RE: Question related to security

[Toepke, Kevin M]

Title: Message

If you are a DBA you can

 

SELECT password FROM  dba_users WHERE username = 'XXXXX;

ALTER USER XXXXX identified BY temp_pass;

CONNECT XXXXX/temp_pass

ALTER USER XXXXX IDENTIFIED BY VALUES 'zzzzz'; --Replace zzzzz with value from SELECT

GRANT SELECT ON ...

 

If you script the alters & the connect the password should be changed for under 0.1 seconds!

 

Kevin

-----Original Message-----
From: Meng, Dennis [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 4:05 PM
To: Multiple recipients of list ORACLE-L
Subject: Question related to security

Hi all -

I have an interesting problem at hand - we have a request from a developer that ask to access some tables owned by a user generated by third party app. Since I don't have the password for this user and system/sys do not have admin option on these tables, I can't grant select to the developer. Changing password for this app can be tricky and will be used as last resort. My question is is there anything else I can do to meet this request?

 

Thanks

 

Dennis