1. Database Systems Slide 1 Database Systems Lecture 4 Database Security - Concept Manual : Chapter 20 - Database Security Manual : Chapters 5,10 - SQL Reference : Chapter 17,18 Lecturer : Assoc Professor Bela Stantic

2. Database Systems Slide 2 Introduction to Database Security  Database security entails allowing or disallowing user actions on the database and the objects within it.  Oracle uses schemas and security domains to control access to data and to restrict the use of various database resources.  Oracle provides comprehensive discretionary access control, which regulates all user access to named objects through privileges.  A Privilege is permission to access a named object in a prescribed manner; for example, permission to query a table.  Privileges are granted to users at the discretion of other users.  Oracle provides for easy and controlled privilege management through roles. Roles are named groups of related privileges that you grant to users or other roles.

3. Database Systems Slide 3 Database Users and Schemas  Each database has a list of user names.  To access a database, a user must use a database application and attempt a connection with a valid user name of the database.  Each user name has an associated password to prevent unauthorized use.  Within each database a user name must be unique with respect to other user names and roles. A user and role cannot have the same name.  Furthermore, each user has an associated schema.  Within a schema, each schema object must have a unique name

4. Database Systems Slide 4 Security Domain  Each user has a security domain — a set of properties that determine such things as: 1.The actions (privileges and roles) available to the user >> Controlled by the granting of privileges and roles. 2.Storage and tablespace quotas (available disk space) for the user >> Assigned by the DBA at schema creation or by subsequent modification. 3.The system resource limits (for example, CPU processing time) for the user >> Controlled by assigning a Profile to the user.

5. Database Systems Slide 5  You create a database user with the CREATE USER statement.  To create a user, you must have the CREATE USER system privilege.  Because it is a powerful privilege, a DBA or security administrator is normally the only user who has the CREATE USER system privilege.  A newly created user cannot connect to the database until granted the CREATE SESSION system privilege. Creating Users

6. Database Systems Slide 6 CREATE USER - Syntax

7. Database Systems Slide 7 CREATE USER– An example CREATE USER bela IDENTIFIED BY bela99 DEFAULT TABLESPACE DBS_space QUOTA 10M ON DBS_space TEMPORARY TABLESPACE temp_space PROFILE STAFF PASSWORD EXPIRE ;

8. Database Systems Slide 8 Helpful Data Dictionary Views  USER_USERS  ALL_USERS  DBA_USERS  USER_TS_QUOTAS  DBA_TS_QUOTAS  Information about the database user who is currently logged on, can be seen by examining the USER_USERS data dictionary view.

9. Database Systems Slide 9 Privileges and Roles  A privilege is a right to run a particular type of SQL statement.  Some examples of privileges include the right to: – Connect to the database (create a session) – Create a table in your schema – Select rows from someone else’s table – Run someone else’s stored procedure  Roles are created by users (usually administrators) to group together privileges or other roles.  Roles are a means of facilitating the granting of multiple privileges or roles to users.

10. Database Systems Slide 10 Privileges and Roles

11. Database Systems Slide 11 Privileges  There are two distinct categories of privileges: – System Privileges – Schema Object Privileges  System Privileges –A system privilege is the right to perform a particular action, or to perform an action on any schema objects of a particular type. –For example, the privileges to create tablespaces and to delete the rows of any table in a database are system privileges. –There are over 100 distinct system privileges.  Schema Object Privileges –A schema object privilege is a privilege or right to perform a particular action on a specific schema object. –Different object privileges are available for different types of schema objects. For example, the privilege to delete rows from the departments table is an object privilege.

