Oracle数据库的安全和管理培训教材.ppt

System Privileges Each system privilege allows a user to perform a particular database operation or class of database operations. Object Privileges Each object privilege allows a user to perform a particular action on a specific object, such as a table, view, sequence, procedure, function or package. A DBA抯 control of privileges includes Providing a user the right to perform a type of operation. Granting and revoking access and changes to data. Granting and revoking access to perform system functions. Grants directly to users or to roles. ( Roles will be covered in another lesson.) Grants to all users (PUBLIC). There are approximately 82 system privileges and the number continues to grow. For the complete list, see Chapter 21, Managing User Privileges in the Oracle Server Administrator抯 Guide Release 8.0. Syntax Use the following command to grant a system privilege: GRANT system priv | role TO user | role | public [WITH ADMIN OPTION]; where: role is a role name to be granted the system privilege. PUBLIC grants system privileges to all users. WITH ADMIN OPTION allows the grantee to further grant the privilege or role to other users or roles. Guidelines To grant a system privilege, you must have been granted the WITH ADMIN OPTION privilege. Grants made WITH ADMIN OPTION are not hierarchical. Revoking a GRANT WITH ADMIN OPTION does not cascade. A DBA should be cautious about giving system privileges WITH ADMIN OPTION. OEM 1 Use Oracle Security Manager. 2 Highlight the username or role you wish to grant the privilege. 3 Highlight Privilege Type: System Privileges. 4 Select the system privilege you wish to grant. 5 Optionally check the WITH ADMIN OPTION box. 6 Click on Apply. SELECT * FROM SYS.DBA_SYS_PRIVS; GRANTEE PRIVILEGE