Oracle10g 预定义主要角色(二)

2014-11-24 17:51:51 · 作者: · 浏览: 2
E YES YES
DBA SELECT_CATALOG_ROLE YES YES
DBA EXP_FULL_DATABASE NO YES
DBA GATHER_SYSTEM_STATISTICS NO YES
DBA IMP_FULL_DATABASE NO YES


8 rows selected.


SQL>


4.IMP_FULL_DATABASE 角色


SQL> select count(*) from dba_sys_privs where grantee = 'IMP_FULL_DATABASE';


COUNT(*)
----------
68


SQL> select count(*) from dba_tab_privs where grantee = 'IMP_FULL_DATABASE';


COUNT(*)
----------
14


SQL> select * from dba_role_privs where grantee = 'IMP_FULL_DATABASE';


GRANTEE GRANTED_ROLE ADM DEF
------------------------------ ------------------------------ --- ---
IMP_FULL_DATABASE EXECUTE_CATALOG_ROLE NO YES
IMP_FULL_DATABASE SELECT_CATALOG_ROLE NO YES


SQL>


5.EXP_FULL_DATABASE 角色


SQL> select * from dba_sys_privs where grantee = 'EXP_FULL_DATABASE';


GRANTEE PRIVILEGE ADM
------------------------------ ---------------------------------------- ---
EXP_FULL_DATABASE READ ANY FILE GROUP NO
EXP_FULL_DATABASE RESUMABLE NO
EXP_FULL_DATABASE EXECUTE ANY PROCEDURE NO
EXP_FULL_DATABASE EXECUTE ANY TYPE NO
EXP_FULL_DATABASE SELECT ANY TABLE NO
EXP_FULL_DATABASE ADMINISTER RESOURCE MANAGER NO
EXP_FULL_DATABASE BACKUP ANY TABLE NO
EXP_FULL_DATABASE SELECT ANY SEQUENCE NO


8 rows selected.


SQL> select count(*) from dba_tab_privs where grantee = 'EXP_FULL_DATABASE';


COUNT(*)
----------
39


SQL> select * from dba_role_privs where grantee = 'EXP_FULL_DATABASE';


GRANTEE GRANTED_ROLE ADM DEF
------------------------------ ------------------------------ --- ---
EXP_FULL_DATABASE EXECUTE_CATALOG_ROLE NO YES
EXP_FULL_DATABASE SELECT_CATALOG_ROLE NO YES


SQL>


6.DELETE_CATALOG_ROLE 角色


这个角色是Oracle8新增加的,如果授予用户这个角色,用户就可以从表sys.aud$和FGA_LOG$中删除记录,sys.aud$和FGA_LOG$表中记录着审计后的记录,使用这个角色可以简化审计踪迹管理。


SQL> select * from dba_sys_privs where grantee = 'DELETE_CATALOG_ROLE';


no rows selected


SQL> select owner, table_name, privilege, grantable from dba_tab_privs where grantee = 'DELETE_CATALOG_ROLE';


OWNER TABLE_NAME PRIVILEGE GRA
------------------------------ ------------------------------ ---------------------------------------- ---
SYS AUD$ DELETE NO
SYS FGA_LOG$ DELETE NO


SQL> select * from dba_role_privs where grantee = 'DELETE_CATALOG_ROLE';


no rows selected


SQL>


7.SELECT_CATALOG_ROLE 角色, 具有从数据字典查询的权利


SQL> select * from dba_sys_privs where grantee = 'SELECT_CATALOG_ROLE';


no rows selected


SQL> select count(*) from dba_tab_privs where gr