Authority!!
•Oracle users have ID and password
•Own objects that they create
•Have access to other objects if have
privileges:
–E.g. create table privilege
–Select privilege
–Delete privilege
–Grant privilege
Docsity.com
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Guidelines and tips
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Create Table Privilege - Buisness Management - Lecture Slides, Slides of Business Administration
Business Management is one of the most important subject in Management sciences. Following are the key points discussed in these Lecture Slides : Create Table Privilege, Authority, Oracle, Privileges, Select Privilege, Delete Privilege, Grant Privilege, System, Create a User, Number of Allowed Failures
Typology: Slides
2012/2013
1 / 12
This page cannot be seen from the preview
Don't miss anything!
Related documents
Partial preview of the text
Download Create Table Privilege - Buisness Management - Lecture Slides and more Slides Business Administration in PDF only on Docsity!
Authority!!
- Oracle users have ID and password
- Own objects that they create
- Have access to other objects if have privileges: - E.g. create table privilege - Select privilege - Delete privilege - Grant privilege
Create a user
- Two users by default:
- System: all privilege
- SYS used by ORACLE Create user FRED identified by Mypassword
- Single login can be arranged with external command (e.g. with NT login)
- Possible to set any limits – e.g. resources, tablespaces, quotas
Standard Roles
- Before users are active need to assign roles
- CONNECT: access to DB + any other granted rights
- RESOURCE: creation of objects
- DBA: unlimited space quotas + grant privileges to other users Grant privilege / role to user [with admin option] Revoke privilege / role from user Drop…
Other Grant command
- CONNECT and RESOURCES don’t give automatic access to other people’s resources
- Need to grant access Grant OBJECT PRIVILEGE on OBJECT to USER [with grant option]
- Object privilege = select, insert, update, delete
- Can be granted on certain column and not on others
3 aspects of security
- Secrecy: info not disclosed to
unauthorised users
- Integrity: modifications of data must be
legitimate
- Availability: authorised users should not be
refused access (e.g. by mistake)
External security
- Bear in mind that DBMS security is not
only issue
- Operating system security
- Network security
- Logical access (through an application)
- As well as physical access (directly into
files)
Other security layers - Policies
- Security policies apply to table level - each table can have a separate one
- They execute everytime a table is accessed by adding a bit of SQL to the where clause
- No need to write a policy for each table
- But can have more than one per table- e.g. select, insert, update, delete! Add policy command
Row level security
- Fine-grained access control
- Add extra column to table
- Populate column with name of current
user
- Others won’t get to see the column until it
is committed
- Simplest form of locking