系统权限 GRANT ANY OBJECT PRIVILEGE的作用！

To grant a system privilege, you must either have been granted the system privilege with the ADMIN OPTION or have been granted the GRANT ANY PRIVILEGE system privilege.

To grant a role, you must either have been granted the role with the ADMIN OPTION or have been granted the GRANT ANY ROLE system privilege, or you must have created the role.

To grant an object privilege, you must own the object, or the owner of the object must have granted you the object privileges with the GRANT OPTION, or you must have been granted the GRANT ANY OBJECT PRIVILEGE system privilege. If you have the GRANT ANY OBJECT PRIVILEGE, then you can grant the object privilege only if the object owner could have granted the same object privilege. In this case, the GRANTOR column of the DBA_TAB_PRIVS view displays the object owner rather than the user who issued the GRANT statement.

[@more@]

C:>SQLPLUS test/test

SQL*Plus: Release 10.2.0.1.0 - Production on 星期三 6月 1 17:09:47 2011

Copyright (c) 1982, 2005, Oracle. All rights reserved.

连接到:
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options

SQL> select * from t;

ID NAME
---------- ----------
3 c
1 a
2 b

SQL> grant select on t to test1;

授权成功。

SQL> connect test1/test1
已连接。
SQL> grant select on test.t to test2;
grant select on test.t to test2
*
第 1 行出现错误:
ORA-01031: 权限不足

SQL> connect / as sysdba
已连接。
SQL> grant GRANT ANY OBJECT PRIVILEGE to test1;

授权成功。

SQL> connect test1/test1
已连接。
SQL> grant select on test.t to test2;

授权成功。

SQL>

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/19602/viewspace-1050658/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/19602/viewspace-1050658/