Re: Another 11gr2 oddity...

From: Mark D Powell <Mark.Powell2_at_hp.com>
Date: Wed, 27 Jun 2012 13:17:03 -0700 (PDT)
Message-ID: <5ad9d6d8-8c47-4b2f-9f85-6287334c184a_at_googlegroups.com>

On Wednesday, June 27, 2012 7:07:24 AM UTC-4, Matthias Hoys wrote:
> On Wednesday, June 27, 2012 2:35:12 AM UTC+2, Noons wrote:
> > 11.2.0.3 upgraded from 10.2.0.3 via standard dbua:
> >
> > SQL> select * from dba_sys_privs
> > where grantee = 'RESOURCE'; 2
> >
> > GRANTEE
> > PRIVILEGE ADM
> > ------------------------------
> > ---------------------------------------- ---
> > RESOURCE CREATE
> > TRIGGER NO
> > RESOURCE CREATE
> > SEQUENCE NO
> > RESOURCE CREATE
> > CLUSTER NO
> > RESOURCE CREATE
> > TYPE NO
> > RESOURCE CREATE
> > PROCEDURE NO
> > RESOURCE CREATE
> > TABLE NO
> > RESOURCE CREATE
> > INDEXTYPE NO
> > RESOURCE CREATE
> > OPERATOR NO
> >
> > Original 10.2.0.3:
> >
> > SQL> select * from dba_sys_privs
> > where grantee = 'RESOURCE'; 2
> >
> > GRANTEE
> > PRIVILEGE ADM
> > ------------------------------
> > ---------------------------------------- ---
> > RESOURCE CREATE
> > VIEW NO
> > RESOURCE CREATE
> > TRIGGER NO
> > RESOURCE CREATE
> > SEQUENCE NO
> > RESOURCE CREATE
> > CLUSTER NO
> > RESOURCE CREATE
> > TYPE NO
> > RESOURCE CREATE
> > PROCEDURE NO
> > RESOURCE CREATE
> > TABLE NO
> > RESOURCE CREATE
> > INDEXTYPE NO
> > RESOURCE CREATE
> > OPERATOR NO
> >
> >
> > Notice anything missing in the 11.2.0.3 resource role after the
> > upgrade?
> > Ah yes, it's a "feature". Like, the size of a bus?
> > (...patience, Nuno, patience...)
>
> It's strange that they took only the CREATE VIEW privilege away... is this some kind of security measure?
>
> Matthias

I wish Oracle had treated the role the same way connect was treated, i.e., remove all privileges except create session.

IMHO -- Mark D Powell -- Received on Wed Jun 27 2012 - 15:17:03 CDT