ORACLE授权用户查询另一个用户下的表与视图
實際應用中,會遇到在某個用戶下需要查詢另一個用戶下的表數據或視圖的情況,然而在沒有授權時,會提示無權限操作的錯誤。那就需要通過授權處理后,再能進行查詢操作,下面我們來看看是怎么處理的。
一、系統權限說明:
1、用戶權限
CREATE SESSIOIN 連接到數據庫
CREATE TABLE? ? 在用戶的方案中創建表
CREATE SEQUENCE 在用戶的方案中創建序列
CREATE VIEW? ? ?在用戶的方案中創視圖
CREATE PROCEDURE在用戶的方案中創建存儲過程,函數或包
1.1、例子:授予系統權限
DBA能夠授予用戶指定的系統權限
GRANT create session,create table,
? ? ? ?create sequence,create view
?TO scott;
二、創建用戶只用于查詢其它用戶庫的表和視圖
1、創建用戶
2、授權查詢表與視圖權限
2.1、a用戶下授權查詢所有表給b用戶(a用戶登錄執行下面語句)
select?'grant?select?on?a.'?||?tname?||?'?to?b;'?from?tab; 'GRANTSELECTONA.'||TNAME||'TOB;' ------------------------------------------------------ grant?select?on?a.VOTE_NUM?to?b; grant?select?on?a.TMP_MSG?to?b; grant?select?on?a.VOTE_IP?to?b; grant?select?on?a.QUESTION?to?b; grant?select?on?a.QUESTION_COUNT?to?b; grant?select?on?a.RECORD_DICT?to?b; grant?select?on?a.BM_COLUMN?to?b; grant?select?on?a.BM_COLUMN_CLASSIFY_REL?to?b; grant?select?on?a.BM_INFO_CLASSIFY?to?b; grant?select?on?a.BM_MODULE?to?b; grant?select?on?a.BM_MODULE_AUTH?to?b;或select?'grant?select?on?'||table_name||'?to?b;'??from?user_tables;'GRANTSELECTON'||TABLE_NAME||'TOB;' ---------------------------------------------------- grant?select?on?VOTE_NUM?to?b; grant?select?on?TMP_MSG?to?b; grant?select?on?VOTE_IP?to?b; grant?select?on?QUESTION?to?b; grant?select?on?QUESTION_COUNT?to?b; grant?select?on?RECORD_DICT?to?b; grant?select?on?BM_COLUMN?to?b; grant?select?on?BM_COLUMN_CLASSIFY_REL?to?b;說明:在a用戶下執行該語句,執行后會生成對所有表的賦權限語句,拷貝出來執行就可以了。2.2、a用戶下授權查詢單個表給b用戶
grant?select?on?a.tablename?to?b;2.3、a用戶下授權查詢所有序列給b用戶
select?'grant?select?on?'?||?sequence_name?||?'?to?b;'?from?dba_sequences?where?sequence_owner='A';?
2.4、--Oracle查詢用戶視圖
select?*?from?user_views;2.5、a用戶下授權查詢視圖給test11用戶
備注:授權更新、刪除的 語法和授權查詢類似,只是關鍵字不同而已。
三、撤消權限
1、授權a用戶下取消給b用戶刪除單個表的權限
revoke delete on a.tablename from b;
2、授權a用戶下取消給b用戶更新單個表的權限
revoke update on a.tablename from b;
3、擁有dba權限的用戶下取消給b用戶創建dblink的權限
revoke create database link from b;
4、擁有dba權限的用戶下取消給tes11用戶查詢任何表的權限
revoke select any table from test11;
四、事例:
1、在rh_test用戶下授權查詢所有表給wd用戶
select?'grant?select?on?rhip_test.'?||?tname?||?'?to?wd;'?from?tab;'GRANTSELECTONRH_TEST.'||TNAME||'TOWD;' ---------------------------------------------------------------- grant?select?on?rh_test.BIZ_CODE_REL?to?wd; grant?select?on?rh_test.BIZ_RMIM_DIC?to?wd; grant?select?on?rh_test.BIZ_RMIM_VERSION?to?wd; grant?select?on?rh_test.BIZ_RMIM_VERSION_DETAIL?to?wd; grant?select?on?rh_test.BIZ_RMIM_VERSION_SUBDETAIL?to?wd; grant?select?on?rh_test.BIZ_SYSTEM_LOGIN?to?wd; grant?select?on?rh_test.BIZ_TREE_PATH?to?wd; grant?select?on?rh_test.CLINIC_TRANSFER?to?wd; grant?select?on?rh_test.CODE_SYSTEM_DIC?to?wd;'GRANTSELECTONRH_TEST.'||TNAME||'TOWD;' ---------------------------------------------------------------- grant?select?on?rh_test.ETL_PATIENT_INDEX?to?wd; grant?select?on?rh_test.HOSPITAL_DIC?to?wd; grant?select?on?rh_test.HOSPITAL_SUBSYSTEM?to?wd; grant?select?on?rh_test.MAIL_RECORD?to?wd; grant?select?on?rh_test.MEDICAL_RECORD?to?wd; grant?select?on?rh_test.PATIENT_INDEX?to?wd; grant?select?on?rh_test.RHIP_SYSCONFIG?to?wd; grant?select?on?rh_test.SYSTEMLOGIN?to?wd;將上面查出的語句執行一下即可。2、a用戶下授權查詢單個表給test11用戶
select?'GRANT?SELECT?ON'?||?table_name?||?'to?test11;'??from?user_tables 得到的結果如下: GRANT?SELECT?ON?WEBSERVICE_USER?to?test11 GRANT?SELECT?ON?USERLESS_PATIENT?to?test11; 再把上面得到的結果逐一執行一遍: GRANT?SELECT?ON?WEBSERVICE_USER?to?test11 GRANT?SELECT?ON?USERLESS_PATIENT?to?test11;新建的表要想被userA訪問,也得執行grant語句: grant?select?on?新建的表?to?userA;3、授權a用戶下授權更新單個表給b用戶
grant update on a.tablename to b;
4、授權a用戶下授權刪除單個表給b用戶
grant delete on a.tablename to b;
5、擁有dba權限的用戶下授權創建dblink給b用戶
grant create database link to b;
轉載于:https://blog.51cto.com/meiling/2062463
總結
以上是生活随笔為你收集整理的ORACLE授权用户查询另一个用户下的表与视图的全部內容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: 电子商务java b2b b2c o2o
- 下一篇: Mac 环境下连接多个git — ssh