OCP-1Z0-052-V8.02-157题

157. Examine the commands executed in the following sequence:

1: SQL> CREATE ROLE mgrrole;

2: SQL> GRANT create user,select any table,connect,resource TO mgrrole;

3: SQL> GRANT select,update ON sh.sales TO mgrrole;

4: SQL> CREATE ROLE ceo IDENTIFIED BY boss;

5: SQL> GRANT mgrrole,drop any table,create any directory TO ceo;

6: SQL> GRANT ceo TO mgrrole;

Which statement is true about the above commands?

A.The commands execute successfully.

B.Command 6 produces an error because of circular role grant.

C.Command 5 produces an error because a role cannot be granted to another role. 

D.Command 3 produces an error because the MGRROLE role already contains system privileges. 

.The table created by HR remains and HR still has the CREATE TABLE system privilege.

D.The table created by HR remains and HR can grant the CREATE TABLE system privilege to other

users.

Answer: B  

 

现象重现：

1、

sys@TEST0910> create role mgrrole;

 

Role created.

2、

sys@TEST0910> grant create user,select any table,connect,resource to mgrrole;

 

Grant succeeded.

3、

sys@TEST0910> grant select,update on sh.sales to mgrrole;

 

Grant succeeded.

4、

sys@TEST0910> create role ceo identified by boss;

 

Role created.

5、

sys@TEST0910> grant mgrrole,drop any table,create any directory to ceo;

 

Grant succeeded.

6、

sys@TEST0910> grant ceo to mgrrole;

grant ceo to mgrrole

*

ERROR at line 1:

ORA-01934: circular role grant detected 角色不可循环赋予

 

重点看第5个和第6个

第5个中将mgrrole授权给ceo

第6个中将ceo授权给mgrrole

角色循环赋予，所以出错。