角色相关

hxl 发表于 2011-12-23 03:46

<DIV>角色相关视图:</DIV>
<DIV>1.role_sys_privs</DIV>
<DIV>查看角色用户的系统权限</DIV>
<DIV>
<DIV id=codeText class=codeText>
<OL style="PADDING-BOTTOM: 5px; MARGIN: 0px 1px 0px 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 5px" class=dp-css>
<LI> Select * </LI>
<LI>  From Role_Sys_Privs a </LI>
<LI> Where a.ROLE In('CONNECT','RESOURCE'); </LI>
<LI> </LI>
<LI>ROLE     PRIVILEGE         ADM </LI>
<LI>------------------------------ ---------------------------------------- --- </LI>
<LI> </LI>
<LI>CONNECT  CREATE SESSION    NO </LI>
<LI>RESOURCE CREATE SEQUENCE   NO </LI>
<LI>RESOURCE CREATE TRIGGER    NO </LI>
<LI>RESOURCE CREATE CLUSTER    NO </LI>
<LI>RESOURCE CREATE PROCEDURE  NO </LI>
<LI>RESOURCE CREATE TYPE       NO </LI>
<LI>RESOURCE CREATE OPERATOR   NO </LI>
<LI>RESOURCE CREATE TABLE      NO </LI>
<LI>RESOURCE CREATE INDEXTYPE  NO</LI></OL></DIV></DIV>
2.role_role_privs
查询某个角色所拥有的角色
<DIV id=codeText class=codeText>
<OL style="PADDING-BOTTOM: 5px; MARGIN: 0px 1px 0px 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 5px" class=dp-css>
<LI>SQL> Select * From role_role_privs a </LI>
<LI>  2 Where a.role = 'DBA'; </LI>
<LI> </LI>
<LI>ROLE   GRANTED_ROLE                ADM </LI>
<LI>------------------------------ ------------------------------ --- </LI>
<LI> </LI>
<LI>DBA OLAP_DBA                       NO </LI>
<LI>DBA SCHEDULER_ADMIN                YES </LI>
<LI>DBA DATAPUMP_IMP_FULL_DATABASE     NO </LI>
<LI>DBA OLAP_XS_ADMIN                  NO </LI>
<LI>DBA DELETE_CATALOG_ROLE            YES </LI>
<LI>DBA EXECUTE_CATALOG_ROLE           YES </LI>
<LI>DBA PLUSTRACE                      YES </LI>
<LI>DBA WM_ADMIN_ROLE                  NO </LI>
<LI>DBA EXP_FULL_DATABASE              NO </LI>
<LI>DBA SELECT_CATALOG_ROLE            YES </LI>
<LI>DBA JAVA_DEPLOY                    NO </LI>
<LI>DBA GATHER_SYSTEM_STATISTICS       NO </LI>
<LI>DBA XDB_SET_INVOKER                NO </LI>
<LI>DBA JAVA_ADMIN                     NO </LI>
<LI>DBA DATAPUMP_EXP_FULL_DATABASE     NO </LI>
<LI>DBA XDBADMIN                       NO </LI>
<LI>DBA IMP_FULL_DATABASE              NO</LI></OL></DIV>
3.role_tab_privs
查询某个角色所用户对表(select/insert/update/delete),过程(execute)的相应权限
<DIV id=codeText class=codeText>
<OL style="PADDING-BOTTOM: 5px; MARGIN: 0px 1px 0px 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 5px" class=dp-css>
<LI>SQL> Select Role,owner,table_name,privilege </LI>
<LI>  2 From role_tab_privs a </LI>
<LI>  3 Where a.role = 'GATHER_SYSTEM_STATISTICS'; </LI>
<LI> </LI>
<LI>ROLE OWNER TABLE_NAME PRIVILEGE </LI>
<LI>------------------------- ----- ---------- --------- </LI>
<LI> </LI>
<LI>GATHER_SYSTEM_STATISTICS SYS AUX_STATS$ UPDATE </LI>
<LI>GATHER_SYSTEM_STATISTICS SYS AUX_STATS$ SELECT </LI>
<LI>GATHER_SYSTEM_STATISTICS SYS AUX_STATS$ DELETE </LI>
<LI>GATHER_SYSTEM_STATISTICS SYS AUX_STATS$ INSERT</LI></OL></DIV>
4.创建用户开发的用户并赋予相应的角色
<DIV id=codeText class=codeText>
<OL style="PADDING-BOTTOM: 5px; MARGIN: 0px 1px 0px 0px; PADDING-LEFT: 0px; PADDING-RIGHT: 0px; PADDING-TOP: 5px" class=dp-css>
<LI>create user app_dev identified by app_dev </LI>
<LI>default tablespace tps_test; </LI>
<LI> </LI>
<LI>alter user app_dev </LI>
<LI>  quota unlimited on tps_test; </LI>
<LI>   </LI>
<LI>-- 相应开发角色 </LI>
<LI> </LI>
<LI>grant create sequence to app_dev; </LI>
<LI>grant create trigger to app_dev; </LI>
<LI>grant create cluster to app_dev; </LI>
<LI>grant create procedure to app_dev; </LI>
<LI>grant create type to app_dev; </LI>
<LI>grant create session to app_dev; </LI>
<LI>grant create operator to app_dev; </LI>
<LI>grant create table to app_dev; </LI>
<LI>grant create indextype to app_dev;</LI></OL></DIV>

页: [1]

Chinaunix's Archiver

角色相关