Oracle 10g vs 9i CONNECT, RESOURCE 에 부여된 권한 변화

출처 :   http://yjan.tistory.com/tag/role




Oracle 10g에서는  내장 (Built-in) 롤 중 CONNECT 롤 및 RESOURCE 롤에 부여된 권한이 약간 변경되었습니다.
다음은 Oracle 9i의 CONNECT롤 및 RESOURCE롤에 부여된 시스템 권한입니다.

SQL> select * from role_sys_privs where role='CONNECT';

ROLE                               PRIVILEGE                                  ADM
------------------------- --------------------------------- --------------
CONNECT                        CREATE VIEW                              NO
CONNECT                        CREATE TABLE                            NO
CONNECT                        ALTER SESSION                           NO
CONNECT                        CREATE CLUSTER                        NO
CONNECT                        CREATE SESSION                         NO
CONNECT                        CREATE SYNONYM                       NO
CONNECT                        CREATE SEQUENCE                      NO
CONNECT                        CREATE DATABASE LINK               NO

8 개의 행이 선택되었습니다.



SQL> select * from role_sys_privs where role='RESOURCE';

ROLE                                PRIVILEGE                                  ADM
------------------------- --------------------------------- --------------
RESOURCE                       CREATE TYPE                              NO
RESOURCE                       CREATE TABLE                            NO
RESOURCE                       CREATE CLUSTER                        NO
RESOURCE                       CREATE TRIGGER                         NO
RESOURCE                       CREATE OPERATOR                      NO
RESOURCE                       CREATE SEQUENCE                      NO
RESOURCE                       CREATE INDEXTYPE                      NO
RESOURCE                       CREATE PROCEDURE                     NO

8 개의 행이 선택되었습니다.





다음은 Oracle 10g의 CONNECT롤 및 RESOURCE롤에 부여된 시스템 권한입니다.

Oracle 9i와 비교할 때, 10g에서는 CONNECT 롤에 CREATE SESSION 시스템 권한만 부여되어 있으며,
RESOURCE롤의 경우에도 부여된 시스템 권한이 일부 변경 되었습니다.

SQL> select * from role_sys_privs where role='CONNECT';

ROLE                               PRIVILEGE                                   ADM
------------------------- --------------------------------- --------------
CONNECT                        CREATE SESSION                        NO



SQL> select * from role_sys_privs where role='RESOURCE';

ROLE                               PRIVILEGE                                   ADM
------------------------- --------------------------------- --------------
RESOURCE                       CREATE SEQUENCE                     NO
RESOURCE                       CREATE TRIGGER                         NO
RESOURCE                       CREATE CLUSTER                        NO
RESOURCE                       CREATE PROCEDURE                    NO
RESOURCE                       CREATE TYPE                              NO
RESOURCE                       CREATE OPERATOR                      NO
RESOURCE                       CREATE TABLE                             NO
RESOURCE                       CREATE INDEXTYPE                      NO



눈여겨 볼 내용은 CREATE VIEW 권한과 CREATE SYNONYM 시스템 권한 등이 CONNECT 롤에서
회수되었기 때문에 해당 권한이 필요한 경우에는 다음과 같이 직접 권한을 부여해주어야만 합니다.

grant create view, create synonym to scott;