SQL> select * from v$version;
SQL> set pages 50
SQL> select * from dba_roles;
ROLE PASSWORD
------------------------------ --------
CONNECT NO
RESOURCE NO
DBA NO
SELECT_CATALOG_ROLE NO
EXECUTE_CATALOG_ROLE NO
DELETE_CATALOG_ROLE NO
EXP_FULL_DATABASE NO
IMP_FULL_DATABASE NO
RECOVERY_CATALOG_OWNER NO
GATHER_SYSTEM_STATISTICS NO
LOGSTDBY_ADMINISTRATOR NO
AQ_ADMINISTRATOR_ROLE NO
AQ_USER_ROLE NO
GLOBAL_AQ_USER_ROLE GLOBAL
SCHEDULER_ADMIN NO
HS_ADMIN_ROLE NO
OEM_ADVISOR NO
OEM_MONITOR NO
MGMT_USER NO
PLUSTRACE NO
20 rows selected.
SQL>
1. CONNECT
2. RESOURCE
3. DBA
4. EXP_FULL_DATABASE
5. IMP_FULL_DATABASE
6. DELETE_CATALOG_ROLE
7. EXECUTE_CATALOG_ROLE
8. SELECT_CATALOG_ROLE
1-3是为了同ORACLE老版本中的概念相兼容而提供的，不能只依赖于这些ROLE
4-5是为了使用Import和Export实用程序的方便而提供的
6-8是为了数据字典视图和包的卸载而提供的
1.CONNECT 角色, 是授予最终用户的典型权利，最基本的
SQL> select * from dba_sys_privs where grantee = 'CONNECT'; --系统权限
GRANTEE PRIVILEGE ADM
------------------------------ ---------------------------------------- ---
CONNECT CREATE SESSION NO
SQL> select * from dba_tab_privs where grantee = 'CONNECT'; --对象权限
no rows selected
SQL> select * from dba_role_privs where grantee = 'CONNECT'; --角色权限
no rows selected
SQL>
2.RESOURCE 角色, 是授予开发人员的
SQL> select * from dba_sys_privs where grantee = 'RESOURCE';
GRANTEE PRIVILEGE ADM
------------------------------ ---------------------------------------- ---
RESOURCE CREATE TRIGGER NO
RESOURCE CREATE SEQUENCE NO
RESOURCE CREATE TYPE NO
RESOURCE CREATE PROCEDURE NO
RESOURCE CREATE CLUSTER NO
RESOURCE CREATE OPERATOR NO
RESOURCE CREATE INDEXTYPE NO
RESOURCE CREATE TABLE NO
8 rows selected.
SQL> select * from dba_tab_privs where grantee = 'RESOURCE';
no rows selected
SQL> select * from dba_role_privs where grantee = 'RESOURCE';
no rows selected
SQL>
3.DBA 角色, 拥有系统所有系统级权限
SQL> select count(*) from dba_sys_privs where grantee = 'DBA';
COUNT(*)
----------
160
SQL> select count(*) from dba_tab_privs where grantee = 'DBA';
COUNT(*)
----------
38
SQL> select * from dba_role_privs where grantee = 'DBA';
GRANTEE GRANTED_ROLE ADM DEF
------------------------------ ------------------------------ --- ---
DBA SCHEDULER_ADMIN YES YES
DBA EXECUTE_CATALOG_ROLE YES YES
DBA DELETE_CATALOG_ROLE YES YES
DBA PLUSTRAC