Discretionary access control
Discretionary access control verifies whether the user who is attempting to perform an operation has been granted the required privileges to perform that operation.
You can perform the
following types of discretionary access control:
- Create user roles to control which users can perform operations on which database objects. See User roles.
- Control who can create databases. See Setting permission to create databases.
- Prevent unauthorized users from registering user-defined routines. See Security for external routines (UDRs).
- Control whether other users besides the DBSA can view executing SQL statements. See Enabling non-DBSA users to view SQL statements in an active session.