ORACLE 参数 O7_DICTIONARY

该参数是ORACLE的一个安全机制, 目的就是为了防止非sysdba访问系统关键数据字典,让sys用户成为sysdba, 不能以普通用户登陆

MOS文档: What is O7_DICTIONARY_ACCESSIBILITY and how should it be set ? (文档 ID 206795.1)

中提到:

Versions PRIOR to Oracle 9i:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The default of this parameter is TRUE.

Oracle 9i:
~~~~~~~~~~
The default of this parameter in 9i is FALSE.
The FALSE setting requires login with AS SYSDBA to read the data dictionary, or
to be given explicit object grants.

从9i开始, Oracle明确限定该参数的值为FALSE, 强烈不推荐用户更改该参数

该参数限定了sys用户必须以sysdba 的身份进行登陆

或许有些很奇葩的需求,例如某位领导说: 我任性,我必须要用sys用户以普通身份就能登陆,

那么更改该参数,满足领导吧...

附录:

该MOS的全文:

QUESTIONS:

What does the init.ora parameter named O7_Dictionary_Accessibility do?
How does it affect my database, and how should it be set?

ANSWERS:

The parameter O7_Dictionary_Accessibility can be set to TRUE or FALSE.
The affect on your database is different depending on whether you are
using Oracle 9i or a version previous to Oracle 9i.

Versions PRIOR to Oracle 9i:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The default of this parameter is TRUE.

The dictionary protection mechanism in Oracle 8 prevents unauthorized users
from accessing dictionary objects.

Access to dictionary objects is restricted to the users with the system
privileges SYSDBA and SYSOPER.

System privileges providing access to objects in other schemas do not give
access to dictionary objects.
For example, the SELECT ANY TABLE privilege enables access to views and tables
in other schemas, but it does not enable you to select dictionary objects.

If the parameter is set to TRUE, which is the default, access to objects in
SYS schema is enabled (Oracle 7 behavior).

If this parameter is set to FALSE, system privileges that allow access to
objects in other schemas do not allow access to objects in the dictionary
schema.

For example, if O7_DICTIONARY_ACCESSIBILITY=FALSE, then the SELECT ANY TABLE
statement enables access to views or tables in any schema except SYS schema.
The system privilege, EXECUTE ANY PROCEDURE enables access on the procedures
in any other schema except in SYS schema.

Oracle 9i:
~~~~~~~~~~
The default of this parameter in 9i is FALSE.
The FALSE setting requires login with AS SYSDBA to read the data dictionary, or
to be given explicit object grants.

Warning:
~~~~~~~~
Oracle has changed from versions 9.0.1 and beyond the default of this parameter
to FALSE, and strongly recommends that you do not change back the parameter.
In the process of turning Oracle Server secure out of the box, this was one of
the reasons we decide to change the parameter.
This way, you can't login with a "regular" SYS connection anymore to look up
data dictionary.
Instead, you should set your own dba accounts with appropriate privileges and
passwords.

References:
~~~~~~~~~~~
Oracle University, Oracle 9i New Features For Adminstrators, Chapter 1, Oracle
Server Security, Page 1-5

Oracle University, Oracle 8: Database Administration, Chapter 19, Managing
Privileges, Page 19-15

ORACLE 参数 O7_DICTIONARY_ACCESSIBILITY相关推荐

oracle参数文件initorcl位置,ORACLE参数文件
ORACLE参数文件简介参数文件记录了数据库的配置.在数据库启动时,Oracle要根据参数文件中的参数配置数据库.如果为各个内存池分配多少内存,允许打开的进程数和会话数等.要让数据库启动,必须先读 ...
oracle参数文件initorcl位置,oracle 参数文件详解
参数文件两类参数文件: pfile:文本文件的参数文件,可以使用vi,vim等编辑器修改,文件名通常为init.ora spfile:二进制的参数文件,不能直接修改,只能存放在Oracle服务器端, ...
oracle dbfile数,通过案例学调优之--Oracle参数（db_file_multiblock_read_count）
通过案例学调优之--Oracle参数(db_file_multiblock_read_count) 应用环境: 操作系统: RedHat EL55 Oracle: Oracle 10gR2 Ora ...
服务器内存升级与oracle 参数调整实施
由于服务器升级内存(4g升级到48G),需要调整oracle 参数. sga 调整参数具体大小根据实际业务情况,自己搞定.我的这个sga参数比较呵呵下面是详细操作步骤(经过实践证明OK的): 1.关 ...
Oracle 参数文件（spfile和pfile）
Oracle 参数文件(spfile和pfile) --======================== -->Oracle 参数文件 --======================== /* ...
ssis oracle配置,通过SSIS执行Oracle参数是什么？
专家解答修改你的ActiveX Script任务的最佳方法就是使用脚本组件数据流任务.这个脚本组件允许你在自己的数据流中执行VB.Net代码.当你把一个脚本组件添加到一个数据流中时,你需要选择下面其 ...
oracle o7参数,Oracle技术之初始化参数O7_DICTIONARY_ACCESSIBILITY
O7_DICTIONARY_ACCESSIBILITY也是和安全性有关的一个重要的初始化参数 .这个参数用来控制数据字典访问行为是否和Oracle 7中保持一致. 默认情况下,这个参数设置 ...
Linux下安装Oracle参数自动初始化脚本
在linux下安装Oracle通常是一件很头疼的事情, 而如果我们只是为了部署CMS的话,也没有必要对Oracle的参数去做详细的了解. 那么有没有办法简化这个安装过程呢? 下面给出了一个在Linux ...
oracle参数文件的本质
环境: SQL> select * from v$version where rownum=1; BANNER ----------------------------------------- ...

ORACLE 参数 O7_DICTIONARY_ACCESSIBILITY

ORACLE 参数 O7_DICTIONARY_ACCESSIBILITY相关推荐

最新文章

热门文章