157.Examine the commands executed in the following sequence:
1: SQL> CREATE ROLE mgrrole;
2: SQL> GRANT create user,select any table,connect,resource TO mgrrole;
3: SQL> GRANT select,update ON sh.sales TO mgrrole;
4: SQL> CREATE ROLE ceo IDENTIFIED BY boss;
5: SQL> GRANT mgrrole,drop any table,create any directory TO ceo;
6: SQL> GRANT ceo TO mgrrole;
Which statement is true about the above commands?
A.The commands execute successfully.
B.Command 6 produces an error because of circular role grant.
C.Command 5 produces an error because a role cannot be granted to another role.
D.Command 3 produces an error because the MGRROLE role already contains system privileges.
E.The table created by HR remains and HR can grant the CREATE TABLE system privilege to other users.
答案:B
解析:
A:错误,这个命令是错误的,因为角色不能相互授予,这里第5部已经将mgrrole授予了ceo,第六部又将ceo授予了mgrrole
B:正确
C:错误,角色是可以包含角色的
D:错误,虽然角色已经包含了对应的权限,但是还是可以单独授予该权限的,这个时候必须角色和权限都回收,该权限才会回收
E:错误,这里没有with admin option,因此hr不具备授予其他用户的权限
1: SQL> CREATE ROLE mgrrole;
2: SQL> GRANT create user,select any table,connect,resource TO mgrrole;
3: SQL> GRANT select,update ON sh.sales TO mgrrole;
4: SQL> CREATE ROLE ceo IDENTIFIED BY boss;
5: SQL> GRANT mgrrole,drop any table,create any directory TO ceo;
6: SQL> GRANT ceo TO mgrrole;
Which statement is true about the above commands?
A.The commands execute successfully.
B.Command 6 produces an error because of circular role grant.
C.Command 5 produces an error because a role cannot be granted to another role.
D.Command 3 produces an error because the MGRROLE role already contains system privileges.
E.The table created by HR remains and HR can grant the CREATE TABLE system privilege to other users.
答案:B
解析:
A:错误,这个命令是错误的,因为角色不能相互授予,这里第5部已经将mgrrole授予了ceo,第六部又将ceo授予了mgrrole
B:正确
C:错误,角色是可以包含角色的
D:错误,虽然角色已经包含了对应的权限,但是还是可以单独授予该权限的,这个时候必须角色和权限都回收,该权限才会回收
E:错误,这里没有with admin option,因此hr不具备授予其他用户的权限