Remove the usage of the SYS schema
Article ID: 202766
Updated On:
Products
Issue/Introduction
The DB revoked the permission/role SELECT ANY DICTIONARY for application users.
Extra information:
SELECT ANY DICTIONARY
This system privilege allows query access to any object in the SYS schema, including tables created in that schema. It must be granted individually to each user requiring the privilege. It is not included in GRANT ALL PRIVILEGES, but it can be granted through a role.
After revoking the permission "select any dictionary", the Hserver fails to start.
The following query will fail at the startup of a hserver process:
select s.sid AS SESS
from v$session s
where s.audsid = userenv('SESSIONID')
Environment
Release : 14.0
Component : CA Harvest Software Change Manager
Resolution
As from version 14, Harvest is no longer accessing the v$session table nor accessing objects in the SYS schema.
If this role (SELECT ANY DICTIONARY) is revoked in the DB for previous versions (Haverst 13.0.x), please contact support and request for an efix.
Feedback
