04用户和角色（详细）

show con_name

select * from cdb_users;

select * from cdb_users where common=‘YES’;

select distinct username from cdb_users
where common=‘YES’;

select * from cdb_users
where common=‘NO’;

CREATE USER c##test_user1 IDENTIFIED BY aabb123 CONTAINER=ALL;
GRANT CREATE SESSION TO c##test_user1 CONTAINER=ALL;


show con_name

CREATE USER test_user2 IDENTIFIED BY aabb123 CONTAINER=CURRENT;

show con_name
CREATE USER test_user2 IDENTIFIED BY aabb123 CONTAINER=CURRENT;
GRANT CREATE SESSION TO test_user2 ;

select username,common,con_id from cdb_users;

连接测试

授权
GRANT drop user to c##test_user1 CONTAINER=ALL;


GRANT ALTER USER TO TEST_USER2 CONTAINER=CURRENT;

GRANT CREATE TABLE TO TEST_USER2 CONTAINER=CURRENT;

GRANT ALTER ANY TABLE , DROP ANY TABLE TO TEST_USER2 CONTAINER=CURRENT;



REVOKE DROP USER FROM c##test_user1 CONTAINER=ALL;

REVOKE DROP USER FROM c##test_user1 CONTAINER=ALL;


角色
select * from cdb_roles;

select * from dba_roles;

CREATE ROLE c##test_role1 CONTAINER=ALL;


创建本地角色

CREATE ROLE test_role1 CONTAINER=CURRENT;

GRANT c##test_role1 TO C##TEST_USER1;

select * from cdb_role_privs
where grantee=‘C##TEST_USER1’;


GRANT c##test_role1 TO C##TEST_USER1 CONTAINER=ALL;


select * from cdb_role_privs
where grantee=‘C##TEST_USER1’;

REVOKE c##test_role1 FROM C##TEST_USER1 CONTAINER=ALL;

select * from cdb_role_privs
where grantee=‘C##TEST_USER1’;

公共角色给本地用户
GRANT c##test_role1 TO test_user2;

不在根，把公共角色授予本地用户，是可以的