配置说明：

public用户属于任何用户，为了保障数据库的数据安全，禁止向public用户授予对象权限。

配置方法：

REVOKE ALL ON object_name FROM public;

推荐值：无

检查方法：

SELECT * FROM ADM_TAB_PRIVS WHERE GRANTEE='PUBLIC';

预期结果：只有系统默认授予的权限，如表1 public用户系统默认授予的权限所示 。

风险等级：中

表1 public用户系统默认授予的权限
受权者	对象所属用户名	对象名称	对象类型	权限	GRANT选项。拥有此选项的用户才能给其他的用户授予该权限。
PUBLIC	SYS	ADM_2PC_PENDING	VIEW	SELECT	NO
PUBLIC	SYS	ALL_CONS_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_ARGUMENTS	VIEW	SELECT	NO
PUBLIC	SYS	DB_COL_COMMENTS	VIEW	SELECT	NO
PUBLIC	SYS	DB_CONSTRAINTS	VIEW	SELECT	NO
PUBLIC	SYS	DB_DBLINK_TABLES	VIEW	SELECT	NO
PUBLIC	SYS	DB_DBLINK_TAB_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_DEPENDENCIES	VIEW	SELECT	NO
PUBLIC	SYS	DB_DISTRIBUTE_RULES	VIEW	SELECT	NO
PUBLIC	SYS	DB_DIST_RULE_COLS	VIEW	SELECT	NO
PUBLIC	SYS	DB_HISTOGRAMS	VIEW	SELECT	NO
PUBLIC	SYS	DB_INDEXES	VIEW	SELECT	NO
PUBLIC	SYS	DB_IND_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_IND_PARTITIONS	VIEW	SELECT	NO
PUBLIC	SYS	DB_NODE_INFO	VIEW	SELECT	NO
PUBLIC	SYS	DB_OBJECTS	VIEW	SELECT	NO
PUBLIC	SYS	DB_PART_COL_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	DB_PART_KEY_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_PART_STORE	VIEW	SELECT	NO
PUBLIC	SYS	DB_PART_TABLES	VIEW	SELECT	NO
PUBLIC	SYS	DB_PROCEDURES	VIEW	SELECT	NO
PUBLIC	SYS	DB_SEQUENCES	VIEW	SELECT	NO
PUBLIC	SYS	DB_SOURCE	VIEW	SELECT	NO
PUBLIC	SYS	DB_SYNONYMS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TABLES	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_COLS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_COL_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_COMMENTS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_DISTRIBUTE	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_PARTITIONS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TAB_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	DB_TRIGGERS	VIEW	SELECT	NO
PUBLIC	SYS	DB_VIEWS	VIEW	SELECT	NO
PUBLIC	SYS	DB_VIEW_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_CONS_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DB_DIRECTORIES	VIEW	SELECT	NO
PUBLIC	SYS	DBMS_DEBUG	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_LOB	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_OUTPUT	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_RAFT	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_RANDOM	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_REBALANCE	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_SQL	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_STANDARD	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_STATS	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DBMS_UTILITY	PROCEDURE	EXECUTE	NO
PUBLIC	SYS	DB_VIEW_DEPENDENCIES	VIEW	SELECT	NO
PUBLIC	SYS	DV_CONNPOOL_STATS	VIEW	SELECT	NO
PUBLIC	SYS	SYS_DUMMY	TABLE	SELECT	NO
PUBLIC	SYS	NLS_SESSION_PARAMETERS	VIEW	SELECT	NO
PUBLIC	SYS	ROLE_SYS_PRIVS	VIEW	SELECT	NO
PUBLIC	SYS	MY_ARGUMENTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_COL_COMMENTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_CONSTRAINTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_CONS_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	MY_DEPENDENCIES	VIEW	SELECT	NO
PUBLIC	SYS	MY_FREE_SPACE	VIEW	SELECT	NO
PUBLIC	SYS	MY_HISTOGRAMS	VIEW	SELECT	NO
PUBLIC	SYS	MY_INDEXES	VIEW	SELECT	NO
PUBLIC	SYS	MY_IND_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	MY_IND_PARTITIONS	VIEW	SELECT	NO
PUBLIC	SYS	MY_IND_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	MY_JOBS	VIEW	SELECT	NO
PUBLIC	SYS	MY_OBJECTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_PART_COL_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	MY_PART_KEY_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	MY_PART_STORE	VIEW	SELECT	NO
PUBLIC	SYS	MY_PART_TABLES	VIEW	SELECT	NO
PUBLIC	SYS	MY_PROCEDURES	VIEW	SELECT	NO
PUBLIC	SYS	MY_ROLE_PRIVS	VIEW	SELECT	NO
PUBLIC	SYS	MY_SEGMENTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_SEQUENCES	VIEW	SELECT	NO
PUBLIC	SYS	MY_SOURCE	VIEW	SELECT	NO
PUBLIC	SYS	MY_SQL_MAPS	VIEW	SELECT	NO
PUBLIC	SYS	MY_SYNONYMS	VIEW	SELECT	NO
PUBLIC	SYS	MY_SYS_PRIVS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TABLES	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_COLS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_COL_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_COMMENTS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_DISTRIBUTE	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_MODIFICATIONS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_PARTITIONS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_PRIVS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TAB_STATISTICS	VIEW	SELECT	NO
PUBLIC	SYS	MY_TRIGGERS	VIEW	SELECT	NO
PUBLIC	SYS	MY_USERS	VIEW	SELECT	NO
PUBLIC	SYS	MY_VIEWS	VIEW	SELECT	NO
PUBLIC	SYS	MY_VIEW_COLUMNS	VIEW	SELECT	NO
PUBLIC	SYS	DV_ME	VIEW	SELECT	NO
PUBLIC	SYS	DV_USER_PARAMETERS	VIEW	SELECT	NO

ITPub博客

管理用户、角色和权限-禁止向public用户授予对象权限

最新文章