 |
|
Oracle "grant resource" role components
Oracle Tips by Burleson Consulting |
Question:
Does the "grant resource" command contain the unlimited
tablespace privilege? How do I see the components of the
resource role?
Answer:
As a review, Oracle has two types of privileges:
-
System privileges - System wide access
- resource, connect, dba, etc.
-
User Privileges - Grants to specific
table data
For system roles such as resource
and connect, they are made-up of sub-privileges, and you can see
them thus:
select privilege
from dba_sys_privs
where grantee = 'RESOURCE':
PRIVILEGE
--------------------------------------
CREATE TYPE
CREATE TABLE
CREATE CLUSTER
CREATE TRIGGER
CREATE OPERATOR
CREATE SEQUENCE
CREATE INDEXTYPE
CREATE PROCEDURE
In this case, we also have the
"unlimited tablespace" within the resource role, even though it
cannot be displayed directly. For a complete discussion
see Arup Nanda's book "Oracle
Privacy Security Auditing".
 |
If you like Oracle tuning, see the book "Oracle
Tuning: The Definitive Reference", with 950 pages of tuning tips and
scripts.
You can buy it direct from the publisher for 30%-off and get
instant access to the code depot of Oracle tuning scripts. |
