audit-labs/audit-tools
A collection of scripts, queries, and other goodies you can use in an audit.
clone: git clone https://gitbay.org/audit-labs/audit-tools.git
v1.0.0: databases/oracle/README.md · raw
1# `oracle_admins.sql`
2
3``` sql
4SELECT
5 grantee AS "User",
6 privilege AS "Privilege"
7FROM
8 dba_sys_privs
9WHERE
10 grantee IN (SELECT DISTINCT grantee FROM dba_sys_privs)
11UNION ALL
12SELECT
13 grantee AS "User",
14 privilege AS "Privilege"
15FROM
16 dba_tab_privs
17WHERE
18 grantee IN (SELECT DISTINCT grantee FROM dba_tab_privs);
19```
20
21``` text
22| User | Privilege |
23|----------+---------------------|
24| SCOTT | CREATE SESSION |
25| SCOTT | CREATE TABLE |
26| SCOTT | SELECT |
27| SCOTT | INSERT |
28| HR | CREATE SESSION |
29| HR | SELECT |
30| HR | INSERT |
31| HR | UPDATE |
32| SYS | CREATE USER |
33| SYS | GRANT ANY PRIVILEGE |
34| SYS | DROP USER |
35| SYSTEM | CREATE TABLESPACE |
36| SYSTEM | CREATE USER |
37| SYSTEM | ALTER USER |
38| SYSTEM | DROP USER |
39| APP_USER | SELECT ON EMPLOYEES |
40| APP_USER | INSERT ON EMPLOYEES |
41| APP_USER | UPDATE ON EMPLOYEES |
42```
43
44# `oracle_admins_alt.sql`
45
46``` sql
47SELECT ** FROM sys.dba_role_privs;
48SELECT ** FROM sys.dba_sys_privs;
49SELECT ** FROM sys.dba_tab_privs;
50SELECT ** FROM sys.dba_users;
51```
52
53``` text
54| Grantee | Granted_Role | Admin_Option |
55|----------+--------------+--------------|
56| SCOTT | DBA | NO |
57| HR | RESOURCE | YES |
58| APP_USER | DATA_ANALYST | NO |
59
60| Grantee | Privilege |
61|---------+---------------------|
62| SCOTT | CREATE SESSION |
63| HR | CREATE TABLE |
64| SYS | GRANT ANY PRIVILEGE |
65| SYSTEM | CREATE USER |
66
67| Grantee | Table_Name | Privilege |
68|----------+-------------+-----------|
69| SCOTT | EMPLOYEES | SELECT |
70| SCOTT | EMPLOYEES | INSERT |
71| HR | DEPARTMENTS | SELECT |
72| APP_USER | EMPLOYEES | UPDATE |
73
74| Username | Account_Status | Default_Tablespace | Temporary_Tablespace |
75|----------+----------------+--------------------+----------------------|
76| SCOTT | OPEN | USERS | TEMP |
77| HR | OPEN | USERS | TEMP |
78| SYS | OPEN | SYSTEM | TEMP |
79| SYSTEM | OPEN | SYSTEM | TEMP |
80| APP_USER | OPEN | USERS | TEMP |
81```