使用者的系統許可權,有的是直接賦予的,有的是通過角色間接賦予的。而角色也是可以授予直接系統許可權和其他角色許可權的,這樣,要查使用者的系統許可權,就要查詢出系統許可權和所有角色的系統許可權。下面就是運用Oracle的層次化查詢來完成這個功能的。
指令碼show_sys_privs.sql內容如下,帶一個參數(username):
SET VERIFY OFF
define v1=&1
select privilege
from dba_sys_privs a,
(select granted_role from dba_role_privs start with grantee=upper('&v1') connect by prior granted_role=grantee) b
where a.grantee=b.granted_role
group by privilege
UNION
SELECT PRIVILEGE
FROM DBA_SYS_PRIVS
WHERE GRANTEE=UPPER('&v1');
undefine v1
SET VERIFY ON
使用樣本:
d:/>sqlplus chennan/chennan@cwtest201
SQL*Plus: Release 9.2.0.8.0 - Production on 星期四 7月 10 12:32:12 2008
Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.
串連到:
Oracle9i Enterprise Edition Release 9.2.0.1.0 - Production
With the Partitioning, OLAP and Oracle Data Mining options
JServer Release 9.2.0.1.0 - Production
chennan@cwtest201>@show_sys_privs cwgladm
PRIVILEGE
----------------------------------------
ALTER SESSION
CREATE CLUSTER
CREATE DATABASE LINK
CREATE INDEXTYPE
CREATE OPERATOR
CREATE PROCEDURE
CREATE SEQUENCE
CREATE SESSION
CREATE SYNONYM
CREATE TABLE
CREATE TRIGGER
CREATE TYPE
CREATE VIEW
SELECT ANY DICTIONARY
UNLIMITED TABLESPACE
已選擇15行。
chennan@cwtest201>
-- The End --