Managing Users

Sucurity domain : The database administrator defines the names of the users allowed to access a database. A security domain defines the settings that appley to the users.

Authentication mechanism : A user who needs access to the database can be authenticated by one of the following :

• data dictionary
• operating system
• netwrok

Tablespace quotas : Tablespace quotas control the amount of physical storage space allocated to a user in the tablespaces in the database.

Default Tablespace : The default tablespace defines the location where segments created by a user are stored if the user does not explicitly specify a tablespace at the time the segment is created.

Temporary Tablespace : Temporary tablespace defines where extents will be allocated by the Oracle server if the user performs an operation that requires writing sort data to the disk.

Account Locking : Accounts can be locked to prevent a user from logging on the database. This can be set to occur automatically, or the database administrator can lock or unlock accounts manually.

Resource Limits : Limits can be placed on the use of resources such as CPU time, logical I/O, and the number of sessions opened by a user.

Direct Privileges : Privileges are used to control the actions a user can perform in a database.

Role Privileges : A user can be granted privileges indirectly throuth the use of roles

 

如果用户在创建时没有指定缺省表空间，则默认是 SYSTEM 表空间。一般不要使用系统表空间

   1:  create user leon

   2:  identified by pass_leon

   3:  default tablespace USERDATA02

   4:  temporary tablespace TEMP

   5:  quota 15m on userdata02

   6:  password expire;

大部分用户都使用数据库认证，就是上边的认真。（操作系统认证不需要输入密码 )

 

大量的脚本运行，这样，登录数据库系统不需要口令，脚本就不会停止在需要输入口令的地方。

如果操作系统的用户名为 aaron, 那么存储在系统中的用户名为 OPS$aaron （在数据库中创建用户时，要写 create user OPS$aaron )

因为如果在系统中创建一个普通用户SYS,虽然SYS在操作系统中是一个普通用户，但是如果它在数据库中就有管理员权限，所以才要加上一个另外的符号。例如缺省的 OPS$, 这样，即便你是 SYS 用户，登录进来也只是 OPS$SYS, 不是管理员。

然后，当操作系统用户 aaron 想登录到系统时，只需要输入 SQLPLUS / 就可以直接登录了

也可以远端认证( 操作系统 ),  但是，一般不这么做，太不安全。

 

数据字典

DBA_USERS

DBA_TS_QUOTAS