第五章oracle 安全结构.pptVIP

课后练习 1、简述权限的作用与分类。 2、请为一个大学的门户网站设计其ORACLE 安全模型。 3、简述ORACLE PROFILE文件的作用。 4、简述保护数据库完整性的方法。 * What Is a Schema? A schema is a named collection of objects such as tables, views, clusters, procedures, and packages associated with a particular user. When a database user is created, a corresponding schema with the same name is created for that user. A user can be associated only with a schema of the same name, and therefore username and schema are often used interchangeably. The slide shows some of the objects that users can own in an Oracle database. * Security Domain The database administrator defines the names of the users allowed to access a database. A security domain defines the settings that apply to the user. Authentication Mechanism A user who needs access to the database can be authenticated by one of the following: Data Dictionary Operating system Network The means of authentication is specified at the time the user is defined in the database and can be altered later. This lesson covers authentication by database and by operating system only. Note: Refer to Getting Started with Oracle lesson for details regarding operating system authentication using roles. Authentication through the network is covered in the course DBA Fundamentals II. * Tablespace Quotas Use the following query to find the default_tablespace for all users. SELECT username, default_tablespace FROM dba_users; USERNAME DEFAULT_TABLESPACE ----------- ------------------ SYS SYSTEM SYSTEM SYSTEM OUTLN SYSTEM DBSNMP SYSTEM HR EXAMPLE OE EXAMPLE * System Privileges: Examples There is no CREATE INDEX privilege. CREATE TABLE includes the CREATE INDEX and the ANALYZE commands. The user must have a quota for the tablespace or must have been granted UNLIMITED TABLESPACE. Privileges such as CREATE TABLE, CR