O7_DICTIONARY_ACCESSIBILITY init parameter

这个参数表明是否限制访问sys object......

SQL> show parameter o7

NAME TYPE VALUE
------------------------------------ ----------- ------------------------------
O7_DICTIONARY_ACCESSIBILITY boolean FALSE
SQL> create user test1 identified by test1;

User created.

SQL> grant connect,select any table to test1;

Grant succeeded.

open others window to logon:

SQL> conn test1/test1@testdb
Connected.
SQL> select count(*) from user_tables;

COUNT(*)
----------
0

SQL> select count(*) from dba_tables;
select count(*) from dba_tables
*
ERROR at line 1:
ORA-00942: table or view does not exist

SQL> select count(*) from v$session;
select count(*) from v$session
*
ERROR at line 1:
ORA-00942: table or view does not exist;

Explicit grant privilege to test1;

SQL> grant select on dba_tables to test1;

Grant succeeded.

SQL> grant select on v_$session to test1;

Grant succeeded.

test1 window:

SQL> select count(*) from dba_tables;

COUNT(*)
----------
816

SQL> select count(*) from v$session;

COUNT(*)
----------
13

Set .parameter value=true;

SQL> show parameter o7

NAME TYPE VALUE
------------------------------------ ----------- -----------
O7_DICTIONARY_ACCESSIBILITY boolean TRUE
SQL> create user test2 identified by test2;

User created.

SQL> grant connect ,select any table to test2;

Grant succeeded.

SQL>

SQL> conn test2/test2@testdb
Connected.
SQL> select count(*) from user_tables;

COUNT(*)
----------
0

SQL> select count(*) from dba_tables;

COUNT(*)
----------
816

SQL> select count(*) from v$session;

COUNT(*)
----------
10

*************************************

select any dictionary系统权限可以override O7_DICTIONARY_ACCESSIBILITY=false的情况去访问系统数据字典

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/45259/viewspace-134936/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/45259/viewspace-134936/