CIS 399 - Introduction to Oracle and SQL

Slides for this week's lectures

Week 5 Lecture Notes

Monday, July 24 2006

1. Security Overview
   1. Confidentiality
   2. Integrity
   3. Availability
2. User Authentication
   1. Challenge-response
   2. Single sign-on
3. Creating Users
4. User Roles
5. Granting System and Object Privileges
6. Common System Privileges
   1. ALTER SESSION
   2. ALTER SYSTEM
   3. ALTER USER
   4. AUDIT ANY
   5. BACKUP ANY TABLE
   6. CREATE PROCEDURE
   7. CREATE ROLE
   8. CREATE SEQUENCE
   9. CREATE TABLE
   10. CREATE TRIGGER
   11. CREATE TYPE
   12. CREATE USER
   13. CREATE VIEW
   14. DROP USER
   15. FORCE TRANSACTION
7. Common Object Privileges
8. Separation of Duties
   1. Provide the the SMALLEST set of permissions possible to each role so those users can do their jobs effectively
   2. Identify the primary objects in your database
   3. Identify the primary roles needed by users of the database, keeping in mind the importance of separation of duties
   4. Determine the permissions that each role needs for each object
9. Controlling User Access to Objects
10. Creating, listing Roles

Tuesday, July 25 2006

1. Announcements: new homework
2. Granting and Revoking Permissions
3. Enforcing Privileges Through Views and Procedures
4. Restricting Access to Selected Rows and Columns
5. Restricting Updates Through Procedures
6. Protecting Data with Encryption
   1. Single key encryption
   2. Dual key encryption
7. Securing Internet Transactions
8. Encrypting Selected Data in the Database
9. Protecting Source Code with Wrap

Wednesday, July 26 2006

1. Auditing the Database
2. Auditing Features
3. Oracle auditing types
   1. Statement Auditing
   2. Privilege Auditing
   3. Schema Object Auditing
   4. Fine-Grained Auditing
4. Enabling Auditing
5. Viewing Audit Trails
6. Disabling Auditing
7. Creating Triggers for Auditing
8. Fine- Grained Auditing

Thursday, July 27 2006

1. Introduction to Forms
2. Three main form types
3. Forms Services Architecture
4. The basic structure of oracle forms
5. Creating a simple main form with the forms builder
6. Forms builder wizards
7. Testing a form with the "run form" button
8. Displaying data with form queries
9. Modifying forms
10. The object navigator
11. Basic properties
12. Adding images

Answers to Questions / Clarifications

• When creating a user, is it necessary to create a quota for them?
  For the user to be able to create tables you should set the quota for the user on the default tablespace. If the user is not going to create tables, they don't need a quota.
• What does the DROP ANY TABLE privilege let you do?
  According to the Oracle documentation (http://download-west.oracle.com/docs/cd/B14117_01/server.101/b10759/statements_9013.htm#SQLRF01603):

  	When you grant a privilege on ANY object, such as CREATE ANY CLUSTER, 
  	the result is determined by the value of the O7_DICTIONARY_ACCESSIBILITY 
  	initialization parameter. By default, this parameter is set to FALSE, so 
  	that ANY privileges give the grantee access to that type of object in all
  	schemas except the SYS schema. If you set O7_DICTIONARY_ACCESSIBILITY to
  	TRUE, then the ANY privileges also give the grantee access, in the SYS
  	schema, to all objects except Scheduler objects. For security reasons,
  	Oracle recommends that you use this setting only with great
  	caution.

• Is there a list of the system tables in Oracle?
  Yes: http://www.techonthenet.com/oracle/sys_tables/index.php

Back to Main Page