Oracle Privilege analysis #Quicktip

Here is a quick tip on Oracle privilege analysis. Frequently I want to find out all of the ways a user can get to an object for any privilege. DBA_TAB_PRIVS and DBA_ROLE_PRIVS are the two views I go to. I want to also see all the privileges that are granted on any object. This is good for starting at the user tracking privileges to the object, it’s also good for starting at an object and walking back to the user.
This query does a pivot on the users and roles to get the path to the object and what privileges are associated with that path.
===========================================================================

SELECT OWNER,

       TYPE,

       TABLE_NAME,

       GRANTEE_FROM,

       GRANTEE_TO,

       "'SELECT'" SEL,

       "'UPDATE'" UPD,

       "'INSERT'" INS,

       "'DELETE'" DEL,

       "'EXECUTE'" EXE,

       "'FLASHBACK'" FLSH,

       "'ON COMMIT REFRESH'" OCR,

       "'ALTER'" ALTR,

       "'DEQUEUE'" DEQ,

       "'INHERIT PRIVILEGES'" IPRV,

       "'DEBUG'" DBG,

       "'QUERY REWRITE'" QR,

       "'USE'" US,

       "'READ'" RD,

       "'WRITE'" WT,

       "'INDEX'" IDX,

       "'REFERENCES'" REF

FROM (SELECT R.GRANTEE "GRANTEE_TO",

             T.GRANTEE GRANTEE_FROM,

             T.GRANTABLE,

             T.owner,

             T.table_name,

             T.TYPE,

             T.PRIVILEGE

      FROM DBA_TAB_PRIVS T,

      DBA_ROLE_PRIVS R

      WHERE T.GRANTEE = R.GRANTED_ROLE (+)

        AND t.grantee != 'SYS'

        AND t.grantee != 'SYSTEM'

        AND R.GRANTEE != 'SYS'

        AND R.GRANTEE != 'SYSTEM' )

PIVOT (COUNT(PRIVILEGE) FOR PRIVILEGE IN ('SELECT',

                                          'UPDATE',

                                          'INSERT',

                                          'DELETE',

                                          'EXECUTE',

                                          'FLASHBACK',

                                          'ON COMMIT REFRESH',

                                          'ALTER',

                                          'DEQUEUE',

                                          'INHERIT PRIVILEGES',

                                          'DEBUG',

                                          'QUERY REWRITE',

                                          'USE',

                                          'READ',

                                          'WRITE',

                                          'INDEX',

                                          'REFERENCES'))

ORDER BY TABLE_NAME;