospam.com.sg> wrote in message news:<aenhhq$khr$1_at_clematis.singnet.com.sg>...
> Ask the DBA to post his reasoning to this news-group.
> The gang here should be able to satisfy him that
> access to other V$ views pose no security risks
> [and give him a good piece/peace of mind as well]
>
> Hemant
>

Well I've had my meeting with the DBA ...

Me : I would like developers to be ganted SELECT_CATALOG_ROLE, please.
DBA: I'm not prepared to give you that.
Me : Can you explain why please?
DBA: Security issues.
Me : What security issues?
DBA: There are views in SELECT_CATALOG_ROLE that compromise security

of the system.
Me : You surprise me. Which views are those? DBA: I am not prepared to tell you, as this may compromise security too.

At this point things started to get a little heated, but I won't go into the sordid details.

Now I've been thinking about this for some time. The only thing I can think of is that SELECT_CATALOG_ROLE has access to DBA_USERS, which contains the hashed password. Is there a security issue here or in any of the views (below)?

Thanks

CE

CODE_PIECES
CODE_SIZE

DBA_2PC_NEIGHBORS
DBA_2PC_PENDING
DBA_AUDIT_EXISTS
DBA_AUDIT_OBJECT
DBA_AUDIT_SESSION
DBA_AUDIT_STATEMENT
DBA_AUDIT_TRAIL
DBA_CATALOG
DBA_CLU_COLUMNS
DBA_CLUSTER_HASH_EXPRESSIONS
DBA_CLUSTERS
DBA_COL_COMMENTS
DBA_COL_PRIVS
DBA_CONS_COLUMNS
DBA_CONSTRAINTS
DBA_DATA_FILES
DBA_DB_LINKS
DBA_DEPENDENCIES
DBA_ERRORS
DBA_EXP_FILES
DBA_EXP_OBJECTS
DBA_EXP_VERSION
DBA_EXTENTS
DBA_FREE_SPACE
DBA_FREE_SPACE_COALESCED
DBA_FREE_SPACE_COALESCED_TMP1
DBA_FREE_SPACE_COALESCED_TMP2
DBA_IND_COLUMNS
DBA_INDEXES
DBA_JOBS
DBA_JOBS_RUNNING
DBA_OBJ_AUDIT_OPTS
DBA_OBJECT_SIZE
DBA_OBJECTS
DBA_PRIV_AUDIT_OPTS
DBA_PROFILES
DBA_RCHILD
DBA_REFRESH
DBA_REFRESH_CHILDREN
DBA_RGROUP
DBA_ROLE_PRIVS
DBA_ROLES
DBA_ROLLBACK_SEGS
DBA_SEGMENTS
DBA_SEQUENCES
DBA_SNAPSHOT_LOGS
DBA_SNAPSHOTS
DBA_SOURCE
DBA_STMT_AUDIT_OPTS
DBA_SYNONYMS
DBA_SYS_PRIVS
DBA_TAB_COLUMNS
DBA_TAB_COMMENTS
DBA_TAB_PRIVS
DBA_TABLES
DBA_TABLESPACES
DBA_TRIGGER_COLS
DBA_TRIGGERS
DBA_TS_QUOTAS
DBA_UPDATABLE_COLUMNS
DBA_USERS
DBA_VIEWS

DEFDEFAULTDEST
DEFERRCOUNT
DEFERROR
DEFSCHEDULE
DEFTRAN
DEFTRANDEST
ERROR_SIZE
FILEXT$
ORA_KGLR7_OBJECTS
PARSED_PIECES
PARSED_SIZE
PS1$
PSS1$

SM$AUDIT_CONFIG
SM$INTEGRITY_CONS
SM$TS_AVAIL
SM$TS_FREE
SM$TS_USED

SOURCE_SIZE
SYS_OBJECTS
SYSCATALOG_

V_$_LOCK
V_$ACCESS
V_$ARCHIVE
V_$BGPROCESS
V_$CIRCUIT
V_$COMPATIBILITY
V_$COMPATSEG
V_$CONTROLFILE
V_$DATABASE
V_$DATAFILE
V_$DB_OBJECT_CACHE
V_$DB_PIPES
V_$DBFILE
V_$DBLINK
V_$DISPATCHER
V_$ENABLEDPRIVS
V_$EVENT_NAME
V_$EXECUTION
V_$FILESTAT
V_$FIXED_TABLE
V_$FIXED_VIEW_DEFINITION
V_$INDEXED_FIXED_COLUMN
V_$INSTANCE
V_$LATCH
V_$LATCH_CHILDREN
V_$LATCH_MISSES
V_$LATCH_PARENT
V_$LATCHHOLDER
V_$LATCHNAME
V_$LIBRARYCACHE
V_$LICENSE
V_$LOCK
V_$LOCKED_OBJECT
V_$LOG
V_$LOG_HISTORY
V_$LOGFILE
V_$LOGHIST
V_$MTS
V_$MYSTAT
V_$OBJECT_DEPENDENCY
V_$OPEN_CURSOR
V_$PARAMETER
V_$PQ_SLAVE
V_$PQ_SYSSTAT
V_$PROCESS
V_$PWFILE_USERS
V_$QUEUE
V_$RECOVER_FILE
V_$RECOVERY_FILE_STATUS
V_$RECOVERY_LOG
V_$RECOVERY_STATUS
V_$REQDIST
V_$RESOURCE
V_$ROLLNAME
V_$ROLLSTAT
V_$ROWCACHE
V_$SESS_IO
V_$SESSION
V_$SESSION_CONNECT_INFO
V_$SESSION_CURSOR_CACHE
V_$SESSION_EVENT
V_$SESSION_WAIT
V_$SESSTAT
V_$SGA
V_$SGASTAT
V_$SHARED_POOL_RESERVED
V_$SHARED_SERVER
V_$SORT_SEGMENT
V_$SQL
V_$SQL_BIND_DATA
V_$SQL_BIND_METADATA
V_$SQL_CURSOR
V_$SQL_SHARED_MEMORY
V_$SQLAREA
V_$SQLTEXT
V_$SQLTEXT_WITH_NEWLINES
V_$STATNAME
V_$SYSSTAT
V_$SYSTEM_CURSOR_CACHE
V_$SYSTEM_EVENT
V_$SYSTEM_PARAMETER
V_$THREAD
V_$TIMER
V_$TRANSACTION
V_$TYPE_SIZE
V_$WAITSTAT

Received on Fri Jun 28 2002 - 08:47:37 CDT