Oracle conncect role vs create session

Oracle conncect role vs create session

The CONNECT role was introduced with OracleDatabase version 7, which added new and robust support for database roles. TheCONNECT role is used in sample code, applications, documentation, and technicalpapers. The CONNECT role was established with the following privileges :

Privileges Originally Associated   with the CONNECT Role

Alter Session  Create Session

Create Cluster        Create Synonym

Create Database Link    Create Table

Create Sequence  Create View

However, beginning in Oracle Database 10gRelease 2 (10.2), the CONNECT role has only the CREATE SESSION privilege, allother privileges are removed.

DBA: 擁有全部特權，是系統(tǒng)最高權限，只有DBA才可以創(chuàng)建數據庫結構。
RESOURCE:擁有Resource權限的用戶只可以創(chuàng)建實體，不可以創(chuàng)建數據庫結構。
CONNECT:擁有Connect權限的用戶只可以登錄數據庫，不可以創(chuàng)建實體，不可以創(chuàng)建數據庫結構。
對于普通用戶：授予connect, resource權限。
對于DBA管理用戶：授予connect，resource, dba權限。

SQL> select * from role_sys_privs where ROLE = 'CONNECT';
ROLE                           PRIVILEGE                                ADM
------------------------------ ---------------------------------------- ---
CONNECT                        CREATE SESSION                           NO
SQL> select * from v$version;
BANNER
--------------------------------------------------------------------------------
Oracle Database 11g Enterprise Edition Release 11.2.0.4.0 - 64bit Production
PL/SQL Release 11.2.0.4.0 - Production
CORE    11.2.0.4.0      Production
TNS for Linux: Version 11.2.0.4.0 - Production
NLSRTL Version 11.2.0.4.0 - Production