120 likes | 346 Views
DBA: Security. Agenda. Understand the need for security. Learn about System Permissions and Object permissions. Understand the purpose of Roles. Explore Security-focused SQL. Data Admin –vs- DB Admin. Data Administration. Database Administration. Owns the Database Technical function
E N D
Agenda Understand the need for security. Learn about System Permissions and Object permissions. Understand the purpose of Roles. Explore Security-focused SQL.
Data Admin –vs- DB Admin Data Administration Database Administration Owns the Database Technical function Policy &Procedure Enforcement DBMS dependent Tactical Carries out Security Plans • Owns the DATA • High-level function • Policy & Procedure Planning • DBMS independent • Strategic • Maps out Security Plans Guide to Oracle 10g
Data Admin Matrix Data Security documentation tool. Crafted by DA, Carried out by DBA. Guide to Oracle 10g
Security Explained via Cheezy Graphic SystemPrivilege User Object Role
Specifying System Privileges • System privilege • Right to perform a specific action • DBA grants system privileges to users or roles • Use System Privileges page in Create User page • Object privilege • Associated permissions of an object • DBA or users grant to users or roles • Admin Option- gives user permissions to grant rights.
System Privileges Reference http://docs.oracle.com/cd/B28359_01/server.111/b28286/statements_9013.htm#sthref8513
System Privileges Example Let’s check out OEM and do a demo. GRANTREVOKE
Roles • Special database object • Represents collection of system privileges • Can be assigned to multiple users • Create role • Can inherit privileges from other roles • Simpler than assigning system privileges to each user. Guide to Oracle 10g
Role Examples Let’s checkout OEM and do a demo. CREATE ROLE GRANT
Group Activity Data / DB AdminWith Fudgemart Data Administrator’s Hat Database Administrator’s Hat Carry out the security role set by the data administrator. Write CREATE / GRANT statements to make a role for the WEB user to be included in. • Construct a Data Administrator’s Matrix of Role, Object(s) and Permissions(s) for Customers on the Fudgemart website. Recall Fudgemart Has: Customers, Employees, Products, Orders, Departments, Vendors, and Timesheets.