Oracle_Basic_Concept（Role&Priviledge）

1.查看某个角色都有什么权限

SELECT * FROM ROLE_SYS_PRIVS

2.查看数据库中默认角色有哪些

select distinct role from role_sys_privs;
EXP_FULL_DATABASE
AQ_ADMINISTRATOR_ROLE
DBA
OEM_ADVISOR
RECOVERY_CATALOG_OWNER
SCHEDULER_ADMIN
OLAP_USER
RESOURCE
IMP_FULL_DATABASE
OWB$CLIENT
DATAPUMP_EXP_FULL_DATABASE
CONNECT
OLAP_DBA
JAVADEBUGPRIV
DATAPUMP_IMP_FULL_DATABASE
OEM_MONITOR
MGMT_USER

3.查看数据库中用户拥有的系统权限

SQL> select privilege from dba_sys_privs where grantee='DAYU0424';  #describes system privileges granted to users and roles

PRIVILEGE
----------------------------------------
SELECT ANY TABLE
UNLIMITED TABLESPACE  --用户创建之后就有的权限

4.查看用户拥有的角色

SQL> select GRANTED_ROLE from dba_role_privs where grantee='DAYU0424';  #describes the roles granted to all users and roles in the database

GRANTED_ROLE
------------------------------
RESOURCE
CONNECT

5.查看对象的授权者与获权者

SQL> SELECT DISTINCT PRIVILEGE FROM DBA_TAB_PRIVS; <!--DBA_TAB_PRIVS describes all object grants in the database -->

SQL> GRANT SELECT ON DAYU.DAYU0322 TO DAYU0424;

Grant succeeded.

SQL> GRANT UPDATE ON DAYU.DAYU0322 TO DAYU0424;

Grant succeeded.

未解决问题：imse1用户有imp/exp的角色，但是没有select any dictionary的权限，依然可以查看相应的数据字典。已经查询EXP_FULL_DATABASE、IMP_FULL_DATABASE没有相应的select any dictionary权限。