Difference between revisions of "Handy scripts"

From dbawiki
Jump to: navigation, search
Line 20: Line 20:
 
  from  sys.dba_sys_privs
 
  from  sys.dba_sys_privs
 
  where  (privilege like '% ANY %'
 
  where  (privilege like '% ANY %'
  or   privilege in ('BECOME USER', 'UNLIMITED TABLESPACE')
+
or     privilege in ('BECOME USER', 'UNLIMITED TABLESPACE')
  or   admin_option = 'YES')
+
or     admin_option = 'YES')
  and   grantee not in ('SYS', 'SYSTEM', 'OUTLN', 'AQ_ADMINISTRATOR_ROLE',
+
  and   grantee not in ('SYS', 'SYSTEM', 'OUTLN', 'AQ_ADMINISTRATOR_ROLE',
 
                       'DBA', 'EXP_FULL_DATABASE', 'IMP_FULL_DATABASE',
 
                       'DBA', 'EXP_FULL_DATABASE', 'IMP_FULL_DATABASE',
 
                       'OEM_MONITOR', 'CTXSYS', 'DBSNMP', 'IFSSYS',
 
                       'OEM_MONITOR', 'CTXSYS', 'DBSNMP', 'IFSSYS',

Revision as of 12:47, 5 September 2012

SQL

DBA privs tables

DBA_AQ_AGENT_PRIVS
DBA_COL_PRIVS
DBA_PRIV_AUDIT_OPTS
DBA_REPGROUP_PRIVILEGES
DBA_ROLE_PRIVS
DBA_RSRC_CONSUMER_GROUP_PRIVS
DBA_RSRC_MANAGER_SYSTEM_PRIVS
DBA_SYS_PRIVS
DBA_TAB_PRIVS
DBA_WM_SYS_PRIVS
DBA_WORKSPACE_PRIVS

badprivs.sql

select grantee, privilege, admin_option
from   sys.dba_sys_privs
where  (privilege like '% ANY %'
or     privilege in ('BECOME USER', 'UNLIMITED TABLESPACE')
or     admin_option = 'YES')
and    grantee not in ('SYS', 'SYSTEM', 'OUTLN', 'AQ_ADMINISTRATOR_ROLE',
                      'DBA', 'EXP_FULL_DATABASE', 'IMP_FULL_DATABASE',
                      'OEM_MONITOR', 'CTXSYS', 'DBSNMP', 'IFSSYS',
                      'IFSSYS$CM', 'MDSYS', 'ORDPLUGINS', 'ORDSYS',
                      'TIMESERIES_DBA')

shell

cmd