{"id":2178,"date":"2025-12-19T12:07:21","date_gmt":"2025-12-19T04:07:21","guid":{"rendered":"http:\/\/www.821121.com\/?p=2178"},"modified":"2026-05-11T17:14:30","modified_gmt":"2026-05-11T09:14:30","slug":"23ai-%e6%96%b0%e7%89%b9%e6%80%a7%e4%b9%8b%e6%a8%a1%e5%bc%8f%e7%ba%a7%e6%9d%83%e9%99%90","status":"publish","type":"post","link":"http:\/\/www.821121.com\/?p=2178","title":{"rendered":"23ai \u65b0\u7279\u6027\u4e4b\u6a21\u5f0f\u7ea7\u6743\u9650"},"content":{"rendered":"<p>DBA \u65e5\u5e38\u6700\u7e41\u7410\u7684\u5de5\u4f5c\u4e4b\u4e00\uff1a\u6279\u91cf\u6388\u6743\u3002<br \/>\n\u5178\u578b\u573a\u666f\uff1a\u7ed9\u62a5\u8868\u7528\u6237\u6388\u4e88 HR \u4e0b\u6240\u6709\u8868\u53ea\u8bfb\u6743\u9650\u3002<br \/>\n\u5728 Oracle 23ai \u4ee5\u524d\uff0c\u4f60\u53ea\u80fd\uff1a<\/p>\n<pre><code class=\"language-sql\">-- \u5bf9\u73b0\u6709\u8868\u9010\u4e2a\u6388\u6743\nGRANT SELECT ON HR.EMP TO RPT_USER;\nGRANT SELECT ON HR.DEPT TO RPT_USER;\n...\n-- \u65b0\u5efa\u8868\u540e\uff0c\u5fc5\u987b\u518d\u6b21\u6388\u6743\uff08DBA\u6c38\u65e0\u6b62\u5883\uff09<\/code><\/pre>\n<p>\u95ee\u9898\u5f88\u660e\u663e\uff1a<br \/>\n\u8868\u591a\u4e86\uff0c\u6388\u6743\u811a\u672c\u53c8\u957f\u53c8\u6613\u9519\uff1b<br \/>\n\u65b0\u5efa\u8868\u5fc5\u987b\u4e8c\u6b21\u6388\u6743\uff0c\u5426\u5219\u62a5\u8868\u76f4\u63a5\u62a5\u9519\uff1b<br \/>\n\u7528 SELECT ANY TABLE \u53c8\u6743\u9650\u8fc7\u5927\uff0c\u4e0d\u7b26\u5408\u6700\u5c0f\u6743\u9650\u539f\u5219\u3002<br \/>\nOracle 23ai \u6b63\u5f0f\u63a8\u51fa\u6a21\u5f0f\u7ea7\u6743\u9650\uff08Schema\u2011Level Privileges\uff09\uff1a<br \/>\n\u4e00\u6761\u547d\u4ee4\uff0c\u6388\u6743\u6574\u4e2a Schema\uff08\u542b\u672a\u6765\u65b0\u5efa\u5bf9\u8c61\uff09\uff0c\u8303\u56f4\u53ef\u63a7\u3001\u6743\u9650\u6700\u5c0f\u3001\u8fd0\u7ef4\u6781\u7b80\u3002<\/p>\n<h4>\u4e00\u3001 \u6838\u5fc3\u8bed\u6cd5\uff1aON SCHEMA\uff0c\u4e00\u6b65\u5230\u4f4d<\/h4>\n<pre><code class=\"language-sql\">-- \u7ed9 RPT_USER \u6388\u4e88 HR \u6a21\u5f0f\u4e0b\u6240\u6709\u8868\u53ea\u8bfb\uff08\u542b\u672a\u6765\u65b0\u5efa\uff09\nGRANT SELECT ANY TABLE ON SCHEMA HR TO RPT_USER;\n-- \u6388\u4e88\u6240\u6709\u5bf9\u8c61\u6743\u9650\uff08\u67e5\u8be2\/\u63d2\u5165\/\u66f4\u65b0\/\u5220\u9664\uff09\nGRANT ALL PRIVILEGES ON SCHEMA HR TO DEV_USER;\n-- \u56de\u6536\nREVOKE SELECT ANY TABLE ON SCHEMA HR FROM RPT_USER;<\/code><\/pre>\n<p>\u4f5c\u7528\u8303\u56f4\uff1a\u5f53\u524d Schema \u4e0b\u6240\u6709\u5df2\u6709 + \u672a\u6765\u65b0\u5efa\u7684\u540c\u7c7b\u578b\u5bf9\u8c61\uff1b<br \/>\n\u6743\u9650\u7c92\u5ea6\uff1a\u9650\u5b9a\u5728\u6307\u5b9a Schema \u5185\uff0c\u4e0d\u50cf SELECT ANY TABLE \u662f\u5168\u5c40\uff1b<br \/>\n\u6700\u5c0f\u6743\u9650\uff1a\u53ea\u7ed9 \u201c\u8be5 Schema \u7684\u6743\u9650\u201d\uff0c\u7b26\u5408\u5b89\u5168\u6700\u4f73\u5b9e\u8df5\u3002<\/p>\n<h4>\u4e8c\u3001 \u6548\u679c\u6f14\u793a\uff1a\u65b0\u5efa\u8868\u81ea\u52a8\u751f\u6548\uff0c\u65e0\u9700 DBA \u4ecb\u5165<\/h4>\n<p>1\uff09\u521d\u59cb\u6388\u6743<\/p>\n<pre><code