关于default role的实验

---整理以前的学习笔记---

关于default role的实验
sys@ORCL> revoke mgr_role,connect,resource from skd;

Revoke succeeded.

sys@ORCL> conn skd/skd
ERROR:
ORA-01045: user SKD lacks CREATE SESSION privilege; logon denied

Warning: You are no longer connected to ORACLE.
sys@ORCL> grant connect,resource,select_catalog_role to skd;
SP2-0640: Not connected
sys@ORCL> conn /as sysdba
Connected.

sys@ORCL> grant connect,resource,select_catalog_role to skd;

Grant succeeded.

sys@ORCL> conn skd/skd
Connected.
skd@ORCL> select count(*) from v$session;--说明此时select_catalog_role是起作用的

  COUNT(*)
----------
        25

skd@ORCL> conn /as sysdba
Connected.
sys@ORCL> alter user skd default role connect,resource;--把connect,resource作为skd的default role，也就是说，skd一登录进来，只connect,resource是激活的，select_catalog_role没有激活

User altered.

sys@ORCL> conn skd/skd
Connected.
skd@ORCL> select count(*) from v$session;--select_catalog_role确实没有激活
select count(*) from v$session
                     *
ERROR at line 1:
ORA-00942: table or view does not exist

skd@ORCL> set role select_catalog_role;--激活select_catalog_role

Role set.

（
当然，如果角色在创建的时候是有密码的，这时候set还需要提供密码
create role r3 identified by r3;
set role r3 identified by r3;
）

skd@ORCL> select count(*) from v$session;--select_catalog_role这个角色激活之后，发挥作用了

  COUNT(*)
----------
        27

 

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/26524307/viewspace-777343/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/26524307/viewspace-777343/