Grant system views to app user

Question

Hi all,
11.2.0.1
Tha batch process at night encounters lock problem hence their report generations affected and delayed.
I give the operators this command, so that they will kill or stop the process holding the lock:
SELECT TO_CHAR(sysdate,'DD-MON-YYYY HH24:MI:SS')||' User '||s1.username||'@'|| s1.machine||' ( SID= '|| s1.sid||
        ' ) with the statement: '||sqlt2.sql_text||' is blocking the SQL statement on '||s2.username||'@'||s2.machine||
        ' ( SID='||s2.sid||' ) blocked SQL -> '||sqlt1.sql_text AS blocking_status
   FROM Gv$lock l1,Gv$session s1,Gv$lock l2,Gv$session s2,Gv$sql sqlt1,Gv$sql sqlt2
  WHERE s1.sid =l1.sid
    AND s2.sid =l2.sid
    AND sqlt1.sql_id= s2.sql_id
    AND sqlt2.sql_id= s1.prev_sql_id
    AND l1.BLOCK =1
    AND l2.request > 0
    AND l1.id1 = l2.id1
    AND l2.id2 = l2.id2;
But this needs system views and can not run to the app user id.
In connection to the ruling of security audit or without breaching it , do I need to grant select to all the system views being accessed by this script to the app user, then create synonyms to it 1 by 1?
Or is there a one time grant for all system views? So I do not need to type one  by one plus creating the synonyms so that I may not miss any?
Thanks,
petra k.

Answer 1

f55237a7-2c38-4db3-a7a3-1d77256f0730 wrote:
Hi all,
11.2.0.1
Tha batch process at night encounters lock problem hence their report generations halted.
I give the operators this command, so that they will kill or stop the process holding the lock:
SELECT TO_CHAR(sysdate,'DD-MON-YYYY HH24:MI:SS')||' User '||s1.username||'@'|| s1.machine||' ( SID= '|| s1.sid||
        ' ) with the statement: '||sqlt2.sql_text||' is blocking the SQL statement on '||s2.username||'@'||s2.machine||
        ' ( SID='||s2.sid||' ) blocked SQL -> '||sqlt1.sql_text AS blocking_status
   FROM Gv$lock l1,Gv$session s1,Gv$lock l2,Gv$session s2,Gv$sql sqlt1,Gv$sql sqlt2
  WHERE s1.sid =l1.sid
    AND s2.sid =l2.sid
    AND sqlt1.sql_id= s2.sql_id
    AND sqlt2.sql_id= s1.prev_sql_id
    AND l1.BLOCK =1
    AND l2.request > 0
    AND l1.id1 = l2.id1
    AND l2.id2 = l2.id2;
But this needs system views and can not run to the app user id.
In view of the security audit or without breaching it , do I need to grant select to all the system views being accessed by this script to the app user, then create synoyms to it 1 by 1?
Or is there a one time grant for all system views? So I do not need to type one  by one so that I may not miss any?
Thanks,
petra k.
while posted approach will eventually work, it is like making three left turns around the block;
instead of making a single right term.
Place the desired SQL into a procedure (FIND_LOCKER) owned by highly privileged schema; then do as below
GRANT EXECUTE ON FIND_LOCKER TO OPERATOR_USER;