ORACLE 11g用戶權限管理查詢
1、查看數據庫裏所有用戶各自擁有的角色：
select * from (select distinct connect_by_root grantee username,granted_role
from dba_role_privs
connect by prior granted_role =grantee ) a
where exists (select 1 from dba_users b where b.username=a.username)
order by 1,2;
2、查看數據庫所有用戶的系統權限：
select d.username,d.privilege from
(select a.username,b.privilege from
(select distinct connect_by_root grantee username,granted_role
from dba_role_privs
connect by prior granted_role =grantee) a,
(select grantee,privilege from dba_sys_privs) b
where a.granted_role=b.grantee
union
select grantee,privilege from dba_sys_privs) d
where exists((select 1 from dba_users c where d.username=c.username)
)
order by 1,2;
3、查看數據庫所有用戶的表權限
select d.username,d.privilege,d.owner,d.table_name from
(select a.username,b.privilege,b.owner,b.table_name from
(select distinct connect_by_root grantee username,granted_role
from dba_role_privs
connect by prior granted_role =grantee) a,
(select grantee,owner,table_name,privilege from dba_tab_privs) b
where a.granted_role=b.grantee
union
select grantee,privilege,owner,table_name from dba_tab_privs) d
where exists((select 1 from dba_users c where d.username=c.username)
)
order by 1,2;
4、如何查看擁有DBA角色的用戶？
常規做法，一般是直接查詢DBA_ROLE_PRIVS視圖。查詢語句如下：
select grantee,granted_role from dba_role_privs where granted_role=’DBA’; //這會漏掉用戶
正確的查詢應按如下語句查詢：
select * from (select distinct connect_by_root grantee username,granted_role
from dba_role_privs
connect by prior granted_role =grantee ) a
where a.granted_role=’DBA’;
5、查看擁有SELECT ANY TABLE權限的用戶
對於授予角色的，看看都誰有查詢所有表的權限
select distinct rp.grantee from dba_role_privs rp ,dba_sys_privs sp
where rp.granted_role = sp.grantee
and sp.privilege like ‘SELECT ANY TABLE%‘
ORACLE 11g用戶權限管理查詢