Oracle8 - The Complete Reference. Koch a& Loney1 By What Authority? Presented by Victor Matos

Oracle8 - The Complete Reference. Koch a& Loney 2 ORACLE8 Security n ORACLE provides extensive security features in order to safeguard the information entrusted to the DBMS. n Security is based on granting and revoking privileges on a u person-by-person, and u privilege-by-privilege mode.

Oracle8 - The Complete Reference. Koch a& Loney 3 Security Commands n ORACLE8 uses the following management commands u create user u create role u grant u drop

Oracle8 - The Complete Reference. Koch a& Loney 4 Users, Roles, and Privileges n Every user in Oracle has a name and password, and owns any tables, views, and other resources that he/she creates. n An oracle role is a set of privileges. n You could assign a series of privileges to a certain role.

Oracle8 - The Complete Reference. Koch a& Loney 5 Privileges n Database system privileges restrict you to execute only certain type of commands. u The “create table” privilege allows the user to make new tables. u The “grant any privilege” command allows you to grant any system privilege to somebody else.

Oracle8 - The Complete Reference. Koch a& Loney 6 Privileges n Database object privileges give you the ability to perform some operation on various objects. u The “delete” privilege allows you to remove rows from tables and views. u The “select” privilege allows you to query from tables, views, sequences,m and snapshots.

Oracle8 - The Complete Reference. Koch a& Loney 7 Creating a User n In Oracle there are two special “default” supervisors or DBA s u SYSTEM, and u SYS. n To create new users you must log into Oracle as the SYSTEM super- user.

Oracle8 - The Complete Reference. Koch a& Loney 8 Creating a User n SYNTAX create user Homer identified by Simpson; create user Bart identified by Simpson DEFAULT TABLESPACE payroll_ts QUOTA 10M ON payroll_ts QUOTA 5M ON temp_ts QUOTA 5M ON system PROFILE accountant;

Oracle8 - The Complete Reference. Koch a& Loney 9 Profiles n Are created by the dba. They can be used to enforce u lifetime of passwords, u number of consecutive failed attempts to connect, u period of time an account remains locked, u number of password changes that must occur before reusing a pwd.

Oracle8 - The Complete Reference. Koch a& Loney 10 Changing Passwords n Log normally into the system, then issue the password command password Changing password for VICTOR Old password: ***** New password: ********** Retype new password: ********** Password changed

Oracle8 - The Complete Reference. Koch a& Loney 11 Three Standard Roles n After the user is created the next step consists on granting rights. n Oracle has three standard roles u CONNECT u RESOURCE u DBA

Oracle8 - The Complete Reference. Koch a& Loney 12 The CONNECT Role n CONNECT role u Allows login into the system. u Needs additional permission to select, and maintain records. u It is good for occasional users.

Oracle8 - The Complete Reference. Koch a& Loney 13 The RESOURCE Role n RESOURCE is good for more sophisticated users. n It allows the users to create their own F tables, F sequences, F procedures, functions, F triggers, F indexes, clusters.

Oracle8 - The Complete Reference. Koch a& Loney 14 The DBA Role n The DBA (Data Base Admin.) has all the privileges. n Can grant all the privileges to other users. n Can create / drop other users.

Oracle8 - The Complete Reference. Koch a& Loney 15 The GRANT Command n Syntax: grant {system privilege | role} [, {system privilege | role}...] to {user | role}[,{user | role}... [with admin option] Example: grant connect, resource to victor, beatriz;

Oracle8 - The Complete Reference. Koch a& Loney 16 Revoking Privileges n Syntax: revoke {system privilege | role} [, {system privilege | role}...] from {user | role}[,{user|role}... Example: revoke select on Employees to victor, beatriz;

Oracle8 - The Complete Reference. Koch a& Loney 17 Removing an User n To delete an user and release all the resources own by the user the dba must drop him/her with the cascade option. Example: drop user victor cascade;

Oracle8 - The Complete Reference. Koch a& Loney 18 Granting Object Privileges n Tables and views (user’s own) F grant select on EMP to victor; F grant update on EMP to victor; F grant delete on EMP to victor; n On tables only F grant alter on EMP to victor F grant references on DEPT to victor; F grant index on EMP to victor F grant all to victor;