From oracle-l-bounce@freelists.org Fri Apr 29 09:03:38 2005 Return-Path: Received: from air891.startdedicated.com (root@localhost) by orafaq.com (8.12.10/8.12.10) with ESMTP id j3TE3c1i010012 for ; Fri, 29 Apr 2005 09:03:38 -0500 X-ClientAddr: 206.53.239.180 Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by air891.startdedicated.com (8.12.10/8.12.10) with ESMTP id j3TE3X4Z009996 for ; Fri, 29 Apr 2005 09:03:37 -0500 Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id ADFBA18A690; Fri, 29 Apr 2005 08:01:02 -0500 (EST) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 01384-02; Fri, 29 Apr 2005 08:01:02 -0500 (EST) Received: from turing (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 37FCC188E3C; Fri, 29 Apr 2005 08:01:02 -0500 (EST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=KrMwNoBuU50skhPuaAM9OIXy1qBw89RdxXj2fnY3QIROppYpiGs15btistg0i22Usv+hByY7kzu/sd1wiMjTaBMI9nLKfunBVCfuRb0z/w80kUXSIMUAKVOxFOJOQe8tYWmGc1+M//flK7uinuhK3fWDRW6U1rKCRDHr/e7d5VA= Message-ID: <68b128550504290559abe15e1@mail.gmail.com> Date: Fri, 29 Apr 2005 14:59:06 +0200 From: Vitalis Jerome To: Michael.Fleck@lvr.de Subject: Re: User rights Cc: oracle-l@freelists.org In-Reply-To: <4C8A1155526567458C3328A3B56EC00B02B501E9@msx-zv02.lvrintern.lvr.de> Mime-Version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Content-Disposition: inline References: <4C8A1155526567458C3328A3B56EC00B02B501E9@msx-zv02.lvrintern.lvr.de> X-archive-position: 19185 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-To: oracle-l-bounce@freelists.org X-original-sender: vitalisman@gmail.com Precedence: normal Reply-To: vitalisman@gmail.com X-list: oracle-l X-Virus-Scanned: by amavisd-new-20030616-p9 (Debian) at avenirtech.net X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on air891.startdedicated.com X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=ham version=2.63 On 4/29/05, Michael.Fleck@lvr.de wrote: > Hi list members, >=20 > we have some people in our departments, which do some user > administration. The employees of this department work with oracle > applications. Ths support people in the department want to know, which > access a user has to what tables, indexes etc. > Which role or system-rights do I have to grant to the support people in > the department. With DBA rights they get the right information. I tried > the roles SELECT_ANY_CATALOG and EXECUTE_ANY_CATALOG and the > SELECT_ANY_DICTIONARY right, but none of them worked. >=20 > Any ideas, which right I have to grant? >=20 > Best regards, > Michael Fleck=3D20 Hi Michael, Which queries do the support guys exactly use for this purpose? They can't only query dba_catalog since this won't tell them which objects a user can access. They must be using some queries against DBA_TAB_PRIVS and the like. If you can get their queries, it might be easier to find the right sufficient role or privileges. Regards, Jerome -- http://www.freelists.org/webpage/oracle-l