DDL触发器，向新创建的用户授予权限 [英] DDL Trigger which grants permission to new created users

问题描述

我有一个问题，是否有可能，DDL触发器可以在创建用户后立即授予角色.

I got a question, is there a possibilty, that a DDL Trigger can grant roles right after the user is created.

例如:

CREATE OR REPLACE TRIGGER DDL_TRIGGER
AFTER CREATE ROLE ON DATABASE

然后，触发器应向新用户授予某些角色.

And after that, the trigger should grant the new user with some roles.

例如:

BEGIN
GRANT Resourse to *new created user*;
GRANT CONNECT to *new created user*;

我使用oracle数据库.

I use oracle database.

谢谢你们， 马克尼

推荐答案

我认为应该是这样的:

CREATE OR REPLACE TRIGGER T_CREATE_USER 
    AFTER CREATE ON DATABASE
    WHEN (ora_dict_obj_type = 'USER')
BEGIN

    EXECUTE IMMEDIATE 'GRANT RESOURCE TO '||ora_dict_obj_name;
    EXECUTE IMMEDIATE 'GRANT CONNECT TO '||ora_dict_obj_name;

END;
/

进一步检查使用触发器详细信息.

请同时检查此帖子:如何创建授予权限的Oracle触发器-也许我的解决方案不起作用.

Please check also this post: How do I create a Oracle trigger that grants permissions - perhaps my solution does not work.

这篇关于DDL触发器，向新创建的用户授予权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！