Select Any Dictionary Privilege & Security

.


If you create a database link like this:

create database link MY_LINK connect to SOME_USER identified by SOME_USER_PASSWORD using 'tns_alias' ;

Then a user with 'SELECT ANY DICTIONARY' would be able to see the password in clear text with this query:

select * from sys.link$ ;

0 comments: