OraFAQ Forum: Security » PDB SYSOPER/SYSDBA privileges

Home » RDBMS Server » Security » PDB SYSOPER/SYSDBA privileges (12.*)

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

PDB SYSOPER/SYSDBA privileges [message #665813]

Fri, 22 September 2017 04:57

Michel Cadot
Messages: 68641
Registered: March 2007
Location: Nanterre, France, http://...

Senior Member
Account Moderator

I created a user in a PDB then grant it SYSOPER (example there is 12.1 but it is the same in 12.2 but for the query result columns):

***SYS***> alter session set container=mikc2DB1;

Session altered.

***SYS***> create user test identified by test;

User created.

***SYS***> grant sysdba to test;

Grant succeeded.

***SYS***> alter session set container=cdb$root;

Session altered.

***SYS***> select * from v$pwfile_users;
USERNAME                       SYSDB SYSOP SYSAS SYSBA SYSDG SYSKM     CON_ID
------------------------------ ----- ----- ----- ----- ----- ----- ----------
SYS                            TRUE  TRUE  FALSE FALSE FALSE FALSE          0
SYSDG                          FALSE FALSE FALSE FALSE TRUE  FALSE          1
SYSBACKUP                      FALSE FALSE FALSE TRUE  FALSE FALSE          1
SYSKM                          FALSE FALSE FALSE FALSE FALSE TRUE           1
MICHEL                         TRUE  FALSE FALSE FALSE FALSE FALSE          1
TEST                           FALSE TRUE  FALSE FALSE FALSE FALSE          3

So far so far good, my user is there with the correct privilege and CON_ID.
Now I deleted the password file then query again the view:

***SYS***> select * from v$pwfile_users;
USERNAME  SYSDB SYSOP SYSAS SYSBA SYSDG SYSKM     CON_ID
--------- ----- ----- ----- ----- ----- ----- ----------
TEST      FALSE TRUE  FALSE FALSE FALSE FALSE          3

1 row selected.

All but the new PDB account disappeared, so obviously the PDB SYSOPER/SYSDBA is not recorded in the password file so, and this is my question, where is it recorded?

Report message to a moderator

[Message index]

		PDB SYSOPER/SYSDBA privileges By: Michel Cadot on Fri, 22 September 2017 04:57
		Re: PDB SYSOPER/SYSDBA privileges By: John Watson on Fri, 22 September 2017 06:17
		Re: PDB SYSOPER/SYSDBA privileges By: Michel Cadot on Fri, 22 September 2017 08:35
		Re: PDB SYSOPER/SYSDBA privileges By: Michel Cadot on Fri, 22 September 2017 10:50
		Re: PDB SYSOPER/SYSDBA privileges By: John Watson on Fri, 22 September 2017 11:50
		Re: PDB SYSOPER/SYSDBA privileges By: Michel Cadot on Fri, 29 September 2017 10:14

Previous Topic:	Grant user full access to other schema
Next Topic:	CREATE ANY CONTEXT privilege

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Apr 20 01:11:59 CDT 2024