Data Control Language

• Role and System privileges can be granted together but not with object privileges.

DATA DICTIONARY:

• Metadata.
• DBA_TABLES All tables in DB.
• ALL_TABLES All tables to which current user has privileges.
• USER_TABLES All tables owned by user.
• For above three ((TABLE_NAME, STATUS, ROW_MOVEMENT, AVG_ROW_LEN), OWNER).

 SYSTEM:

• GRANT privilege TO user option.
• REVOKE privileges FROM user.
• Use ANY for any user in privileges.
• WITH ADMIN OPTION that can give user to again grant WITH ADMIN OPTION.
• Revoking this does not cascade.
• GRANT ALL PRIVILEGES TO user.
• GRANT privileges To PUBLIC All.

OBJECTS:

• PUBLIC SYNONYMNS do not need access (since PUBLIC) Alias table it references need specific permission.
• Even if permitted has to use user.table for others.
• GRANT user PRIVILEGES ON table TO user WITH GRANT OPTION They can again grant.
• ALL PRIVILEGES can be shortened to ALL for objects.
• REVOKE privileges ON table FROM user cascades for objects.

• Only INSERT, UPDATE, and REFERENCES privileges can be granted at the column level. When granting INSERT at the column level, you must include all the not null columns in the row.

• USER_SYS_PRIVS (PRIVILEGE, ADMIN_OPTION) Privileges for your user.
• USER_TAB_PRIVS ON whom we have granted privileges.

• CONNECT for (session) typical generic user.
• RESOURCE for (create table) typical application developer.
• DBA for database administrator.
• CREATE ROLE rolename.
• GRANT privilege TO rolename.
• GRANT role TO user not cascaded.
• Role and privilege independent.