Views with the prefix DBA show a global view of the entire database. Synonyms are
not created for these views, because DBA views should be queried only by
administrators. Therefore, to query the DBA views, administrators must prefix the view
name with its owner, SYS, as in the following:
SELECT owner, object_name, object_type FROM SYS.DBA_OBJECTS;
Oracle recommends that you implement data dictionary protection to prevent users
having the ANY system privileges from using such privileges on the data dictionary. If
you enable dictionary protection (O7_DICTIONARY_ACCESSIBILITY is false), then
access to objects in the SYS schema (dictionary objects) is restricted to users with the
SYS schema. These users are SYS and those who connect as SYSDBA.
DBA前缀视图
1. 以 DBA 为前缀的视图能够展现整个数据库的全部内容。不应在这些视图上创建同义词,因为以
DBA 为前
缀的视图只应由管理员查询
2. Oracle 建议管理员对数据字典的访问加以控制,防止拥有 ANY
系统权限的用户任意访问数据字典
3. 管理员可以开启数据字典保护功能(将 O7_DICTIONARY_ACCESSIBILITY 设为
false),则只有能够访问
SYS 方案的用户才能访问数据字典对象 ,这样的用户只有 SYS,及以 SYSDBA 登录的用户
来自 “ ITPUB博客 ” ,链接:http://blog.itpub.net/10599713/viewspace-985714/,如需转载,请注明出处,否则将追究法律责任。
转载于:http://blog.itpub.net/10599713/viewspace-985714/