Starting and stopping privilege analysis

To start capturing privileges, you'll enable privilege analysis policies you created in the previous recipes.

Getting ready

You'll need an existing user who can manage privilege analysis policies (has the CAPTURE_ADMIN role and the SELECT ANY DICTIONARY privilege), for example, the SYSTEM user.

How to do it...

1. Connect to the database as system or a user who has appropriate privileges:

   $ sqlplus system
   

2. List all existing privilege analysis policies by querying DBA_PRIV_CAPTURES.

   

   Figure 20 - Finding all defined policies

3. Enable a privilege analysis (for example, ALL_PRIV_POL, which you created in the first recipe in this chapter):

   SQL> BEGIN
       SYS.DBMS_PRIVILEGE_CAPTURE.ENABLE_CAPTURE(
   	name => '<policy_name>');
   	END;
   	/
   

   

   Figure 21 - Start capturing all privileges

4. Connect to the database as the user alan and view the first names of employees who have salary less than 1000:

   

   Figure 22 - the first test of select privilege

5. Find first names of employees...