ITPub博客

首页 > 数据库 > Oracle > become user 权限

become user 权限

Oracle 作者:studywell 时间:2017-12-18 17:40:50 0 删除 编辑
部署OGG时,遇到一个授权 become user权限,了解了下:
这个权限文档中未提及,用户OCI和IMP导入使用,查询字典显示:

点击(此处)折叠或打开

  1. Connected to Oracle Database 11g Enterprise Edition Release 11.2.0.4.0
  2. Connected as system@s11

  3. SQL> select * from dba_sys_privs s where s.privilege='BECOME USER' ;

  4. GRANTEE PRIVILEGE ADMIN_OPTION
  5. ------------------------------ ---------------------------------------- ------------
  6. DBA BECOME USER YES
  7. IMP_FULL_DATABASE BECOME USER NO
  8. SYS BECOME USER NO


网上资料如下:
http://www.dba-oracle.com/t_oracle_become_user_privilege.htm

On the BECOME USER privilege, Oracle docs offer this information:

BECOME USER Report

The BECOME USER Report shows all database accounts roles that have the BECOME USER system privilege. This is a very powerful system privilege: it enables the IMPORT_FULL_DATABASE and EXPORT_FULL_DATABASE roles for use with Oracle Data Pump. Accounts that possess this privilege can be misused to get sensitive information or to compromise an application.

On Oracle DBA Forums, users have shown interest in the often mysterious BECOME USER privilege.  The  "BECOME USER" privilege does, in fact, exists. Try this query:

SELECT * FROM DBA_SYS_PRIVS where privilege = 'BECOME USER';

-- Here we see that the imp_full_database has the become user privilege.

 Jeff Hunter also has an article in which he informs us that:

The "BECOME USER" System Privilege is one that has stirred up a lot of confusion amoung DBAs and developers. Oracle unfortunately does not support or comment on the use of this system privilege. I believe that import uses it to import objects in the schemas of other users.

Oracle has an undocumented OCI function called upicuithat will allow a given oracle user to become another user. This user has to have the "BECOME USER" system privilege.  

Some users find this similar command useful, although BECOME USER has specific usefulness in the import (impdp) utility of Data Pump;

"You have probably seen in SQLPLUS where you can issue the command

connect user/password

来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/29519108/viewspace-2148830/ ,如需转载,请注明出处,否则将追究法律责任。

请登录后发表评论 登录
全部评论

注册时间:2014-03-04

  • 博文量
    307
  • 访问量
    535453