12. Database Systems Slide 12 System Privileges A list of all system privileges is included in a data dictionary view SYSTEM_PRIVILEGE_MAP

13. Database Systems Slide 13 Granting System Privileges  Where: –System_priv Is a system privilege to be granted –Role Is a role name to be granted –TO Identifies the users or roles to which the system privileges and roles are granted –PUBLIC Grants system privileges or roles to all users –WITH ADMIN OPTION Allows the grantee to grant the system privilege or role to other users or roles. It you grant a role WITH ADMIN OPTION, the grantee can also alter or drop the role. –To grant a system privilege, you must have been granted the privilege with the ADMIN OPTION. GRANTSystem_privTO user,, role PUBLIC WITH ADMIN OPTION

14. Database Systems Slide 14 Revoking System Privileges  In order to revoke system privileges, it is necessary to use the REVOKE command.  Syntax:  The options for REVOKE have the same meaning as for the GRANT command  A system privilege can be revoked by a user other than the grantor REVOKE System_priv FROM user,, role PUBLIC

15. Database Systems Slide 15 System Privileges Do Not Cascade ! ABC RESULTGRANT ABC REVOKE ABC

16. Database Systems Slide 16 Querying System Privileges  Some important Data Dictionary Views : –ALL_SYS_PRIVS –SESSION_PRIVS –USER_SYS_PRIVS –DBA_SYS_PRIVS –SYSTEM_PRIVILEGE_MAP  Example: The system privileges that have been granted can be displayed by querying the DBA_SYS_PRIVS data dictionary view. SQL> SELECT * FROM SYS_DBA_PRIVS; GRANTEE_NAMEPRIVILEGEADM ------------------------------------ SCOTTCREATE SESSIONNO SCOTTCREATE SYNONYMNO SCOTTCREATE TABLENO SCOTTCREATE VIEWNO SYSUNLIMITED TABLESPACEYES SYSTEMUNLIMITED TABLESPACEYES

17. Database Systems Slide 17 Object Privileges Note 1: Oracle Database treats a Java class, source, or resource as if it were a procedure for purposes of granting object privileges. Note 2: Job scheduler objects are created using the DBMS_SCHEDULER package. Once these objects are created, you can grant the EXECUTE object privilege on job scheduler classes and programs. You can grant ALTER privilege on job scheduler jobs, programs, and schedules. Note 3: The DELETE, INSERT, and UPDATE privileges can be granted only to updatable materialized views.

18. Database Systems Slide 18 Granting Object Privileges Where: –Object_priv: Is an object privilege to be granted –ON: Identifies the object on which the privileges are granted. if the “schema.” prefix is not used then ORACLE assumes the current user’s schema. –TO: Identifies the users or roles to which the object privilege is granted –PUBLIC:Grants object privileges to all users –WITH GRANT OPTION : Allows the grantee to grant the object privileges to other users and roles. The grantee must be a user or PUBLIC. GRANT OPTION cannot be granted to a role. GRANT Object_priv, ON Schema. Object TO user role PUBLIC, WITH GRANT OPTION

19. Database Systems Slide 19 Object Privileges Cascade  Grantors can revoke privileges from only those users to whom they had granted the privileges in the first place.  Revoking an object privilege may have a cascading effect that should be investigated before a REVOKE statement is issued. ABC RESULTGRANT ABC REVOKE ABC

20. Database Systems Slide 20 Displaying Object Privileges  The object privileges that have been granted can be displayed by querying the data dictionary.  Available to DBAs –DBA_TAB_PRIVSAll privileges on all tables in the database  Available to the User –USER_TAB_PRIVSPrivileges on tables for which the user Is the owner, grantor, or grantee –USER_TAB_PRIVS_MADEAll privileges on tables owned by the user –USER_TAB_PRIVS_RECDAll privileges on tables for which the user is the grantee

21. Database Systems Slide 21 Roles  Managing and controlling privileges is made easier by using roles, which are named groups of related privileges that you grant, as a group, to users or other roles.  Within a database, each role name must be unique, different from all user names and all other role names.  Unlike schema objects, roles are not contained in any schema. Therefore, a user who creates a role can be dropped with no effect on the role.  Roles ease the administration of end-user system and schema object privileges.  However, roles are not meant to be used by application developers, because the privileges to access schema objects within stored programmatic constructs must be granted directly.

