Question about SELECT_CATALOG_ROLE
783956Aug 17 2010 — edited Aug 18 2010Good afternoon,
Reading the Oracle 2 Day DBA document, there is a passage that states:
>
Nonadministrative users may also want to log in to
Database Control. For example, application developers may want to take advantage of
the Database Control interface to create or modify tables, indexes, views, and so on.
>
I granted SCOTT that role and proceeded to log in as SCOTT. (using Enterprise Manager)
I noticed that with this new role, SCOTT can look at the roles and privileges that other users have. Basically, SCOTT can look at a lot of stuff that he probably has no business looking at, much less knowing about.
The question is: am I being overly concerned or is this a role that should not be granted as lightly as the 2 Day DBA document implies ?
Thank you for your help,
John.
Edited by: 440bx - 11gR2 on Aug 17, 2010 4:06 PM - added the reference to Enterprise Manager.