Oracle 10g 參數之 O7_DICTIONARY_ACCESSIBILITY

 

O7_DICTIONARY_ACCESSIBILITY 控制數據庫字典的訪問

在用戶被授予select any table時，產生效果

 

NAME                                 TYPE        VALUE

------------------------------------ ----------- ------------------------------

O7_DICTIONARY_ACCESSIBILITY          boolean     FALSE

create user t identified by t;

User created.

grant resource,connect to t;

Grant succeeded.

grant select any table to t;

Grant succeeded.

conn t/t

Connected.

select * from v$instnace;

select * from v$instnace

              *

ERROR at line 1:

ORA-00942: table or view does not exist

與之相反

show parameter o7

NAME                                 TYPE        VALUE

------------------------------------ ----------- ------------------------------

O7_DICTIONARY_ACCESSIBILITY          boolean     TRUE

conn t/t

Connected.

select count(*) from v$instance;

  COUNT(*)

----------

         1

 

寫在最後！

此參數導致sys用戶不可以normal方式登錄，換句話說，設置為TRUE，conn sys/oracle 即可登錄

O7_DICTIONARY_ACCESSIBILITY 此參數為TRUE 相對來說不安全