IDC资讯中心
查看用户在某个对象上面的使用权限可以用数据字典表dba_tab_privs.表结构如下:
name null? type
—————————- ——– —————————-
grantee not null varchar2(30) <== 权限获得者
owner not null varchar2(30)
table_name not null varchar2(30)
grantor not null varchar2(30) <– 权限授予者
privilege not null varchar2(40)
grantable varchar2(3) <– 权限获得者是否有权限授予别人权限
权限由命令grant授予由命令revoke收回:
grant select, insert, update, delete, references on my_table to user_joe ;
revoke insert, delete on my_table from user_joe ;
grant create public synonym to user_joe ;
其他相关权限安全的数据字典表有:
all_tab_privs
all_tab_privs_made
all_tab_privs_recd
dba_sys_privs
dba_roles
dba_role_privs
role_role_privs
role_sys_privs
role_tab_privs
session_privs
session_roles
user_sys_privs
user_tab_priv
在做完exp/imp后,权限需要重新授予时可用下面的脚本:
set echo off
rem
rem 19980729 m d powell new script.
rem
set verify off
set pagesize 0
set feedback off
spool grt_&&owner._&&table_name..sql
select rem grants on &&owner..&&table_name
from sys.dual ;
select grant ||privilege|| on ||lower(owner)||.||
lower(table_name)|| to ||grantee||
decode(grantable,yes, with grant option,null)||
;
from sys.dba_tab_privs
where owner = upper(&&owner)
and table_name = upper(&&table_name)
order by grantee, privilege ;
spool off
undefine owner
undefine table_name
