Hot answers tagged security
When the O7_DICTIONARY_ACCESSIBILITY parameter is set to false, users with SELECT ANY TABLE privilege can not access tables such as SYS.USER$, unless they have direct privileges to them.
I found a solution involving a few extra steps. The "tenant_admin" role is still created the same way, but it is now used as follow: postgres=> SET ROLE tenant_admin; SET postgres=> CREATE ROLE "owner3"; CREATE ROLE postgres=> GRANT ...
Grant the necessary permissions on the database RidaDatabase to the user PLESK01\IWAM_plesk
You can check it with a database trigger, for example: CREATE ROLE ROLE_POWER_USER NOT IDENTIFIED; CREATE OR REPLACE TRIGGER LOG_T_LOGON AFTER LOGON ON DATABASE DECLARE osUser VARCHAR2(30); machine VARCHAR2(100); prog VARCHAR2(100) ip VARCHAR2(15); BEGIN IF ora_login_user IS NULL THEN RETURN; END IF; SELECT ...
It turns out the user had been granted other privileges by a different account as well as the one we use, so we were unable to see those privileges in ALL_TAB_PRIVS. We had to look in DBA_TAB_PRIVS, and sure enough, there were the other permissions. Thanks to all for chiming in!
Only top voted, non community-wiki answers of a minimum length are eligible