Database Reference
In-Depth Information
Example 8:
Remove query access of
Program
from
Bruce Jones
and all privileges
from
Stalker
:
Development Privileges
An application developer should have the following system privileges:
The
Create-Session
privilege is required for logging onto Oracle and starting a
work session. The
Analyze-Any
privilege is useful for database performance analysis
and tuning (discussed in chapter 21). The
Select-Any-Dictionary
privilege is required in
order to query the system catalog (to be discussed in the upcoming chapter). The other
privileges are all self-explanatory, and need no further clarification at this point.
Roles
In managing multiple users in different user groups,
roles
are particularly useful. You can
define a role to consist of several privileges, and then grant the role to users. Additionally,
roles can be granted to other roles. A role is created via the
Create-Role
statement,
modified by the
Alter-Role
statement, and removed via the
Drop-Role
statement.
Figure
13-9
shows abridged formats of these statements.
Figure 13-9.
Create-Role, Alter-Role and Drop-Role Statements
