Re: How to find the grantees of a role
From: Vladimir M. Zakharychev <vladimir.zakharychev_at_gmail.com>
Date: Fri, 9 Jul 2010 02:08:56 -0700 (PDT)
Message-ID: <877cadb7-23d7-4a87-b958-e672513d3339_at_e5g2000yqn.googlegroups.com>
On Jul 9, 11:33 am, Peter Kallweit <p_kallw..._at_arcor.de> wrote:
> Hi %,
>
> I have a user to which a role has been granted with admin option. So
> this user now can grant/revoke this role to/from other users.
>
> But how can this user find out, to which other users this role is
> currently granted?
>
> As a DBA, one would use the view DBA_ROLE_PRIVS. But what, if the access
> to the dba_xxx views is not available? I'm missing a view like
> ALL_ROLE_PRIVS (not found in 9i, 10g, 11g).
>
> Any ideas?
>
> Best regards
> Peter
Date: Fri, 9 Jul 2010 02:08:56 -0700 (PDT)
Message-ID: <877cadb7-23d7-4a87-b958-e672513d3339_at_e5g2000yqn.googlegroups.com>
On Jul 9, 11:33 am, Peter Kallweit <p_kallw..._at_arcor.de> wrote:
> Hi %,
>
> I have a user to which a role has been granted with admin option. So
> this user now can grant/revoke this role to/from other users.
>
> But how can this user find out, to which other users this role is
> currently granted?
>
> As a DBA, one would use the view DBA_ROLE_PRIVS. But what, if the access
> to the dba_xxx views is not available? I'm missing a view like
> ALL_ROLE_PRIVS (not found in 9i, 10g, 11g).
>
> Any ideas?
>
> Best regards
> Peter
Well, the user can find out for which roles he is granted ADMIN OPTION from USER_ROLE_PRIVS, but there seem to be no way to find out to which users he granted these roles. Actually, DBA_ROLE_PRIVS does not say who granted particular role to the user either, and this is not really important as anyone with ADMIN OPTION for this role and role owner himself can revoke it regardless who granted it.
Regards,
Vladimir M. Zakharychev
Received on Fri Jul 09 2010 - 04:08:56 CDT