Everand Logo

Welcome to Everand!

  • Discover millions of ebooks, audiobooks, and so much more with a free trial

    From $11.99/month after trial. Cancel anytime.

    Oracle Quick Guides: Part 4 - Oracle Administration: Security and Privilege
    Oracle Quick Guides: Part 4 - Oracle Administration: Security and Privilege
    Oracle Quick Guides: Part 4 - Oracle Administration: Security and Privilege
    Ebook102 pages1 hour

    Oracle Quick Guides: Part 4 - Oracle Administration: Security and Privilege

    By Malcolm Coxall

    ()

    Read preview

    About this ebook

    This is Part 4 of a series of quick learning guides for Oracle administrators, designers, developers and managers. Part 4 introduces early entrants with basic Oracle skills to the main concepts of Oracle data security and user privilege management and administration.

    The guide includes details of how to create and how to manage users and their database object and system access and rights. The guide also provides a basis for understanding different database security strategies such as role-based security, virtual private databases and procedure-based security.

    Part 4 contains a glossary of Oracle terminology related to database security and user privilege administration with clear explanations of the terms used.

    These guides are designed to rapidly deliver key information about Oracle to the following audience groups:

    - Project Managers, Database Administrators, Team Leaders, and Testers who are new to Oracle and need rapid access to strategic information about the Oracle security environment in both development and production databases.
    - Business Analysts, Software Designers and Developers who are new to Oracle and need to gain a detailed understanding of the data security and administration issues involved in an Oracle database.

    Part 4 of these guides assumes that the reader has read Parts 1, 2 and 3 of the Oracle Quick Guides or their equivalent content. The contents of Part 4 include the following subject headings:

    1. Oracle Database Security Architecture
    2. Managing Oracle User Security
    3. Managing Privileges and Roles
    4. Managing Resources with Profiles
    5. Managing Passwords with Profiles
    6. Special Users and Privileges - SYS, SYSTEM, SYSDBA, SYSOPER
    7. Managing Developer Security
    8. Virtual Private Databases (VPD)
    9. Procedure Execution Security
    10. Data Security using Views
    11. Tool Security - PRODUCT_USER_PROFILE Table
    12. Obtaining Security Information from the Data Dictionary
    13. Glossary of Terms
    Appendix 1 - Common System Privileges
    Appendix 2 - SYSDBA and SYSOPER Privileges
    Appendix 3 - SQL commands which can be disabled

    LanguageEnglish
    PublisherMalcolm Coxall
    Release dateApr 7, 2016
    ISBN9788494530500
    Oracle Quick Guides: Part 4 - Oracle Administration: Security and Privilege
    Author

    Malcolm Coxall

    Malcolm Coxall is a management consultant, systems analyst, organic farmer and author, with more than 30 years experience working for many of the world's largest corporate and institutional organisations, starting in the field of dispute arbitration for the ILO. These experiences have provided him a ringside view of the management methodologies used by medium and large businesses in areas as diverse as banking, oil, defence, telecoms, insurance, manufacturing, mining, food, agriculture, aerospace, textiles, and heavy engineering. Malcolm has published articles on political science, sociology, human design, sustainable agriculture, organic food production, technology in organic farming, biodiversity, forest management, environmental protection and environmental economics. He is active in European environmental politics and was a successful private complainant in the European Court of Justice in several cases of national breaches of European environmental law. He now lives in Southern Spain from where he continues his IT and system consultancy work, writing and managing the family's organic olive farm.

    Read more from Malcolm Coxall

    Related to Oracle Quick Guides

    Titles in the series (4)

    View More
    View More

    Related ebooks

    Security For You

    View More
    View More

    Related podcast episodes

    Related articles

    • UNLIMITED

      What is ELT?

      Apr 1, 2021

      It stands for extract, load, and transform- the processes a data pipeline uses for replicating the data from a source system into a target system such as a cloud data warehouse. 1. Extraction is the first step in which data is copied from the source

      6 min read

    • UNLIMITED

      Types Of Databases

      Aug 27, 2019

      NoSQL databases provide the performance, scalability and stability that’s required by the modern data-driven apps we interact with these days. But that is where the similarity between NoSQL systems end. In fact, it wouldn’t be wrong to say that the o

      1 min read

    • UNLIMITED

      Lightroom Classic And Lightroom

      Sep 5, 2024

      Lightroom Classic And Lightroom
      5 min read

    • UNLIMITED

      Code A Cataloguing Application In Python

      Nov 15, 2022

      Credit: www.djangoproject.com Matt Holder has been a fan of the open source methodology for over two decades and uses Linux and other tools where possible. More featurepacked source code for this project can be downloaded from https://github.com/mat

