Skip to content

Commit

Permalink
WMS ID 11029: changes to security intro (#692)
Browse files Browse the repository at this point in the history
* updated schema level privileges markdown and images

* updated images

* updated images

* final images to markdown

* Updated security intro
  • Loading branch information
Francisrega authored Oct 14, 2024
1 parent f85928c commit d13b71e
Show file tree
Hide file tree
Showing 3 changed files with 32 additions and 20 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
25 changes: 18 additions & 7 deletions db-23ai-fundamentals/intro/security-intro-15.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,25 @@

In this workshop, we introduce you to a newly released feature of Oracle Database 23ai--_Schema-Level Privileges_. Previously, developers had to either give users full-access to the database or manually grant user privileges to each database object in a schema. With Oracle Database 23ai, developers can now grant privileges at the schema-level--making it easier to secure your database.

## About Oracle Database 23ai
## About this Workshop

Building on the strengths of its predecessor, Oracle Database 23ai represents the latest long-term support release, delivering new cutting-edge technology. Just like Oracle Database 19c, version 23ai provides best-in-class support for all data types, including the new Vector data type along with relational, JSON, XML, spatial, graph, and more, coupled with industry-leading performance, scalability, availability, and security for various workloads.
There are additional workshops dedicated to the Oracle Database Security features and functionalities.

Users of Oracle Database 19c and 21c can directly upgrade to Oracle Database 23ai.
Based on an OCI architecture, deployed in a few minutes with a simple internet connection, it allows you to test DB Security use cases in a complete environment already pre-configured by the Oracle Database Security Product Manager Team.

Check out this workshop for free access to two databases and a hands on guide to get some experience with upgrading:
[Hitchhiker's Guide for Upgrading to Oracle Database 19c & Oracle Database 23ai](https://livelabs.oracle.com/pls/apex/dbpm/r/livelabs/view-workshop?wid=3943)
Now, you no longer need important resources on your PC (storage, CPU or memory), nor complex tools to master, making you completely autonomous to discover at your rhythm all new DB Security features.

### Components
The complete architecture of the **DB Security Hands-On Labs** is as following:

![DBSec LiveLabs Archi](./images/dbseclab-archi.png "DBSec LiveLabs Archi")

It may be composed of as many as five VMs:
- **DBSec-Lab** (mandatory for all workshops: Baseline and Advanced workshops)
- **Audit Vault Server** (for Advanced workshop only)
- **DB Firewall Server** (for Advanced workshop only)
- **Key Vault Server** (for Advanced workshop only)
- **DB23ai** (for SQL Firewall workshop only)


You may now proceed to the next section.
Expand All @@ -24,6 +35,6 @@ You may now proceed to the next section.

## Acknowledgements
* **Author** - Killian Lynch, Database Product Management
* **Contributors** - Dom Giles, Brianna Ambler, Database Product Management
* **Last Updated By/Date** - Brianna Ambler, August 2024
* **Contributors** - Dom Giles, Brianna Ambler, Francis Regalado Database Product Management
* **Last Updated By/Date** - Francis Regalado, Oct 2024

Original file line number Diff line number Diff line change
Expand Up @@ -235,18 +235,7 @@ The objective of this workshop is to learn how to work with the schema-level pri
![adb sql returning to admin](images/reservationinfo.png " ")
![adb sql returning to admin](images/admin.png " ")
6. We will be granting schema-level privileges to the it_user
```
<copy>
-- Grant schema-level privileges directly to hr_user
GRANT SELECT ANY TABLE ON SCHEMA hr_user TO it_user;
SELECT * FROM DBA_SCHEMA_PRIVS WHERE GRANTEE = 'IT_USER';
</copy>
```
![grants schemalevel privileges to ituser](images/h.png " ")
7. To show the flexibility of schema-level privileges, we will also be creating a new table called projects
6. To show the flexibility of schema-level privileges, we will also be creating a new table called projects
```
<copy>
Expand All @@ -263,7 +252,19 @@ The objective of this workshop is to learn how to work with the schema-level pri
```
![creating new projects table](images/I.png " ")
8. Now, sign out of the `ADMIN` session and log into `it_user`. We will see how the privileges of this user is limited when compared to hr_user.
7. Now, let's grant schema-level privileges to the it_user
```
<copy>
-- Grant schema-level privileges directly to hr_user
GRANT SELECT ANY TABLE ON SCHEMA hr_user TO it_user;
SELECT * FROM DBA_SCHEMA_PRIVS WHERE GRANTEE = 'IT_USER';
</copy>
```
![grants schemalevel privileges to ituser](images/h.png " ")
8. Sign out of the `ADMIN` session and log into `it_user`. We will see how the privileges of this user is limited when compared to hr_user.
- `Path` : it_user
- `USERNAME`: it_user
- `PASSWORD`: Oracle123long
Expand Down

0 comments on commit d13b71e

Please sign in to comment.