Oracle User Administration

Transcription

1 Oracle User Administration Creating user accounts User accounts consist of two components. These are: 1. User name - The name of the account. 2. Password - The password associated with the user account. A third component is the Host ID or Connect string. User accounts are established by the Create User command. They are removed using the Drop User command. 1

2 A number of specifications can be set when establishing a user account. These are:? The password for the Oracle session can be supplied by the user or by the operating system security.? A default tablespace specification can be established.? The user account can be assigned a specific temporary tablespace.? The user account can be assigned a specific amount of space within the designated tablespace. The Quota keyword is used for this specification. The following is a command template for the Create User command: Create user username Identified [by password externally] default tablespace tablespace name temporary tablespace tablespace name quota (value [K M] unlimited) on tablespace name profile setting, setting 2

3 Creating and dropping a user account SQL> create user stu5 identified by huskers 2 default tablespace electrical_equipment 3 quota 2m on electrical_equipment; User created. SQL> drop user stu5 cascade; User dropped. Data Control Language There are two types of privileges. These are: 1. System privileges - Allows a user to perform DDL commands (i.e. Create table, Drop index). 2. Object privileges - Allows a user to issue DML commands (i.e Insert, Update). A command template for the granting of privileges is as follows: Grant privilege, privilege, privilege [on object name] To user account; 3

4 GRANTING PRIVILEGES SQL> grant create session, alter session, create table,? drop table, create view, drop view,? create synonym, drop synonym, create index,? drop index, create public synonym, drop public synonym,? create sequence,drop sequence to stu6; Grant succeeded SQL> Roles Creating a role, granting the role, and dropping SQL> create role student; Role created. SQL> grant create session, create table to student; Grant succeeded. SQL> grant student to stu6; Grant succeeded. SQL> drop role student; Role dropped. SQL> 4

5 Revoking privileges Revoking a privilege SQL> revoke create table from cliff; Revoke succeeded. SQL> Database privileges Privileges Privilege Alter any cluster Description Allows the grantee to modify a cluster on any user account. Alter any index Allows the grantee to modify an index on any user account. Alter any procedure Allows the grantee to modify a procedure on any user account. Alter any role Allows the grantee to modify a role on any user account. Alter any sequence Allows the grantee to modify a sequence on any user account. 5

6 Granting access to your tables and database objects There are seven object privileges the owner of a table can assign to other user accounts. These privileges are listed below:? Insert - Allows the grantee to add records to the table.? Delete - Allows the grantee to delete records from the table.? Update - Allows the grantee to modify records within the table.? Select - Allows the grantee to retrieve or view records within the table.? References - Allows the grantee to use the object as the parent key to any foreign key constraints created by the grantee. The presence of a foreign key can affect the data manipulation of the object.? Alter - Allows the grantee to modify the object.? Execute - Allows the grantee to execute a PL/SQL object The Grant command is used to assign object privileges. It has three components. These are:? The privilege(s) granted.? The name of the table.? The name of the user account receiving the privilege. 6

7 Grant/Revoke privilege, privilege on tablename to user account, user account; Object privileges can be extended to specific user accounts. The privileges may also be extended to everyone. Placing the Public keyword in the user account section will extend the privilege to anyone that logs on to the Oracle installation. 7