Find all system and object privs granted to a user

Question

I need a query to find out all sys and ibject qyery given to a user. This is because a user was able to query all_directories few days ago in production instance, now he is unable to do it.
I found a query to find all roles inside a role. This role "APPS_QUERY_ROLE" has another 25 roles inside it. I want a query which will drill down to each role and "role within a role" to find all privileges associated to a role and hence to the user.

Answer 1

This may be helpful to you :
SYS@orcl> select 'create role ' || role || ';'
  2  from dba_roles
  3  where role = '&&role';
Enter value for role: APPS_QUERY_ROLE      <------Make sure it should be in CAPS
old   3: where role = '&&role'
new   3: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl> select 'grant ' || privilege || ' to &&role' ||
  2  decode(admin_option,'YES',' with admin option;','NO',';')
  3  from role_sys_privs
  4  where role = '&&role';
old   1: select 'grant ' || privilege || ' to &&role' ||
new   1: select 'grant ' || privilege || ' to APPS_QUERY_ROLE' ||
old   4: where role = '&&role'
new   4: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl> select 'grant ' || privilege || ' on ' || owner || '.' || table_name
  2  || ' to &&role ' || decode(grantable,'YES','with grant option;','NO',';')
  3  from role_tab_privs
  4  where role = '&&role';
old   2: || ' to &&role ' || decode(grantable,'YES','with grant option;','NO',';')
new   2: || ' to APPS_QUERY_ROLE ' || decode(grantable,'YES','with grant option;','NO',';')
old   4: where role = '&&role'
new   4: where role = 'APPS_QUERY_ROLE'
no rows selected
SYS@orcl>Source:Re: Help to Generate Role Creation Script
Regards
Girish Sharma