Database User with Only Create Session Privilege is able to access all data dictionary views

sudiptabhaskar

Hello Everyone,

I created user with only "Create Session" Privilege. But I can see that it is able to access all data dictionary views. Is it the default behavior?

SQL> create user bhaskar identified by *******;

User created.

SQL> grant create session to bhaskar;

Grant succeeded.

SQL> conn bhaskar

Enter password:

Connected.

User => BHASKAR has been granted the following privileges

====================================================================

       SYS PRIV => CREATE SESSION grantable => NO

SQL> select count(*) from sys.KU$_TYPE_VIEW;

 COUNT(*)

----------

        0

SQL> select count(*) from sys.v_$BH;

 COUNT(*)

----------

    12579

SQL> select file_name from sys.dba_data_files;

FILE_NAME

--------------------------------------------------------------------------------

/u01/app/oracle/oradata/NONCDB/datafile/o1_mf_system_hp9nptdf_.dbf

/u01/app/oracle/oradata/NONCDB/datafile/o1_mf_sysaux_hp9nqmht_.dbf

/u01/app/oracle/oradata/NONCDB/datafile/o1_mf_users_hp9nr3mg_.dbf

/u01/app/oracle/oradata/NONCDB/datafile/o1_mf_undotbs1_hp9nr2kv_.dbf

4 rows selected.

EdStevens

What has been granted to PUBLIC?

EdStevens

What has been granted to PUBLIC?

sudiptabhaskar

New database and new user. Nothing has been granted specifically.

EdStevens

Nothing has been granted specifically.

Prove it.

select grantee,
       owner,
       table_name,
       privilege
from dba_tab_privs
where grantee = 'PUBLIC'
;
select grantee,
       privilege
from dba_sys_privs
where grantee = 'PUBLIC'
;

sudiptabhaskar

Thanks EdStevens. Thanks for your answer. I understood it wrongly at first.

My doubts have been cleared from the following resources.

https://asktom.oracle.com/pls/apex/f?p=100:11:0::::P11_QUESTION_ID:9532918300346254554

https://support.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=232651523906727&parent=DOCUMENT&sourceId=247093.1&id=234551.1&_afrWindowMode=0&_adf.ctrl-state=1cqmtqsh5_109

https://support.oracle.com/epmos/faces/DocumentDisplay?_afrLoop=232578200401510&id=247093.1&_adf.ctrl-state=1cqmtqsh5_52

User_KGVZP

hi @fornoob. Thank you