Oracle FAQ | Your Portal to the Oracle Knowledge Grid |
Home -> Community -> Usenet -> c.d.o.server -> Re: how to group synonyms ?
Daniel Morgan <damorgan_at_x.washington.edu> wrote:
> >
> > now, what about plugging the ALL_USERS hole?
> >
> > -- Mark Stock
>
> That is, in my opinion, one of the biggest holes in the Oracle security
> architecture. The system denies knowledge about schemas and objects but
> not users. Why? No good reason I am sure.
It seems especially grevious because even I can figure out how knowing the name of a user will assist in hacking. But for the life of me I can't figure out what a bad guy could do with the simple knowledge that a table exists.
Xho
-- -------------------- http://NewsReader.Com/ -------------------- "No classified documents left in Pentagon overnite"Received on Sat Nov 29 2003 - 15:14:21 CST