用户权限角色.ppt

Controlling User Access(控制用户访问) Objectives After completing this lesson, you should be able to do the following: Create users(创建用户) Create roles to ease setup and maintenance of the security model(创建角色) Use the GRANT and REVOKE statements to grant and revoke object privileges(授予和回收权限) Controlling User Access(控制用户概述) Creating Users(创建用户) The DBA creates users by using the CREATE USER statement. User System Privileges(用户的系统权限) Once a user is created, the DBA can grant specific system privileges to a user.(DBA赋予用户系统权限) An application developer, for example, may have the following system privileges:(最常用的用户系统权限) CREATE SESSION CREATE TABLE CREATE SEQUENCE CREATE VIEW CREATE PROCEDURE Granting System Privileges(赋权限) The DBA can grant a user specific system privileges. What is a Role?(角色的概念) Creating and Granting Privileges to a Role(创建角色，赋予权限) Create a role(创建角色) Grant privileges to a role(赋予角色权限) Grant a role to users(赋予用户角色) Object Privileges(对象权限) Object Privilege Table View Sequence Procedure ALTER ? ? DELETE ? ? EXECUTE ? INDEX ? INSERT ? ? REFERENCES ? ? SELECT ? ? ? UPDATE ? ? Granting Object Privileges(例子) Grant query privileges on the EMPLOYEES table. Grant privileges to update specific columns to users and roles. Using the WITH GRANT OPTION and PUBLIC Keywords Give a user authority to pass along privileges.(With grant option可传递权限) Allow all users on the system to query data from Alice’s DEPARTMENTS table.(Public是所有用户) How to Revoke Object Privileges(回收权限) You use the REVOKE statement to revoke privileges granted to other users. Privileges granted to others through the WITH GRANT OPTION clause are also revoked.(With grant option权限也同时回收) Revoking Object Privileges(回收权限例子) As user Alice, revoke the SELECT and INSERT privileges given to user Scott on the DEPARTMENTS table. Summary(小结) Statement Action CREATE USER Creates a user (usually performed by a DBA) GRANT G