欢迎光临
我们一直在努力

Oracle 视图 DBA_UNUSED_SYSPRIVS 官方解释,作用,如何使用详细说明

本站中文解释

Oracle视图DBA_UNUSED_SYSPRIVS用于列出未在帐户中使用的系统权限。它可以用来监视可能出现滥用的系统权限,并使数据库更安全。

使用方法:

1. 连接到SYSTEM用户,并执行以下查询:
SELECT Grantee, Privilege FROM DBA_UNUSED_SYSPRIVS;
2. 在结果中,可以看到具有特定权限,但它们未在许可的帐户中使用的帐户列表。可以查看Grantee列,以了解谁具有哪些未使用的权限。
3. 可以继续通过REVOKE语句撤消多余的权限,以使系统更安全,可以执行以下语句:
REVOKE FROM ;
其中是要收回的权限,是未使用的账户。

官方英文解释

DBA_UNUSED_SYSPRIVS lists the system privileges (without privilege grant paths) that are not used for the privilege analysis policies reported by the DBMS_PRIVILEGE_CAPTURE.GENERATE_RESULT procedure.

This view provides access to analyzed privilege records in SYS tables.

You must have the CAPTURE_ADMIN role to access this view.

Column Datatype NULL Description

CAPTURE

VARCHAR2(128)

NOT NULL

Name of a privilege analysis policy

USERNAME

VARCHAR2(128)

Name of the user whose privileges are reported

ROLENAME

VARCHAR2(128)

Name of the role whose unused privileges are reported (for ROLE type privilege analysis or ROLE AND CONTEXT privilege analysis)

SYS_PRIV

VARCHAR2(40)

Unused system privilege

ADMIN_OPTION

NUMBER

Indicates whether the privilege is granted with the ADMIN option:

  • 0 – Indicates that the privilege is granted without the ADMIN option

  • 1 – Indicates that the privilege is granted with the ADMIN option

RUN_NAME

VARCHAR2(128)

The name of the run during which the privilege was reported

See Also:

  • “DBA_UNUSED_SYSPRIVS_PATH” for privilege grant path information for unused system privileges

  • Oracle Database Security
    Guide
    for more information about privilege analysis

  • Oracle Database PL/SQL
    Packages and Types Reference
    for more information about the DBMS_PRIVILEGE_CAPTURE.GENERATE_RESULT procedure

赞(0)
【声明】:本博客不参与任何交易,也非中介,仅记录个人感兴趣的主机测评结果和优惠活动,内容均不作直接、间接、法定、约定的保证。访问本博客请务必遵守有关互联网的相关法律、规定与规则。一旦您访问本博客,即表示您已经知晓并接受了此声明通告。