PSROLES.SQL

An interesting issue has come up. 

For an Oracle rdbms installation, Tools 8.51, we see that the script PSROLES.SQL grants several high privileges to PSADMIN role which is in turn granted to SYSADM account.  The list of those privileges are below.

 

GRANTEE PRIVILEGE ADM

PSADMIN ADMINISTER DATABASE TRIGGER YES

PSADMIN ADMINISTER RESOURCE MANAGER YES

PSADMIN ALTER ANY PROCEDURE YES

PSADMIN ALTER ANY TABLE YES

PSADMIN ALTER ANY TRIGGER YES

PSADMIN ALTER SESSION YES

PSADMIN ANALYZE ANY YES

PSADMIN COMMENT ANY TABLE YES

PSADMIN CREATE ANY INDEX YES

PSADMIN CREATE ANY INDEXTYPE YES

PSADMIN CREATE ANY PROCEDURE YES

PSADMIN CREATE ANY SEQUENCE YES