Oracle新创建用户权限问题?
是否新创建用户:
<代码> 创建用户约翰
秘密识别;
有一些特权吗?或者是否有新创建用户的权限的oracle配置?我需要有关该主题的信息。
Does newly created user:
create user John
identified by secret;
have some privileges? Or is there any oracle config for privileges of newly created user? I need information about this topic.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
不,没有特权。
Nope, no privileges.
ammoQ 在技术上是正确的。
鉴于上面创建的用户没有 CREATE SESSION 权限,它实际上还不能登录,也不能执行任何其他操作。
具有适当 CREATE ANY ... 权限的另一个用户可以在 JOHN 的模式/用户下创建对象(例如过程、函数、触发器)。如果是这样,那么 JOHN 将自动拥有删除这些对象的权限(但如果没有 CREATE SESSION 权限,他们将很难实现这一点)。
从安全角度来看,Oracle确实授予了PUBLIC一堆权限。创建用户后,他们确实可以做很多事情(例如,从 ALL_USERS 等视图中进行选择)。
ammoQ is technically correct.
Given the user created as above does not have CREATE SESSION privilege, it cannot actually log on yet, or do anything else.
It is possible for another user with an appropriate CREATE ANY ... privilege to create objects (such as procedures, functions, triggers) under JOHN's schema/user. If so, then JOHN would automatically have privileges to drop those objects (but without a CREATE SESSION privilege, it would be difficult for them to achieve that).
From a security point of view, Oracle does have a bunch of privileges granted to PUBLIC. Once a user is created they do have a bunch of things they can do (eg select from views such as ALL_USERS).