Granting and Revoking SYSDBA and SYSOPER Privileges (48)

最新推荐文章于 2025-12-20 13:10:13 发布

转载最新推荐文章于 2025-12-20 13:10:13 发布 · 131 阅读

文章标签：

#数据库

本文介绍如何通过GRANT和REVOKE语句为用户分配和撤销SYSDBA及SYSOPER权限。SYSDBA和SYSOPER是最强大的数据库权限，不能与WITH ADMIN OPTION一起使用，并且只能由当前作为SYSDBA连接的用户进行操作。

If your server is using an EXCLUSIVE password file, use the GRANT statement to grant
the SYSDBA or SYSOPER system privilege to a user, as shown in the following
example:
GRANT SYSDBA TO oe;
Use the REVOKE statement to revoke the SYSDBA or SYSOPER system privilege from a
user, as shown in the following example:
REVOKE SYSDBA FROM oe;
Because SYSDBA and SYSOPER are the most powerful database privileges, the WITH
ADMIN OPTION is not used in the GRANT statement. That is, the grantee cannot in turn
grant the SYSDBA or SYSOPER privilege to another user. Only a user currently
connected as SYSDBA can grant or revoke another user's SYSDBA or SYSOPER system
privileges. These privileges cannot be granted to roles, because roles are available only
after database startup. Do not confuse the SYSDBA and SYSOPER database privileges
with operating system roles.

赋予与回收sysdba,sysoper权限
1. 如果服务器使用的是共享密码文件 , 可以通过grant,revoke语句赋予回收sysdba权限
2. grant时不能与with admin option子句一起使用
3. 不能赋予角色sysdba权限

[@more@]

来自 “ ITPUB博客 ” ，链接：http://blog.itpub.net/10599713/viewspace-995391/，如需转载，请注明出处，否则将追究法律责任。

转载于:http://blog.itpub.net/10599713/viewspace-995391/