Enabling Data Dictionary Protection

You can protect the data dictionary by setting the O7_DICTIONARY_ACCESSIBILITY initialization parameter to FALSE. This parameter prevents users who have the ANY system privilege from using those privileges on the data dictionary, that is, on objects in the SYS schema.

Oracle Database provides highly granular privileges. One such privilege, commonly referred to as the ANY privilege, is typically granted to only application owners and individual database administrators. For example, you could grant the DROP ANY TABLE privilege to an application owner. You can protect the Oracle data dictionary from accidental or malicious use of the ANY privilege by turning on or off the 07_DICTIONARY_ACCESSIBILITY initialization parameter.

To enable data dictionary protection: 

1. Start Oracle Enterprise Manager Database Control (Database Control).

   See Accessing the Database Home Page for instructions about how to start Database Control.

2. Log in as SYS and connect with the SYSDBA privilege.

   • User Name: Enter the name of a user who has administrative privileges. In this case, you enter SYS.

   • Password: Enter the SYS user's password.

   • Connect As: From the list, select SYSDBA.

   The Oracle Enterprise Manager Database Home page (Database Home page) appears.

3. Click Server to display the Server subpage.

4. In the Database Configuration section, click Initialization Parameters.

   The Initialization Parameters page appears.

5. In the list, search for O7_DICTIONARY_ACCESSIBILITY.

   In the Name field, enter O7_ (the letter O), and then click Go. You can enter the first few characters of a parameter name. In this case, O7_ displays the O7_DICTIONARY_ACCESSIBILTY parameter.

   Depending on the parameter, you may have to modify the value from the SPFile subpage. Click the SPFile tab to display the SPFile subpage.

6. Set the value for O7_DICTIONARY_ACCESSIBILTY to FALSE.

7. Click Apply.

8. Restart the Oracle Database instance.

   1. Click the Database Instance link.

   2. Click Home to display the Database Control home page.

   3. Under General, click Shutdown.

   4. In the Startup/Shutdown Credentials page, enter your credentials.

      See Shutting Down and Starting Up Using Oracle Enterprise Manager Database Control for more information.

   5. After the shutdown completes, click Startup.