Important alert: (current site time 7/15/2013 8:00:56 PM EDT)
 

winzip icon

log on as another user without knowing their password

Email
Submitted on: 4/3/2009 9:20:15 AM
By: Andy Archer 
Level: Advanced
User Rating: By 5 Users
Compatibility: Oracle
Views: 10359
author picture
(About the author)
 
     This SQL*Plus script provides a means to log on as another user without having to know their password. Useful for troubleshooting when application functionality is mapped to specific users and/or roles.
 
winzip iconDownload code

Note: Due to the size or complexity of this submission, the author has submitted it as a .zip file to shorten your download time. Afterdownloading it, you will need a program like Winzip to decompress it.Virus note:All files are scanned once-a-day by Planet Source Code for viruses, but new viruses come out every day, so no prevention program can catch 100% of them. For your own safety, please:
  1. Re-scan downloaded files using your personal virus checker before using it.
  2. NEVER, EVER run compiled files (.exe's, .ocx's, .dll's etc.)--only run source code.

If you don't have a virus scanner, you can get one at many places on the net including:McAfee.com

 
Terms of Agreement:   
By using this code, you agree to the following terms...   
  1. You may use this code in your own programs (and may compile it into a program and distribute it in compiled format for languages that allow it) freely and with no charge.
  2. You MAY NOT redistribute this code (for example to a web site) without written permission from the original author. Failure to do so is a violation of copyright laws.   
  3. You may link to this code from another website, but ONLY if it is not wrapped in a frame. 
  4. You will abide by any additional copyright restrictions which the author may have placed in the code or code's description.


Other 123 submission(s) by this author

 


Report Bad Submission
Use this form to tell us if this entry should be deleted (i.e contains no code, is a virus, etc.).
This submission should be removed because:

Your Vote

What do you think of this code (in the Advanced category)?
(The code with your highest vote will win this month's coding contest!)
Excellent  Good  Average  Below Average  Poor (See voting log ...)
 

Other User Comments
9/11/2006 7:34:36 PMCharles Kincaid

So, must you have the authority to change the other users password? If I was setting up an installation for SQL Server the ability to affect security, including changing passwords other than your own, is the first thing that I restrict.
(If this comment was disrespectful, please report it.)

 
9/13/2006 7:56:43 PMAndy Archer

Yes, in Oracle you must have a specific privilege to be able to change another's password. This privilege resides at a high admin level, from where it can be granted to other users, like application DBAs. The ability to reset a user's password from its encrypted value is an undocumented feature of the privilege, and makes possible my "trick" submission.
(If this comment was disrespectful, please report it.)

 
9/17/2006 5:06:46 PMmbrowne

Nice rendition of a classic bit of undocumented Oracle functionality.
(If this comment was disrespectful, please report it.)

 
10/6/2006 1:31:01 PMAndy Archer

And, of course, the ability for a DBA or administrator to be able to change a user's password (the first part of my submission) is necessary when a user forgets their password.
(If this comment was disrespectful, please report it.)

 

Add Your Feedback
Your feedback will be posted below and an email sent to the author. Please remember that the author was kind enough to share this with you, so any criticisms must be stated politely, or they will be deleted. (For feedback not related to this particular code, please click here instead.)
 

To post feedback, first please login.