7 copyright © 2004, oracle. all rights reserved. administering users
TRANSCRIPT
7Copyright © 2004, Oracle. All rights reserved.
Administering Users
7-2 Copyright © 2004, Oracle. All rights reserved.
Objectives
After completing this lesson, you should be able to do the following:
• Create and manage database user accounts
• Create and manage roles
• Grant and revoke privileges
• Control resource usage by users
7-3 Copyright © 2004, Oracle. All rights reserved.
Database User Accounts
Each database user account has a:
• Unique username
• Authentication method
• Default tablespace
• Temporary tablespace
• User profile
7-4 Copyright © 2004, Oracle. All rights reserved.
Creating a User
Select Users from the Administration properties page. Click the Create button.
7-5 Copyright © 2004, Oracle. All rights reserved.
Profiles and Users
Users are assigned only one profile at any given time.
Profiles:
• Control resource consumption
• Manage passwords
7-7 Copyright © 2004, Oracle. All rights reserved.
Authenticating Users
• Password
• External
• Global
7-9 Copyright © 2004, Oracle. All rights reserved.
Default and Temporary Tablespaces and Locking
• Default: Default location of database objects
• Temporary: Used for sorting
7-10 Copyright © 2004, Oracle. All rights reserved.
Database Users and Schemas
Schema Objects
Tables
Triggers
Indexes
Views
Sequences
Stored program units
Synonyms
User-defined data types
Database links
• The collection of objects owned by a user is the schema.
• A user can be associated with only one schema.
• Username and schema are often used interchangeably.
7-11 Copyright © 2004, Oracle. All rights reserved.
Checklist for Creating Users
• Select a profile.
• Select an authentication technique.
• Assign a default tablespace and temporary tablespace.
• Grant privileges and roles to the user.
• Decide on quotas for each tablespace.
7-12 Copyright © 2004, Oracle. All rights reserved.
There are two types of user privileges:
• System: Enables users to perform particular actions in the database
• Object: Enables users to access and manipulate a specific object
Privileges
7-13 Copyright © 2004, Oracle. All rights reserved.
System Privileges
7-15 Copyright © 2004, Oracle. All rights reserved.
Object Privileges
To grant object privileges:
• Choose the object type
• Select objects
• Select privileges
7-16 Copyright © 2004, Oracle. All rights reserved.
Assigning Quota to Users
Users who do not have the unlimited tablespace system privilege must be given a quota before they can create objects in a tablespace. Quotas can be:
• Unlimited
• A specific value in megabytes or kilobytes
7-17 Copyright © 2004, Oracle. All rights reserved.
Assigning Roles to Users
7-18 Copyright © 2004, Oracle. All rights reserved.
Users
Privileges
Roles HR_CLERKHR_MGR
Roles
Neena Girard Vance
Delete
employees
Select
employees
Update
employees
Insert
employees
7-19 Copyright © 2004, Oracle. All rights reserved.
• Easier privilege management
• Dynamic privilege management
• Selective availability of privileges
• Can be granted through the operating system
Benefits of Roles
7-20 Copyright © 2004, Oracle. All rights reserved.
Predefined Roles
CONNECT CREATE SESSION, CREATE TABLE, CREATE VIEW, CREATE SYNONYM, CREATE SEQUENCE, CREATE DATABASE LINK, CREATE CLUSTER, ALTER SESSION
RESOURCE CREATE TABLE, CREATE PROCEDURE, CREATE SEQUENCE, CREATE TRIGGER, CREATE TYPE, CREATE CLUSTER, CREATE INDEXTYPE, CREATE OPERATOR
SCHEDULER_ ADMIN
CREATE ANY JOB, CREATE JOB, EXECUTE ANY CLASS, EXECUTE ANY PROGRAM, MANAGE SCHEDULER
DBA Most system privileges, several other roles. Do not grant to nonadministrators.
SELECT_
CATALOG_
ROLE
No system privileges but over 1600 object privileges on the data dictionary
7-21 Copyright © 2004, Oracle. All rights reserved.
Roles may be protected through authentication.
CREATE ROLE secure_application_roleIDENTIFIED USING <security_procedure_name>;
Secure Roles
Roles may also be secured programmatically.
Roles may be nondefault.SET ROLE vacationdba;
7-22 Copyright © 2004, Oracle. All rights reserved.
Summary
In this lesson you should have learned how to:
• Create and manage user accounts
• Create and manage roles
• Grant and revoke privileges
• Control resource usage by users
7-23 Copyright © 2004, Oracle. All rights reserved.
Practice 7: Administering Users
This practice covers the following:
• Creating a profile to limit resource consumption
• Creating two roles:a. HRCLERK
b. HRMANAGER
• Creating three new users, one manager, and two clerks