Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.server -> Create user with no privs but CREATE SESSION and he can see things in SYS?

Create user with no privs but CREATE SESSION and he can see things in SYS?

From: <craig.drabik_at_gmail.com>
Date: 21 Aug 2006 11:45:51 -0700
Message-ID: <1156185951.715969.180300@i3g2000cwc.googlegroups.com> 





Hi all.  Probably a newbie question here, but anyways..  If I do:



CREATE USER test IDENTIFIED BY test;


GRANT CONNECT TO test;



And then connect to the DB as test in TOAD, I can see a bunch of things
in the SYS schema - things like AUDIT_ACTIONS, ODCI_SECOBJ$,
OLAPI_HISTORY, etc.  Probably about 30 tables in all.  Why is the user
allowed to see them?  Does it matter?  Can I just REVOKE SELECT ON...?



Thanks in advance...
Received on Mon Aug 21 2006 - 13:45:51 CDT












Original text of this message













  HOME |
  ASK QUESTION |
  ADD INFO |
  SEARCH |
  E-MAIL US