ORACLE常用命令之用户权限角色

四、用户管理
1.create a user
CREATE USER kong IDENTIFIED BY kong
Default tablespace users
Temporary tablespace temp;

2、alter user
ALTER USER kong QUOTA 100M ON USERS;
alter user kong account unlock[lock];

3、drop user
drop user kong cascade
快速删除用户的对象和删除用户脚本：


/* 本脚本提示要删除的用户名*/
-- 设置输出的格式
set echo off
set head off
set verify off
set linesize 200
set pages 0
set feedback off
set term on
undefine p_user
def p_user = &&p_user
Prompt Generating Script To Drop User
set term off
--将后门要指向的语句及结果输出到drop_user.sql 文件中
SPOOL DROP_USER.sql
-- 用从DBA_OBJECTS 数据字典查询用户对象信息，并产生TRUNCATE TABLE 的脚本:
SELECT 'TRUNCATE TABLE ' || OWNER ||'.'||OBJECT_NAME || ' ;'
FROM DBA_OBJECTS
WHERE OWNER = UPPER('&p_user')
AND OBJECT_TYPE = 'TABLE'
UNION
SELECT 'DROP TABLE ' || OWNER ||'.'||OBJECT_NAME || ' CASCADE;'
FROM DBA_OBJECTS
WHERE OWNER = UPPER('&p_user')
AND OBJECT_TYPE = 'TABLE'
UNION
SELECT 'DROP ' || OWNER ||'.'|| OBJECT_TYPE || ' ' || OBJECT_NAME || ';'
FROM DBA_OBJECTS
WHERE OWNER = UPPER('&p_user')
AND OBJECT_TYPE IN ('PROCEDURE','PACKAGE','PACKAGE BODY', 'FUNCTION', 'SEQUENCE')
order by 1 desc
/
--结束结果输出
SPOOL OFF
set term on
Prompt Dropping User Objects
set term off
-- 运行所产生的脚本文件DROP_USER.SQL
START DROP_USER.SQL
set term on
Prompt Dropping User
set term off
DROP USER &P_USER CASCADE;
set pages 24
set head on
set verify on
set feedback on
undefine p_user
set term on
set echo on

五、权限管理
1、grant system privilege
grant connect,resource to kong
grant sysdba to kong
grant sysope to kong

2、revoke system privilege
revoke connect from kong

3、grant object privilege
grant execute on dbms_pipe to public

4、revoke object privilege
revoke execute on dbms_pipe from kong

六、角色管理
1、create role
create role vendor
create role vendor identified by vendor
GRANT CREATE SESSION,CREATE DATABASE LINK to vendor;

2、alter role
ALTER USER kong DEFAULT ROLE ALL EXCEPT vendor;-- 使vendor 成为非默认角色。
ALTER ROLE vendor NOT IDENTIFIED

3、查询用户被授予了哪些权限
select * from dba_tab_privs where grantee='kong';
select * from session_roles;
select RP.owner||'.'||RP.table_name,privilege
From role_tab_privs RP,dba_role_privs DP
Where RP.role=DP.granted_role
And DP.grantee='&grantee';
select granted_role,default_role from dba_role_privs
Where grantee='SCOTT'

4、创建用户资源文件prousers
CREATE PROFILE prousers limit
failed_login_attempts 3 password_life_time 60 password_grace_time 10;
alter user kong profile prousers

5、alter profile
alter profile prousers limit
IDLE_TIME 300 PASSWORD_REUSE_MAX UNLIMITED;