List URLs Accessible to a Permission List
By Chris Malek | Wed, Oct 10, 2012
Here is some SQL that will list all the component URLs accessible for a given permission list. I was doing some security auditing recently and I found this useful. I needed a list of all URL that a permission list had access to even if they were not listed in the portal navigation.
You need to modify the
a.classid = 'HCCPHP1000' where clause based on
your needs. This was generated for a HRMS database so the second column
returned may also need to be tweaked based on your installation.
select DISTINCT A.CLASSID, TRIM(DBMS_LOB.SUBSTR(U.URI_TEXT)) || 'EMPLOYEE/HRMS/c/' || trim(M.MENUNAME) || '.' || trim(M.PNLGRPNAME) || '.GBL' from psauthitem a, PSMENUITEM M, PSMSGNODEDEFN N , PSNODEURITEXT U WHERE A.MENUNAME = M.MENUNAME AND A.BARNAME = M.BARNAME AND A.BARITEMNAME = M.ITEMNAME AND N.ACTIVE_NODE = 1 AND N.LOCALNODE = 1 AND N.LOCALDEFAULTFLG = 'Y' AND N.MSGNODENAME = U.MSGNODENAME AND U.URI_TYPE = 'CN' and a.classid = 'HCCPHP1000' -- replace me ORDER BY 2;