User Tools

Site Tools


privilegeanalysis

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
privilegeanalysis [2015/07/23 12:33] z0hpvkprivilegeanalysis [2025/03/08 22:24] (current) – external edit 127.0.0.1
Line 7: Line 7:
     name      => 'rolecontext_policy',     name      => 'rolecontext_policy',
     type      => DBMS_PRIVILEGE_CAPTURE.g_role_and_context,     type      => DBMS_PRIVILEGE_CAPTURE.g_role_and_context,
-    roles     => role_name_list('DBA', 'EXP_FULL_DATABASE'+    roles     => role_name_list('DBA', 'EXP_FULL_DATABASE')
     condition => 'SYS_CONTEXT(''USERENV'', ''SESSION_USER'') = ''SYSTEM''');     condition => 'SYS_CONTEXT(''USERENV'', ''SESSION_USER'') = ''SYSTEM''');
 END;</code> END;</code>
Line 21: Line 21:
 <code>BEGIN <code>BEGIN
   DBMS_PRIVILEGE_CAPTURE.enable_capture('rolecontext_policy');   DBMS_PRIVILEGE_CAPTURE.enable_capture('rolecontext_policy');
 +END;</code>
 +
 +==== Disable Policy ====
 +After a few days have passed you must disable the capture before you can see the results
 +<code>BEGIN
 +  DBMS_PRIVILEGE_CAPTURE.disable_capture('rolecontext_policy');
 END;</code> END;</code>
  
Line 26: Line 32:
 <code>BEGIN <code>BEGIN
   DBMS_PRIVILEGE_CAPTURE.generate_result('rolecontext_policy');   DBMS_PRIVILEGE_CAPTURE.generate_result('rolecontext_policy');
-END;</code>                           +END;</code> 
 +The following views can now be used to see the results ... 
 +  * DBA_USED_SYSPRIVS 
 +  * DBA_USED_SYSPRIVS_PATH  
 +  * DBA_USED_OBJPRIVS 
 +  * DBA_USED_OBJPRIVS_PATH                      
privilegeanalysis.1437654814.txt.gz · Last modified: 2025/03/08 22:23 (external edit)