《19管理角色》-课件设计（公开）.pptVIP

目标 角色 角色的好处 比较容易的权限管理 动态的权限管理 选择权限的可获得性 可通过操作系统授予 创建角色 角色被自动授予 with ADMIN option: 不用标识: 使用口令: 由外部标识: 预定义角色 修改角色 角色的授权 建立默认角色 应用角色 应用角色只能由授权的 PL/SQL 软件包激活。 使用 USING 软件包子句来创建一个应用角色。 激活和禁止角色 禁止一个角色临时地从一个用户收回该角色。 激活一个角色将临时地授予该角色。 SET ROLE 命令激活和禁止角色。 默认角色在用户登录时激活。 在激活一个角色时可能需要口令。 激活和禁止角色 SET ROLE hr_clerk; 从用户那回收角色 删除角色 删除角色: 从所有用户和所授权的角色那删除该角色。 从数据库中删除该角色。 需要 ADMIN OPTION 或 DROP ANY ROLE 权限 删除一个角色: 创建角色指南 使用口令和默认角色指南 获得角色的信息 本课程版权归北风网所有 欢迎访问我们的官方网站 Assigning Roles To grant a role to a user, use the same syntax command that you used to grant a system privilege to a user: GRANT role [, role ]... TO {user|role|PUBLIC} [, {user|role|PUBLIC} ]... [WITH ADMIN OPTION] where: role: Is a collection of roles to be granted PUBLIC: Grants the role to all users WITH ADMIN OPTION: Enables the grantee to grant the role to other users or roles. (If you grant a role with this option, then the grantee can grant and revoke the role from other users and alter or drop the role.) Establishing Default Roles A user can be assigned many roles. A default role is a subset of these roles that is automatically enabled when the user logs on. By default, all the roles assigned to a user are enabled at logon without the need of a password. Limit the default roles for a user with the ALTER USER command. The DEFAULT ROLE clause applies only to roles that have been granted directly to the user with a GRANT statement. The DEFAULT ROLE clause cannot be used to enable the following: Roles not granted to the user Roles granted through other roles Roles managed by an external service (such as the operating system) Use the following syntax to assign default roles to a user: ALTER USER user DEFAULT ROLE {role [,role]... | ALL [EXCEPT role [,role]... ] | NONE} where: user: Is the name of the user who is granted the roles role: Is the role to be made the default role for the user Application Roles The USING package clause in the CREATE ROLE statement creates an application role. An applic