Supported Databases and Databa...
Masking Permissions
Oracle Configuration
3 min
In Oracle, the objective is to create a user who can:
- Connect to the database (CREATE SESSION),
- View metadata and dictionary information,
- Perform SELECT operations on any table.
Oracle
1-- Session creation privilege
2GRANT CREATE SESSION TO [ username ];
3
4-- Metadata view permissions
5GRANT SELECT_CATALOG_ROLE TO [ username ];
6
7 -- Select permission on all tables
8GRANT SELECT ANY TABLE TO [ username ];
9
10-- Select permission on all dictionary objects
11GRANT SELECT ANY DICTIONARY TO [ username ];
Oracle
11 SELECT
2s . PRIVILEGE AS SYS_PRIV ,
3r . GRANTED_ROLE AS ROLE_PRIV ,
4t . PRIVILEGE AS TAB_PRIV
5FROM
6( SELECT PRIVILEGE
7FROM DBA_SYS_PRIVS
8WHERE GRANTEE = ’[ username ]’) s
9LEFT JOIN
10( SELECT GRANTED_ROLE
11FROM DBA_ROLE_PRIVS
12WHERE GRANTEE = ’[ username ]’) r
13ON 1=1
14LEFT JOIN
15( SELECT PRIVILEGE
16FROM DBA_TAB_PRIVS
17WHERE GRANTEE = ’[ username ]’) t
18ON 1=1;