Not exactly what you want but i have a script that goes in the opposite
direction. You supply a user / schema name and decide whether to write
output to screen or file and run it. An example is for OUTLN is:
NAME OF USER TO CHECK [ORCL]: OUTLN
OUTPUT METHOD [S/F]: S
FILE NAME FOR OUTPUT [priv.lst]:
OUTPUT DIRECTORY [/tmp]:
old 162: lv_file_or_screen:='&&output_method';
new 162: lv_file_or_screen:='S';
old 164: open_file('&&file_name','&&output_dir');
new 164: open_file('priv.lst','/tmp');
old 166: get_privs('&&user_to_find',lv_tabs);
new 166: get_privs('OUTLN',lv_tabs);
..USER => OUTLN has ROLE CONNECT which contains =>
.....SYS PRIV =>ALTER SESSION grantable => NO
.....SYS PRIV =>CREATE CLUSTER grantable => NO
.....SYS PRIV =>CREATE DATABASE LINK grantable => NO
.....SYS PRIV =>CREATE SEQUENCE grantable => NO
.....SYS PRIV =>CREATE SESSION grantable => NO
.....SYS PRIV =>CREATE SYNONYM grantable => NO
.....SYS PRIV =>CREATE TABLE grantable => NO
.....SYS PRIV =>CREATE VIEW grantable => NO
..USER => OUTLN has ROLE RESOURCE which contains =>
.....SYS PRIV =>CREATE CLUSTER grantable => NO
.....SYS PRIV =>CREATE INDEXTYPE grantable => NO
.....SYS PRIV =>CREATE OPERATOR grantable => NO
.....SYS PRIV =>CREATE PROCEDURE grantable => NO
.....SYS PRIV =>CREATE SEQUENCE grantable => NO
.....SYS PRIV =>CREATE TABLE grantable => NO
.....SYS PRIV =>CREATE TRIGGER grantable => NO
.....SYS PRIV =>CREATE TYPE grantable => NO
..SYS PRIV =>EXECUTE ANY PROCEDURE grantable => NO
..SYS PRIV =>UNLIMITED TABLESPACE grantable => NO
..TABLE PRIV =>EXECUTE table_name => OUTLN_PKG grantable => NO
PL/SQL procedure successfully completed.
SQL>
As you can see it gives hierarchical privileges through roles etc, for
roles, system privs, and object privs. Have a look at it, it may help
you. Its called find_all_privs.sql and is on my website at
http://www.petefinnigan.com/tools.htm hope this helps
kind regards
Pete
--
Pete Finnigan
email:[EMAIL PROTECTED]
Web site: http://www.petefinnigan.com - Oracle security audit specialists
Book:Oracle security step-by-step Guide - see http://store.sans.org for details.
--
Please see the official ORACLE-L FAQ: http://www.orafaq.net
--
Author: Pete Finnigan
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
