Function to see if a user has data dba role

Question

How would I create a function to establish is a user has data dba access?

Answer 1

Mark,
Your script does not display all system privileges granted to a user. Here is an example.
SQL> CREATE USER TESTUSER IDENTIFIED BY TESTUSER;
User created.
SQL> GRANT CREATE SESSION,CREATE TABLE TO TESTUSER;
Grant succeeded.
SQL> select u2.name granted_role
  2  from (
  3  select *
  4  from sys.sysauth$
  5  connect by prior privilege# = grantee#
  6  start with grantee# = ( select user_id
  7  from sys.dba_users
  8  where username = upper('&user_name')
  9  )
10  or grantee# = 1
11  ) sa
12  ,sys.user$ u2
13  where u2.user# = sa.privilege#
14  union all
15  select 'PUBLIC' from sys.dual
16  order by 1
17  ;
Enter value for user_name: TESTUSER
old   8: where username = upper('&user_name')
new   8: where username = upper('TESTUSER')
GRANTED_ROLE
PUBLIC
SQL> SELECT * FROM DBA_SYS_PRIVS
  2  WHERE GRANTEE = 'TESTUSER';
GRANTEE                        PRIVILEGE                                ADM
TESTUSER                       CREATE TABLE                             NO
TESTUSER                       CREATE SESSION                           NO
SQL> DISCONNECT
Disconnected from Oracle9i Enterprise Edition Release 9.2.0.3.0 - 64bit Production
With the Partitioning option
JServer Release 9.2.0.3.0 - Production
SQL> I have also noticed the following.
SQL> set define off
SQL> select u2.name granted_role
  2  from (
  3  select *
  4  from sys.sysauth$
  5  connect by prior privilege# = grantee#
  6  start with grantee# = ( select user_id
  7  from sys.dba_users
  8  where username = upper('&user_name')
  9  )
10  or grantee# = 1
11  ) sa
12  ,sys.user$ u2
13  where u2.user# = sa.privilege#
14  union all
15  select 'PUBLIC' from sys.dual
16  order by 1
17  ;
GRANTED_ROLE
PUBLIC
If some one sets 'define off', we will get the wrong result.
SQL> set define on
SQL> r
  1  select u2.name granted_role
  2  from (
  3  select *
  4  from sys.sysauth$
  5  connect by prior privilege# = grantee#
  6  start with grantee# = ( select user_id
  7  from sys.dba_users
  8  where username = upper('&user_name')
  9  )
10  or grantee# = 1
11  ) sa
12  ,sys.user$ u2
13  where u2.user# = sa.privilege#
14  union all
15  select 'PUBLIC' from sys.dual
16  order by 1
17*
Enter value for user_name: SCOTT
old   8: where username = upper('&user_name')
new   8: where username = upper('SCOTT')
GRANTED_ROLE
DBA
DELETE_CATALOG_ROLE
EXECUTE_CATALOG_ROLE
EXECUTE_CATALOG_ROLE
EXECUTE_CATALOG_ROLE
EXP_FULL_DATABASE
GATHER_SYSTEM_STATISTICS
HS_ADMIN_ROLE
HS_ADMIN_ROLE
HS_ADMIN_ROLE
HS_ADMIN_ROLE
HS_ADMIN_ROLE
HS_ADMIN_ROLE
HS_ADMIN_ROLE
IMP_FULL_DATABASE
JAVA_ADMIN
JAVA_DEPLOY
PUBLIC
RESOURCE
SELECT_CATALOG_ROLE
SELECT_CATALOG_ROLE
SELECT_CATALOG_ROLE
SELECT_CATALOG_ROLE
XDBADMIN
24 rows selected.
It produces multiple rows with the same values.