Scribd
Upload
2 views

Module 5 Session 5

This document covers user access control in a database, including how to create users, change passwords, and manage object privileges. It explains the use of DCL statements such as GRANT and REVOKE for managing access to database objects. Additionally, it discusses the creation of database links for accessing remote data.

Uploaded by

PavithraGaneshShetty
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
2 views

Module 5 Session 5

This document covers user access control in a database, including how to create users, change passwords, and manage object privileges. It explains the use of DCL statements such as GRANT and REVOKE for managing access to database objects. Additionally, it discusses the creation of database links for accessing remote data.

Uploaded by

PavithraGaneshShetty
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PPTX, PDF, TXT or read online on Scribd
You are on page 1/ 14

MODULE 5 SESSION 5

CCREATING ,MANANGING THE USER,PROVIDE


PRIVILEGES CONTINUED
13
Controlling User Access

Copyright © Oracle Corporation, 2001. All rights reserved.


Changing Your Password

• The DBA creates your user account and initializes


your password.
• You can change your password by using the
ALTER USER statement.

ALTER USER scott


IDENTIFIED BY
lion;
User altered.

13-11 Copyright © Oracle Corporation, 2001. All rights reserved.


Object Privileges

Object
Privilege Table View Sequence Procedure
ALTER √ √
DELETE √ √
EXECUTE √
INDEX √
INSERT √ √
REFERENCES √ √
SELECT √ √ √
UPDATE √ √

13-12 Copyright © Oracle Corporation, 2001. All rights reserved.


Object Privileges

• Object privileges vary from object to object.


• An owner has all the privileges on the object.
• An owner can give specific privileges on that
owner’s object.

GRANT object_priv
ON [(columns)]
TO object
[WITH GRANT OPTION];
{user|role|PUBLIC}

13-13 Copyright © Oracle Corporation, 2001. All rights reserved.


Granting Object Privileges

• Grant query privileges on the EMPLOYEES


table.
GRANT select
ON employees
TO
sue, rich;
Grant succeeded.

• Grant privileges to update specific columns to


users and roles.
GRANT update (department_name, location_id)
ON departments
TO scott,
manager; Grant
13-14 succeeded. Copyright © Oracle Corporation, 2001. All rights reserved.
Using the WITH GRANT OPTION and
PUBLIC
Keywords
• Give a user authority to pass along privileges.

GRANT select, insert


ON departments
TO scott
WITH GRANT OPTION;
Grant succeeded.

• Allow all users on the system to query data from


Alice’s DEPARTMENTS table.
GRANT select
ON alice.departments
TO PUBLIC;
Grant succeeded.

13-15 Copyright © Oracle Corporation, 2001. All rights reserved.


Confirming Privileges Granted
Data Dictionary View Description

ROLE_SYS_PRIVS System privileges granted to roles


ROLE_TAB_PRIVS Table privileges granted to roles
USER_ROLE_PRIVS Roles accessible by the user
USER_TAB_PRIVS_MADE Object privileges granted on
the user’s objects
USER_TAB_PRIVS_RECD Object privileges granted to
the user
USER_COL_PRIVS_MADE Object privileges granted on
the columns of the user’s
objects
USER_COL_PRIVS_RECD Object privileges granted to
the user on specific columns
USER_SYS_PRIVS Lists system privileges granted
13-16 Copyright © Oracle Corporation, 2001. All rights reserved.
How to Revoke Object Privileges

• You use the REVOKE statement to revoke


privileges granted to other users.
• Privileges granted to others through the WITH
GRANT OPTION clause are also revoked.

REVOKE {privilege [, privilege...]|


ALL} ON object
FROM {user[, user...]|role|PUBLIC}
[CASCADE CONSTRAINTS];

13-17 Copyright © Oracle Corporation, 2001. All rights reserved.


Revoking Object Privileges

As user Alice, revoke the SELECT and INSERT


privileges given to user Scott on the DEPARTMENTS
table.

REVOKE select, insert


ON departments
FROM scott;
Revoke succeeded.

13-18 Copyright © Oracle Corporation, 2001. All rights reserved.


Database Links

A database link connection allows local users to


access data on a remote database.

Local Remote

EMP
Table

SELECT * FROM HQ_ACME.COM


emp@HQ_ACME.COM; database

13-19 Copyright © Oracle Corporation, 2001. All rights reserved.


Database Links

• Create the database link.


CREATE PUBLIC DATABASE LINK hq.acme.com
USING 'sales';
Database link
created.
• Write SQL statements that use the database link.

SELECT *
FROM [email protected];

13-20 Copyright © Oracle Corporation, 2001. All rights reserved.


Summary

In this lesson, you should have learned about DCL


statements that control access to the database and
database objects:
Statement Action
CREATE USER Creates a user (usually performed by
a DBA)
GRANT Gives other users privileges to
access the your objects
CREATE ROLE Creates a collection of privileges
(usually performed by a DBA)
ALTER USER Changes a user’s password
REVOKE Removes privileges on an object
from users

13-21 Copyright © Oracle Corporation, 2001. All rights reserved.


Practice 13 Overview

This practice covers the following topics:


• Granting other users privileges to your table
• Modifying another user’s table through the
privileges granted to you
• Creating a synonym
• Querying the data dictionary views related to
privileges

13-22 Copyright © Oracle Corporation, 2001. All rights reserved.

You might also like