Oracle系统中用户权限的赋予,查看和治理.
在Oracle数据库中,用户的权限分为两种(在这里我们不讨论dba或dbopr的权限,只考虑普通用户的权限),分别是System Privilege系统权限 和User Table Privilege用户数据表权限.
1.首先,创建用户,以下几条命令可以创建一个用户,前提是必须以DBA的身份登录(假如你不是DBA,不要看下去了):
create user DB_USER identified by DB_USER_PW '创建用户DB_USER,密码为DB_USER_PW
grant create session to DB_USER '给用户创建会话的权限
grant resource to DB_USER
2.当用户建立后,会自动在Oracle数据库系统中生成属于该用户的Scheme (可以理解为所有属于该用户的表,视图....等对象的集合).
该用户可以将对这些对象的访问权限赋予其它的系统用户.
3.该用户用sqlplus登录后,以下命令可以看到该用户的权限(该部分取自于CNOUG网站):
本用户读取其他用户对象的权限:
select * from user_tab_privs;
本用户所拥有的系统权限:
select * from user_sys_privs;
4. System Privilege列表
PRIVILEGE NAME PROPERTY
---------- ---------------------------------------- ----------
-228 ADMINISTER DATABASE TRIGGER 0
-227 ADMINISTER RESOURCE MANAGER 1
-62 ALTER ANY CLUSTER 0
-216 ALTER ANY DIMENSION 0
-72 ALTER ANY INDEX 0
-207 ALTER ANY INDEXTYPE 0
-190 ALTER ANY LIBRARY 0
-225 ALTER ANY OUTLINE 0
-142 ALTER ANY PROCEDURE 0
-128 ALTER ANY ROLE 0
-107 ALTER ANY SEQUENCE 0
-174 ALTER ANY SNAPSHOT 0
-42 ALTER ANY TABLE 0
-153 ALTER ANY TRIGGER 0
-182 ALTER ANY TYPE 0
-135 ALTER DATABASE 0
-202 ALTER OPERATOR 0
-161 ALTER PROFILE 0
-163 ALTER RESOURCE COST 0
-31 ALTER ROLLBACK SEGMENT 0
-6 ALTER SESSION 0
-3 ALTER SYSTEM 0
-11 ALTER TABLESPACE 0
-22 ALTER USER 0
-165 ANALYZE ANY 0
-130 AUDIT ANY 0
-4 AUDIT SYSTEM 0
-43 BACKUP ANY TABLE 0
-21 BECOME USER 0
-46 COMMENT ANY TABLE 0
-61 CREATE ANY CLUSTER 0
-222 CREATE ANY CONTEXT 0
-215 CREATE ANY DIMENSION 0
-177 CREATE ANY DirectorY 0
-71 CREATE ANY INDEX 0
-206 CREATE ANY INDEXTYPE 0
-189 CREATE ANY LIBRARY 0
-201 CREATE ANY OPERATOR 0
-224 CREATE ANY OUTLINE 0
-141 CREATE ANY PROCEDURE 0
-106 CREATE ANY SEQUENCE 0
-173 CREATE ANY SNAPSHOT 0
-81 CREATE ANY SYNONYM 0
-41 CREATE ANY TABLE 0
-152 CREATE ANY TRIGGER 0
-181 CREATE ANY TYPE 0
-91 CREATE ANY VIEW 0
-60 CREATE CLUSTER 0
-115 CREATE DATABASE LINK 0
-214 CREATE DIMENSION 0
-205 CREATE INDEXTYPE 0
-188 CREATE LIBRARY 0
-200 CREATE OPERATOR 0
-140 CREATE PROCEDURE 0
-160 CREATE PROFILE 0
-120 CREATE PUBLIC DATABASE LINK 0
-85 CREATE PUBLIC SYNONYM 0
-125 CREATE ROLE 0
-30 CREATE ROLLBACK SEGMENT 0
-105 CREATE SEQUENCE 0
-5 CREATE SESSION 0
-172 CREATE SNAPSHOT 0
-80 CREATE SYNONYM 0
-40 CREATE TABLE 0
-10 CREATE TABLESPACE 0
-151 CREATE TRIGGER 0
-180 CREATE TYPE 0
-20 CREATE USER 0
-90 CREATE VIEW 0
-50 DELETE ANY TABLE 0
-220 DEQUEUE ANY QUEUE 1
-63 DROP ANY CLUSTER 0
-223 DROP ANY CONTEXT 0
-217 DROP ANY DIMENSION 0
-178 DROP ANY DIRECTORY 0
-73 DROP ANY INDEX 0
-208 DROP ANY INDEXTYPE 0
-191 DROP ANY LIBRARY 0
-203 DROP ANY OPERATOR 0
-226 DROP ANY OUTLINE 0
-143 DROP ANY PROCEDURE 0
-126 DROP ANY ROLE 0
-108 DROP ANY SEQUENCE 0
-175 DROP ANY SNAPSHOT 0
-82 DROP ANY SYNONYM 0
-44 DROP ANY TABLE 0
-154 DROP ANY TRIGGER 0
-183 DROP ANY TYPE 0
-92 DROP ANY VIEW 0
-162 DROP PROFILE 0
-121 DROP PUBLIC DATABASE LINK 0
-86 DROP PUBLIC SYNONYM 0
-32 DROP ROLLBACK SEGMENT 0
-13 DROP TABLESPACE 0
-23 DROP USER 0
-219 ENQUEUE ANY QUEUE 1
-212 EXECUTE ANY INDEXTYPE 0
-192 EXECUTE ANY LIBRARY 0
-204 EXECUTE ANY OPERATOR 0
-144 EXECUTE ANY PROCEDURE 0
-184 EXECUTE ANY TYPE 0
-209 EXTENDS ANY TYPE 0
-186 EXTENDS TYPE 0
-139 FORCE ANY TRANSACTION 0
-138 FORCE TRANSACTION 0
-211 GLOBAL QUERY REWRITE 0
-167 GRANT ANY PRIVILEGE 0
-127 GRANT ANY ROLE 0
-48 INSERT ANY TABLE 0
-45 LOCK ANY TABLE 0
-218 MANAGE ANY QUEUE 1
-12 MANAGE TABLESPACE 0
-210 QUERY REWRITE 0
-198 READUP 0
-195 READUP DBHIGH 0
-7 RESTRICTED SESSION 0
-109 SELECT ANY SEQUENCE 0
-47 SELECT ANY TABLE 0
-83 SYSDBA 0
-84 SYSOPER 0
-15 UNLIMITED TABLESPACE 0
-49 UPDATE ANY TABLE 0
-197 WRITEDOWN 0
-194 WRITEDOWN DBLOW 0
-199 WRITEUP 0
-196 WRITEUP DBHIGH
