996403 wrote:We are impressed.
I have setup a 11g Oracle database.
Can I please have some help to create some user accounts (3 levels, eg. Administrator, Power User, and Guest style users) as well as setting up appropriate levels of security implemented via ROLES and PRIVILEGES for Roles.Is application 3-tier like below?
Can I please have some help to create some user accounts (3 levels, eg. Administrator, Power User, and Guest style users) as well as setting up appropriate levels of security implemented via ROLES and PRIVILEGES for Roles.your question depend on what you need from this user to do , What you want them to do ? what you want to see ? what you want to check , select , insert ?
Thanks in advance
996403 wrote:It sounds like you're relating Windows OS security groups to Oracle. This is not a good idea, and you're going to be confused until you take the time to read the documentation. As you know, there are many predefined roles. You need to study all of them, and determine which users need to be in which role. It's more complex than just Administrator/Power User/Guest. For your specific request, study +4 Configuring Privilege and Role Authorization+ of Oracle® Database Security Guide.
I see that each user has many available roles. What roles should I add to a user if I wish for the user to be the following types of user:
Administrator, Power User, or Guest style user?
Are there default roles to add to a user to be each of the following types?
996403 wrote:You have to get out of this Administrator/Power User/Guest Windows security group paradigm. Windows security groups cannot be directly correlated to Oracle security groups, and that is why you are having so much trouble doing so. I recommend that you:
I am wanting the Administrator to have control over everything, the Power User to be a User who also has the ability to create tables, triiggers etc, and the Guest to just be able to view data in the database without changing anything.
Can you correct me if I am wrong with the following suitable roles for the users:
- All roles
996403 wrote:Well, if it is really just a demo, I'd create the three roles asked for "ADMIN", "POWERUSER", "GUEST".
I have been asked to demonstrate 3 levels of users (Roles) – for eg. Administrator, Power User, and Guest style users. This is not for a commercial situation, I just need to demonstrate how to do this action.
I understand how to do it, I am just not sure on the specific roles to add as examples.