Oracle 视图 DBA_UNUSED_SYSPRIVS 官方解释,作用,如何使用详细说明

本站中文解释

Oracle视图DBA_UNUSED_SYSPRIVS用于列出未在帐户中使用的系统权限。它可以用来监视可能出现滥用的系统权限,并使数据库更安全。

使用方法:

1. 连接到SYSTEM用户,并执行以下查询:
SELECT Grantee, Privilege FROM DBA_UNUSED_SYSPRIVS;
2. 在结果中,可以看到具有特定权限,但它们未在许可的帐户中使用的帐户列表。可以查看Grantee列,以了解谁具有哪些未使用的权限。
3. 可以继续通过REVOKE语句撤消多余的权限,以使系统更安全,可以执行以下语句:
REVOKE FROM ;
其中是要收回的权限,是未使用的账户。

官方英文解释

DBA_UNUSED_SYSPRIVS lists the system privileges (without privilege grant paths) that are not used for the privilege analysis policies reported by the DBMS_PRIVILEGE_CAPTURE.GENERATE_RESULT procedure.

This view provides access to analyzed privilege records in SYS tables.

You must have the CAPTURE_ADMIN role to access this view.

Column Datatype NULL Description

CAPTURE

VARCHAR2(128)

NOT NULL

Name of a privilege analysis policy

USERNAME

VARCHAR2(128)

Name of the user whose privileges are reported

ROLENAME

VARCHAR2(128)

Name of the role whose unused privileges are reported (for ROLE type privilege analysis or ROLE AND CONTEXT privilege analysis)

SYS_PRIV

VARCHAR2(40)

Unused system privilege

ADMIN_OPTION

NUMBER

Indicates whether the privilege is granted with the ADMIN option:

  • 0 – Indicates that the privilege is granted without the ADMIN option

  • 1 – Indicates that the privilege is granted with the ADMIN option

RUN_NAME

VARCHAR2(128)

The name of the run during which the privilege was reported

See Also:

  • “DBA_UNUSED_SYSPRIVS_PATH” for privilege grant path information for unused system privileges

  • Oracle Database Security
    Guide
    for more information about privilege analysis

  • Oracle Database PL/SQL
    Packages and Types Reference
    for more information about the DBMS_PRIVILEGE_CAPTURE.GENERATE_RESULT procedure


数据运维技术 » Oracle 视图 DBA_UNUSED_SYSPRIVS 官方解释,作用,如何使用详细说明