oracle select_catalog_role,*_CATALOG_ROLE 简述

今天犯了一个傻，有一个人抄了一个小纸条，上面写道 catalog_role，问我这个视图是干嘛用的，我也不知道，没有针对某些普通用户受过这个角色，后来他问我，catalog是干嘛的，那我当然知道了，catalog是rman可以用到的资料库，于是我的方向就错了，后来上网查了一下，呵呵，纠正了自己的错误：

1. SELECT_CATALOG_ROLE

This role can be granted to users to allow SELECT privileges on data dictionary views.

2.EXECUTE_CATALOG_ROLE

This role can be granted to users to allow EXECUTE privileges for packages and

procedures in the data dictionary.

3.DELETE_CATALOG_ROLE

This role can be granted to users to allow them to delete records from the

system audit table (AUD$).

4.SELECT ANY DICTIONARY

This system privilege allows query access to any object in the SYS schema,

including tables created in that schema. It must be granted individually to each

user requiring the privilege. It is not included in GRANT ALL PRIVILEGES,

nor can it be granted through a role.

Caution: You should grant these roles and the SELECT ANY DICTIONARY system privilege with extreme care, since the integrity of your system can be compromised by their misuse.

参考文献：

Oracle Database

Security Guide

10g Release 1 (10.1)

Part No. B10773-01