Re: How to find the grantees of a role
From: Peter Kallweit <p_kallweit_at_arcor.de>
Date: Mon, 12 Jul 2010 09:15:50 +0200
Message-ID: <4c3ac126$0$7655$9b4e6d93_at_newsspool1.arcor-online.net>
On 09.07.2010 16:28, Mark D Powell wrote:
> On Jul 9, 3:33 am, Peter Kallweit<p_kallw..._at_arcor.de> wrote:
>> Hi %,
>>
>> I have a user to which a role has been granted with admin option. So
>> this user now can grant/revoke this role to/from other users.
>>
>> But how can this user find out, to which other users this role is
>> currently granted?
>>
>> As a DBA, one would use the view DBA_ROLE_PRIVS. But what, if the access
>> to the dba_xxx views is not available? I'm missing a view like
>> ALL_ROLE_PRIVS (not found in 9i, 10g, 11g).
>>
>> Any ideas?
>>
>> Best regards
>> Peter
>
> Peter, the link below is to a short article that identifies most the
> Oracle security related views that you access to see who has access to
> what:
>
> How do I find out which users have the rights, or privileges, to
> access a given object ? http://www.jlcomp.demon.co.uk/faq/privileges.html
>
> See view dba_role_privs to see who has been granted a role.
>
> HTH -- Mark D Powell --
Date: Mon, 12 Jul 2010 09:15:50 +0200
Message-ID: <4c3ac126$0$7655$9b4e6d93_at_newsspool1.arcor-online.net>
On 09.07.2010 16:28, Mark D Powell wrote:
> On Jul 9, 3:33 am, Peter Kallweit<p_kallw..._at_arcor.de> wrote:
>> Hi %,
>>
>> I have a user to which a role has been granted with admin option. So
>> this user now can grant/revoke this role to/from other users.
>>
>> But how can this user find out, to which other users this role is
>> currently granted?
>>
>> As a DBA, one would use the view DBA_ROLE_PRIVS. But what, if the access
>> to the dba_xxx views is not available? I'm missing a view like
>> ALL_ROLE_PRIVS (not found in 9i, 10g, 11g).
>>
>> Any ideas?
>>
>> Best regards
>> Peter
>
> Peter, the link below is to a short article that identifies most the
> Oracle security related views that you access to see who has access to
> what:
>
> How do I find out which users have the rights, or privileges, to
> access a given object ? http://www.jlcomp.demon.co.uk/faq/privileges.html
>
> See view dba_role_privs to see who has been granted a role.
>
> HTH -- Mark D Powell --
Hi Mark,
the view dba_role_privs would do the job, but my user is not permitted to access it - dba_role_privs requires the role select_catalog_role.
For most dba_xxx views it exists a comparable all_xxx view, which everybody can access and which shows only data you are permitted to see. However, for dba_role_privs I'm missing the comparable all_role_privs.
Regards
Peter
Received on Mon Jul 12 2010 - 02:15:50 CDT