Oracle (2) Permission Management

Oracle (2) permission management system permissions and object permissions (authorization and revocation) // system permissions www.2cto.com grant create session to lisi; grant create table to lisi; grant unlimited tablespace to lisi; revoke create session from lisi; revoke create table from lisi; revoke unlimited tablespace from lisi; // grant the create session permission to all users. grant the create session to public select * from user_sys_privs command to check which system permissions the current user has. // grant the object permission selecton mytable to lisi grant insert on mytable lisi grant all on mytable to lisi; revoke selecton mytable from lisi revoke insert on mytable from lisi revoke all on mytable from lisi; select * from user_tab_privs check which object permissions the current user has to control the permission on the column. // grant permissions to lisi. Only the grant update (name) column of field name can be updated) on mytable to lisi grant insert (name) on mytable to lisi select * from user_col_privs: the system permission transfer grant alter any table to lisi with admin option object permission transfer of the system permission cannot be controlled to the column www.2cto.com: grant select on tablename to lisi with grant option role (permission) create role myrole; grant create session to myrole; grant create table to myrole; create user zhangsan identified by zhangsan; grant myrole to zhangsan; Delete role drop role myrole; note: some system permissions cannot be directly assigned to the role only to the user (because the permissions are too large) create table/create any table ("any" indicates not only creating tables for yourself, but also creating tables for other users) [alter table] alter any table [drop table] drop any table these two permissions do not have alter table, drop table is belong to a user role does not belong to a user, that is to say, as long as one user creates a role, another user can unconditionally use this role oracle grant connect. The CONNECT role included by resource to user: -- is a typical right granted to end users, basic www.2cto.com alter session -- modify session create cluster -- create database link -- create sequence -- create session -- create synonym -- create view -- create a view RESOURCE role: -- create cluster -- create procedure -- create sequence -- create table -- create trigger -- create type but actual search in oracle 10 2.0.1.0, the permissions of the two roles are as follows: log on to oracle using sys and execute the following two statements: select * from role_sys_privs where role like 'connect '; -- query the connect ROLE permission select * from role_sys_privs where role like 'resource'; -- query the resource role permission www.2cto.com connect role: -- is a typical right granted to end users, the most basic create session -- creates a session resource role: -- create cluster -- create procedure -- create sequence -- create table -- create trigger -- create type -- create operator -- create indextype -- create table author kyle8525_nsn