class=\"language-sql\">-- DBA\nGRANT SELECT ANY TABLE ON SCHEMA A TO B;\n-- \u7528\u6237B\nCONNECT B\/xxx\nSELECT COUNT(*) FROM A.T1; -- \u6b63\u5e38\nSELECT COUNT(*) FROM A.T2; -- \u6b63\u5e38<\/code><\/pre>\n<p>2\uff09\u7528\u6237 A \u65b0\u5efa\u8868<\/p>\n<pre><code class=\"language-sql\">CONNECT A\/xxx\nCREATE TABLE T3 AS SELECT * FROM TAB;<\/code><\/pre>\n<p>3\uff09\u7528\u6237 B \u76f4\u63a5\u8bbf\u95ee\u65b0\u8868\uff08\u65e0\u9700\u518d\u6b21\u6388\u6743\uff09<\/p>\n<pre><code class=\"language-sql\">CONNECT B\/xxx\nSELECT COUNT(*) FROM A.T3; -- \u76f4\u63a5\u53ef\u7528<\/code><\/pre>\n<p>\u771f\u6b63\u505a\u5230\uff1a\u4e00\u6b21\u6388\u6743\uff0c\u6c38\u4e45\u751f\u6548\uff08\u5bf9\u8be5 Schema\uff09\u3002<\/p>\n<h4>\u4e09\u3001\u652f\u6301\u7684\u6743\u9650\u7c7b\u578b<\/h4>\n<p>\u5e38\u89c1\u6a21\u5f0f\u7ea7\u6743\u9650\uff08\u53ef\u6309\u4e1a\u52a1\u7ec4\u5408\uff09\uff1a<br \/>\nSELECT ANY TABLE ON SCHEMA\uff1a\u53ea\u8bfb\u62a5\u8868\u8d26\u53f7\u9996\u9009\uff1b<br \/>\nINSERT ANY TABLE ON SCHEMA\uff1a\u6570\u636e\u540c\u6b65 \/ ETL\uff1b<br \/>\nUPDATE ANY TABLE ON SCHEMA\uff1a\u8fd0\u8425\u7ef4\u62a4\uff1b<br \/>\nDELETE ANY TABLE ON SCHEMA\uff1a\u6570\u636e\u6e05\u7406\uff1b<br \/>\nALTER ANY TABLE ON SCHEMA\uff1a\u5f00\u53d1 \/ \u8fc1\u79fb\uff1b<br \/>\nALL PRIVILEGES ON SCHEMA\uff1a\u5f00\u53d1 \/ \u6d4b\u8bd5\u5168\u6743\u9650\u3002<\/p>\n<h4>\u56db\u3001\u89c6\u56fe\u4e0e\u7ba1\u7406\uff1a\u600e\u4e48\u67e5\u5df2\u6388\u4e88\u7684 Schema \u6743\u9650<\/h4>\n<pre><code class=\"language-sql\">-- \u67e5\u770b\u6240\u6709\u6a21\u5f0f\u7ea7\u6743\u9650\uff08DBA\uff09\nSELECT * FROM DBA_SCHEMA_PRIVS;\n-- \u67e5\u770b\u5f53\u524d\u7528\u6237\u62e5\u6709\u7684\u6a21\u5f0f\u7ea7\u6743\u9650\nSELECT * FROM USER_SCHEMA_PRIVS;<\/code><\/pre>\n<p>\u89c6\u56fe\uff1aDBA_SCHEMA_PRIVS\u3001ROLE_SCHEMA_PRIVS\u3001USER_SCHEMA_PRIVS\u3001SESSION_SCHEMA_PRIVS\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>DBA \u65e5\u5e38\u6700\u7e41\u7410\u7684\u5de5\u4f5c\u4e4b\u4e00\uff1a\u6279\u91cf\u6388\u6743\u3002 \u5178\u578b\u573a\u666f<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57,58],"tags":[],"class_list":["post-2178","post","type-post","status-publish","format-standard","hentry","category-oracle-23ai","category--oracle-23c"],"_links":{"self":[{"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/posts\/2178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.821121.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2178"}],"version-history":[{"count":4,"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/posts\/2178\/revisions"}],"predecessor-version":[{"id":2182,"href":"http:\/\/www.821121.com\/index.php?rest_route=\/wp\/v2\/posts\/2178\/revisions\/2182"}],"wp:attachment":[{"href":"http:\/\/www.821121.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.821121.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2178"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.821121.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}