Re: Database Security Script...

From: <tday6_at_csc.com>
Date: Thu, 18 Oct 2001 05:46:54 -0700
Message-ID: <F001.003AE842.20011018053519@fatcity.com>

Set spooling as you need it -

---

set linesize 132 pagesize 66 verify off
ttitle "List Grants for User or Role "&&1 skip 2 column name heading 'Name'
column role heading 'Role'
column tname heading 'Table'
column priv heading 'Privilege'
select
substr(o.username,1,8) name,

o.granted_role role,
t.table_name tname,
t.privilege priv

from user_role_privs o,
user_tab_privs t
where
o.granted_role=t.grantee
order by 1,3,2
/

select o.granted_role role,
s.privilege priv
from
role_sys_privs s,
user_role_privs o
where
o.granted_role=s.role
/

select username name,
privilege priv
from
user_sys_privs
/

---

                                                                                            

                    Anjan                                                              
    
                    Thakuria             To:     Multiple recipients of list ORACLE-L  
    
                    <anjan.thakur        <ORACLE-L_at_fatcity.com>                        
    
                    ia                   cc:                                           
    
                    @eds.com>            Subject:     Database Security Script...      
    
                    Sent by: root                                                      
    
                                                                                       
    
                                                                                       
    
                    10/17/2001                                                         
    
                    05:25 PM                                                           
    
                    Please                                                             
    
                    respond to                                                         
    
                    ORACLE-L                                                           
    
                                                                                       
    
                                                                                       
    

Hello Listers,

Does anybody have a script to list out the roles, and system and object privileges granted to the users through these roles. Need to do a security audit
for a security baseline.

I would greatly appreciate it some one would post it on the list.

thanks

Anjan

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Anjan Thakuria
  INET: anjan.thakuria_at_eds.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).


-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: tday6_at_csc.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Thu Oct 18 2001 - 07:46:54 CDT