RE: Grant execute on DBMS_SYSTEM
- From: <Dominic.Brooks@xxxxxxxxxxxxxxxxxxx>
- To: <gba.oraclel@xxxxxxxxx>, <oracle-l@xxxxxxxxxxxxx>
- Date: Tue, 3 May 2011 16:05:26 +0100
There are certainly a couple of notes on metalink regarding the need to grant
access to dbms_system (and other permissions) in relation to the management of
distributed transactions, notably when using certain versions of the jdbc thin
driver.
________________________________
From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On
Behalf Of GBA-DBA
Sent: 03 May 2011 15:53
To: Oracle Discussion List
Subject: Grant execute on DBMS_SYSTEM
Hello list,
I have a Websphere Portal admin facing some issues with the product and in his
research of the problem he found a support note from IBM saying that all the
default portal schemas (portal_comm, portal_cust, portal_fdbkdb, portal_jcrdb,
portal_likeminds, portal_release) stored in an Oracle 11g R2 database need
execute permissions on the DBMS_SYSTEM package.
These are internal schemas used by the product and no one should be playing
with them but I feel I shouldn't grant this privilege without a proper
explanation on why is required, how is being used by the product and potential
issues that it nay cause.
Are there any security threats related to this privilege? Has anyone received a
request like this from an application development/deployment perspective?
Thanks in advance for your responses.
--
Regards
GBA
_______________________________________________
This e-mail may contain information that is confidential, privileged or
otherwise protected from disclosure. If you are not an intended recipient of
this e-mail, do not duplicate or redistribute it by any means. Please delete it
and any attachments and notify the sender that you have received it in error.
Unless specifically indicated, this e-mail is not an offer to buy or sell or a
solicitation to buy or sell any securities, investment products or other
financial product or service, an official confirmation of any transaction, or
an official statement of Barclays. Any views or opinions presented are solely
those of the author and do not necessarily represent those of Barclays. This
e-mail is subject to terms available at the following link:
www.barcap.com/emaildisclaimer. By messaging with Barclays you consent to the
foregoing. Barclays Capital is the investment banking division of Barclays
Bank PLC, a company registered in England (number 1026167) with its registered
office at 1 Churchill Place, London, E14 5HP. This email may relate to or be
sent from other members of the Barclays Group.
_______________________________________________
Other related posts:
