一、用戶管理
1、創(chuàng)建用戶
用戶名、口令;
用戶默認(rèn)表空間;
用戶臨時(shí)表空間;
用戶存儲(chǔ)限額;
用戶概要文件限制;
1
CREATE USER user_name
2
IDENTIFIED {BY password | EXTERNALLY|GLOBALLY AS external name}
3
[ DEFAULT TABLESPACE tablespace ]
4
[ TEMPORARY TABLESPACE tablespace ]
5
[ QUOTA {n M | UNLIMITED } ON tablespace ]
6
[ PASSWORD EXPIRE ]
7
[ ACCOUNT { LOCK | UNLOCK }]
8
[ PROFILE { profile | DEFAULT }]

2

3

4

5

6

7

8

1
Create User teacher
2
identified by teacher
3
default tablespace teacher
4
temporary tablespace temp
5
quota unlimited on teacher
6
account unlock;

2

3

4

5

6

2、修改用戶
1
ALTER USER user_name
2
IDENTIFIED {BY password | EXTERNALLY|GLOBALLY AS external name}
3
[ DEFAULT TABLESPACE tablespace ]
4
[ TEMPORARY TABLESPACE tablespace ]
5
[ QUOTA {n M | UNLIMITED } ON tablespace ]
6
[ PASSWORD EXPIRE ]
7
[ ACCOUNT { LOCK | UNLOCK }]
8
[ PROFILE { profile | DEFAULT }]

2

3

4

5

6

7

8

1
ALTER USER STUDENT ACCOUNT UNLOCK;

3、刪除用戶
1
Drop USER STUDENT (CASCADE);

4、查看用戶
1
select USERNAME from DBA_USERS;
2
3
select USERNAME FROM DBA_TS_QUOTAS

2

3

二、特權(quán)管理
特權(quán)是指允許用戶對(duì)數(shù)據(jù)庫(kù)進(jìn)行操作的權(quán)力。特權(quán)可以分為系統(tǒng)權(quán)限和對(duì)象權(quán)限。系統(tǒng)權(quán)限允許用戶建立、修改和刪除各種數(shù)據(jù)庫(kù)結(jié)構(gòu),而對(duì)象權(quán)限允許對(duì)特定的對(duì)象執(zhí)行操作。
DBA可以把特權(quán)授予用戶,也可以從用戶手中收回特權(quán)。而角色將多個(gè)系統(tǒng)和對(duì)象特權(quán)合并到一起,可以將角色授予用戶,從而簡(jiǎn)化特權(quán)管理。
1、系統(tǒng)特權(quán)
(1)AUDIT
AUDIT ANY、AUDIT SYSTEM
(2)CLUSTER
CREATE CLUSTER、CREATE ANY CLUSTER、ALTER CLUSTER、DROP CLUSTER
(3)DATABASE
ALTER DATABASE
(4)INDEX
CREATE ANY INDEX、ALTER ANY INDEX、DROP ANY INDEX
(5)ROLE
CREATE ROLE、ALTER ANY ROLE、DROP ANY ROLE、GRANT ANY ROLE
(6)SESSION、SEQUENCE、SYSTEM、TABLE、TABLESPACE、TRANSACTION、TRIGGER、USER、VIEW
授予系統(tǒng)特權(quán)
1
GRANT role TO [user|role|public] [with admin option]

1
grant create session to teacher;
2
3
resource, create table to teacher;
4
5
grant alter table to teacher;

2

3

4

5

收回系統(tǒng)特權(quán)
1
REVOKE role from [user|public|role];

1
revoke create session from teacher;

查看系統(tǒng)特權(quán)
1
SELECT * FROM DBA_SYS_PRIVS;

2、對(duì)象特權(quán)
對(duì)象特權(quán)
ALTER、DELETE、 EXECUTE、INSERT
授予特權(quán)
1
grant select,insert,delete on tableName to student;

收回特權(quán)
1
revoke insert on tableName from student;

三、特權(quán)