ITPub博客

首页 > 数据库 > Oracle > 10g、11g、12c常见系统默认角色的权限差异

10g、11g、12c常见系统默认角色的权限差异

原创 Oracle 作者:banana_62 时间:2017-06-12 21:41:44 0 删除 编辑

 

10g

11g

12c

CONNECT

ALTER SESSION, CREATE CLUSTER, 
CREATE DATABASE LINK, 
CREATE SEQUENCE, CREATE SESSION, 
CREATE SYNONYM, CREATE TABLE,
 CREATE VIEW

CREATE SESSION 

CREATE SESSION 

resource

 CREATE CLUSTER, CREATE INDEXTYPE,
 
CREATE OPERATOR, 
CREATE PROCEDURE, CREATE SEQUENCE, 
CREATE TABLE, CREATE TRIGGER, 
CREATE TYPE

CREATE CLUSTER, CREATE INDEXTYPE,
CREATE OPERATOR, CREATE PROCEDURE,
CREATE SEQUENCE, CREATE TABLE,
CREATE TRIGGER, CREATE TYPE.

CREATE CLUSTER, CREATE INDEXTYPE, 
CREATE OPERATOR, CREATE PROCEDURE,
 
CREATE SEQUENCE, CREATE TABLE, 
CREATE TRIGGER, CREATE TYPE.
Be aware that RESOURCE no longer provides
the UNLIMITED TABLESPACE system privilege.

DBA

All system privileges WITH ADMIN OPTION

 all system privileges that were created with the ADMIN option.

Provides a large number of system privileges,
including the 
ANY privileges
(such as 
DELETE ANY TABLE)
and the 
GRANT ANY PRIVILEGE privilege.

EXP_FULL
_DATABASE

Provides the privileges required to
perform full and incremental database exports.
Includes:
 
SELECT ANY TABLE, BACKUP ANY TABLE,
 
EXECUTE ANY PROCEDURE, EXECUTE ANY TYPE, 
ADMINISTER RESOURCE MANAGER,
and 
INSERT, DELETE,
and 
UPDATE on the tables SYS.INCVID, SYS.INCFIL, and SYS.INCEXP.
Also the following roles: 
EXECUTE_CATALOG_ROLE 
and 
SELECT_CATALOG_ROLE.

Provides the privileges required to
perform full and incremental database exports
using the Export utility
(later replaced with Oracle Data Pump).
It includes these privileges: 
SELECT ANY TABLE, BACKUP ANY TABLE,
EXECUTE ANY PROCEDURE,
EXECUTE ANY TYPE,
ADMINISTER RESOURCE MANAGER,
and 
INSERT,DELETE,
and 
UPDATE 
on the tables SYS.INCVID, SYS.INCFIL,
and 
SYS.INCEXP. Also the following roles: EXECUTE_CATALOG_ROLE
and SELECT_CATALOG_ROLE.

SELECT ANY TABLE, BACKUP ANY TABLE,
 
EXECUTE ANY PROCEDURE, 
EXECUTE ANY TYPE, 
ADMINISTER RESOURCE MANAGER,
and 
INSERT, DELETE,
and 
UPDATE 
on the tables 
SYS.INCVID, SYS.INCFIL,
and 
SYS.INCEXP.
Also includes the following roles: 
EXECUTE_CATALOG_ROLE 
and 
SELECT_CATALOG_ROLE.

IMP_FULL
_DATABASE

Provides the privileges required to
perform full database imports.
Includes an extensive list of system privileges
(use view 
DBA_SYS_PRIVSto view privileges)
and the following roles: 
EXECUTE_CATALOG_ROLE 
and 
SELECT_CATALOG_ROLE.

Provides the privileges required to
perform full database imports using
the Import utility
(later replaced with Oracle Data Pump)
and the following roles:
EXECUTE_CATALOG_ROLE and
SELECT_CATALOG_ROLE.
Includes an extensive list of system privileges 

Provides the privileges required
to perform full database imports
using the Import utility
(later replaced with Oracle Data Pump).
Includes an extensive list
of system privileges
(use view
DBA_SYS_PRIVS to view privileges)
and the following roles: 
EXECUTE_CATALOG_ROLE 
and
SELECT_CATALOG_ROLE.

DELETE_
CATALOG_ROLE

Provides DELETE privilege on the system audit table (AUD$)

Provides the DELETE privilege
on the system audit table (
AUD$).

Provides the DELETE privilege
on the system audit table (
AUD$),
in a non-unified auditing environment.

EXECUTE_
CATALOG_ROLE

Provides EXECUTE privilege on objects in the data dictionary. Also, HS_ADMIN_ROLE.

Provides EXECUTE privileges
on objects in the data dictionary.

Provides EXECUTE privileges
on objects in the data dictionary.

SELECT_
CATALOG_ROLE

Provides SELECT privilege on objects in the data dictionary. Also, HS_ADMIN_ROLE.

Provides SELECT privilege
on objects in the data dictionary.

Provides SELECT privilege
on objects in the data dictionary.

RECOVERY_
CATALOG_OWNER

CREATE SESSION, ALTER SESSION, CREATE SYNONYM, CREATE VIEW, CREATE DATABASE LINK,CREATE TABLE, CREATE CLUSTER, CREATE SEQUENCE, CREATE TRIGGER, and CREATE PROCEDURE

CREATE SESSION, ALTER SESSION, 
CREATE SYNONYM, CREATE VIEW, 
CREATE DATABASE LINK, CREATE TABLE, 
CREATE CLUSTER, CREATE SEQUENCE, 
CREATE TRIGGER,
and 
CREATE PROCEDURE

 CREATE SESSION, ALTER SESSION,
 
CREATE SYNONYM, 
CREATE ANY SYNONYM, 
DROP ANY SYNONYM, CREATE VIEW, 
CREATE DATABASE LINK, CREATE TABLE,
 
CREATE CLUSTER, CREATE SEQUENCE, 
CREATE TRIGGER,CREATE ANY TRIGGER,
 
QUERY REWRITE, CREATE ANY CONTEXT, 
EXECUTE ON DBMS_RLS,
ADMINISTER DATABASE,
and 
CREATE PROCEDURE

SCHEDULER
_ADMIN

 

 execute the procedures
of the 
DBMS_SCHEDULERpackage

 execute the procedures of the DBMS_SCHEDULERpackage

GATHER_SYSTEM
_STATISTICS

 

Provides privileges to
update system statistics,
which are collected using the 
DBMS_STATS.GATHER_SYSTEM_STATISTICS
 procedure

Provides privileges
to update system statistics,
which are collected using the
DBMS_STATS.GATHER_SYSTEM_STATISTICS 
procedure

LOGSTDBY_
ADMINISTRATOR

 

Provides administrative privileges to manage the SQL Apply (logical standby database) environment.

Provides administrative privileges
to manage the SQL Apply (logical standby database) environment.


来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/31461640/viewspace-2140661/ ,如需转载,请注明出处,否则将追究法律责任。

请登录后发表评论 登录
全部评论

注册时间:2017-05-18

  • 博文量
    71
  • 访问量
    65039