Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: access to oracle $ tables in 9.2.0

RE: access to oracle $ tables in 9.2.0

From: Jacques Kilchoer <Jacques.Kilchoer_at_quest.com>
Date: Wed, 05 Mar 2003 14:33:16 -0800
Message-ID: <F001.005617FB.20030305143316@fatcity.com>


O7_DICTIONARY_ACCESSIBILITY was an init parameter as far back as 8.0, but in 9.0 and above the default has changed to FALSE instead of TRUE. Which is why, by default, you cannot read any table owned by SYS. System privilege SELECT ANY DICTIONARY (new in 9.0) will circumvent this "problem".

> -----Original Message-----
> From: Jared.Still_at_radisys.com [mailto:Jared.Still_at_radisys.com]
>
> From the Reference Manual:
>
> For example, if O7_DICTIONARY_ACCESSIBILITY = false, then the
> SELECT ANY TABLE privilege allows access to views or tables
> in any schema except the SYS schema (data dictionary tables
> cannot be accessed). The system privilege EXECUTE ANY
> PROCEDURE allows access on the procedures in any schema
> except the SYS schema.
> If this parameter is set to false and you need to access
> objects in the SYS schema, then you must be granted explicit
> object privilege. Also, the
> following roles, which can be granted to the database
> administrator, also
> allow access to dictionary objects: SELECT_CATALOG_ROLE,
> EXECUTE_CATALOG_ROLE, and DELETE_CATALOG_ROLE.
>
> "Adams, Matthew (GECP, MABG, 088130)" <MATT.ADAMS_at_APPL.GE.COM>
>
>
> Previously, an account with the DBA role could
> directly query oracle's internal tables
> (user$, seg$, ts$, etc). Now in 9.2.0.2,
> it appears we can't. Does anybody know
> what version this changed in or where (or if)
> it was documented. A quick search on
> MetaLink came up empty.

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.net
-- 
Author: Jacques Kilchoer
  INET: Jacques.Kilchoer_at_quest.com

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
Received on Wed Mar 05 2003 - 16:33:16 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US