sql >> Databasteknik >  >> RDS >> Oracle

Hur kontrollerar man privilegierna (DDL,DML,DCL) på objekt som tilldelats Schema, Roller i Oracle Database?

Litt kort om prefix för dataordbok:

ALL_    -Describes PUBLIC Object grants.
USER_   -Describes current user Object grants.
DBA_    -Describes all object grants in the database.

Användbar information om vyer:

ROLE_ROLE_PRIVS     -describes the roles granted to other roles. 
ROLE_SYS_PRIVS      -describes system privileges granted to roles.
ROLE_TAB_PRIVS      -describes table privileges granted to roles. 
DBA_ROLE_PRIVS      -describes the roles granted to all users and roles in the database.
DBA_SYS_PRIVS       -describes system privileges granted to users and roles.
DBA_TAB_PRIVS       -describes all object grants in the database.
DBA_COL_PRIVS       -describes all column object grants in the database.

För att veta mer om PRIVS visningar besök här .

Frågor:

-Om användar-/schemastatus

select username,account_status, created from dba_users where username in ('SCOTT');

-Kontrollera de roller som tilldelats roll och schema

select * from DBA_ROLE_PRIVS where grantee in ('SCOTT','RESOURCE');

-Kontrollera rollbehörigheterna

select * from ROLE_ROLE_PRIVS where role in ('RESOURCE','CONNECT');    
select * from ROLE_TAB_PRIVS  where role in ('RESOURCE','CONNECT');
select * from ROLE_SYS_PRIVS  where role in ('RESOURCE','CONNECT');

Pseudo Code:
select 'grant '||privilege||' to ROLE_SLAVE;' from ROLE_SYS_PRIVS where role in ('RESOURCE','CONNECT');
select 'grant '||privilege||' to ROLE_SLAVE;' from ROLE_TAB_PRIVS where role in ('RESOURCE','CONNECT');

-Kontrollera privilegier för beviljade objekt för schema

select * from DBA_SYS_PRIVS where grantee in ('SCOTT');
select * from DBA_TAB_PRIVS where grantee in ('SCOTT');
select * from DBA_COL_PRIVS where grantee in ('SCOTT');

Pseudo Code: 
select 'grant '||privilege||' to SCOTT_SLAVE;' from DBA_SYS_PRIVS where grantee in ('SCOTT');
select 'grant '||privilege||' on '||owner||'.'||table_name||' to SCOTT_SLAVE;' from DBA_TAB_PRIVS where grantee in ('SCOTT');
select 'grant '||privilege||' ('||column_name||') '||' on '||owner||'.'||table_name||' to SCOTT_SLAVE;' from DBA_COL_PRIVS where grantee in ('SCOTT');

Tack!




  1. Brett varchar-fält orsakar Begärd konvertering stöds inte fel med openquery med MySQL-länkad server

  2. Geonames databas:få en fullständig hierarki (land -> admin1 -> admin2 -> stad) med en enda mysql-fråga

  3. MySQL REGEXP ordgränser [[:<:]] [[:>:]] och dubbla citattecken

  4. Ta bort poster från mer än 1 år sedan