start /home/dm_dwzl.sql
SQL> CREATE TABLESPACE ops_tbs
DATAFILE '/dmdata/ops_tbs01.dbf' SIZE 500M
AUTOEXTEND ON NEXT 100M;
CREATE TABLESPACE ops_tbs
DATAFILE '/dmdata/ops_tbs01.dbf' SIZE 500M
AUTOEXTEND ON NEXT 100M;
DATAFILE '/dmdata/ops_tbs01.dbf' SIZE 500M
*
line 2, column 55, nearby [M] has error[-2007]:Syntax error.
used time: 0.215(ms). Execute id is 0.
SQL> CREATE USER ops_admin IDENTIFIED BY "SecurePwd@2023"
DEFAULT TABLESPACE ops_tbs
QUOTA UNLIMITED ON ops_tbs;
CREATE USER ops_admin IDENTIFIED BY "SecurePwd@2023"
DEFAULT TABLESPACE ops_tbs
QUOTA UNLIMITED ON ops_tbs;
[-3405]:Error in line: 3
tablespace [ops_tbs] not already exist.
used time: 1.633(ms). Execute id is 0.
SQL> CREATE ROLE RESTRICTED_DBA;
executed successfully
used time: 1.584(ms). Execute id is 4103.
SQL> GRANT
SELECT ANY TABLE, -- 查询所有表
CREATE SESSION, -- 连接权限
CREATE TABLE, -- 建表权限
ALTER TABLESPACE, -- 表空间管理
BACKUP DATABASE, -- 数据库备份
SELECT ON V$ SESSIONS, -- 会话监控
SELECT ON V$ DATAFILE -- 数据文件监控
TO RESTRICTED_DBA;
GRANT
SELECT ANY TABLE, -- 查询所有表
CREATE SESSION, -- 连接权限
CREATE TABLE, -- 建表权限
ALTER TABLESPACE, -- 表空间管理
BACKUP DATABASE, -- 数据库备份
SELECT ON V$ SESSIONS, -- 会话监控
SELECT ON V$ DATAFILE -- 数据文件监控
TO RESTRICTED_DBA;
SELECT ON V$ SESSIONS, -- 会话监控
*
line 7, column 18, nearby [ON] has error[-2007]:Syntax error.
used time: 0.109(ms). Execute id is 0.
SQL> -- 5. 显式拒绝高危权限
DENY
DROP ANY TABLE, -- 禁止删表
ALTER DATABASE, -- 禁止修改数据库
CREATE USER, -- 禁止创建用户
DROP USER, -- 禁止删除用户
GRANT ANY PRIVILEGE -- 禁止赋权
TO RESTRICTED_DBA;
-- 5. 显式拒绝高危权限
DENY
DROP ANY TABLE, -- 禁止删表
ALTER DATABASE, -- 禁止修改数据库
CREATE USER, -- 禁止创建用户
DROP USER, -- 禁止删除用户
GRANT ANY PRIVILEGE -- 禁止赋权
TO RESTRICTED_DBA;
DROP ANY TABLE, -- 禁止删表
*
line 3, column 7, nearby [DROP] has error[-2007]:Syntax error.
used time: 0.063(ms). Execute id is 0.
SQL> -- 6. 将角色授予用户
GRANT RESTRICTED_DBA TO ops_admin;
-- 6. 将角色授予用户
GRANT RESTRICTED_DBA TO ops_admin;
[-2509]:Error in line: 2
Invalid user or role[ops_admin].
used time: 0.111(ms). Execute id is 0.
修正一下
最新发布