用户的权限来自系统权限和对象权限
一、系统权限
3个索引权限
Grant CREATE ANY INDEX to User_Name;//创建索引
Grant ALTER ANY INDEX to User_Name;//更改索引
Grant DROP ANY INDEX to User_Name;//删除索引
5个存储过程权限,
CREATE PROCEDURE | CREATE ANY PROCEDURE | ALTER ANY PROCEDURE |
EXECUTE ANY PROCEDURE | DROP ANY PROCEDURE |
4个角色权限
CREATE ROLE | ALTER ANY ROLE | DROP ANY ROLE | GRANT ANY ROLE |
5个序列权限
CREATE SEQUENCE | CREATE ANY SEQUENCE | ALTER ANY SEQUENCE |
SELECT ANY SEQUENCE | DROP ANY SEQUENCE |
登录数据库权限
CREATE SESSION |
表空间权限
CREATE TABLESPACE | ALTER TABLESPACE | DROP TABLESPACE |
MANAGE TABLESPACE | UNLIMITED TABLESPACE |
类型权限
CREATE TYPE | CREATE ANY TYPE | ALTER ANY TYPE |
DROP ANY TYPE | EXECUTE ANY TYPE | UNDER ANY TYPE |
视图权限
CREATE VIEW | CREATE ANY VIEW | DROP ANY VIEW |
UNDER ANY VIEW | FLASHBACK ANY TABLE | MERGE ANY VIEW |
表权限
CREATE TABLE | CREATE ANY TABLE | ALTER ANY TABLE |
BACKUP ANY TABLE | DELETE ANY TABLE | DROP ANY TABLE |
INSERT ANY TABLE | LOCK ANY TABLE | SELECT ANY TABLE |
FLASHBACK ANY TABLE | UPDATE ANY TABLE |
触发器
CREATE TRIGGER | CREATE ANY TRIGGER | ALTER ANY TRIGGER |
DROP ANY TRIGGER | ADMINISTER DATABASE TRIGGER |
备份数据库
EXP_FULL_DATABASE | IMP_FULL_DATABASE |
二、对象权限
具体表的操作权限:
grant select,delete,insert,update on user1.t_hr to user2;
grant all on user1.t_hr to user2;
具体存储过程执行权限
grant execute on procedure1 to user1
表空间
alter user user1 default tablespace app;
限制修改的列
grant update(wage,bonus) on teachers to user1
收回权限
revoke insert on departments from user1
三、其它方面
角色有哪些权限
select * from role_sys_privs where role='xujin';
用户有哪些权限
select * from dba_role_privs where grantee=upper('用户名')
With admin option 用户sh拥有角色dw_manager的权限;可对角色分配用户;可删除角色
GRANT dw_manager
TO sh
WITH ADMIN OPTION;
With Grant option;指定WITH GRANT OPTION以允许被授予者将对象特权授予其他用户和角色。
GRANT READ ON DIRECTORY bfile_dir TO hr
WITH GRANT OPTION;
系统角色的权限
select * from dba_sys_privs where grantee='角色名称'