目录

• 一、前言
• 二、新角色DB_DEVELOPER_ROLE
• 1、角色的作用
• 2、查询各个权限
• 1、查询ROLE_TAB_PRIVS
• 2、查询ROLE_SYS_PRIVS
• 3、查询ROLE_ROLE_PRIVS

一、前言

2023年4月3日，Oracle CloudWorld Tour –甲骨文宣布推出免费开发者版 Oracle Database 23c
安装了Oracle VM VirtualBox虚拟机
下载了Oracle_Database_23c_Free_Developer_Appliance.ova
文件大小6.51G
把ova导入到VM中

文件

安装好登录进去的画面

登录oracle 23c数据库

查看里面的pdb

二、新角色DB_DEVELOPER_ROLE

1、角色的作用

使用人员：应用程序开发人员。
权限：系统权限、对象权限、预定义角色、PL/SQL包权限和tracing权限。
范围：既可以用于CDB根目录，也可以用于PDB
更改：不能修改DB_DEVELOPER_ROLE角色，只能在Oracle数据库升级或降级时修改。

2、查询各个权限

1、查询ROLE_TAB_PRIVS

SQL> SELECT * FROM ROLE_TAB_PRIVS WHERE ROLE=‘DB_DEVELOPER_ROLE’;

ROLE		     OWNER		  TABLE_NAME			 COLUMN_NAME	      PRIVILEGE 			       GRA COM INH
-------------------- -------------------- ------------------------------ -------------------- ---------------------------------------- --- --- ---
DB_DEVELOPER_ROLE    SYS		  JAVASCRIPT					      EXECUTE				       NO  NO  NO
DB_DEVELOPER_ROLE    SYS		  V_$STATNAME					      READ				       NO  YES YES
DB_DEVELOPER_ROLE    SYS		  V_$PARAMETER					      READ				       NO  YES YES
DB_DEVELOPER_ROLE    SYS		  DBA_PENDING_TRANSACTIONS			      SELECT				       NO  YES YES

2、查询ROLE_SYS_PRIVS

SQL> SELECT * FROM ROLE_SYS_PRIVS WHERE ROLE=‘DB_DEVELOPER_ROLE’;

ROLE		     PRIVILEGE				      ADM COM INH
-------------------- ---------------------------------------- --- --- ---
DB_DEVELOPER_ROLE    CREATE DOMAIN			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE MLE 			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE ANALYTIC VIEW		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE HIERARCHY			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE ATTRIBUTE DIMENSION 	      NO  YES YES
DB_DEVELOPER_ROLE    EXECUTE DYNAMIC MLE		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE CUBE BUILD PROCESS		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE CUBE			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE CUBE DIMENSION		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE MINING MODEL		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE JOB 			      NO  YES YES
DB_DEVELOPER_ROLE    DEBUG CONNECT SESSION		      NO  YES YES
DB_DEVELOPER_ROLE    ON COMMIT REFRESH			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE DIMENSION			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE TYPE			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE MATERIALIZED VIEW		      NO  YES YES
DB_DEVELOPER_ROLE    CREATE TRIGGER			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE PROCEDURE			      NO  YES YES
DB_DEVELOPER_ROLE    FORCE TRANSACTION			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE SEQUENCE			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE VIEW			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE SYNONYM			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE TABLE			      NO  YES YES
DB_DEVELOPER_ROLE    CREATE SESSION			      NO  YES YES

24 rows selected.

3、查询ROLE_ROLE_PRIVS

SQL> SELECT * FROM ROLE_ROLE_PRIVS WHERE ROLE=‘DB_DEVELOPER_ROLE’;

ROLE		     GRANTED_ROLE	  ADM COM INH
-------------------- -------------------- --- --- ---
DB_DEVELOPER_ROLE    SODA_APP		  NO  YES YES
DB_DEVELOPER_ROLE    CTXAPP		  NO  YES YES