      8 min read

    • UNLIMITED

      Fixing System Services On Linux Servers

      Sep 17, 2024

      For many people who don’t usually get involved in the intricacies of managing Linux, troubleshooting services isn’t always straightforward. Even for professionals, it can be a little challenging at times. Here we hope to help impart some knowledge of

      4 min read

    • UNLIMITED

      Cloud & Hybrid Backup 2022

      Aug 7, 2022

      Cloud & Hybrid Backup 2022
      4 min read

    • UNLIMITED

      Inside Linux

      May 28, 2024

      Inside Linux
      10 min read

    • UNLIMITED

      It’s An Ad, Ad World

      Feb 9, 2021

      In this walkthrough we stood up the AD infrastructure and have a domain administrator. Adding additional users is straightfoward using the Active Directory tools. To be able to interact with the Windows domain, placing the user in the “Domain Users”

      1 min read

    • UNLIMITED

      Eiciel

      Apr 4, 2023

      Eiciel
      1 min read

    • UNLIMITED

      Join the Pod, Man!

      May 30, 2023

      Join the Pod, Man!
      8 min read

    • UNLIMITED

      Pull, Configure And Run

      Apr 7, 2020

      Guacamole offers ready-to-run installation packages that are available for Linux distros such as CentOS or Debian. However, the thrust of this article is to illustrate running Guacamole in a Docker container context. Fire up an environment where you

      8 min read

    • UNLIMITED

      Build Your Own Cloud Storage

      Sep 12, 2023

      Build Your Own Cloud Storage
      16 min read

    • UNLIMITED

      Tresorit Business Plus

      Jan 7, 2021

      Tresorit Business Plus
      2 min read

    • UNLIMITED

      Turning The Tde

      Sep 17, 2024

      “You might not get excited about encryption, but it matters. Organisations around the world hold data on individuals and companies, and it needs to be kept secure in motion and at rest. However, we don’t have all the tools we might like to work with.

      1 min read

    • UNLIMITED

      Code An Admin Back-end In Django

      Dec 13, 2022

      Credit: www.djangoproject.com OUR EXPERT Matt Holder has been a fan of the open source methodology for over two decades and uses Linux and other tools where possible. More featurepacked source code for this project can be downloaded from https://

      6 min read

    • UNLIMITED

      Build A Cloud-based Documentation Site

      Jul 27, 2021

      Docusaurus is an open source documentation application developed by Facebook. It’s one of a growing number of JAMstack static site generators that uses a blend of JavaScript, React and markdown to make it easy for you to deploy clean, professional-lo

      8 min read

    • UNLIMITED

      Multi-user Access

      Mar 31, 2020

      Data Crow supports multiple users, enabling you to grant others varying levels of access to your collections, from read-only to full editing capabilities. Click the “User” icon followed by the green “+” button to set up a user. Fill in the details on

      1 min read

    • UNLIMITED

      Seed Your Own Cloud

      Oct 22, 2019

      Seed Your Own Cloud
      10 min read

    • UNLIMITED

      Real World Computing

      May 11, 2023

      Migrating to Azure isn’t necessarily the toughest part of a successful cloud migration, explains our guest columnist Many organisations succeed at deploying resources in or migrating to Microsoft Azure. But many of those same organisations fail to en

      6 min read

    • UNLIMITED

      MacCleaner Pro

      Dec 9, 2022

      MacCleaner Pro
      5 min read

    • UNLIMITED

      Revealing The Shell Behind The Shell

      Mar 5, 2024

      Ferenc Deák sees no way back from the C++ mayhem he brought upon readers with this quick and dirty shell, so you just have to accept it. C++. The code for the shell can still be found at https://github. com/fritzone/lxf-shell. In the first three part

      11 min read

    • UNLIMITED

      Opinion

      Aug 20, 2024

      Italo Vignoli is one of the founders of LibreOffice and the Document Foundation. “Think about the personal and confidential information in your office suite documents; it’s essential your office suite respects user privacy. LibreOffice does not ask y

      3 min read

    • UNLIMITED

      HotPicks

      May 2, 2023

      HotPicks
      12 min read

    Related categories

    Reviews for Oracle Quick Guides

    0 ratings

    0 ratings0 reviews

    What did you think?

    Tap to rate

    Review must be at least 10 words

      Book preview

      Oracle Quick Guides - Malcolm Coxall

      Oracle Quick Guides Part 4 - Oracle Administration: Security and Privilege

      Oracle Quick Guides - Part 4 Oracle Administration: Security and Privilege

      Malcolm Coxall

      Edited by Guy Caswell

      Published by M.Coxall - Cornelio Books

      Copyright 201 6 Malcolm Coxall

      First Published in Spain , United Kingdom 2016

      ISBN : 978-84-945305-0-0

      "Space does not exist unless there are objects in it

      Nor does time exist without events."

