oracle 创建用户授予权限问题

Posted 2023-05-10

假设有一表空间 s1
创建用户u1，默认表空间为s1，怎样授予这个用户对s1下所有表 增，删，改，查的权限。包括创建u1前的表和u1之后创建的表都有 增，删，改，查的权限

参考技术A CREATE USER youUserPROFILE DEFAULT
IDENTIFIED BY "password" DEFAULT TABLESPACE you_defaule_table_space
TEMPORARY TABLESPACE TEMP
QUOTA UNLIMITED
ON you_table_space1
QUOTA UNLIMITED
ON you_table_index_space2
ACCOUNT UNLOCK;
GRANT ALTER SESSION TO youUser;
GRANT CREATE ANY CONTEXT TO youUser;
GRANT CREATE CLUSTER TO youUser;
GRANT CREATE DATABASE LINK TO youUser;
GRANT CREATE INDEXTYPE TO youUser;
GRANT CREATE OPERATOR TO youUser;
GRANT CREATE PROCEDURE TO youUser;
GRANT CREATE SEQUENCE TO youUser;
GRANT CREATE SESSION TO youUser;
GRANT CREATE SYNONYM TO youUser;
GRANT CREATE TABLE TO youUser;
GRANT CREATE TRIGGER TO youUser;
GRANT CREATE TYPE TO youUser;
GRANT CREATE VIEW TO youUser;
GRANT CONNECT TO youUser;
GRANT debug any procedure, debug connect session TO youUser;
你参考下 参考技术B --权限要精细化控制
--下面这个plsql可以给u1授予对表空间s1下所有表 增，删，改，查的权限
--u1之后创建的表你可以反复执行这个plsql
begin
for xx in (select 'grant select,insert,update,select on '||owner||'.'||table_name||' to u1' esql from dba_tables where tablespace_name='S1') loop
execute immediate xx.esql
end loop;
end;
/

oracle 创建用户怎么授予创建数据库的权限

参考技术A 采用sys
or
system
/
manager
as
sysdba;
连接数据库。
创建普通用户konglin:
create
user
konglin
identified
by
pwd_oracle;
删除用户,
drop
user
konglin;
授予用户登录数据库的权限：
grant
create
session
to
konglin;
授予用户操作表空间的权限：
grant
unlimited
tablespace
to
konglin;
grant
create
tablespace
to
konglin;
grant
alter
tablespace
to
konglin;
grant
drop
tablespace
to
konglin;
grant
manage
tablespace
to
konglin;
授予用户操作表的权限：
grant
create
table
to
konglin;
(包含有create
index权限,
alter
table,
drop
table权限)
授予用户操作视图的权限:
grant
create
view
to
konglin;
(包含有alter
view,
drop
view权限)
授予用户操作触发器的权限：
grant
create
trigger
to
konglin;
(包含有alter
trigger,
drop
trigger权限)
授予用户操作存储过程的权限：
grant
create
procedure
to
konglin;(包含有alter
procedure,
drop
procedure
和function
以及
package权限)
授予用户操作序列的权限：
grant
create
sequence
to
konglin;
(包含有创建、修改、删除以及选择序列)
授予用户回退段权限：
grant
create
rollback
segment
to
konglin;
grant
alter
rollback
segment
to
konglin;
grant
drop
rollback
segment
to
konglin;
授予用户同义词权限：
grant
create
synonym
to
konglin;(包含drop
synonym权限)
grant
create
public
synonym
to
konglin;
grant
drop
public
synonym
to
konglin;
授予用户关于用户的权限：
grant
create
user
to
konglin;
grant
alter
user
to
konglin;
grant
become
user
to
konglin;
grant
drop
user
to
konglin;
授予用户关于角色的权限：
grant
create
role
to
konglin;
授予用户操作概要文件的权限
grant
create
profile
to
konglin;
grant
alter
profile
to
konglin;
grant
drop
profile
to
konglin;
允许从sys用户所拥有的数据字典表中进行选择
grant
select
any
dictionary
to
konglin;