开发者

Oracle newly created user privileges issue?

开发者 https://www.devze.com 2023-01-15 15:10 出处:网络
Does newly created user: create user John identified by secret; have some privileges? Or is there any oracle config for privileges of newly crea开发者_Go百科ted user? I need information about thi

Does newly created user:

create user John

identified by secret;

have some privileges? Or is there any oracle config for privileges of newly crea开发者_Go百科ted user? I need information about this topic.


Nope, no privileges.

select * from dba_sys_privs where grantee='JOHN';

select * from dba_tab_privs where grantee='JOHN';

select * from dba_role_privs where grantee='JOHN';


ammoQ is technically correct.

Given the user created as above does not have CREATE SESSION privilege, it cannot actually log on yet, or do anything else.

It is possible for another user with an appropriate CREATE ANY ... privilege to create objects (such as procedures, functions, triggers) under JOHN's schema/user. If so, then JOHN would automatically have privileges to drop those objects (but without a CREATE SESSION privilege, it would be difficult for them to achieve that).

From a security point of view, Oracle does have a bunch of privileges granted to PUBLIC. Once a user is created they do have a bunch of things they can do (eg select from views such as ALL_USERS).

0

精彩评论

暂无评论...
验证码 换一张
取 消