Oracle用戶權限的管理
2024-08-29 13:51:52
供稿：網友
Oracle系統中用戶權限的賦予,查看和治理.
在Oracle數據庫中,用戶的權限分為兩種(在這里我們不討論dba或dboPR的權限,只考慮普通用戶的權限),分別是System Privilege系統權限 和User Table Privilege用戶數據表權限.
1.首先,創建用戶,以下幾條命令可以創建一個用戶,前提是必須以DBA的身份登錄(假如你不是DBA,不要看下去了):
create user DB_USER identified by DB_USER_PW '創建用戶DB_USER,密碼為DB_USER_PW
grant create session to DB_USER '給用戶創建會話的權限
grant resource to DB_USER
2.當用戶建立后,會自動在Oracle數據庫系統中生成屬于該用戶的Scheme (可以理解為所有屬于該用戶的表,視圖....等對象的集合).
該用戶可以將對這些對象的訪問權限賦予其它的系統用戶.
3.該用戶用sqlplus登錄后,以下命令可以看到該用戶的權限(該部分取自于CNOUG網站):
本用戶讀取其他用戶對象的權限:
select * from user_tab_privs;
本用戶所擁有的系統權限:
select * from user_sys_privs;
4. System Privilege列表
PRIVILEGE NAME PROPERTY
---------- ---------------------------------------- ----------
-228 ADMINISTER DATABASE TRIGGER 0
-227 ADMINISTER RESOURCE MANAGER 1
-62 ALTER ANY CLUSTER 0
-216 ALTER ANY DIMENSION 0
-72 ALTER ANY INDEX 0
-207 ALTER ANY INDEXTYPE 0
-190 ALTER ANY LIBRARY 0
-225 ALTER ANY OUTLINE 0
-142 ALTER ANY PROCEDURE 0
-128 ALTER ANY ROLE 0
-107 ALTER ANY SEQUENCE 0
-174 ALTER ANY SNAPSHOT 0
-42 ALTER ANY TABLE 0
-153 ALTER ANY TRIGGER 0
-182 ALTER ANY TYPE 0
-135 ALTER DATABASE 0
-202 ALTER OperaTOR 0
-161 ALTER PROFILE 0
-163 ALTER RESOURCE COST 0
-31 ALTER ROLLBACK SEGMENT 0
-6 ALTER SESSION 0
-3 ALTER SYSTEM 0
-11 ALTER TABLESPACE 0
-22 ALTER USER 0
-165 ANALYZE ANY 0
-130 AUDIT ANY 0
-4 AUDIT SYSTEM 0
-43 BACKUP ANY TABLE 0
-21 BECOME USER 0
-46 COMMENT ANY TABLE 0
-61 CREATE ANY CLUSTER 0
-222 CREATE ANY CONTEXT 0
-215 CREATE ANY DIMENSION 0
-177 CREATE ANY DirectorY 0
-71 CREATE ANY INDEX 0
-206 CREATE ANY INDEXTYPE 0
-189 CREATE ANY LIBRARY 0
-201 CREATE ANY OPERATOR 0
-224 CREATE ANY OUTLINE 0
-141 CREATE ANY PROCEDURE 0
-106 CREATE ANY SEQUENCE 0
-173 CREATE ANY SNAPSHOT 0
-81 CREATE ANY SYNONYM 0
-41 CREATE ANY TABLE 0
-152 CREATE ANY TRIGGER 0
-181 CREATE ANY TYPE 0
-91 CREATE ANY VIEW 0
-60 CREATE CLUSTER 0
-115 CREATE DATABASE LINK 0
-214 CREATE DIMENSION 0
-205 CREATE INDEXTYPE 0
-188 CREATE LIBRARY 0
-200 CREATE OPERATOR 0
-140 CREATE PROCEDURE 0
-160 CREATE PROFILE 0
-120 CREATE PUBLIC DATABASE LINK 0
-85 CREATE PUBLIC SYNONYM 0
-125 CREATE ROLE 0
-30 CREATE ROLLBACK SEGMENT 0
-105 CREATE SEQUENCE 0
-5 CREATE SESSION 0
-172 CREATE SNAPSHOT 0
-80 CREATE SYNONYM 0
-40 CREATE TABLE 0
-10 CREATE TABLESPACE 0
-151 CREATE TRIGGER 0
-180 CREATE TYPE 0
-20 CREATE USER 0
-90 CREATE VIEW 0
-50 DELETE ANY TABLE 0
-220 DEQUEUE ANY QUEUE 1
-63 DROP ANY CLUSTER 0
-223 DROP ANY CONTEXT 0
-217 DROP ANY DIMENSION 0
-178 DROP ANY DIRECTORY 0
-73 DROP ANY INDEX 0
-208 DROP ANY INDEXTYPE 0
-191 DROP ANY LIBRARY 0
-203 DROP ANY OPERATOR 0
-226 DROP ANY OUTLINE 0
-143 DROP ANY PROCEDURE 0
-126 DROP ANY ROLE 0
-108 DROP ANY SEQUENCE 0
-175 DROP ANY SNAPSHOT 0
-82 DROP ANY SYNONYM 0
-44 DROP ANY TABLE 0
-154 DROP ANY TRIGGER 0
-183 DROP ANY TYPE 0
-92 DROP ANY VIEW 0
-162 DROP PROFILE 0
-121 DROP PUBLIC DATABASE LINK 0
-86 DROP PUBLIC SYNONYM 0
-32 DROP ROLLBACK SEGMENT 0
-13 DROP TABLESPACE 0
-23 DROP USER 0
-219 ENQUEUE ANY QUEUE 1
-212 EXECUTE ANY INDEXTYPE 0
-192 EXECUTE ANY LIBRARY 0
-204 EXECUTE ANY OPERATOR 0
-144 EXECUTE ANY PROCEDURE 0
-184 EXECUTE ANY TYPE 0
-209 EXTENDS ANY TYPE 0
-186 EXTENDS TYPE 0
-139 FORCE ANY TRANSACTION 0
-138 FORCE TRANSACTION 0
-211 GLOBAL QUERY REWRITE 0
-167 GRANT ANY PRIVILEGE 0
-127 GRANT ANY ROLE 0
-48 INSERT ANY TABLE 0
-45 LOCK ANY TABLE 0
-218 MANAGE ANY QUEUE 1
-12 MANAGE TABLESPACE 0
-210 QUERY REWRITE 0
-198 READUP 0
-195 READUP DBHIGH 0
-7 RESTRICTED SESSION 0
-109 SELECT ANY SEQUENCE 0
-47 SELECT ANY TABLE 0
-83 SYSDBA 0
-84 SYSOPER 0
-15 UNLIMITED TABLESPACE 0
-49 UPDATE ANY TABLE 0
-197 WRITEDOWN 0
-194 WRITEDOWN DBLOW 0
-199 WRITEUP 0
-196 WRITEUP DBHIGH