22. Database Systems Slide 22 Creating Roles  In order to create database roles it is necessary to use the CREATE ROLE command.  Syntax of the CREATE ROLE Command  Where: –RoleName of the role to be created –NOT IDENTIFIEDUsers granted the role do not need to be verified by ORACLE to enable it –IDENTIFIEDIndicates that the users granted the role must be verified by ORACLE to enable the role –BY passwordSpecifies the password that authorizes enabling the role –EXTERNALLYSpecifies that ORACLE will verify user access to the role using anoperating system utility Note : If the IDENTIFIED option is chosen, users can enable/disable the role by using the SET ROLE command. CREATE ROLE role IDENTIFIEDBY password EXTERNALLY NOT IDENTIFIED

23. Database Systems Slide 23 Benefits of Using Roles  Reduced privilege administration –Rather than granting the same set of privileges explicitly to several users, you can grant the privileges for a group of related users to a role, and then only the role needs to be granted to each member of the group.  Dynamic privilege management –If the privileges of a group must change, then only the privileges of the role need to be modified. The security domains of all users granted the group’s role automatically reflect the changes made to the role.  Selective availability of privileges –You can selectively enable or disable the roles granted to a user. This allows specific control of a user’s privileges in any given situation.  Application awareness –The data dictionary records which roles exist, so you can design applications to query the dictionary and automatically enable (or disable) selective roles when a user attempts to run the application by way of a given user name.

24. Database Systems Slide 24 Displaying Information About Roles The following data dictionary views contain information about privileges granted to roles, roles granted to users etc.  ROLE_SYS_PRIVSSystem privileges granted to roles  ROLE_TAB_PRIVSTable privileges granted to roles  ROLE_ROLE_PRIVSRoles granted to other roles  SESSION_ROLESRoles that the user currently has enabled  USER_ROLE_PRIVSRoles granted to the user  DBA_ROLESAll roles existing in the database  DBA_SYS_PRIVSSystem privileges granted to users and to roles

25. Database Systems Slide 25 Storage Settings and Quotas You can direct and limit the use of disk space allocated to the database for each user, including default and temporary tablespaces and tablespace quotas.  Default Tablespace –Each user is associated with a default tablespace. When a user creates a table, index, or cluster and no tablespace is specified, the object is created in user’s default tablespace.  Temporary Tablespace –Each user has a temporary tablespace. When a user runs a SQL statement that requires the creation of temporary segments, the user’s temporary tablespace is used.  Tablespace Quotas –It is possible to limit the collective amount of disk space available to the objects in a schema. Quotas (space limits) can be set for each tablespace available to a user. This permits selective control over the amount of disk space that can be consumed by the objects of specific schemas.

26. Database Systems Slide 26 Altering Users Some Examples Alter user bela default tablespace DBS_SPACE; Alter user bela quota 10M on DBS_space; Alter user bela quota unlimited on DBS_SPACE; Alter user bela identified by pass22;

27. Database Systems Slide 27 Profiles and Resource Limits  Each user is assigned a profile that specifies limitations on several system resources available to the user, including the following: –Number of concurrent sessions the user can establish, –CPU processing time available for the user’s session and a single call to Oracle made by a SQL statement, –Amount of logical I/O available for the user’s session and a single call to Oracle made by a SQL statement, –Amount of idle time available for the user’s session, –Amount of connect time available for the user’s session –Password restrictions:  Account locking after multiple unsuccessful login attempts  Password expiration and grace period  Password reuse and complexity restrictions

28. Database Systems Slide 28 Towards Better Security  In order to build good security, you must confront many tasks.  Good security requires physical access control, reliable personnel, trustworthy installation and configuration procedures, secure communications, and control of database operations such as selection, viewing, updating, or deleting database records.  Since some of these requirements involve applications or stored procedures as well as human action, security procedures must also account for how these programs are developed and dealt with.  Practical concerns must also be met: minimizing the costs of equipment, personnel, and training; minimizing delays and errors; and maximizing rapid and thorough accountability. Scalability, too, is an important and independent practical criterion that should be assessed for each proposed solution.

29. Database Systems Slide 29 Towards Better Security 1.Install only what is required. 2.Lock and expire default user accounts. 3.Change default user passwords. 4.Enable data dictionary protection. 5.Practice the principle of least privilege. 6.Enforce access controls effectively. 7.Restrict operating system access. 8.Secure your network. 9.Apply all security patches and workarounds. 10.Have an strong password management policy.