tailieunhanh - Le6 Administering User Security

After completing this lesson, you should be able to do the following: • Create and manage database user accounts – Authenticate users – Assign default storage areas (tablespaces) • Grant and revoke privileges • Create and manage roles • Create and manage profiles – Implement standard password security features – Control resource usage by users | Administering User Security Oracle Database 10g: Administration Workshop I 6- Objectives After completing this lesson, you should be able to do the following: Create and manage database user accounts Authenticate users Assign default storage areas (tablespaces) Grant and revoke privileges Create and manage roles Create and manage profiles Implement standard password security features Control resource usage by users Objectives The following terms relate to administering database users and assist you in understanding the objectives: A database user account is a means to organize the ownership of and access to database objects. A password is an authentication by the Oracle database. A privilege is a right to execute a particular type of SQL statement or to access another user’s object. A role is a named group of related privileges that are granted to users or to other roles. Profiles impose a named set of resource limits on database usage and instance resources. Quota is a space . | Administering User Security Oracle Database 10g: Administration Workshop I 6- Objectives After completing this lesson, you should be able to do the following: Create and manage database user accounts Authenticate users Assign default storage areas (tablespaces) Grant and revoke privileges Create and manage roles Create and manage profiles Implement standard password security features Control resource usage by users Objectives The following terms relate to administering database users and assist you in understanding the objectives: A database user account is a means to organize the ownership of and access to database objects. A password is an authentication by the Oracle database. A privilege is a right to execute a particular type of SQL statement or to access another user’s object. A role is a named group of related privileges that are granted to users or to other roles. Profiles impose a named set of resource limits on database usage and instance resources. Quota is a space allowance in a given tablespace. This is one of the ways by which you can control resource usage by users. Oracle Database 10g: Administration Workshop I 6- Database User Accounts Each database user account has: A unique username An authentication method A default tablespace A temporary tablespace A user profile A consumer group A lock status > User Authentication Privilege Role Profile PW Security Quota Database User Accounts To access the database, a user must specify a valid database user account and successfully authenticate as required by that user account. Each database user has his or her own database account. This is Oracle’s best practice recommendation to avoid potential security holes and provide meaningful data for certain audit activities. However, in rare cases, users share a common database account. In this case, operating system and applications must provide adequate security for the database. Each user account has: A unique username: Usernames cannot exceed 30 bytes, .