인가되지 않은 GRANT OPTION 사용 제한

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11

-- GRANT OPTION이 부여된 권한 확인
SELECT grantee, owner, table_name, grantor, privilege
FROM dba_tab_privs
WHERE grantable = 'YES'
AND grantee NOT IN ('SYS', 'SYSTEM', 'DBA');

-- 시스템 권한의 GRANT OPTION 확인
SELECT grantee, privilege, admin_option
FROM dba_sys_privs
WHERE admin_option = 'YES'
AND grantee NOT IN ('SYS', 'SYSTEM', 'DBA');

1
2
3
4

-- GRANT OPTION 확인
SELECT grantor, grantee, table_schema, table_name, privilege, is_grantable
FROM information_schema.role_table_grants
WHERE is_grantable = 'YES';

1
2
3
4
5
6
7

-- GRANT OPTION 제거 후 재부여
REVOKE <권한> ON <Object> FROM user;
GRANT <권한> ON <Object> TO user;

-- 예시
REVOKE SELECT ON sensitive_table FROM general_user;
GRANT SELECT ON sensitive_table TO general_user;

1
2
3
4
5
6

-- GRANT OPTION 제거
REVOKE GRANT OPTION FOR SELECT ON table_name FROM user;

-- 또는 권한 회수 후 재부여
REVOKE ALL PRIVILEGES ON table_name FROM user;
GRANT SELECT ON table_name TO user;