      Contents

      Preface and A u dience

      1. Oracle Database Security Architecture

      2 . Managing Oracle User Security

      3. Managing Privileges and Roles

      4. Managing Resources with Profiles

      5. Managing Passwords with Profile s

      6. Special U ser s and Privileges - SYS, SYSTEM, SYSDBA, SYSOPER

      7. Managing Developer Security

      8. Virtual Private Databases (VPD)

      9. Procedure Execution Security

      10. Data Security using Views

      11. Tool Security - PRODUCT_USER_PROFILE Table

      12. Obtaining Security Information from the Data Dictionary

      13. Glossary of Terms

      App e ndix 1 - Common System Privileges

      Appendix 2 - SYSDBA and SYSOPER Privileges

      Appendix 3 - SQL commands which can be disabled

      About the Author

      Preface and Audience

      The subject of security in Oracle is central to the safe use of this enterprise-grade database and the integrity of the data it contains, thus Oracle provides a sophisticated range of methods for managing both data security and user privilege. Consequently this methodology is the subject of this Oracle Quick Guide volume.

      As in other databases, the term security has several facets. It refers to the limits of the data a user can see and manipulate. However, the term database security also refers to the limitation of user actions in what we refer to as their privileges.

      In both cases a user may be an end-user of varying rank and privilege working with an application using an Oracle database. However, it may also refer to a software developer, a system administrator, an application support user and indeed even the system owner and their DBA team. All such users have widely varying needs in terms of what data they can and need to see and what privileges they are granted by a database owner.

      Oracle Quick Guides: Oracle Quick Guides is a series of quick learning guides for Oracle designers, developers and system managers.

      Guide Audience: These guides are designed to rapidly deliver key information about Oracle to the following audience groups:

      - Project Managers, Team Leaders and Testers who are new to Oracle and need rapid access to strategic information about the Oracle development environment.

      - Business Analysts, Designers and Software Developers who are new to Oracle and need to make a first step in gaining a detailed understanding of the design and development issues involved in Oracle.

      - New entrant Oracle DBAs that need a rapid induction in Oracle database administration.

      Guide Contents: Oracle Quick G uides have been divided by subject matter. They become increasingly complex and more specific the later the volume. Thus the early volumes are quite general but later volumes are more technical and specific.

      Our Objective: There are plenty of Oracle textbooks and user manuals on the market. Most of them are huge and only partly relevant to a particular group of readers. Therefore we decided to divide the subject into smaller, more targeted volumes in order that you only get the information YOU actually need.

      For example, a project m anager doesn't need to know about some of the more esoteric programming tips, but will need to know some of the strategic issues affecting design an d testing. In a similar way, a p rogrammer is much more interested in the syntactic details of a piece of software than in the strategic issues affecting the choice of an Oracle upgrade path.

      And so we have targeted these guides at particular groups with specific interests whilst trying to avoid overloading readers with too much detail or extraneous material.

      Assumptions: We assume that the reader will be using Oracle 9i, 10g or 11g, although most of the material may apply equally to earlier versions of the Oracle RDBMS.

      1. Oracle Database Security Architecture

      1.1 Introduction

      Oracle provides an extremely secure, flexible and granular system of database security and privilege which is unsurpassed in the world of relational databases.

      The central concept in Oracle database security is the Oracle user. Whether you are a DBA, a developer or an end-user, whether you access an Oracle database using command line SQL, or are an application user accessing a backend Oracle database via a public website, you always address an Oracle database as a particular Oracle user.

      Oracle users are allocated very specific data, object and system privileges when the user is created and these privileges define the extent of what that Oracle user can see or do within a particular Oracle database.

      These aspects of database security are managed in Oracle by associating a user with particular data, object and system privilege s by a security administrator or DBA. W e will discuss these concepts in more detail in the remainder of this chapter.

      Data Security Privileges: The concept of an Oracle user is obviously just a part of the picture of Oracle security. Oracle data security architecture deals with access to the database objects which are being secured, i.e. the database tables and their rows of data and how a particular user may create, view or alter this data. Clearly, not all users have the same access to all data and not all users may manipulate data in the same way. For instance, a manager may see or alter almost everything, whereas a customer may see or alter just a fraction of the data relevant to them.

      Database Object Privileges: In a similar way, not all users have the same rights over the database itself. A DBA user may be able to create a database object such as a table or index, whereas a developer or ordinary user generally would not have such powerful system privileges.

      1.2 Overview of th e Oracle Security Architecture

      The following are the key concepts used in the Oracle Security Architecture. Here we introduce these concepts and later we will define exactly how they are used.

      1.2.1 The DBA: A DBA is a special user created by the system owner. A DBA user (and there may

      Enjoying the preview?
      Page 1 of 1