Who Can Grant or Revoke System Privileges? There are two types of users who can grant or revoke system privileges to other users. These users must be carefully managed so that the security is not compromised. · Uses who have been granted a specific system privilege with the ADMIN OPTION. Rather don’t grant system privileges to users with the ADMIN OPTION, because it creates a security issue · Users who have been granted the system privilege; GRANT ANY PRIVILEGE, also a potential security issue Schema Object Privileges A schema object privilege is the privilege to perform a specific action on a specific schema object. For example the privilege to delete rows from a table that belongs to another schema, is a good example. However some schema objects such as clusters, indexes, triggers, and database links, do not have associated object privileges. There use is controlled by system privileges. For example to alter a cluster, the user must own the cluster, in which case the user can alter the cluster, or the user must have the ALTER ANY CLUSTER system privilege. The following broad areas with regards to Schema object Privileges are important: · Granting and revoking schema object privileges · Who can grant schema object privileges · Using privileges with Synonyms · Table privileges · View Privileges · Sequences · Procedure privileges · Function and Package privileges · Type privileges Privileges and roles can be granted to users and roles.
Posted on: Thu, 25 Jul 2013 08:09:30 +0000
Trending Topics
Recently Viewed Topics
© 2015