The difference between SELECT ANY DICTIONARY and SELECT_CATALOG_ROLE


I've seen some DBAs confused about these two "privileges" or "roles".
SELECT ANY DICTIONARY is a System Privilege.
SELECT_CATALOG_ROLE is a Role you would see in DBA_ROLES.  However, querying DBA_SYS_PRIVS does NOT show what privileges are granted to this role.
SELECT_CATALOG_ROLE predates the SELECT ANY DICTIONARY privilege.
The SELECT ANY DICTIONARY privilege grants Read access on Data Dictionary tables owned by SYS.  The SELECT_CATALOG_ROLE role grants Read access to Data Dictionary (DBA_%) and Performance (V$%) views.

at Saturday, February 08, 2014  

0 comments:

Post a Comment

Powered by Blogger.