Lets see new features introduced in 23c which helpful for DBAs.
1. Schema Privileges:
I am waiting for this feature since i started working as
DBA, Thanks to oracle, finally its added in 23c.
Prior to 23c, if you want to grant access on all objects in
a schema to another schema, its a long route, we have to generate grant
commands on all objects using dynamic sql and run the grant commands. if new object created in the schema, we need to grant the privs again on new object.
Now with this Schema privileges allow us to simplify grant a user or role needs privileges on all objects in a schema.
If any new object added in the schema, no need to add privs again for that object. it will have access by default
Ex:
GRANT SELECT ANY TABLE ON SCHEMA appusr TO devusr;
Dictionary views to see schema privileges are DBA_SCHEMA_PRIVS,ROLE_SCHEMA_PRIVS, USER_SCHEMA_PRIVS, SESSION_SCHEMA_PRIVS
2. Read-Only PDB
Users:
Oracle database 23c allows us to make PDB users read-only, which makes a connected session act like the database is opened in read-only mode, preventing the session from performing write operations.
3. DB_DEVELOPER_ROLE Role:
Oracle database 23c introduced a new DB_DEVELOPER_ROLE role, to provide the basic roles and privileges Oracle believe are necessary for a database developer.
So now we don't need to create a role assign bulk of privs to that role and grant that role to the user, simply DBA can grant DB_DEVELOPER_ROLE role to developer after user creation.
No comments:
Post a Comment