课程第48次（2018-05-21星期一）

botang

CDB2：

1. select  con_id , username,common from cdb_users
   
2. order by 2;
   
3. 
   
4. create user c##_user2 identified by x ;
   
5. 
   
6. grant create session to c##_user2;
   
7. 
   
8. DROP USER c##_user2;
   
9. 
   
10. create role c##_role;
    
11. 
    
12. select  con_id,r.ROLE, r.COMMON
    
13. from cdb_roles r  order by 2;
    
14. 
    
15. grant c##_role to c##_user;
    
16. 
    
17. select  * from cdb_role_privs p
    
18.   where p.GRANTEE='C##_USER';
    
19. 
    
20. grant c##_role to c##_user container=all;
    
21. 
    
22. select  * from cdb_role_privs p
    
23.   where p.GRANTEE='C##_USER';
    
24.   
    
25.   revoke c##_role from c##_user;
    
26.   
    
27.     revoke c##_role from c##_user  container=all;
    
28.    
    
29.    
    
30.     select * from role_sys_privs  sp
    
31.      where sp.role='C##_ROLE';
    
32.      
    
33.        select * from role_tab_privs  sp
    
34.      where sp.role='C##_ROLE';
    
35.      
    
36.      
    
37.      select  * from role_role_privs rrp
    
38.       where rrp.role='C##_ROLE';
    
39.       
    
40.       grant  select  any table  to c##_role  container=all ;

复制代码

PDB2：

1. create user local_user_pdb2 identified by x CONTAINER=current;
   
2. 
   
3. grant create session to local_user_pdb2;
   
4. 
   
5. 
   
6. create role local_role_PDB2;
   
7. 
   
8. select  * from cdb_roles;
   
9. 
   
10. grant c##_role to local_user_pdb2;
    
11. 
    
12. select * from cdb_role_privs rp
    
13. where rp.grantee='LOCAL_USER_PDB2';
    
14. 
    
15. -----
    
16. 
    
17. grant local_role_pdb2 to c##_role;
    
18. 
    
19. select  * from role_role_privs rrp
    
20.       where rrp.role='C##_ROLE';
    
21.       
    
22.     select * from role_sys_privs  sp
    
23.      where sp.role='C##_ROLE';
    

复制代码

1. select  * from cdb_container_data;
   
2. 
   
3. CREATE USER c##jfv IDENTIFIED BY oracle_4U;
   
4. 
   
5. GRANT CREATE SESSION, SET CONTAINER TO c##jfv  CONTAINER=ALL;
   
6. 
   
7. GRANT SELECT ON sys.v_$session TO c##jfv CONTAINER=ALL;
   
8. 
   
9. select   con_id , username , terminal
   
10. from v$session where username <> 'DBSNMP';
    
11. 
    
12. -----------------------
    

复制代码

在根容器上的dba与普通的dba的区别：

1. alter user c##jfv set container_data=(cdb$root,  pdb1_1, pdb2_2)
   
2. for v_$session
   
3. container=current;

复制代码