We are building our first 12c (12.1.0.2) database for actual development, and we came across a difference from 11g that we had not seen advertised.
The DBA role in 11g has its privileges WITH ADMIN OPTION, but that is not the case in 12c.
According to MOS Doc ID 1068678.6, The role DBA is defined in the script $ORACLE_HOME/rdbms/admin/dsec.bsq,
In 11.2.0.4 we see this:
grant all privileges, select any dictionary, analyze any dictionary
to dba with admin option
/
In 12.1.0.2 we see this:
grant all privileges, select any dictionary, analyze any dictionary
to dba
/
and, tellingly, in the prolog of the 12.1.0.2 script there is this comment:
REM skayoor 01/29/14 - Bug 18019880: Remove admin option
I searched MOS for the quoted bug number, and a few other things, but found nothing to explain this.
I can overcome this by just re-issuing the original command, but I wanted to ask if anyone had any ideas about the rationale for doing this. What would I be exposing if I reverted to the original definition?