In the past, many privileges were granted to the PUBLIC pseudo-role in a couple of our databases with a large number of users. We created a role named XPUBLIC and moved all of the privileges to it and are now attempting to limit users to privileges they actually need. Does anyone know of a way to track what privileges are actually used by each user in Oracle 8i/9i?
Software/Hardware used:
ASKED:
February 25, 2005 3:26 PM
UPDATED:
February 28, 2005 8:41 AM
You can turn on AUDIT to monitor which users are utilizing which privileges. Be sure to be aware of the size of the AUDIT tablespace as you could fill this up quite quickly depending upon the AUDIT options that you set. I would recommend that you begin by auditing a single privilege to enable you to see what is in your result set.