Oracle权限（二）权限相关的动态性能视图与数据字典视图

001 DBA_USERS

DBA_USERS 描述了数据库中所有的用户信息。

相关视图：

USER_USERS 描述了当前用户的信息。该视图不包括 PASSWORD, PROFILE, PASSWORD_VERSIONS, EDITIONS_ENABLED, 和AUTHENTICATION_TYPE 列.

Column

Description

USERNAME

用户名

USER_ID

用户ID

PASSWORD

为了支持AUTHENTICATION_TYPE 列，该列已被弃用

ACCOUNT_STATUS

帐号（用户）状态，一共9种:

OPEN

EXPIRED

EXPIRED(GRACE)

LOCKED(TIMED)

LOCKED

EXPIRED & LOCKED(TIMED)

EXPIRED(GRACE) & LOCKED(TIMED)

EXPIRED & LOCKED

EXPIRED(GRACE) & LOCKED

LOCK_DATE

帐号被锁定的日期（如果帐号处于锁定状态）

EXPIRY_DATE

帐号过期的日期

DEFAULT_TABLESPACE

数据的默认表空间

TEMPORARY_TABLESPACE

默认的临时表空间名或临时表空间组名

CREATED

用户创建日期

PROFILE

用户资源概要文件名

INITIAL_RSRC_CONSUMER_GROUP

用户的初始资源消费者组

EXTERNAL_NAME

用户外部名

PASSWORD_VERSIONS

Shows the list of versions of the password hashes (also known as "verifiers") existing for the account.

The PASSWORD_VERSIONS column value includes 10G if an old case-insensitive ORCL hash exists and 11G if a SHA-1 hash exists.

Note that one or both of these verifiers can exist for any given account.

EDITIONS_ENABLED

Indicates whether editions have been enabled for the corresponding user (Y) or not (N)

AUTHENTICATION_TYPE

Indicates the authentication mechanism for the user:

EXTERNAL - CREATE USER user1 IDENTIFIED EXTERNALLY;

GLOBAL - CREATE USER user2 IDENTIFIED GLOBALLY;

PASSWORD - CREATE USER user3 IDENTIFIED BY user3;

002 DBA_SYS_PRIVS

DBA_SYS_PRIVS 描述了授予给用户和角色的系统权限。

GRANTEE

Grantee name, user, or role receiving the grant

PRIVILEGE

System privilege

ADMIN_OPTION

Indicates whether the grant was with the ADMIN option (YES) or not (NO)

003 ROLE_ROLE_PRIVS

ROLE_ROLE_PRIVS describes the roles granted to other roles. Information is provided only about roles to which the user has access.

ROLE

Name of the role

GRANTED_ROLE

Role that was granted

Signifies that the role was granted with ADMIN option

004 ROLE_SYS_PRIVS

ROLE_SYS_PRIVS describes system privileges granted to roles. Information is provided only about roles to which the user has access.

System privilege granted to the role

005 ROLE_TAB_PRIVS

ROLE_TAB_PRIVS describes table privileges granted to roles. Information is provided only about roles to which the user has access.

OWNER

Owner of the object

TABLE_NAME

Name of the object

COLUMN_NAME

Name of the column, if applicable

Object privilege granted to the role

GRANTABLE

YES if the role was granted with ADMIN OPTION; otherwise NO

006 DBA_TAB_PRIVS

DBA_TAB_PRIVS describes all object grants in the database.

Related View

USER_TAB_PRIVS describes the object grants for which the current user is the object owner, grantor, or grantee.

Name of the user or role to whom access was granted

Name of the object. The object can be any object, including tables, packages, indexes, sequences, and so on.

GRANTOR

Name of the user who performed the grant

Privilege on the object

Indicates whether the privilege was granted with the GRANT OPTION(YES) or not (NO)

HIERARCHY

Indicates whether the privilege was granted with the HIERARCHY OPTION (YES) or not (NO)

007 DBA_COL_PRIVS

DBA_COL_PRIVS describes all column object grants in the database.

USER_COL_PRIVS describes the column object grants for which the current user is the object owner, grantor, or grantee.

Name of the column

Privilege on the column

Indicates whether the privilege was granted with the GRANT OPTION (YES) or not (NO)

008 DBA_ROLES

DBA_ROLES describes all roles in the database.

PASSWORD_REQUIRED

This column is deprecated in favor of the AUTHENTICATION_TYPEcolumn

Indicates the authentication mechanism for the role:

NONE - CREATE ROLE role1;

EXTERNAL - CREATE ROLE role2 IDENTIFIED EXTERNALLY;

GLOBAL - CREATE ROLE role3 IDENTIFIED GLOBALLY;

APPLICATION - CREATE ROLE role4 IDENTIFIED USINGschema.package;

PASSWORD - CREATE ROLE role5 IDENTIFIED BY role5;

009 DBA_ROLE_PRIVS

DBA_ROLE_PRIVS describes the roles granted to all users and roles in the database.

USER_ROLE_PRIVS describes the roles granted to the current user.

Name of the user or role receiving the grant

Granted role name

Indicates whether the grant was with the ADMIN OPTION (YES) or not (NO)

DEFAULT_ROLE

Indicates whether the role is designated as a DEFAULT ROLE for the user (YES) or not (NO)

010 V$PWFILE_USERS

V$PWFILE_USERS lists all users in the password file, and indicates whether the user has been granted the SYSDBA, SYSOPER, and SYSASM privileges.

Name of the user that is contained in the password file

SYSDBA

Indicates whether the user can connect with SYSDBA privileges (TRUE) or not (FALSE)

SYSOPER

Indicates whether the user can connect with SYSOPER privileges (TRUE) or not (FALSE)

SYSASM

Indicates whether the user can connect with SYSASM privileges (TRUE) or not (FALSE)

未完待续