Securing roles

In the recipe Preventing users from exercising system privileges on schema objects, you secured the table HR.EMPLOYEES by creating the HR_Realm realm, and afterwards, you edit it and made it mandatory. In this recipe, you'll learn to protect roles using a realm and a mandatory realm.

Getting ready

To complete this recipe, you'll need to use a SYS user.

How to do it...

1. Connect to the pluggable database PDB1 as a SYS user:

   SQL> connect sys@pdb1 as sysdba
   
   

2. Create the role role1:

   SQL> create role role1;
   

3. Grant the create session and select any table privileges to the role:

   SQL> grant create session, select any table to role1;
   

4. Create realm ROLE1_Realm in Enterprise Manager Cloud Control 12c (see Figure 13).

   

   Figure 13 - Creating ROLE1_Realm

5. Add realm-secured objects (see Figure 14).

   

   Figure 14 - Adding secured objects

6. Add realm authorizations and click on the Next button (see Figure 15).

   

   Figure 15 - Realm authorizations

7. Review and click on the Finish button (see Figure 16).

   

   Figure...