一、用戶管理
1、創建用戶
用戶名、口令;
用戶默認表空間;
用戶臨時表空間;
用戶存儲限額;
用戶概要文件限制;
1
CREATE USER user_name
2
IDENTIFIED {BY password | EXTERNALLY|GLOBALLY AS external name}
3
[ DEFAULT TABLESPACE tablespace ]
4
[ TEMPORARY TABLESPACE tablespace ]
5
[ QUOTA {n M | UNLIMITED } ON tablespace ]
6
[ PASSWORD EXPIRE ]
7
[ ACCOUNT { LOCK | UNLOCK }]
8
[ PROFILE { profile | DEFAULT }]

2

3

4

5

6

7

8

1
Create User teacher
2
identified by teacher
3
default tablespace teacher
4
temporary tablespace temp
5
quota unlimited on teacher
6
account unlock;

2

3

4

5

6

2、修改用戶
1
ALTER USER user_name
2
IDENTIFIED {BY password | EXTERNALLY|GLOBALLY AS external name}
3
[ DEFAULT TABLESPACE tablespace ]
4
[ TEMPORARY TABLESPACE tablespace ]
5
[ QUOTA {n M | UNLIMITED } ON tablespace ]
6
[ PASSWORD EXPIRE ]
7
[ ACCOUNT { LOCK | UNLOCK }]
8
[ PROFILE { profile | DEFAULT }]

2

3

4

5

6

7

8

1
ALTER USER STUDENT ACCOUNT UNLOCK;

3、刪除用戶
1
Drop USER STUDENT (CASCADE);

4、查看用戶
1
select USERNAME from DBA_USERS;
2
3
select USERNAME FROM DBA_TS_QUOTAS

2

3

二、特權管理
特權是指允許用戶對數據庫進行操作的權力。特權可以分為系統權限和對象權限。系統權限允許用戶建立、修改和刪除各種數據庫結構,而對象權限允許對特定的對象執行操作。
DBA可以把特權授予用戶,也可以從用戶手中收回特權。而角色將多個系統和對象特權合并到一起,可以將角色授予用戶,從而簡化特權管理。
1、系統特權
(1)AUDIT
AUDIT ANY、AUDIT SYSTEM
(2)CLUSTER
CREATE CLUSTER、CREATE ANY CLUSTER、ALTER CLUSTER、DROP CLUSTER
(3)DATABASE
ALTER DATABASE
(4)INDEX
CREATE ANY INDEX、ALTER ANY INDEX、DROP ANY INDEX
(5)ROLE
CREATE ROLE、ALTER ANY ROLE、DROP ANY ROLE、GRANT ANY ROLE
(6)SESSION、SEQUENCE、SYSTEM、TABLE、TABLESPACE、TRANSACTION、TRIGGER、USER、VIEW
授予系統特權
1
GRANT role TO [user|role|public] [with admin option]

1
grant create session to teacher;
2
3
resource, create table to teacher;
4
5
grant alter table to teacher;

2

3

4

5

收回系統特權
1
REVOKE role from [user|public|role];

1
revoke create session from teacher;

查看系統特權
1
SELECT * FROM DBA_SYS_PRIVS;

2、對象特權
對象特權
ALTER、DELETE、 EXECUTE、INSERT
授予特權
1
grant select,insert,delete on tableName to student;

收回特權
1
revoke insert on tableName from student;

三、特權